This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json) Hash identifier: axao5fvtwekNBg51IRQjo9V2St2aOZh9W54Xtm6ZrQE= Subject key identifier: DC:3B:5E:09:E2:88:4A:11:D8:04:5D:5C:12:FD:D8:EC:AE:88:B7:47 Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9 Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9 Certificate serial: 019AF27730DFCE9C4401D013E9068FEE7AA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=) 2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: Z2mDPNDQNFHjNxzH8RKtSFYJZGVuoArm/O5sqTmHYDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:30:df:ce:9c:44:01:d0:13:e9:06:8f:ee:7a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=dc3b5e09e2884a11d8045d5c12fdd8ecae88b747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:87:99:d1:bb:e1:60:e5:36:f3:28:3d:19:90: 9d:b3:9d:18:37:65:a1:01:44:13:a4:df:1d:7d:4c: 31:98:47:19:09:81:6f:f2:dd:e9:4b:c9:bd:c4:5d: 27:6f:d3:d3:64:db:5c:ac:00:93:52:24:9e:ce:69: e3:9f:78:95:0b:63:b7:9a:23:00:01:0b:7c:a0:25: c4:eb:5e:0a:17:37:97:a0:08:9a:fd:a9:94:0e:65: 42:5d:fa:e4:46:8b:dd:cc:d6:2b:85:a0:92:a5:38: b1:06:fa:87:e3:48:ff:5d:49:9a:a0:f2:42:0f:60: b5:70:10:04:da:db:b4:a9:7d:3b:5e:40:61:f1:ab: c8:47:ab:38:e4:de:54:66:4c:ee:3c:8e:d3:b8:30: d5:9a:69:19:13:18:1b:39:60:45:67:3f:1c:83:e6: 03:7a:af:04:4d:9c:7a:f0:75:f4:72:f8:ab:d1:a8: 53:08:9b:0d:e3:bc:c1:22:ca:66:62:ea:2d:85:02: d4:b9:64:3f:f7:4a:1e:fb:fa:2f:af:9d:8d:5c:29: a2:15:71:a1:eb:e9:79:10:ee:b9:12:bd:1a:6a:19: 21:24:e3:4a:32:c6:b4:c9:c5:03:98:df:c0:91:0b: de:19:97:0a:4b:a5:94:cc:8f:20:f0:3d:0d:39:52: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3B:5E:09:E2:88:4A:11:D8:04:5D:5C:12:FD:D8:EC:AE:88:B7:47 X509v3 Authority Key Identifier: keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bc:3e:4f:17:8b:cf:9e:d7:92:2d:23:77:88:53:9e:57:d8: 5a:fc:ed:29:74:9e:b6:cc:cc:1d:cc:de:90:ec:aa:72:0d:00: bb:69:70:d3:de:57:d1:f0:0b:35:a8:05:6f:53:b2:dd:1c:38: 58:53:5d:8c:0e:5c:a1:f7:66:34:36:95:df:25:e2:84:c6:e1: 89:8c:19:be:e1:a9:fb:e0:ce:d5:07:5d:1b:6a:9e:8a:87:4d: f6:b8:d9:8b:e1:49:ff:bf:d6:a5:d5:95:01:83:74:6f:cb:e3: 91:e8:69:1c:08:52:ba:f4:62:78:39:6b:88:43:49:e8:5a:d4: 6f:2c:ba:10:b0:4e:9f:77:d5:b1:f9:84:d5:7c:a5:67:6f:59: b3:83:5c:25:17:cd:a3:f1:eb:12:b9:b3:0e:86:3d:ae:a3:d1: d6:3e:37:14:2a:a1:be:e8:27:a4:08:83:58:dc:f9:69:11:5a: b5:12:21:fb:94:76:5a:b5:e5:c5:74:3d:67:f4:9c:12:a5:f7: 01:6f:1d:7e:07:ef:e1:b0:05:70:17:28:e5:1a:c7:45:95:9e: fe:63:28:5b:ae:8b:de:7d:c0:2c:4a:e6:00:67:43:74:01:5d: 81:b5:99:cf:70:ef:29:3d:ed:46:f2:c9:9b:e3:31:a2:b2:e6: a1:6e:dc:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzDfzpxEAdAT6QaP7nqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjVmZjA3NjcwNDUyM2ZmNmJlODgyYjg3ZWVmYTgwN2Ix ODhhYTkwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EyhkYzNiNWUwOWUyODg0YTExZDgwNDVkNWMxMmZkZDhlY2FlODhiNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IeZ0bvhYOU28yg9GZCds50YN2Wh AUQTpN8dfUwxmEcZCYFv8t3pS8m9xF0nb9PTZNtcrACTUiSezmnjn3iVC2O3miMA AQt8oCXE614KFzeXoAia/amUDmVCXfrkRovdzNYrhaCSpTixBvqH40j/XUmaoPJC D2C1cBAE2tu0qX07XkBh8avIR6s45N5UZkzuPI7TuDDVmmkZExgbOWBFZz8cg+YD eq8ETZx68HX0cvir0ahTCJsN47zBIspmYuothQLUuWQ/90oe+/ovr52NXCmiFXGh 6+l5EO65Er0aahkhJONKMsa0ycUDmN/AkQveGZcKS6WUzI8g8D0NOVIkVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNw7XgniiEoR2ARdXBL92OyuiLdHMB8GA1UdIwQY MBaAFCD1/wdnBFI/9r6IK4fu+oB7GIqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDct ZjZhN2I0OWY5ODFhLzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDctZjZhN2I0OWY5ODFh LzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7w+TxeL z57Xki0jd4hTnlfYWvztKXSetszMHczekOyqcg0Au2lw095X0fALNagFb1Oy3Rw4 WFNdjA5cofdmNDaV3yXihMbhiYwZvuGp++DO1QddG2qeiodN9rjZi+FJ/7/WpdWV AYN0b8vjkehpHAhSuvRieDlriENJ6FrUbyy6ELBOn3fVsfmE1XylZ29Zs4NcJRfN o/HrErmzDoY9rqPR1j43FCqhvugnpAiDWNz5aRFatRIh+5R2WrXlxXQ9Z/ScEqX3 AW8dfgfv4bAFcBco5RrHRZWe/mMoW66L3n3ALErmAGdDdAFdgbWZz3DvKT3tRvLJ m+MxorLmoW7cAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:23 2025 by rpki-client