This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json) Hash identifier: y6/mJxRpQIEOc8oT6AgbUDvOkLtzc7xQ9ZxFVbMHjq8= Subject key identifier: 2C:DC:55:21:08:32:E9:24:58:3C:44:7A:D3:C8:FC:9C:E6:5C:0B:D7 Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4 Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4 Certificate serial: 019B0F00ECB45E31D6BF0FD8BE059AA12BE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft Manifest number: 0B69 Signing time: Thu 11 Dec 2025 20:01:17 +0000 Manifest this update: Thu 11 Dec 2025 20:01:17 +0000 Manifest next update: Fri 12 Dec 2025 20:01:17 +0000 Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=) 2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: u85cyAogxq+hf86We3Mq5XEWVKLw1LebUq5XW/wzRkk=) 3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=) 4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ec:b4:5e:31:d6:bf:0f:d8:be:05:9a:a1:2b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4 Validity Not Before: Dec 11 20:01:17 2025 GMT Not After : Dec 12 20:01:17 2025 GMT Subject: CN=2cdc55210832e924583c447ad3c8fc9ce65c0bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:b5:ba:a5:f3:3d:55:89:63:87:af:36:ad: 80:95:31:9b:44:35:7f:9f:e0:c2:cf:a9:c0:81:5a: 8f:fb:17:4f:84:47:e5:ae:5b:f0:d5:58:25:82:30: b0:50:43:d6:c3:3b:3f:a1:41:25:7e:06:62:5b:cc: f6:a8:eb:90:0d:28:11:d4:33:43:f4:01:ba:7c:b2: 16:4b:fe:aa:3c:a9:e0:a6:71:74:1f:05:df:3d:23: 4e:b6:84:61:9b:58:40:04:45:00:97:1a:ce:5f:aa: f1:f9:e1:7f:62:48:02:c1:d9:38:c7:00:fd:1d:2f: 71:f3:a1:30:20:d2:8f:97:e7:46:7e:2e:ae:d0:bb: 7e:0c:a7:68:90:48:10:1c:25:71:2d:5a:a9:b5:06: 3c:87:cc:53:3f:31:7d:34:08:6c:d1:43:cd:9d:3b: f1:b2:dc:ff:27:bc:f3:0c:11:73:d1:ae:90:fd:ad: ac:93:e9:d5:e0:68:04:30:23:d9:72:ac:5d:a1:b6: 60:48:b6:73:10:85:44:99:60:83:89:96:90:bd:b9: 2c:d3:a8:4c:9a:14:9a:a2:3e:6d:51:46:ab:28:3a: 1f:ac:86:51:68:24:49:2f:26:b0:0f:63:14:ab:e2: c0:9c:41:30:fa:ae:7d:0e:eb:b6:ba:76:6d:78:99: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DC:55:21:08:32:E9:24:58:3C:44:7A:D3:C8:FC:9C:E6:5C:0B:D7 X509v3 Authority Key Identifier: keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:24:36:fc:f8:39:a9:d9:c7:d8:c6:96:f7:ad:ae:58:97:1c: ef:e9:72:0f:a4:6a:ce:34:06:c7:c7:30:47:6b:dc:24:5d:8e: 0a:fb:89:4a:ab:01:ea:a8:91:f4:33:77:d5:04:0a:ae:0c:95: 95:cc:54:df:39:ef:66:98:f7:79:77:58:c7:82:ac:af:3a:6c: 21:94:b6:78:f5:5e:5c:be:9f:7a:7d:ae:6a:59:e0:f1:69:9c: 8c:25:8e:dd:12:e0:66:20:2a:9a:1c:e3:67:f0:41:f6:ca:1a: e2:ec:22:c4:ff:da:a1:9a:ab:2d:86:02:9a:ca:49:76:7a:0b: b2:ad:57:ca:93:db:19:c5:fc:0d:6a:68:0a:a8:12:1e:46:c9: ed:69:c4:fe:c1:05:93:48:30:c0:9e:91:5f:09:f1:c5:6f:42: cd:b6:8b:c3:60:4f:65:9d:cf:ac:9c:8f:ac:91:29:86:61:45: ec:d2:7e:92:bd:ac:f7:94:bb:f4:2e:e3:57:7f:66:a3:09:44: 8c:63:34:70:8e:ab:5b:e7:50:da:29:a7:29:c2:da:d1:44:02: 36:6a:30:b8:1a:cc:54:05:af:49:5d:20:75:da:2d:37:39:32: 56:45:f6:aa:2e:3c:c5:1c:51:4f:c8:2e:54:e7:b0:34:6a:4e: e7:95:d7:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAOy0XjHWvw/YvgWaoSvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OGQ5ODAwZDY5ZGViYWUxMWI3ZjgxNjFjM2NlODgxODFm ZGU3YjQwHhcNMjUxMjExMjAwMTE3WhcNMjUxMjEyMjAwMTE3WjAzMTEwLwYDVQQD EygyY2RjNTUyMTA4MzJlOTI0NTgzYzQ0N2FkM2M4ZmM5Y2U2NWMwYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFW1uqXzPVWJY4evNq2AlTGbRDV/ n+DCz6nAgVqP+xdPhEflrlvw1VglgjCwUEPWwzs/oUElfgZiW8z2qOuQDSgR1DND 9AG6fLIWS/6qPKngpnF0HwXfPSNOtoRhm1hABEUAlxrOX6rx+eF/YkgCwdk4xwD9 HS9x86EwINKPl+dGfi6u0Lt+DKdokEgQHCVxLVqptQY8h8xTPzF9NAhs0UPNnTvx stz/J7zzDBFz0a6Q/a2sk+nV4GgEMCPZcqxdobZgSLZzEIVEmWCDiZaQvbks06hM mhSaoj5tUUarKDofrIZRaCRJLyawD2MUq+LAnEEw+q59Duu2unZteJlizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzcVSEIMukkWDxEetPI/JzmXAvXMB8GA1UdIwQY MBaAFISNmADWneuuEbf4Fhw86IGB/ee0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEt M2Q5M2ZlNmQyMGFhLzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEtM2Q5M2ZlNmQyMGFh LzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByQ2/Pg5 qdnH2MaW962uWJcc7+lyD6RqzjQGx8cwR2vcJF2OCvuJSqsB6qiR9DN31QQKrgyV lcxU3znvZpj3eXdYx4KsrzpsIZS2ePVeXL6fen2ualng8WmcjCWO3RLgZiAqmhzj Z/BB9soa4uwixP/aoZqrLYYCmspJdnoLsq1XypPbGcX8DWpoCqgSHkbJ7WnE/sEF k0gwwJ6RXwnxxW9CzbaLw2BPZZ3PrJyPrJEphmFF7NJ+kr2s95S79C7jV39mowlE jGM0cI6rW+dQ2imnKcLa0UQCNmowuBrMVAWvSV0gddotNzkyVkX2qi48xRxRT8gu VOewNGpO55XXyQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:12 2025 by rpki-client