This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json) Hash identifier: 3IRSuXaJ+tvqexOiFVRRCybQM7OzGGYJrynNoWAWzKg= Subject key identifier: 8E:99:9C:9B:1C:06:4D:7A:6F:BA:27:83:98:8E:07:38:6A:3A:29:1A Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05 Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605 Certificate serial: 019B31C427BABFE2756370A66D7049EB8B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft Manifest number: 0AB5 Signing time: Thu 18 Dec 2025 14:01:37 +0000 Manifest this update: Thu 18 Dec 2025 14:01:37 +0000 Manifest next update: Fri 19 Dec 2025 14:01:37 +0000 Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=) 2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: EwBBqnKKCa0MYXUH2uoUrtyHRFvyI+xaS+WtQK0lrSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:27:ba:bf:e2:75:63:70:a6:6d:70:49:eb:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605 Validity Not Before: Dec 18 14:01:37 2025 GMT Not After : Dec 19 14:01:37 2025 GMT Subject: CN=8e999c9b1c064d7a6fba2783988e07386a3a291a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:3c:5e:ee:09:e2:68:de:07:9a:c8:67:4f: 2a:cb:ed:72:e4:86:25:10:98:2f:aa:f3:f3:3c:f9: 9d:2b:bb:a9:d7:86:e4:d7:a7:95:3b:e8:d8:27:ab: ae:c6:c2:fd:21:f5:8e:f2:0d:b3:e1:e2:2e:d9:13: 33:c0:c7:a4:6c:eb:9f:10:92:19:52:9f:ff:cf:76: b8:52:c1:d0:02:c8:e8:86:48:75:1c:dc:0c:68:48: 86:ad:de:2f:d8:e7:fa:b2:86:84:14:7c:49:24:ec: da:eb:31:94:8f:80:6e:04:36:6a:2c:47:c3:60:0b: c0:95:00:04:28:c0:d8:b9:6e:b3:fa:5e:ee:7a:10: ec:a8:15:9a:1c:27:98:07:24:77:66:66:88:a6:57: fd:59:01:c0:bf:18:ee:15:f0:15:38:b4:47:bb:0c: 49:45:27:a3:e8:5d:d5:54:54:2e:9c:ee:a1:e2:46: 8e:a1:9f:76:e5:5c:10:bf:be:42:57:6d:be:05:37: e5:c2:66:fc:9a:42:80:e2:01:75:34:b7:40:46:0d: d4:23:04:90:11:44:7e:b1:6b:bd:0c:fa:7e:6d:0b: 1f:c5:6e:21:5a:85:e1:ee:6d:90:90:83:e2:a6:bd: e7:dc:ca:47:58:fb:99:fa:c4:f0:84:91:cb:07:db: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:99:9C:9B:1C:06:4D:7A:6F:BA:27:83:98:8E:07:38:6A:3A:29:1A X509v3 Authority Key Identifier: keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:f3:c2:d6:e6:57:65:80:e7:df:a5:a6:c5:12:2a:c4:01:5e: 3f:d4:38:a4:19:59:07:2c:03:4e:8d:bd:65:18:fc:b1:23:97: 3e:7e:67:73:99:d4:d5:83:bc:da:80:58:7c:74:66:7a:d0:33: 1d:31:48:87:8c:53:c9:04:eb:c4:17:cf:78:73:5d:de:b0:7d: ec:9e:e6:3e:fc:a4:9c:c5:98:39:07:db:89:e6:b9:87:62:20: 36:f7:e8:d5:bc:06:1e:65:8b:1d:38:52:61:1e:ae:b8:5b:6a: aa:4d:4d:74:c2:00:ff:72:a3:c2:2e:92:77:28:78:e0:0c:e6: 35:06:31:11:aa:bc:5a:aa:52:87:c6:eb:0a:5f:76:bc:ad:b9: 52:80:27:d4:84:bf:8c:7e:79:ee:66:15:31:61:83:c6:47:88: 02:95:e4:0d:1d:5c:4c:62:3a:e5:42:fb:e5:81:4b:0d:3c:c5: 0d:69:84:86:23:c4:f9:dc:10:bd:22:ce:a7:8c:40:de:fd:c7: 0c:e8:63:e9:1c:58:e5:cc:03:d4:6d:ee:d6:a8:95:ad:93:09: f8:09:79:db:e3:f8:08:61:72:c1:1b:47:f4:0d:74:b9:6a:2d: d7:00:bb:1e:1d:7d:d4:ca:9c:3f:c2:2a:ce:82:a3:c8:5b:4a: ff:c3:f6:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxCe6v+J1Y3CmbXBJ64swMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNTE1ZmJiMzFiMzBjYTIyZDJmOTQ3YzUxOWFjNDcxZjAy YmI2MDUwHhcNMjUxMjE4MTQwMTM3WhcNMjUxMjE5MTQwMTM3WjAzMTEwLwYDVQQD Eyg4ZTk5OWM5YjFjMDY0ZDdhNmZiYTI3ODM5ODhlMDczODZhM2EyOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cA8Xu4J4mjeB5rIZ08qy+1y5IYl EJgvqvPzPPmdK7up14bk16eVO+jYJ6uuxsL9IfWO8g2z4eIu2RMzwMekbOufEJIZ Up//z3a4UsHQAsjohkh1HNwMaEiGrd4v2Of6soaEFHxJJOza6zGUj4BuBDZqLEfD YAvAlQAEKMDYuW6z+l7uehDsqBWaHCeYByR3ZmaIplf9WQHAvxjuFfAVOLRHuwxJ RSej6F3VVFQunO6h4kaOoZ925VwQv75CV22+BTflwmb8mkKA4gF1NLdARg3UIwSQ EUR+sWu9DPp+bQsfxW4hWoXh7m2QkIPipr3n3MpHWPuZ+sTwhJHLB9uILwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6ZnJscBk16b7ong5iOBzhqOikaMB8GA1UdIwQY MBaAFItRX7sxswyiLS+UfFGaxHHwK7YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZGZhMGYtMThhNC00MmY2LWI5ZDUt MDZhNDY1NWM2MzYyLzEvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZGZhMGYtMThhNC00MmY2LWI5ZDUtMDZhNDY1NWM2MzYy LzEvaTFGZnV6R3pES0l0TDVSOFVackVjZkFydGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvPC1uZX ZYDn36WmxRIqxAFeP9Q4pBlZBywDTo29ZRj8sSOXPn5nc5nU1YO82oBYfHRmetAz HTFIh4xTyQTrxBfPeHNd3rB97J7mPvyknMWYOQfbiea5h2IgNvfo1bwGHmWLHThS YR6uuFtqqk1NdMIA/3Kjwi6Sdyh44AzmNQYxEaq8WqpSh8brCl92vK25UoAn1IS/ jH557mYVMWGDxkeIApXkDR1cTGI65UL75YFLDTzFDWmEhiPE+dwQvSLOp4xA3v3H DOhj6RxY5cwD1G3u1qiVrZMJ+Al52+P4CGFywRtH9A10uWot1wC7Hh191MqcP8Iq zoKjyFtK/8P2tg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:03 2025 by rpki-client