This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json) Hash identifier: WhQU/Dii02PhUmzk69Ha28DqRuCaA1JUQDUpWIIFxk8= Subject key identifier: 5B:5F:F7:BB:E7:83:1F:5F:D8:27:02:5E:AF:DA:86:6F:C7:23:F3:F2 Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae Certificate serial: 019B1081611E642F9FA12AC20C06FEF6C6A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft Manifest number: 06DF Signing time: Fri 12 Dec 2025 03:01:12 +0000 Manifest this update: Fri 12 Dec 2025 03:01:12 +0000 Manifest next update: Sat 13 Dec 2025 03:01:12 +0000 Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=) 2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: 742pNA2KolQPH2VJH3L5k7VFEG8/d3akBPPE0LQcUZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:61:1e:64:2f:9f:a1:2a:c2:0c:06:fe:f6:c6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae Validity Not Before: Dec 12 03:01:12 2025 GMT Not After : Dec 13 03:01:12 2025 GMT Subject: CN=5b5ff7bbe7831f5fd827025eafda866fc723f3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:33:f3:1f:9d:8b:4a:53:70:f9:f7:7e:29: fe:56:10:95:4f:82:2e:eb:9a:14:1f:82:5e:18:75: f1:a1:c6:04:2b:92:22:b0:c2:fb:bc:57:bb:e7:7a: d2:c3:76:c9:de:e3:df:30:47:8f:fa:fb:cc:a4:0e: 80:01:5d:79:cb:60:8f:b6:da:44:74:5a:ad:80:ff: 87:3b:85:b6:d7:f5:da:4e:fe:96:8b:53:69:d7:7f: ac:a8:1b:5f:df:cb:58:11:53:18:9e:5f:e0:28:bd: 4f:06:18:6c:91:ac:41:84:e3:8c:55:cc:b7:e2:0f: b5:fe:31:5a:7c:8a:4f:d2:a0:41:bd:d8:ab:e2:75: c4:21:89:79:82:65:51:34:39:8c:a3:45:c6:76:06: 45:39:7a:5a:6d:e9:7f:3a:a8:15:6f:17:03:91:c9: 9a:d8:e0:1d:7f:41:d6:19:de:c0:79:e5:a3:01:23: dc:5e:f2:a9:7c:ae:42:04:c6:98:e7:12:3f:a4:ed: fe:e8:c8:e0:48:9a:f5:38:a1:e3:67:4f:16:54:dd: 39:27:56:32:ce:b4:a1:28:ae:30:78:f3:67:3d:24: 38:33:5b:e8:72:1d:b8:d9:08:4a:25:cf:a2:33:39: 63:7b:04:97:e5:ab:82:2b:e1:79:e8:38:c4:a7:3f: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5F:F7:BB:E7:83:1F:5F:D8:27:02:5E:AF:DA:86:6F:C7:23:F3:F2 X509v3 Authority Key Identifier: keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:da:99:71:ba:aa:e9:bc:f1:cc:76:35:f9:c7:bf:4f:25:2d: 16:5b:1a:77:01:a2:c5:1e:99:c2:89:e2:ab:0c:9d:c5:4e:df: bb:67:cf:06:0a:83:83:4b:50:da:c0:03:ad:fc:2b:7e:66:91: 53:92:d2:49:1d:54:12:f6:1d:22:70:45:4e:c5:84:d0:07:67: 03:79:f2:14:ce:85:3d:02:ff:ac:69:46:b9:a2:29:37:b6:7e: f6:8e:ab:96:95:a6:94:be:26:64:f1:3e:3c:0f:d7:aa:5d:56: 4f:1e:dc:8e:d4:81:37:f1:0d:f5:2f:fc:68:12:d8:7c:4e:2d: 05:77:2f:46:1d:36:9f:cd:04:b2:4f:a2:e2:d8:4b:6c:f2:4d: 2c:82:1b:1f:cd:1a:df:36:e3:9e:e9:d3:97:77:9c:30:e9:03: e7:23:f5:0c:00:02:34:38:97:53:18:e1:5c:fa:a6:5a:56:86: ea:51:43:60:7d:27:cb:8a:47:16:12:eb:4d:cb:83:9d:23:df: 59:19:2b:92:48:23:4b:27:1d:0c:fb:dc:4e:2c:53:74:eb:72: 6d:f8:08:51:9f:0a:b1:4d:d7:d7:20:b3:70:f2:f7:9f:5e:38: 83:cf:58:96:32:78:09:5e:00:27:08:18:21:31:86:6a:ee:36: f6:42:15:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgWEeZC+foSrCDAb+9salMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj MTgxYWUwHhcNMjUxMjEyMDMwMTEyWhcNMjUxMjEzMDMwMTEyWjAzMTEwLwYDVQQD Eyg1YjVmZjdiYmU3ODMxZjVmZDgyNzAyNWVhZmRhODY2ZmM3MjNmM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/oz8x+di0pTcPn3fin+VhCVT4Iu 65oUH4JeGHXxocYEK5IisML7vFe753rSw3bJ3uPfMEeP+vvMpA6AAV15y2CPttpE dFqtgP+HO4W21/XaTv6Wi1Np13+sqBtf38tYEVMYnl/gKL1PBhhskaxBhOOMVcy3 4g+1/jFafIpP0qBBvdir4nXEIYl5gmVRNDmMo0XGdgZFOXpabel/OqgVbxcDkcma 2OAdf0HWGd7AeeWjASPcXvKpfK5CBMaY5xI/pO3+6MjgSJr1OKHjZ08WVN05J1Yy zrShKK4wePNnPSQ4M1voch242QhKJc+iMzljewSX5auCK+F56DjEpz8zdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtf97vngx9f2CcCXq/ahm/HI/PyMB8GA1UdIwQY MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3 LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtqZcbqq 6bzxzHY1+ce/TyUtFlsadwGixR6ZwoniqwydxU7fu2fPBgqDg0tQ2sADrfwrfmaR U5LSSR1UEvYdInBFTsWE0AdnA3nyFM6FPQL/rGlGuaIpN7Z+9o6rlpWmlL4mZPE+ PA/Xql1WTx7cjtSBN/EN9S/8aBLYfE4tBXcvRh02n80Esk+i4thLbPJNLIIbH80a 3zbjnunTl3ecMOkD5yP1DAACNDiXUxjhXPqmWlaG6lFDYH0ny4pHFhLrTcuDnSPf WRkrkkgjSycdDPvcTixTdOtybfgIUZ8KsU3X1yCzcPL3n144g89YljJ4CV4AJwgY ITGGau429kIVGQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:17:18 2025 by rpki-client