This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json) Hash identifier: BINiRPtLDyIc22PjaNjc3dHgwdlQoa5ArE6tGoFoZdw= Subject key identifier: 00:F6:3C:BB:C4:70:10:2F:58:7F:5A:33:05:40:11:49:9F:34:E1:5E Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Certificate serial: 019AF4659A9127B34B442F516D3EAD5F19C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 16:01:30 +0000 Manifest this update: Sat 06 Dec 2025 16:01:30 +0000 Manifest next update: Sun 07 Dec 2025 16:01:30 +0000 Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=) 2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=) 3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: eXe5liO/XkrdhV+Ruqj8eCClhQtcjjBXsVy7DIbNSVc=) 4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9a:91:27:b3:4b:44:2f:51:6d:3e:ad:5f:19:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Validity Not Before: Dec 6 16:01:30 2025 GMT Not After : Dec 7 16:01:30 2025 GMT Subject: CN=00f63cbbc470102f587f5a33054011499f34e15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:96:45:c3:01:a0:7b:5f:a8:5f:1f:d7:15: 99:2c:07:25:f5:d1:91:4a:6a:f5:45:01:15:15:4d: ff:83:a2:42:e2:b9:fd:15:4d:29:0d:92:e2:bf:c7: 04:dd:e4:e1:b2:4b:bb:1a:ee:e2:ec:c2:eb:53:2e: 01:42:bd:55:f4:f2:60:d0:ec:56:8c:fe:26:f0:4c: 10:03:00:dc:75:b5:d2:89:d6:6d:57:cd:b3:7e:bb: 07:33:33:6c:6e:5f:54:57:a8:41:4e:69:cc:f2:cb: 81:33:c0:b7:30:7c:a1:37:aa:69:14:c6:c4:2d:7e: e6:3c:7c:20:ae:4d:aa:36:25:79:22:a2:97:a3:f9: d6:cf:b1:24:85:da:9c:80:33:2a:40:aa:53:56:c8: 88:10:0b:34:f3:26:ad:7e:bd:b3:77:15:72:ab:de: e2:b0:9c:88:07:a2:bf:71:ed:c2:7c:21:89:e2:cd: 2d:07:6d:ce:e8:0a:1d:d1:53:db:7f:a8:d2:a2:bf: ae:72:24:16:38:69:cb:33:0b:22:aa:92:b7:48:5a: 09:94:dd:1c:f9:f6:97:5b:93:8a:87:ff:4a:7b:68: 17:26:2d:90:44:f2:fb:13:6c:82:34:29:c0:52:02: 26:06:f5:e1:49:c9:fe:d3:7f:61:ad:ec:19:a5:99: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F6:3C:BB:C4:70:10:2F:58:7F:5A:33:05:40:11:49:9F:34:E1:5E X509v3 Authority Key Identifier: keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:99:81:c1:16:8e:4d:56:22:06:47:f3:f5:ab:f4:78:b1:57: aa:64:8d:34:d6:af:93:45:3e:2e:5d:f5:6a:75:da:57:ea:25: e0:76:17:2c:72:f9:a3:ad:be:f1:f3:b7:ce:4c:95:3c:0c:f2: 86:75:eb:cf:f5:2f:7d:42:22:f5:8e:a3:29:76:d4:ba:51:ac: 44:f6:6d:a4:3b:71:bb:b8:c6:74:5e:a1:83:cc:28:95:18:a5: dc:36:62:9f:30:07:bb:54:1e:13:2f:dd:f3:c2:bd:a7:bb:4f: 0a:a9:aa:4f:02:19:4a:ff:b7:3b:bc:2f:b8:00:60:ad:29:a0: fd:01:ea:9e:42:56:82:c0:c7:85:8b:80:b1:7e:69:23:8a:ee: ee:b5:44:5e:1d:a9:a4:4e:b7:d2:79:2d:b4:9f:cd:73:35:1c: 98:0d:71:89:d8:eb:58:42:99:87:f2:03:ef:42:ef:0c:44:6b: 5d:44:1e:41:7f:36:43:6f:c4:82:21:b2:b9:1a:dd:bc:fe:7f: ea:11:c8:27:7b:8b:ad:63:9c:7e:2f:9f:d4:9f:d7:a3:92:fa: 74:b0:c8:cf:95:4d:93:70:97:fd:6e:dd:f5:06:8c:d6:1a:62: ea:77:32:78:ec:52:4f:e6:34:9f:42:bb:e9:27:5c:2a:3a:3a: 17:d7:da:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZqRJ7NLRC9RbT6tXxnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl ZDRiYjAwHhcNMjUxMjA2MTYwMTMwWhcNMjUxMjA3MTYwMTMwWjAzMTEwLwYDVQQD EygwMGY2M2NiYmM0NzAxMDJmNTg3ZjVhMzMwNTQwMTE0OTlmMzRlMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEyWRcMBoHtfqF8f1xWZLAcl9dGR Smr1RQEVFU3/g6JC4rn9FU0pDZLiv8cE3eThsku7Gu7i7MLrUy4BQr1V9PJg0OxW jP4m8EwQAwDcdbXSidZtV82zfrsHMzNsbl9UV6hBTmnM8suBM8C3MHyhN6ppFMbE LX7mPHwgrk2qNiV5IqKXo/nWz7EkhdqcgDMqQKpTVsiIEAs08yatfr2zdxVyq97i sJyIB6K/ce3CfCGJ4s0tB23O6Aod0VPbf6jSor+uciQWOGnLMwsiqpK3SFoJlN0c +faXW5OKh/9Ke2gXJi2QRPL7E2yCNCnAUgImBvXhScn+039hrewZpZkehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD2PLvEcBAvWH9aMwVAEUmfNOFeMB8GA1UdIwQY MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt ODJlYmEwY2IzYjBkLzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpmBwRaO TVYiBkfz9av0eLFXqmSNNNavk0U+Ll31anXaV+ol4HYXLHL5o62+8fO3zkyVPAzy hnXrz/UvfUIi9Y6jKXbUulGsRPZtpDtxu7jGdF6hg8wolRil3DZinzAHu1QeEy/d 88K9p7tPCqmqTwIZSv+3O7wvuABgrSmg/QHqnkJWgsDHhYuAsX5pI4ru7rVEXh2p pE630nkttJ/NczUcmA1xidjrWEKZh/ID70LvDERrXUQeQX82Q2/EgiGyuRrdvP5/ 6hHIJ3uLrWOcfi+f1J/Xo5L6dLDIz5VNk3CX/W7d9QaM1hpi6ncyeOxST+Y0n0K7 6SdcKjo6F9faZA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:26:42 2025 by rpki-client