This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json) Hash identifier: hj7qaRYhqW/s2QxD2arQCL4L8Xf/m62vAivBqhwnosU= Subject key identifier: 64:38:89:49:94:88:DE:D1:F3:FE:D0:5C:28:2A:7A:68:E6:DE:95:05 Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07 Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07 Certificate serial: 019B1014B62D5287C45F52A28A08DE612627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft Manifest number: 1704 Signing time: Fri 12 Dec 2025 01:02:31 +0000 Manifest this update: Fri 12 Dec 2025 01:02:31 +0000 Manifest next update: Sat 13 Dec 2025 01:02:31 +0000 Files and hashes: 1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=) 2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: ivMtSLAOUm1r9sdFt53TJixzHJTSK6ibdx1QcIOG1Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:b6:2d:52:87:c4:5f:52:a2:8a:08:de:61:26:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07 Validity Not Before: Dec 12 01:02:31 2025 GMT Not After : Dec 13 01:02:31 2025 GMT Subject: CN=643889499488ded1f3fed05c282a7a68e6de9505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:c2:90:3b:fd:c8:a3:71:59:f5:fd:91:4b: c4:80:eb:93:b9:65:44:73:fc:96:a0:2b:66:ee:27: de:70:42:84:76:ed:09:fb:93:61:5b:00:5f:57:a7: 21:a6:f0:83:36:57:fc:97:60:57:5a:6d:26:95:f8: 11:01:91:6a:64:bb:d7:7d:7e:70:c7:c1:a2:74:f3: 6c:ca:02:18:f0:4f:e6:67:57:b1:16:6e:fa:6d:6a: 85:1f:dd:ec:6f:66:c8:f4:43:3b:31:71:30:af:09: 8a:5b:12:a2:f5:78:c5:1b:45:f9:70:04:fe:1a:ca: 42:e3:e1:8e:97:82:0c:f5:bd:21:7b:01:a9:fc:c2: de:fd:a4:43:91:30:a8:0f:c7:cf:98:fe:aa:59:0b: 74:71:0b:8c:e9:a4:07:04:a1:5c:38:f8:0c:92:3f: 58:fc:f3:a7:5e:f6:fd:83:b0:c6:6b:5e:75:ed:88: 40:f0:95:65:d9:a6:2d:b0:c0:5a:e4:ec:6e:25:51: 5a:69:68:0a:05:c6:64:c6:4c:ed:d2:ea:5d:1d:eb: a0:5c:32:b2:30:cf:8a:fe:09:2c:0e:39:18:1b:58: 16:a4:84:3b:30:7b:6a:2b:68:84:55:88:cd:81:a2: d2:7c:f3:d1:a3:bd:8d:b1:b9:60:ef:3d:da:1d:f0: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:89:49:94:88:DE:D1:F3:FE:D0:5C:28:2A:7A:68:E6:DE:95:05 X509v3 Authority Key Identifier: keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:23:76:83:4a:2d:14:f8:49:f6:9d:9d:c3:32:4f:8a:3f:06: cd:54:c4:3d:5f:d0:3c:2f:7e:d2:da:43:43:59:5b:b4:2d:41: f9:ad:ad:fc:f3:7c:17:b4:2c:47:a6:47:04:99:bf:bb:24:a2: ad:68:21:83:b0:b0:93:fd:6c:00:4a:8a:f2:94:48:4e:fe:62: 88:de:3a:34:bc:b1:ec:e2:3b:6e:9c:af:f6:85:e8:4a:d0:21: e3:9f:ec:f0:ea:34:98:9f:0a:a9:7a:a9:38:58:6e:ee:cf:58: 15:da:f0:a0:5b:e8:2f:f9:46:9c:b2:af:f2:96:4d:77:6b:ab: f3:7a:9b:12:18:5d:f8:91:9f:40:f2:95:0a:27:27:23:4e:1b: 69:a3:da:e8:b0:90:e3:ff:eb:91:59:09:82:80:85:01:c5:2e: f6:9f:1a:bb:dd:47:10:49:1d:cc:fb:d1:31:96:18:c7:61:26: c8:9c:a9:57:f8:e4:9b:5f:4b:79:d4:33:e0:6a:3f:8b:c8:ef: 9a:b5:61:d4:26:13:1a:e7:75:25:6b:c8:2a:aa:23:00:c3:4f: 80:e7:d2:63:dc:2f:2f:a0:58:f2:05:24:b4:2b:db:60:bb:3f: 14:85:31:93:2e:ba:52:93:29:70:42:7c:69:9c:08:e1:2c:61: 48:6c:0b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFLYtUofEX1KiigjeYSYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ODg4MThjNGVjZjFkNWRlYjRlYTkzNjY3NDcwYTdhMTE0 ZDlhMDcwHhcNMjUxMjEyMDEwMjMxWhcNMjUxMjEzMDEwMjMxWjAzMTEwLwYDVQQD Eyg2NDM4ODk0OTk0ODhkZWQxZjNmZWQwNWMyODJhN2E2OGU2ZGU5NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NrCkDv9yKNxWfX9kUvEgOuTuWVE c/yWoCtm7ifecEKEdu0J+5NhWwBfV6chpvCDNlf8l2BXWm0mlfgRAZFqZLvXfX5w x8GidPNsygIY8E/mZ1exFm76bWqFH93sb2bI9EM7MXEwrwmKWxKi9XjFG0X5cAT+ GspC4+GOl4IM9b0hewGp/MLe/aRDkTCoD8fPmP6qWQt0cQuM6aQHBKFcOPgMkj9Y /POnXvb9g7DGa1517YhA8JVl2aYtsMBa5OxuJVFaaWgKBcZkxkzt0updHeugXDKy MM+K/gksDjkYG1gWpIQ7MHtqK2iEVYjNgaLSfPPRo72Nsblg7z3aHfAIBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ4iUmUiN7R8/7QXCgqemjm3pUFMB8GA1UdIwQY MBaAFIiIgYxOzx1d606pNmdHCnoRTZoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4Nzkt YzI5YmYyNWQyNjZlLzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4NzktYzI5YmYyNWQyNjZl LzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiN2g0ot FPhJ9p2dwzJPij8GzVTEPV/QPC9+0tpDQ1lbtC1B+a2t/PN8F7QsR6ZHBJm/uySi rWghg7Cwk/1sAEqK8pRITv5iiN46NLyx7OI7bpyv9oXoStAh45/s8Oo0mJ8KqXqp OFhu7s9YFdrwoFvoL/lGnLKv8pZNd2ur83qbEhhd+JGfQPKVCicnI04baaPa6LCQ 4//rkVkJgoCFAcUu9p8au91HEEkdzPvRMZYYx2EmyJypV/jkm19LedQz4Go/i8jv mrVh1CYTGud1JWvIKqojAMNPgOfSY9wvL6BY8gUktCvbYLs/FIUxky66UpMpcEJ8 aZwI4SxhSGwLoA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:18:41 2025 by rpki-client