This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json) Hash identifier: 12bq0pkKbTQzcR45SnzhDiTtpBZ/6PgFFXGHa7lzvWY= Subject key identifier: A8:27:F5:CF:44:AB:B8:88:AE:C0:00:83:F6:6B:F3:D5:C6:78:01:4B Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52 Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852 Certificate serial: 019AF2766107B6820C6507BBB4CA77A61892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft Manifest number: 025F Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: DPrxBdeq3kQZ3tauPtW3IoEKw1W1KwQEYg8og0uBBs8=) 2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:61:07:b6:82:0c:65:07:bb:b4:ca:77:a6:18:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=a827f5cf44abb888aec00083f66bf3d5c678014b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:be:ff:09:e9:1c:87:64:8d:44:ed:a8:61: db:49:78:3e:4a:42:c2:e8:4e:bc:b4:0a:d9:f5:05: ec:89:b4:5a:9d:55:08:5e:98:bd:62:74:5a:e2:cc: 95:1b:68:80:ee:e2:a2:3d:5d:f8:8b:d5:d6:67:b6: 98:5b:f1:1d:8f:e9:20:e2:9d:05:d7:9a:99:08:cd: e2:79:62:56:a0:cd:1c:69:f4:b3:44:9a:f2:3c:24: e4:44:8f:a3:0a:96:19:8d:8d:54:b9:fa:58:c1:26: 63:a6:a1:d3:15:19:19:59:be:07:1c:95:74:0b:be: d6:f4:bd:5a:1f:a5:d9:6b:87:c5:ca:16:e1:ab:fb: 1c:a5:4c:98:6d:f0:37:95:04:31:61:04:5e:92:26: eb:28:1b:31:9a:ad:15:ce:3b:3a:6d:90:64:9b:80: 3a:a3:c8:9c:3d:38:bf:bd:d6:5c:7c:3e:c0:42:79: d4:c1:a3:be:44:bf:87:ac:5e:d8:05:be:c3:f2:d3: 7d:69:a8:fe:f7:88:4a:ba:c0:2a:54:7e:71:6c:43: 0e:6a:f9:d8:9d:cd:9b:06:e3:78:1a:8c:e7:f9:79: 3d:c9:2d:c9:84:15:71:cd:b4:00:94:6d:51:7d:5f: 26:2c:f2:6f:53:9c:8c:cc:2d:b7:da:e7:6e:e3:50: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:27:F5:CF:44:AB:B8:88:AE:C0:00:83:F6:6B:F3:D5:C6:78:01:4B X509v3 Authority Key Identifier: keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:11:6a:a1:20:e0:64:99:80:25:0b:71:d6:72:e5:1f:75:37: ad:75:70:11:73:70:00:fc:04:0c:54:8e:bc:76:c1:d1:99:83: 67:7f:bc:aa:b4:0b:13:20:02:d5:8d:64:5d:52:5a:73:45:73: 75:02:3c:37:df:b1:4d:78:0f:1a:d8:3a:8b:3c:db:df:5e:75: e6:1e:b0:cc:28:00:a9:29:61:c2:0b:bb:9c:ba:6b:c7:ad:81: f0:28:e5:b9:c4:df:c5:92:72:02:d2:ce:66:05:b2:92:7e:ea: 22:01:6a:72:47:79:3d:b1:c1:af:9e:1c:b4:6c:33:ca:a0:16: 4e:d7:81:0a:fe:4f:3d:3c:ff:61:e7:ac:65:4d:b6:96:9a:f3: f7:ef:14:46:27:19:6b:1d:9a:d7:cd:93:42:07:33:56:71:06: a5:84:9b:d8:41:68:c5:b2:38:3a:84:bc:37:57:78:06:17:c4: a9:53:ef:44:6c:6c:e3:f8:0e:67:26:84:cb:e4:e5:60:89:af: 44:30:32:d2:ec:30:e6:c8:eb:6a:7e:5e:21:57:2a:f0:0a:ed: ae:93:1f:0a:82:4c:84:c9:eb:61:dd:25:16:2c:55:cf:70:98: f3:e3:e7:87:2b:04:f0:c8:dd:7a:72:8b:04:b4:49:88:d1:66: d9:9f:72:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmEHtoIMZQe7tMp3phiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTFiYTJkYjg2MDE5ODI2YWIxMDJlMTlmMmNhOGEyMDkz MTY4NTIwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhhODI3ZjVjZjQ0YWJiODg4YWVjMDAwODNmNjZiZjNkNWM2NzgwMTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLq+/wnpHIdkjUTtqGHbSXg+SkLC 6E68tArZ9QXsibRanVUIXpi9YnRa4syVG2iA7uKiPV34i9XWZ7aYW/Edj+kg4p0F 15qZCM3ieWJWoM0cafSzRJryPCTkRI+jCpYZjY1UufpYwSZjpqHTFRkZWb4HHJV0 C77W9L1aH6XZa4fFyhbhq/scpUyYbfA3lQQxYQRekibrKBsxmq0Vzjs6bZBkm4A6 o8icPTi/vdZcfD7AQnnUwaO+RL+HrF7YBb7D8tN9aaj+94hKusAqVH5xbEMOavnY nc2bBuN4Gozn+Xk9yS3JhBVxzbQAlG1RfV8mLPJvU5yMzC232udu41An5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgn9c9Eq7iIrsAAg/Zr89XGeAFLMB8GA1UdIwQY MBaAFCMRui24YBmCarEC4Z8sqKIJMWhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0Njgt MmYxNzg3YmJmMTE2LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0NjgtMmYxNzg3YmJmMTE2 LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRFqoSDg ZJmAJQtx1nLlH3U3rXVwEXNwAPwEDFSOvHbB0ZmDZ3+8qrQLEyAC1Y1kXVJac0Vz dQI8N9+xTXgPGtg6izzb31515h6wzCgAqSlhwgu7nLprx62B8CjlucTfxZJyAtLO ZgWykn7qIgFqckd5PbHBr54ctGwzyqAWTteBCv5PPTz/YeesZU22lprz9+8URicZ ax2a182TQgczVnEGpYSb2EFoxbI4OoS8N1d4BhfEqVPvRGxs4/gOZyaEy+TlYImv RDAy0uww5sjran5eIVcq8ArtrpMfCoJMhMnrYd0lFixVz3CY8+PnhysE8MjdenKL BLRJiNFm2Z9yjg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:09 2025 by rpki-client