This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json) Hash identifier: RafbdRDlvvfZ4o9LkdNsupsuPUpxyxk5+WKzowzUlOw= Subject key identifier: 99:72:FA:C1:0B:BE:61:5D:D2:A1:D1:90:76:1D:96:30:52:F3:ED:26 Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be Certificate serial: 019B3A8FCC1FF6C2B2BDB141B0587F9CEDD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft Manifest number: 08B8 Signing time: Sat 20 Dec 2025 07:01:00 +0000 Manifest this update: Sat 20 Dec 2025 07:01:00 +0000 Manifest next update: Sun 21 Dec 2025 07:01:00 +0000 Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=) 2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: z5MaZa1r2l5xV3NXgtZ8NOgHFeFI9o9IdAfQ/YGvx3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:cc:1f:f6:c2:b2:bd:b1:41:b0:58:7f:9c:ed:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be Validity Not Before: Dec 20 07:01:00 2025 GMT Not After : Dec 21 07:01:00 2025 GMT Subject: CN=9972fac10bbe615dd2a1d190761d963052f3ed26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f7:8b:e4:b7:24:85:62:e1:d6:94:37:e2:d3: e4:e8:d5:20:db:10:fa:b6:98:61:cb:ef:6d:58:fd: 7f:89:83:3c:b9:b5:ad:0b:b6:78:df:ab:8c:db:b9: 13:e6:5d:38:f4:70:68:bc:46:80:dc:40:b6:dd:e1: ae:df:09:e0:d4:38:55:a5:ae:54:00:54:a6:34:07: 19:b5:83:91:94:64:fc:34:f7:f7:f2:3d:fe:62:e6: ca:e4:db:ca:79:6d:8c:76:c8:0c:b3:40:ab:09:ae: 21:82:cb:c0:f7:b2:51:48:38:a1:1d:5a:b0:8d:f5: 5f:44:2c:cb:39:4b:19:95:48:b6:d1:77:0e:89:79: cb:be:19:09:24:39:84:d4:36:28:a0:5f:c1:89:67: 4d:d1:2b:20:f0:02:26:ae:09:25:3d:63:5a:bf:2d: d3:7d:58:dd:0e:1d:23:69:7c:f4:e9:df:ac:98:96: 55:cc:f1:27:5e:2f:e3:70:21:0d:84:6b:8e:ed:1e: 86:1d:6b:79:20:84:e9:75:c3:ea:e3:80:5b:86:bd: a9:fc:55:e5:c4:55:65:b6:d9:60:2d:46:77:bc:95: cf:33:ea:76:11:fd:07:3d:13:20:40:f7:89:9a:31: 93:e9:ba:bb:fe:83:66:6e:58:3d:fd:4a:a1:64:09: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:FA:C1:0B:BE:61:5D:D2:A1:D1:90:76:1D:96:30:52:F3:ED:26 X509v3 Authority Key Identifier: keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4c:be:51:5e:a1:92:77:56:82:a2:3d:0c:2d:a9:a0:e8:1b: e7:dc:dc:99:fd:63:cd:cc:7d:2b:5a:65:79:c4:be:ed:b0:ac: 14:18:a2:03:7f:37:b4:97:f8:b1:50:f9:bb:60:e3:5b:1e:6c: 33:2c:f4:4b:bd:a8:a6:3c:e4:16:f2:f3:8b:47:39:01:9d:d3: b4:61:a9:0f:ec:e9:c5:f0:21:8d:6c:cf:aa:3c:e4:77:d0:d3: 30:b6:60:cd:1d:c8:cf:38:03:5d:1e:35:1d:6c:60:50:57:93: 54:0a:56:7a:78:37:19:a4:9d:11:ef:8c:12:9c:cc:83:a5:aa: 1a:ba:2f:cd:d3:ad:16:4e:7b:b2:43:ba:f0:7e:b9:56:55:c6: 74:99:1a:8c:02:9d:f4:a2:8d:a4:f9:36:07:ba:3e:a1:f3:5b: 12:dc:ba:2f:9e:0f:03:b9:40:12:2e:92:1b:1d:c0:fb:78:3d: 75:31:23:b6:57:38:04:57:c9:60:17:d7:6f:11:7b:ab:87:42: ba:38:59:5b:6e:3c:72:44:06:b9:2f:8c:d0:4e:b1:07:0f:06: 74:b0:dd:00:ca:87:31:29:01:f6:13:56:db:77:fa:85:68:55: fc:42:49:60:30:3d:58:3d:2d:be:89:fb:ae:7e:c1:fb:c2:80: 31:d9:40:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j8wf9sKyvbFBsFh/nO3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj MWU3YmUwHhcNMjUxMjIwMDcwMTAwWhcNMjUxMjIxMDcwMTAwWjAzMTEwLwYDVQQD Eyg5OTcyZmFjMTBiYmU2MTVkZDJhMWQxOTA3NjFkOTYzMDUyZjNlZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/eL5LckhWLh1pQ34tPk6NUg2xD6 tphhy+9tWP1/iYM8ubWtC7Z436uM27kT5l049HBovEaA3EC23eGu3wng1DhVpa5U AFSmNAcZtYORlGT8NPf38j3+YubK5NvKeW2MdsgMs0CrCa4hgsvA97JRSDihHVqw jfVfRCzLOUsZlUi20XcOiXnLvhkJJDmE1DYooF/BiWdN0Ssg8AImrgklPWNavy3T fVjdDh0jaXz06d+smJZVzPEnXi/jcCENhGuO7R6GHWt5IITpdcPq44Bbhr2p/FXl xFVlttlgLUZ3vJXPM+p2Ef0HPRMgQPeJmjGT6bq7/oNmblg9/UqhZAk1MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJly+sELvmFd0qHRkHYdljBS8+0mMB8GA1UdIwQY MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1 LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEy+UV6h kndWgqI9DC2poOgb59zcmf1jzcx9K1plecS+7bCsFBiiA383tJf4sVD5u2DjWx5s Myz0S72opjzkFvLzi0c5AZ3TtGGpD+zpxfAhjWzPqjzkd9DTMLZgzR3IzzgDXR41 HWxgUFeTVApWeng3GaSdEe+MEpzMg6WqGrovzdOtFk57skO68H65VlXGdJkajAKd 9KKNpPk2B7o+ofNbEty6L54PA7lAEi6SGx3A+3g9dTEjtlc4BFfJYBfXbxF7q4dC ujhZW248ckQGuS+M0E6xBw8GdLDdAMqHMSkB9hNW23f6hWhV/EJJYDA9WD0tvon7 rn7B+8KAMdlABQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:59 2025 by rpki-client