This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json) Hash identifier: lZemeGX3cKpiFio0xbrUSZNFI0y+nZRAAQt2JHNQBBk= Subject key identifier: 22:5D:58:17:A8:A1:81:A1:D4:9E:8C:5A:92:18:0A:B6:35:18:47:78 Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2 Certificate serial: 019AACB9F668D64AA4C47D97E7565A12290B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft Manifest number: 173B Signing time: Sat 22 Nov 2025 18:00:59 +0000 Manifest this update: Sat 22 Nov 2025 18:00:59 +0000 Manifest next update: Sun 23 Nov 2025 18:00:59 +0000 Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: goDoqPFNJqQyvKP+QELmrHs/aZftYzP6i/cCmWSwncE=) 2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=) 3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=) 4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:f6:68:d6:4a:a4:c4:7d:97:e7:56:5a:12:29:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2 Validity Not Before: Nov 22 18:00:59 2025 GMT Not After : Nov 23 18:00:59 2025 GMT Subject: CN=225d5817a8a181a1d49e8c5a92180ab635184778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:5e:16:89:33:98:76:87:62:a7:2c:b5:a1: 2a:62:db:c5:b7:bb:cb:ba:49:87:83:5e:f1:ac:0d: 0f:a6:93:93:e4:6d:58:65:94:43:63:68:e6:08:18: 3a:e5:8a:4f:70:32:bb:06:2b:12:b8:46:00:cd:24: 77:98:de:44:dd:61:8c:da:8a:59:01:88:60:bd:bc: db:4a:eb:08:ea:0c:62:e6:2f:84:33:5d:03:09:9b: 2f:d2:71:91:b1:7d:42:da:b5:ec:a8:d2:cf:a5:db: d5:9d:66:6d:44:e2:5d:e5:1f:49:4f:63:28:62:ec: 9b:a2:0a:41:38:70:56:94:05:a1:64:0e:a2:e5:78: ff:e9:bd:85:47:fc:b6:b9:86:d1:98:a6:e4:c6:5f: ea:f8:c7:c6:5b:c3:59:a1:3a:02:ec:26:0f:68:96: 91:3b:43:4b:bb:cd:93:36:18:5c:e3:98:fa:10:9d: b9:2c:b2:d6:95:7b:d3:8c:20:14:66:ac:74:ef:03: 42:6b:96:8a:cc:a7:4a:3c:bf:05:8b:4a:9b:d3:70: 2a:91:7a:65:33:34:5e:a2:43:f9:58:3e:56:cd:45: 6a:3c:2c:07:33:c5:85:d7:ea:93:35:c5:80:1d:3d: 86:40:9f:60:ce:72:86:3b:b2:d9:b4:65:37:d5:b9: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5D:58:17:A8:A1:81:A1:D4:9E:8C:5A:92:18:0A:B6:35:18:47:78 X509v3 Authority Key Identifier: keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:de:d6:b9:9d:db:bc:36:6d:a0:82:c5:74:35:c3:bb:80:11: 42:c1:e3:88:d5:2d:fe:13:40:1a:79:c7:52:ed:dc:36:a2:6a: 5b:03:a1:44:42:02:50:93:97:9b:44:fe:f2:d8:58:be:66:af: 72:b2:c4:d2:f4:bb:3a:93:67:30:5d:1c:90:cc:15:44:4b:e9: 00:af:56:89:9f:e6:e1:39:9a:de:ff:2d:89:89:02:a3:28:7a: 4c:7b:4a:bf:35:b5:98:d4:21:79:df:72:88:85:0a:eb:ce:ee: ce:f2:6b:1d:03:da:c1:50:2d:8d:2a:1a:ff:91:a3:52:c7:16: 21:c3:b5:00:c3:8d:a0:56:c3:95:09:c4:70:a5:61:10:51:ab: 95:c3:d2:33:2e:93:19:9a:10:81:6d:e3:c6:46:54:11:12:c5: 87:04:f2:01:b0:23:1b:c3:79:a6:07:95:54:f1:93:42:cf:04: ce:d3:a1:39:75:46:14:53:ba:2b:9e:98:4c:a1:d5:0a:f2:0b: 95:16:c7:9e:fb:19:c6:f3:ee:d6:1d:3e:91:a9:02:b2:41:96: a3:15:44:2c:9d:aa:3f:83:0c:47:93:74:84:fe:d4:e7:f9:58: ac:8b:76:52:c6:fe:f3:07:85:69:3e:e4:b1:fb:69:aa:8e:47: d8:ff:7d:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsufZo1kqkxH2X51ZaEikLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0 MGMzZjIwHhcNMjUxMTIyMTgwMDU5WhcNMjUxMTIzMTgwMDU5WjAzMTEwLwYDVQQD EygyMjVkNTgxN2E4YTE4MWExZDQ5ZThjNWE5MjE4MGFiNjM1MTg0Nzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ5eFokzmHaHYqcstaEqYtvFt7vL ukmHg17xrA0PppOT5G1YZZRDY2jmCBg65YpPcDK7BisSuEYAzSR3mN5E3WGM2opZ AYhgvbzbSusI6gxi5i+EM10DCZsv0nGRsX1C2rXsqNLPpdvVnWZtROJd5R9JT2Mo YuybogpBOHBWlAWhZA6i5Xj/6b2FR/y2uYbRmKbkxl/q+MfGW8NZoToC7CYPaJaR O0NLu82TNhhc45j6EJ25LLLWlXvTjCAUZqx07wNCa5aKzKdKPL8Fi0qb03AqkXpl MzReokP5WD5WzUVqPCwHM8WF1+qTNcWAHT2GQJ9gznKGO7LZtGU31blBNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJdWBeooYGh1J6MWpIYCrY1GEd4MB8GA1UdIwQY MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt NWIwYjA1MDkzZTBjLzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu97WuZ3b vDZtoILFdDXDu4ARQsHjiNUt/hNAGnnHUu3cNqJqWwOhREICUJOXm0T+8thYvmav crLE0vS7OpNnMF0ckMwVREvpAK9WiZ/m4Tma3v8tiYkCoyh6THtKvzW1mNQhed9y iIUK687uzvJrHQPawVAtjSoa/5GjUscWIcO1AMONoFbDlQnEcKVhEFGrlcPSMy6T GZoQgW3jxkZUERLFhwTyAbAjG8N5pgeVVPGTQs8EztOhOXVGFFO6K56YTKHVCvIL lRbHnvsZxvPu1h0+kakCskGWoxVELJ2qP4MMR5N0hP7U5/lYrIt2Usb+8weFaT7k sftpqo5H2P990w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:02 2025 by rpki-client