This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json) Hash identifier: mnYt7n0SVQ3RX6h9fgPN5m7eFcnkuZfTp2Z7/ndEXZY= Subject key identifier: A7:E2:29:75:F9:15:70:43:49:5A:80:52:A7:C6:BD:0A:1F:3A:CD:E6 Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019B24ACBF6C64AE77A72BF26ED7A8909A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft Manifest number: 14B8 Signing time: Tue 16 Dec 2025 01:00:59 +0000 Manifest this update: Tue 16 Dec 2025 01:00:59 +0000 Manifest next update: Wed 17 Dec 2025 01:00:59 +0000 Files and hashes: 1: EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa (hash: VgIFzU52fyCieiST8EuwqC7zFrwO10To39Vg1ZioEQ8=) 2: FpVk8TrExM7qh1EJO4WIiE3lVyE.roa (hash: WexubyfSWld4FcW4VTmRPdxVwZX9FjWbZF4QKeBNJNA=) 3: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=) 4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: RQbiTVesFdLGV9jO/TSYTppOE4McQ5Ek/r0vaHc1Npw=) 5: jhWC4VcKEFCcAy7tHeec7gAf82w.roa (hash: 7kjHvNbyfi414kEOc9U4Whd+kcEAvUzGwLY0UKhItcI=) 6: vtRikZxiMqZlac-W_YNJqMqHlm8.roa (hash: /xWSJ6cfywQEVV4RvpwuIXXt62aA58kIylH8Fa9/PsE=) 7: y33SBpnij0Kjvfz-rw1jNAzGe9M.roa (hash: +G4n27KUzm1afB/8sada6nItov0UFlI98LmgnjjGQ5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:bf:6c:64:ae:77:a7:2b:f2:6e:d7:a8:90:9a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Dec 16 01:00:59 2025 GMT Not After : Dec 17 01:00:59 2025 GMT Subject: CN=a7e22975f9157043495a8052a7c6bd0a1f3acde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:48:19:03:c7:c3:27:5c:26:c5:cc:d3:b3:d4: 2f:fe:e8:f7:dd:54:cf:06:d5:35:b4:af:5f:74:4b: 53:62:0c:49:a2:3b:d3:08:dc:55:9f:a5:71:88:b6: a8:7d:a9:3b:36:97:74:6f:7c:a5:cd:52:46:32:81: a1:dd:dd:74:31:57:d2:44:9b:d2:8a:c5:9b:28:27: c7:60:0c:eb:07:05:9e:ab:a8:60:54:61:e4:f3:65: b3:31:0f:6b:83:b1:78:d2:f9:48:98:62:18:20:44: 9c:a4:33:d4:f7:31:a5:00:7e:51:94:4d:58:af:36: 91:d8:df:4b:10:9c:4e:7c:99:c4:cd:73:5b:68:39: 2e:d7:9a:bd:d2:9c:64:54:e3:94:ae:dd:9b:e3:f6: d0:3b:28:34:f1:95:fc:0c:ae:39:1a:23:5d:e5:7e: cf:56:fc:70:c3:07:5f:2b:53:42:62:ee:70:34:4b: ad:b3:07:e3:c6:44:96:bf:41:a7:43:2b:59:b8:33: 46:cc:e9:50:f7:e0:6d:70:b7:39:88:59:e7:97:51: 41:27:1c:2a:e5:f2:56:82:23:ec:ef:28:10:09:be: dc:d3:65:a3:1a:5f:e9:ad:b0:38:e8:e4:34:2f:92: cd:3d:45:03:97:c5:0c:e8:31:5c:70:ac:4e:3b:c3: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E2:29:75:F9:15:70:43:49:5A:80:52:A7:C6:BD:0A:1F:3A:CD:E6 X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:92:c7:c2:9e:8f:85:ad:c3:38:07:f3:76:a1:dc:a8:3b:55: d4:5a:41:9c:e5:60:bd:83:e4:30:1c:bd:b4:3b:ae:f5:01:cf: 60:52:e7:de:bf:0f:79:34:30:60:9f:62:60:14:1b:9d:73:c7: 47:9b:0c:13:b2:5e:29:3b:58:00:2c:b3:ec:95:a2:6c:7f:bd: ad:52:3f:85:1e:2b:b0:99:8a:a1:f7:c9:8b:9f:a5:ab:3f:a8: ab:fa:56:69:f5:74:0a:e2:a9:d7:12:7a:e0:f6:63:bc:62:83: a6:10:44:f0:7a:ad:ab:3f:a9:65:13:14:db:ed:62:ec:66:e1: 97:1e:87:7c:00:70:f7:ce:ec:9f:4d:10:da:b2:bb:24:c0:a5: 95:06:5b:23:90:c8:74:bf:25:4a:a2:37:15:1b:d9:ef:46:16: 23:94:3c:0b:8f:d7:97:3c:12:9b:d3:6b:21:18:c6:97:90:a4: 32:e2:cc:05:be:46:b3:5f:ba:4c:ff:83:5c:aa:59:2c:c2:79: f1:80:3c:23:07:cb:d9:f7:a5:15:28:ed:82:04:4e:2d:7f:5b: dc:ac:2d:53:9c:d5:dc:3a:df:e8:c1:51:08:4d:9d:ca:7e:7f: b8:5d:38:d0:bd:d7:b8:d7:ab:45:8d:b3:c6:96:84:da:60:2e: 3e:c8:8f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrL9sZK53pyvybteokJqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjUxMjE2MDEwMDU5WhcNMjUxMjE3MDEwMDU5WjAzMTEwLwYDVQQD EyhhN2UyMjk3NWY5MTU3MDQzNDk1YTgwNTJhN2M2YmQwYTFmM2FjZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0gZA8fDJ1wmxczTs9Qv/uj33VTP BtU1tK9fdEtTYgxJojvTCNxVn6VxiLaofak7Npd0b3ylzVJGMoGh3d10MVfSRJvS isWbKCfHYAzrBwWeq6hgVGHk82WzMQ9rg7F40vlImGIYIEScpDPU9zGlAH5RlE1Y rzaR2N9LEJxOfJnEzXNbaDku15q90pxkVOOUrt2b4/bQOyg08ZX8DK45GiNd5X7P VvxwwwdfK1NCYu5wNEutswfjxkSWv0GnQytZuDNGzOlQ9+BtcLc5iFnnl1FBJxwq 5fJWgiPs7ygQCb7c02WjGl/prbA46OQ0L5LNPUUDl8UM6DFccKxOO8OlWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfiKXX5FXBDSVqAUqfGvQofOs3mMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJLHwp6P ha3DOAfzdqHcqDtV1FpBnOVgvYPkMBy9tDuu9QHPYFLn3r8PeTQwYJ9iYBQbnXPH R5sME7JeKTtYACyz7JWibH+9rVI/hR4rsJmKoffJi5+lqz+oq/pWafV0CuKp1xJ6 4PZjvGKDphBE8Hqtqz+pZRMU2+1i7Gbhlx6HfABw987sn00Q2rK7JMCllQZbI5DI dL8lSqI3FRvZ70YWI5Q8C4/XlzwSm9NrIRjGl5CkMuLMBb5Gs1+6TP+DXKpZLMJ5 8YA8IwfL2felFSjtggROLX9b3KwtU5zV3Drf6MFRCE2dyn5/uF040L3XuNerRY2z xpaE2mAuPsiPHw== -----END CERTIFICATE-----Generated at Tue Dec 16 08:46:01 2025 by rpki-client