This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json) Hash identifier: zN0oIq65s1ndGZDWRsogNCVAE7WCVfV9zZBGQXACIzA= Subject key identifier: 3A:B3:C4:49:03:8C:62:92:1C:FB:0C:6A:19:C1:E1:D2:59:C8:F9:68 Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be Certificate serial: 019B12025EA3F46BEF441B303B8949B3ADE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft Manifest number: 08A3 Signing time: Fri 12 Dec 2025 10:01:43 +0000 Manifest this update: Fri 12 Dec 2025 10:01:43 +0000 Manifest next update: Sat 13 Dec 2025 10:01:43 +0000 Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=) 2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: zZIQsGvztUW4LcPEeU/e8+MSJXC7kDGMtagC0VL7x1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:5e:a3:f4:6b:ef:44:1b:30:3b:89:49:b3:ad:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be Validity Not Before: Dec 12 10:01:43 2025 GMT Not After : Dec 13 10:01:43 2025 GMT Subject: CN=3ab3c449038c62921cfb0c6a19c1e1d259c8f968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:b2:18:a0:85:16:15:5a:a9:2b:7f:e4:b8: 11:72:58:06:12:d4:f5:a7:8d:5b:bd:9c:72:84:31: 39:31:09:f4:05:38:44:83:15:a3:d3:6b:42:65:9b: 75:cb:d1:59:0b:54:a0:51:5b:a7:b2:c8:62:04:b0: 96:5d:12:45:ec:c9:7e:5b:1d:1c:7f:49:c0:96:d0: db:af:99:8b:9b:cc:de:b2:9a:83:7a:72:60:33:97: 87:34:ac:c7:b2:6e:99:cb:03:66:3b:f1:33:50:ec: fe:21:29:b0:69:76:e3:98:7f:50:28:2d:f6:78:96: 48:f1:d8:a5:a6:9c:6a:54:2a:d8:06:bd:33:a4:9a: d7:af:a0:02:a1:85:80:4a:a5:6d:80:f8:eb:ce:36: 85:9e:62:4a:86:48:76:61:21:23:eb:83:86:ef:1c: 1d:be:5a:0d:13:03:25:7b:fc:18:fe:80:2a:28:a7: ff:2c:1e:f3:0f:63:42:04:3f:37:fe:b1:23:70:d8: ca:e5:aa:5b:fb:62:e8:96:52:a9:fd:8f:b0:f6:67: b8:83:c9:b4:1c:98:75:4b:9e:cc:bc:80:57:da:1a: 55:5e:4d:fc:6b:b7:02:8d:67:b5:df:d3:15:3c:3a: 73:5f:72:5a:a7:71:f3:85:ad:49:81:4d:ca:64:1e: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:C4:49:03:8C:62:92:1C:FB:0C:6A:19:C1:E1:D2:59:C8:F9:68 X509v3 Authority Key Identifier: keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:af:c8:e9:b0:b0:97:7b:b7:8c:2d:4b:d2:37:f0:8b:b5:73: 82:6d:29:55:2e:4c:ae:17:95:5e:4c:78:fc:29:78:8f:54:4a: a8:fb:19:6c:6b:29:dc:e4:2d:b8:b3:46:af:1f:1f:aa:81:68: 9c:26:f8:3f:f9:89:6a:3c:8e:ad:64:b0:74:82:ac:d5:9a:ca: 88:51:7d:db:ed:c6:1a:05:1e:fe:73:9d:f4:9d:38:bc:1b:4f: 2a:b5:ba:46:c0:81:68:34:72:34:ce:f6:e3:d4:be:be:0d:5a: bb:43:ed:cd:b2:50:07:6a:a1:55:d6:31:4d:b1:1c:03:9c:37: 0a:62:3d:48:be:3f:9a:f9:8b:ea:f4:4f:f4:a6:7a:77:5c:2e: fa:53:92:1d:28:0a:7f:92:93:67:84:f0:dd:40:b4:b9:e7:1e: 02:80:40:9f:24:2c:51:57:86:df:9e:e7:5f:59:d1:f2:31:90: 58:e5:cf:49:e5:da:db:88:0f:30:cc:e4:30:58:69:61:89:63: a6:a0:89:53:24:dc:d0:02:00:67:46:9b:df:3b:88:73:61:5c: e5:78:f8:16:0e:da:f0:94:66:8c:19:df:19:0a:1d:40:8c:01: 9b:ef:92:54:86:42:85:38:74:f9:b4:b7:ff:a3:d7:f0:62:b5: 05:ae:f8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAl6j9GvvRBswO4lJs63nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj MWU3YmUwHhcNMjUxMjEyMTAwMTQzWhcNMjUxMjEzMTAwMTQzWjAzMTEwLwYDVQQD EygzYWIzYzQ0OTAzOGM2MjkyMWNmYjBjNmExOWMxZTFkMjU5YzhmOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rWyGKCFFhVaqSt/5LgRclgGEtT1 p41bvZxyhDE5MQn0BThEgxWj02tCZZt1y9FZC1SgUVunsshiBLCWXRJF7Ml+Wx0c f0nAltDbr5mLm8zespqDenJgM5eHNKzHsm6ZywNmO/EzUOz+ISmwaXbjmH9QKC32 eJZI8dilppxqVCrYBr0zpJrXr6ACoYWASqVtgPjrzjaFnmJKhkh2YSEj64OG7xwd vloNEwMle/wY/oAqKKf/LB7zD2NCBD83/rEjcNjK5apb+2LollKp/Y+w9me4g8m0 HJh1S57MvIBX2hpVXk38a7cCjWe139MVPDpzX3Jap3Hzha1JgU3KZB5YmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqzxEkDjGKSHPsMahnB4dJZyPloMB8GA1UdIwQY MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1 LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6/I6bCw l3u3jC1L0jfwi7Vzgm0pVS5MrheVXkx4/Cl4j1RKqPsZbGsp3OQtuLNGrx8fqoFo nCb4P/mJajyOrWSwdIKs1ZrKiFF92+3GGgUe/nOd9J04vBtPKrW6RsCBaDRyNM72 49S+vg1au0PtzbJQB2qhVdYxTbEcA5w3CmI9SL4/mvmL6vRP9KZ6d1wu+lOSHSgK f5KTZ4Tw3UC0ueceAoBAnyQsUVeG357nX1nR8jGQWOXPSeXa24gPMMzkMFhpYYlj pqCJUyTc0AIAZ0ab3zuIc2Fc5Xj4Fg7a8JRmjBnfGQodQIwBm++SVIZChTh0+bS3 /6PX8GK1Ba74xw== -----END CERTIFICATE-----Generated at Fri Dec 12 11:55:14 2025 by rpki-client