This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json) Hash identifier: WqUe5yDgjLyI0UGoG8pu+FH7koTqIeXHmgnApfqkXqg= Subject key identifier: 74:24:D5:9A:D0:58:2F:3F:EA:43:EB:A3:D0:49:57:A4:89:2E:E6:8F Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a Certificate serial: 019B5AF63C5F1CB2192E33B50935D87D6281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft Manifest number: 029D Signing time: Fri 26 Dec 2025 14:00:45 +0000 Manifest this update: Fri 26 Dec 2025 14:00:45 +0000 Manifest next update: Sat 27 Dec 2025 14:00:45 +0000 Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: XGwCfjnLac2s4RZKArn7vbDOp8doGpEs3e70ymn2Ld8=) 2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:3c:5f:1c:b2:19:2e:33:b5:09:35:d8:7d:62:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a Validity Not Before: Dec 26 14:00:45 2025 GMT Not After : Dec 27 14:00:45 2025 GMT Subject: CN=7424d59ad0582f3fea43eba3d04957a4892ee68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:8d:de:a6:19:07:1d:a5:db:e4:b4:8c:4a: 32:ab:53:13:68:07:e6:f1:83:e3:ee:b0:41:24:5d: b3:bb:f3:fa:3c:7d:ff:6b:74:2a:62:27:69:65:ce: 45:15:b3:0a:24:d2:5f:eb:14:9e:63:c6:5e:53:85: 27:f3:5e:33:04:54:e2:04:7e:d3:1b:c4:c7:bd:c4: 99:9f:35:93:fe:13:20:cf:5d:5e:3d:d2:3c:4b:4b: 6f:79:b1:72:73:ee:2e:c5:88:bd:c2:6a:35:b1:d7: 5a:ce:8e:45:65:8d:6c:00:04:be:15:ba:66:ab:46: 11:e4:42:ee:b4:71:4d:65:f1:54:51:50:b1:37:75: 52:3b:1f:28:0a:be:c0:2a:68:59:74:48:3c:3e:54: b5:fa:5e:ac:84:b2:e9:22:eb:52:66:60:58:b4:a1: 5c:bd:f8:59:d4:73:53:36:3f:23:02:de:6a:e6:06: ca:5f:43:43:c6:72:f8:e1:83:cd:53:ea:33:a7:6c: 21:23:cd:03:b9:3d:07:a5:e1:71:b9:92:d6:2b:d2: 54:b8:8a:d1:fd:0f:b1:0f:3b:b5:3a:ce:f8:97:ae: b9:83:f4:61:74:65:67:be:3d:39:18:dc:fc:d6:aa: be:ff:a2:5b:a6:89:0a:5b:69:ac:23:73:5f:cb:9f: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:24:D5:9A:D0:58:2F:3F:EA:43:EB:A3:D0:49:57:A4:89:2E:E6:8F X509v3 Authority Key Identifier: keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:00:e9:de:fd:6c:18:e7:30:e6:4d:32:c4:e9:04:8d:58:47: 79:70:2a:2a:22:d9:c4:60:63:03:3d:a0:8c:81:b0:8a:db:52: a1:fa:3b:27:67:63:54:60:87:8f:7f:e8:0a:bc:35:23:c1:eb: 68:0b:15:10:9b:52:8d:b6:25:20:d6:f8:51:68:22:20:50:7f: 4a:1b:6e:d4:e9:81:50:8c:0f:18:1b:66:38:18:89:78:cf:d4: 11:70:6d:14:ff:d6:5f:5f:a5:da:8b:57:60:0a:e7:65:d0:f7: a3:48:90:88:94:33:f7:f1:34:da:ca:70:e2:0a:57:75:57:5d: 04:98:22:29:61:cc:ff:75:73:aa:5a:6f:3e:ec:96:95:96:cb: a1:9d:e9:82:36:91:74:bf:c7:0a:8d:59:3c:c9:d4:a8:71:71: f8:14:94:c8:67:ab:96:2e:7a:ab:f8:c0:b4:2e:cf:e3:6b:c9: d4:48:c7:a0:ba:30:3c:21:9b:37:5b:0b:bc:9f:e2:26:49:97: a4:0d:11:20:0d:9d:78:14:c5:81:ac:66:ef:7b:50:ef:2f:0a: 90:c3:21:66:b8:79:4e:21:c8:45:85:34:8e:48:4d:b3:9e:75: 0f:00:f1:8a:e9:ec:d2:f1:c5:38:2b:a0:41:03:dd:5b:77:b4: d1:81:9a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9jxfHLIZLjO1CTXYfWKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZjhhMjk4MTQxZmMyZjQ1YzA3MmQyN2EwYmYyNjI2NTVj YjZmNWEwHhcNMjUxMjI2MTQwMDQ1WhcNMjUxMjI3MTQwMDQ1WjAzMTEwLwYDVQQD Eyg3NDI0ZDU5YWQwNTgyZjNmZWE0M2ViYTNkMDQ5NTdhNDg5MmVlNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxguN3qYZBx2l2+S0jEoyq1MTaAfm 8YPj7rBBJF2zu/P6PH3/a3QqYidpZc5FFbMKJNJf6xSeY8ZeU4Un814zBFTiBH7T G8THvcSZnzWT/hMgz11ePdI8S0tvebFyc+4uxYi9wmo1sddazo5FZY1sAAS+Fbpm q0YR5ELutHFNZfFUUVCxN3VSOx8oCr7AKmhZdEg8PlS1+l6shLLpIutSZmBYtKFc vfhZ1HNTNj8jAt5q5gbKX0NDxnL44YPNU+ozp2whI80DuT0HpeFxuZLWK9JUuIrR /Q+xDzu1Os74l665g/RhdGVnvj05GNz81qq+/6JbpokKW2msI3Nfy5/LqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQk1ZrQWC8/6kPro9BJV6SJLuaPMB8GA1UdIwQY MBaAFIv4opgUH8L0XActJ6C/JiZVy29aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYt ZDQ2ZWQ1NjhmODcxLzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYtZDQ2ZWQ1NjhmODcx LzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQDp3v1s GOcw5k0yxOkEjVhHeXAqKiLZxGBjAz2gjIGwittSofo7J2djVGCHj3/oCrw1I8Hr aAsVEJtSjbYlINb4UWgiIFB/Shtu1OmBUIwPGBtmOBiJeM/UEXBtFP/WX1+l2otX YArnZdD3o0iQiJQz9/E02spw4gpXdVddBJgiKWHM/3VzqlpvPuyWlZbLoZ3pgjaR dL/HCo1ZPMnUqHFx+BSUyGerli56q/jAtC7P42vJ1EjHoLowPCGbN1sLvJ/iJkmX pA0RIA2deBTFgaxm73tQ7y8KkMMhZrh5TiHIRYU0jkhNs551DwDxiuns0vHFOCug QQPdW3e00YGagQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:40 2025 by rpki-client