This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json) Hash identifier: lrmdVqGHevPK3oVSyW5ZlTWbA8yS7Yz8IvbAQzAhAoE= Subject key identifier: 46:06:CD:2D:D6:52:CA:EB:DE:52:47:D9:7A:47:E9:80:F3:10:3F:2D Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Certificate serial: 019B337B379C366E6E64AE03E509657B39B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft Manifest number: 11B9 Signing time: Thu 18 Dec 2025 22:01:11 +0000 Manifest this update: Thu 18 Dec 2025 22:01:11 +0000 Manifest next update: Fri 19 Dec 2025 22:01:11 +0000 Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=) 2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: PqPig3uCeqzUZvolhflyj11bAGX53n0keiInbMVXkD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:37:9c:36:6e:6e:64:ae:03:e5:09:65:7b:39:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Validity Not Before: Dec 18 22:01:11 2025 GMT Not After : Dec 19 22:01:11 2025 GMT Subject: CN=4606cd2dd652caebde5247d97a47e980f3103f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:70:24:c7:73:bf:24:d1:61:c3:11:e9:05: 44:ee:5a:c8:64:83:4b:65:33:61:6c:2b:ba:9a:a3: 8f:d2:38:b4:cb:30:7f:f6:56:c3:1b:a0:b6:8d:87: da:0b:36:ef:cd:86:ca:30:7f:42:3a:ab:c2:ca:70: 33:cd:de:b1:6c:7b:0c:32:63:c4:42:e9:83:af:30: 91:65:04:c2:23:23:ac:fc:b2:87:c2:a8:ca:c0:53: 01:50:4c:97:fc:66:b1:72:13:2e:1a:e0:28:fc:a0: 6f:c9:91:bc:5b:e4:e2:42:a6:7c:d5:49:b4:0e:b1: 6a:14:dc:af:de:8c:27:86:1d:b9:e5:19:68:cf:a1: f7:0c:aa:75:82:67:33:43:8e:81:2c:6c:02:87:15: a9:b4:ec:45:cd:56:50:2c:20:8d:63:a0:1c:0a:db: 0e:ac:7b:2d:c8:59:99:01:3f:61:97:79:88:3f:ca: 4e:51:ab:fa:05:57:76:14:01:a0:91:3f:cd:63:e5: 41:78:f1:02:fd:ed:b2:29:61:6a:26:11:0e:91:05: b5:48:ce:51:23:1a:10:b9:79:68:3e:ec:15:41:b9: 31:b6:60:14:a9:62:8b:52:35:9d:bb:55:dd:a5:c0: 08:bd:fd:28:00:46:0f:8b:35:ca:99:1f:8a:26:61: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:06:CD:2D:D6:52:CA:EB:DE:52:47:D9:7A:47:E9:80:F3:10:3F:2D X509v3 Authority Key Identifier: keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f5:e8:4d:84:53:c2:ab:f3:33:3c:fe:33:9e:28:98:4e:6b: f0:5e:02:ba:f4:6c:90:3f:69:53:b8:3a:3d:ff:74:e9:4e:32: 28:2c:5a:64:a8:61:6b:f0:39:55:c4:cb:68:12:71:d4:39:b0: a3:de:e5:fc:39:b7:1f:ec:e4:b9:bd:bc:fa:08:77:a8:5f:bf: 30:5c:45:06:1e:41:76:80:61:c0:73:9e:e6:2c:77:e8:77:36: a6:a7:c3:6a:a9:37:6b:6d:cc:cb:a8:b2:2e:24:f1:7d:ff:fb: 61:0e:38:5f:41:8a:b4:e1:82:0a:1a:b5:9c:ba:94:98:dd:68: 14:72:b6:02:36:0b:34:4e:dd:12:06:46:ce:3c:bb:55:9f:59: 2b:ef:9a:8e:47:9c:f1:bf:e4:d4:01:43:ea:99:39:fc:e0:7d: 28:4d:5e:d9:f1:43:65:d8:4a:94:bb:03:ba:52:99:52:7e:00: 4f:57:a9:9b:0e:38:93:3d:aa:6a:22:85:f1:b7:49:1e:62:65: f3:12:c9:fd:0d:fd:bf:9e:53:8d:af:bc:0c:45:15:c0:58:c9: 6b:dc:13:7c:6d:2b:7e:1b:c9:23:5e:ff:da:b9:30:cd:ca:aa: 26:59:f6:71:03:8f:2c:a8:bd:3f:a3:26:dd:4c:30:26:9d:7f: 14:3c:79:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszezecNm5uZK4D5Qllezm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzI0ZTRjZTc2OTM5YjRkYjU3ZDVkMzUwYzJhZDAwN2I1 OTgwZTEwHhcNMjUxMjE4MjIwMTExWhcNMjUxMjE5MjIwMTExWjAzMTEwLwYDVQQD Eyg0NjA2Y2QyZGQ2NTJjYWViZGU1MjQ3ZDk3YTQ3ZTk4MGYzMTAzZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLFwJMdzvyTRYcMR6QVE7lrIZINL ZTNhbCu6mqOP0ji0yzB/9lbDG6C2jYfaCzbvzYbKMH9COqvCynAzzd6xbHsMMmPE QumDrzCRZQTCIyOs/LKHwqjKwFMBUEyX/GaxchMuGuAo/KBvyZG8W+TiQqZ81Um0 DrFqFNyv3ownhh255Rloz6H3DKp1gmczQ46BLGwChxWptOxFzVZQLCCNY6AcCtsO rHstyFmZAT9hl3mIP8pOUav6BVd2FAGgkT/NY+VBePEC/e2yKWFqJhEOkQW1SM5R IxoQuXloPuwVQbkxtmAUqWKLUjWdu1XdpcAIvf0oAEYPizXKmR+KJmFPJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYGzS3WUsrr3lJH2XpH6YDzED8tMB8GA1UdIwQY MBaAFIoyTkznaTm021fV01DCrQB7WYDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzIt NjJiYzhmYzc1NWRkLzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzItNjJiYzhmYzc1NWRk LzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/XoTYRT wqvzMzz+M54omE5r8F4CuvRskD9pU7g6Pf906U4yKCxaZKhha/A5VcTLaBJx1Dmw o97l/Dm3H+zkub28+gh3qF+/MFxFBh5BdoBhwHOe5ix36Hc2pqfDaqk3a23My6iy LiTxff/7YQ44X0GKtOGCChq1nLqUmN1oFHK2AjYLNE7dEgZGzjy7VZ9ZK++ajkec 8b/k1AFD6pk5/OB9KE1e2fFDZdhKlLsDulKZUn4AT1epmw44kz2qaiKF8bdJHmJl 8xLJ/Q39v55Tja+8DEUVwFjJa9wTfG0rfhvJI17/2rkwzcqqJln2cQOPLKi9P6Mm 3UwwJp1/FDx5ow== -----END CERTIFICATE-----Generated at Fri Dec 19 07:33:33 2025 by rpki-client