This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json) Hash identifier: VKX7LhdlDixKPTqBkUX/ILqpdBbmG7cwToV9X4CdpGQ= Subject key identifier: 0E:F8:92:01:BD:44:53:34:0C:78:D3:A9:AA:64:D0:5C:05:E4:6D:A3 Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Certificate serial: 019B24084A13AAA71334980DA000E4242FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft Manifest number: 0E4D Signing time: Mon 15 Dec 2025 22:01:21 +0000 Manifest this update: Mon 15 Dec 2025 22:01:21 +0000 Manifest next update: Tue 16 Dec 2025 22:01:21 +0000 Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=) 2: S3WGMPY-OzezhDsk-gOqjIT9wqE.roa (hash: B0hQgvaTLIn8DwMEJturhomMZwtDUgE45NKruZhEvSo=) 3: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=) 4: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: JcjHSJgT6szUleU5QvCTy8x6n4j5m9sRCkLz5i5sPKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:4a:13:aa:a7:13:34:98:0d:a0:00:e4:24:2f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Validity Not Before: Dec 15 22:01:21 2025 GMT Not After : Dec 16 22:01:21 2025 GMT Subject: CN=0ef89201bd4453340c78d3a9aa64d05c05e46da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:50:da:e0:6f:a8:59:de:f2:36:0e:82:94: c8:20:df:26:95:cf:cb:79:f7:69:1b:a6:58:b5:3e: 0d:9b:5a:bc:40:27:75:96:e0:ee:80:6c:84:c2:a6: 60:44:64:d2:6b:2a:5c:b3:f4:d8:af:96:b5:7f:2e: d2:72:3a:47:32:98:e5:66:f9:99:d7:9c:42:9d:78: 4e:33:0f:7d:69:de:82:61:93:35:87:63:b1:ca:a4: f3:43:fa:dd:e6:07:ab:cd:6a:7c:15:56:f0:06:16: be:d8:a0:46:9e:ce:c7:8d:5f:98:61:43:36:83:98: 1f:7e:10:3e:77:4d:c5:57:5d:eb:45:e4:0e:b2:fa: 43:9d:1f:78:90:85:01:c5:36:50:72:68:ea:64:54: 7a:0a:30:a8:df:b5:eb:37:58:09:55:ca:8c:4d:5e: b3:47:98:bc:02:e6:9e:b8:3f:7a:27:ce:fa:3d:5b: ae:45:f5:84:70:6c:8d:af:1a:c9:57:92:60:7e:c4: c5:5b:58:49:7d:d9:f1:3c:0f:72:6e:16:bc:f9:88: 32:2b:4b:89:9c:3f:9d:c9:66:93:43:88:c9:fb:38: 77:92:99:11:b7:cb:bd:e3:5e:16:8a:40:04:ac:f1: fa:c2:fc:6c:bd:8b:ab:57:f4:c6:86:10:bb:2c:49: e8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:92:01:BD:44:53:34:0C:78:D3:A9:AA:64:D0:5C:05:E4:6D:A3 X509v3 Authority Key Identifier: keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5a:26:5a:f3:eb:bc:46:36:17:c4:79:c3:7f:ef:a5:5d:1f: 91:e0:d2:a4:8c:1c:f8:76:82:a0:ab:38:2d:6c:f4:1c:1f:d0: 89:0c:7d:82:b7:10:46:fd:eb:36:ca:0a:62:39:4c:07:83:64: ba:96:86:71:6c:e2:da:9c:3d:fb:e9:25:ab:a0:7d:92:42:d4: b0:89:61:ca:0b:15:3a:3e:2d:26:7e:21:05:2b:0a:ea:ba:0d: d2:42:3d:75:34:7a:1b:df:2b:8c:d2:e2:2c:65:4f:95:5e:fd: 97:df:7c:94:4d:07:8b:e3:06:64:21:32:cc:e7:37:7d:78:c6: 89:95:56:e8:16:bb:26:ec:d5:0c:3c:13:ea:d2:4e:66:94:67: 79:d3:f1:44:d7:3a:57:c1:e2:56:8b:f6:02:f2:8b:3b:da:f5: d8:32:24:5f:a0:9d:f5:04:04:63:13:8b:ec:5f:f0:e3:e7:64: 8c:ea:7f:fd:4d:76:e8:03:20:b0:1a:99:f3:63:3a:af:ad:2e: 66:9e:58:35:66:5d:e7:b5:64:5a:58:48:45:f9:b7:6f:d0:7d: be:69:1f:7c:ea:da:7c:ec:96:2b:a3:73:11:df:a3:d3:05:30: 3a:10:e4:16:69:f2:80:8d:13:47:7c:94:58:f7:3a:2e:7c:83: 6a:14:33:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCEoTqqcTNJgNoADkJC/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk MTg3YmMwHhcNMjUxMjE1MjIwMTIxWhcNMjUxMjE2MjIwMTIxWjAzMTEwLwYDVQQD EygwZWY4OTIwMWJkNDQ1MzM0MGM3OGQzYTlhYTY0ZDA1YzA1ZTQ2ZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu95Q2uBvqFne8jYOgpTIIN8mlc/L efdpG6ZYtT4Nm1q8QCd1luDugGyEwqZgRGTSaypcs/TYr5a1fy7ScjpHMpjlZvmZ 15xCnXhOMw99ad6CYZM1h2OxyqTzQ/rd5gerzWp8FVbwBha+2KBGns7HjV+YYUM2 g5gffhA+d03FV13rReQOsvpDnR94kIUBxTZQcmjqZFR6CjCo37XrN1gJVcqMTV6z R5i8AuaeuD96J876PVuuRfWEcGyNrxrJV5JgfsTFW1hJfdnxPA9ybha8+YgyK0uJ nD+dyWaTQ4jJ+zh3kpkRt8u9414WikAErPH6wvxsvYurV/TGhhC7LEnobQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA74kgG9RFM0DHjTqapk0FwF5G2jMB8GA1UdIwQY MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4 LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlomWvPr vEY2F8R5w3/vpV0fkeDSpIwc+HaCoKs4LWz0HB/QiQx9grcQRv3rNsoKYjlMB4Nk upaGcWzi2pw9++klq6B9kkLUsIlhygsVOj4tJn4hBSsK6roN0kI9dTR6G98rjNLi LGVPlV79l998lE0Hi+MGZCEyzOc3fXjGiZVW6Ba7JuzVDDwT6tJOZpRnedPxRNc6 V8HiVov2AvKLO9r12DIkX6Cd9QQEYxOL7F/w4+dkjOp//U126AMgsBqZ82M6r60u Zp5YNWZd57VkWlhIRfm3b9B9vmkffOrafOyWK6NzEd+j0wUwOhDkFmnygI0TR3yU WPc6LnyDahQzPw== -----END CERTIFICATE-----Generated at Tue Dec 16 03:38:07 2025 by rpki-client