This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json) Hash identifier: SxUKx8N1E71srUV4Ax2sumWbHfU6DORTO+CeNMsiuH4= Subject key identifier: 08:3F:E2:3C:65:E3:2F:08:16:90:51:C2:B6:99:71:EB:9B:58:71:94 Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Certificate serial: 019B37C5369A09AFB5F4927B493362568D72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 18:00:30 +0000 Manifest this update: Fri 19 Dec 2025 18:00:30 +0000 Manifest next update: Sat 20 Dec 2025 18:00:30 +0000 Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=) 2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: mDQF9MjI2TsSsGaLhElbXfffAl93/EIBAwLWbjzf+BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:36:9a:09:af:b5:f4:92:7b:49:33:62:56:8d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Validity Not Before: Dec 19 18:00:30 2025 GMT Not After : Dec 20 18:00:30 2025 GMT Subject: CN=083fe23c65e32f08169051c2b69971eb9b587194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:d0:0a:37:4e:35:54:bd:3c:d0:3b:17:62: 7f:86:d1:72:e4:91:df:e9:52:1c:c4:54:09:ac:fc: ea:0f:c3:ea:5c:75:06:9c:5a:b5:70:6c:c6:1a:0a: d1:c0:e4:ef:6b:b1:69:92:3c:f0:b4:9b:8e:32:66: de:d2:d0:22:eb:2d:e6:ad:4b:4b:0f:bd:32:b4:2e: 71:a1:90:cb:bd:b0:a4:58:b7:c2:61:85:b3:86:86: dc:ad:2d:af:09:e0:4d:c1:99:ea:72:4f:53:85:6a: 4b:2b:d4:ad:39:7d:ba:8c:3f:31:ce:22:1d:70:25: 23:70:c0:d7:fa:56:0f:ee:99:b2:25:dd:08:16:63: 45:c5:4a:38:af:87:3d:b4:fa:96:ae:08:2b:16:79: dd:a2:a0:ca:9b:b4:ef:99:53:ba:bc:15:34:87:a2: 84:ff:36:93:7d:f5:a5:f4:ff:4d:a8:c8:d4:9b:22: f3:54:d7:a8:d7:fc:43:da:72:3a:de:5e:03:24:85: d4:af:7e:f4:65:b0:f8:ff:22:f2:ab:27:e2:34:70: 95:78:1a:c6:a0:6f:5e:e2:93:fa:2a:00:f2:07:91: 6a:18:ee:ba:09:4d:be:c1:76:6a:1c:07:33:b3:32: c9:da:5c:97:36:bd:5e:11:44:93:d8:cd:1e:f1:85: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3F:E2:3C:65:E3:2F:08:16:90:51:C2:B6:99:71:EB:9B:58:71:94 X509v3 Authority Key Identifier: keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:41:a9:69:6f:48:a3:da:01:31:21:67:81:39:ba:d1:40:a1: 71:c4:31:4b:4d:f5:c4:53:b5:8a:01:34:60:a3:4e:1e:c3:ce: b1:ff:59:5b:01:0a:78:66:9c:4f:f1:8b:98:b1:2d:6d:5b:63: 55:9a:ff:a4:56:72:53:64:e6:40:76:6c:bd:24:7a:cb:80:0f: 3e:df:f2:7d:01:7c:85:f7:ff:a8:41:86:e2:b9:51:66:bb:00: b0:5d:ee:44:84:2b:69:ac:e3:e3:37:12:20:b6:75:69:82:c4: 7b:14:46:d9:b8:e9:ab:f5:ae:7c:72:10:fc:88:39:a9:10:f7: 6d:24:99:ef:6a:b9:ea:4e:84:eb:63:27:af:f3:40:33:33:0e: e1:14:0c:f5:f8:6e:0b:13:6f:c6:1b:07:f3:e7:b7:be:56:d6: 1a:91:35:39:49:b8:3f:14:e5:42:3a:82:f3:e8:c3:94:f5:ba: ca:fd:73:dc:49:71:b5:f2:f3:29:6b:00:71:02:63:48:78:cf: 15:83:50:d9:b7:85:8e:26:f9:4f:21:9a:5c:4b:f1:b8:14:12: 87:f9:5d:43:6a:c4:c7:09:d4:62:8e:10:26:66:d8:89:bf:54: 14:16:23:d6:b0:5e:b7:d5:f2:6f:2e:47:12:af:38:0b:17:03: 80:87:58:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xTaaCa+19JJ7STNiVo1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj YjZmZGUwHhcNMjUxMjE5MTgwMDMwWhcNMjUxMjIwMTgwMDMwWjAzMTEwLwYDVQQD EygwODNmZTIzYzY1ZTMyZjA4MTY5MDUxYzJiNjk5NzFlYjliNTg3MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BjQCjdONVS9PNA7F2J/htFy5JHf 6VIcxFQJrPzqD8PqXHUGnFq1cGzGGgrRwOTva7FpkjzwtJuOMmbe0tAi6y3mrUtL D70ytC5xoZDLvbCkWLfCYYWzhobcrS2vCeBNwZnqck9ThWpLK9StOX26jD8xziId cCUjcMDX+lYP7pmyJd0IFmNFxUo4r4c9tPqWrggrFnndoqDKm7TvmVO6vBU0h6KE /zaTffWl9P9NqMjUmyLzVNeo1/xD2nI63l4DJIXUr370ZbD4/yLyqyfiNHCVeBrG oG9e4pP6KgDyB5FqGO66CU2+wXZqHAczszLJ2lyXNr1eEUST2M0e8YXg1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg/4jxl4y8IFpBRwraZceubWHGUMB8GA1UdIwQY MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0 LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUGpaW9I o9oBMSFngTm60UChccQxS031xFO1igE0YKNOHsPOsf9ZWwEKeGacT/GLmLEtbVtj VZr/pFZyU2TmQHZsvSR6y4APPt/yfQF8hff/qEGG4rlRZrsAsF3uRIQraazj4zcS ILZ1aYLEexRG2bjpq/WufHIQ/Ig5qRD3bSSZ72q56k6E62Mnr/NAMzMO4RQM9fhu CxNvxhsH8+e3vlbWGpE1OUm4PxTlQjqC8+jDlPW6yv1z3ElxtfLzKWsAcQJjSHjP FYNQ2beFjib5TyGaXEvxuBQSh/ldQ2rExwnUYo4QJmbYib9UFBYj1rBet9Xyby5H Eq84CxcDgIdYjg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:56:25 2025 by rpki-client