This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json) Hash identifier: GUidzUo4ifTOjj1BskW37JQB0x3vR2145UrTjUPjHXc= Subject key identifier: 28:D1:8C:B5:EF:9C:41:3B:66:2E:B3:D4:28:D0:39:D6:D0:25:93:7D Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Certificate serial: 019B39B3CAD118B65B09E0854DB11BCD6FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 03:00:42 +0000 Manifest this update: Sat 20 Dec 2025 03:00:42 +0000 Manifest next update: Sun 21 Dec 2025 03:00:42 +0000 Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=) 2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: XqR2k2m5qT2Ob3FwvOXYvS/laB+GgEmpfvMEAoVr5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:ca:d1:18:b6:5b:09:e0:85:4d:b1:1b:cd:6f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Validity Not Before: Dec 20 03:00:42 2025 GMT Not After : Dec 21 03:00:42 2025 GMT Subject: CN=28d18cb5ef9c413b662eb3d428d039d6d025937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:fb:41:af:6b:87:22:e4:18:92:e3:33:4f: 1e:f4:51:7c:4c:45:c1:ed:2f:e0:e3:44:62:3f:87: 77:77:ba:a7:99:91:8a:05:19:3b:fe:54:78:75:b8: c9:66:af:5e:0e:a7:4e:ec:de:6f:e7:db:b6:42:03: 3a:b1:1b:44:f4:10:61:36:1b:82:cf:f6:9b:c7:40: c8:7b:65:d5:5d:54:69:ed:8f:55:da:58:3b:67:72: 27:ce:a9:02:1c:82:e9:8e:41:0c:f5:ca:6e:ec:e2: 54:41:cb:14:ef:fe:3a:15:02:7f:b0:8e:ce:70:88: 71:71:b9:99:f6:d7:e3:35:ff:fe:9c:5d:86:71:f1: 28:86:19:bc:8d:28:aa:8f:26:9d:97:a0:f9:1e:91: 1d:bc:8a:7a:ca:93:f5:31:18:bc:47:83:ab:97:98: 32:08:58:df:c2:f7:4a:09:b5:91:dc:58:40:9b:d1: 7d:ae:39:aa:13:d0:7a:8e:06:be:59:53:5f:31:00: e2:9a:4e:8c:8a:8a:84:3d:92:74:6c:83:fd:c5:05: f0:d0:be:9c:ed:23:a6:4d:99:e9:21:ac:f8:68:b9: 22:3f:1a:eb:68:c5:35:3f:94:df:e4:42:24:73:5c: 4c:ea:de:10:62:27:b0:40:27:a4:e8:59:ef:ae:3d: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D1:8C:B5:EF:9C:41:3B:66:2E:B3:D4:28:D0:39:D6:D0:25:93:7D X509v3 Authority Key Identifier: keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a0:b4:6f:81:0c:ba:42:12:67:02:02:b8:13:57:18:e6:48: be:bb:e7:f1:1e:b0:f2:3d:f3:2d:3b:85:c3:86:32:93:f7:dd: ea:c7:4f:04:de:3c:b8:98:3b:db:57:63:4d:d2:48:df:da:7e: 61:4d:5b:de:c4:15:ed:39:e3:23:cb:11:b5:e2:cc:eb:a4:3f: f5:be:1b:b0:95:2d:ed:dd:a9:38:10:7c:e4:fd:b1:27:f6:18: 8d:0b:12:eb:33:a9:bd:1a:68:03:cb:78:7b:93:d1:f4:6f:57: 56:5b:cb:81:68:97:50:4b:7f:8d:62:d2:b3:cf:da:79:66:c8: ac:4d:da:e7:80:8e:7f:19:a4:f9:79:af:24:ae:1d:22:fa:16: a1:9e:ac:fd:94:89:d8:a1:bb:32:ad:02:5b:b8:5f:40:8f:b0: ce:9f:e9:db:7f:1f:c5:f2:ca:6d:ce:b0:a0:7d:86:51:32:15: 68:ad:28:7a:e6:fe:d3:43:11:69:68:e7:43:20:bf:ef:cb:a5: 81:45:12:ab:b0:5a:2d:92:8f:9a:b0:e7:c2:27:d8:8c:27:77: 64:a4:7b:6d:74:9a:0c:ea:ee:75:e9:bc:01:89:d8:5f:0d:03: 74:5f:56:0e:75:24:dd:30:bc:3e:ea:7d:40:90:bc:e9:11:0d: 1e:84:da:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s8rRGLZbCeCFTbEbzW+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj YjZmZGUwHhcNMjUxMjIwMDMwMDQyWhcNMjUxMjIxMDMwMDQyWjAzMTEwLwYDVQQD EygyOGQxOGNiNWVmOWM0MTNiNjYyZWIzZDQyOGQwMzlkNmQwMjU5MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk/7Qa9rhyLkGJLjM08e9FF8TEXB 7S/g40RiP4d3d7qnmZGKBRk7/lR4dbjJZq9eDqdO7N5v59u2QgM6sRtE9BBhNhuC z/abx0DIe2XVXVRp7Y9V2lg7Z3InzqkCHILpjkEM9cpu7OJUQcsU7/46FQJ/sI7O cIhxcbmZ9tfjNf/+nF2GcfEohhm8jSiqjyadl6D5HpEdvIp6ypP1MRi8R4Orl5gy CFjfwvdKCbWR3FhAm9F9rjmqE9B6jga+WVNfMQDimk6MioqEPZJ0bIP9xQXw0L6c 7SOmTZnpIaz4aLkiPxrraMU1P5Tf5EIkc1xM6t4QYiewQCek6Fnvrj1mLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjRjLXvnEE7Zi6z1CjQOdbQJZN9MB8GA1UdIwQY MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0 LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6C0b4EM ukISZwICuBNXGOZIvrvn8R6w8j3zLTuFw4Yyk/fd6sdPBN48uJg721djTdJI39p+ YU1b3sQV7TnjI8sRteLM66Q/9b4bsJUt7d2pOBB85P2xJ/YYjQsS6zOpvRpoA8t4 e5PR9G9XVlvLgWiXUEt/jWLSs8/aeWbIrE3a54COfxmk+XmvJK4dIvoWoZ6s/ZSJ 2KG7Mq0CW7hfQI+wzp/p238fxfLKbc6woH2GUTIVaK0oeub+00MRaWjnQyC/78ul gUUSq7BaLZKPmrDnwifYjCd3ZKR7bXSaDOrudem8AYnYXw0DdF9WDnUk3TC8Pup9 QJC86RENHoTawg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:55:03 2025 by rpki-client