This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft File: ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json) Hash identifier: KoQW31ySjjLnUgC6rRsb6Yvetgpbijs4OFfhwVSAqjo= Subject key identifier: 01:1A:D6:F2:8C:FE:B4:92:64:E4:74:BC:A8:A8:13:B3:1E:67:83:0F Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be Certificate serial: 019AF12D9BFC828BD37F83A3E149CA3EB759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft Manifest number: 07D3 Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: anWd7k0AKYJsm47I9osb1PoSyopdWP0le5ceFKjjx6I=) 2: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (hash: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9b:fc:82:8b:d3:7f:83:a3:e1:49:ca:3e:b7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=011ad6f28cfeb49264e474bca8a813b31e67830f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:dc:a5:eb:76:34:93:57:8a:be:48:66:40: 67:29:be:e0:ac:01:e3:1b:a1:a8:b7:8d:6a:08:98: 37:5c:62:07:2f:6b:9d:9d:64:ff:ca:e9:2d:0f:0d: de:80:c6:06:02:dd:6c:2e:51:80:7d:e7:63:16:e8: b7:a2:81:01:db:09:a3:f9:18:90:44:d2:df:98:62: b3:6a:9e:02:ef:d6:39:ae:be:02:c1:8a:7f:3c:e6: f0:75:c0:4f:e7:d1:3d:6a:c7:54:95:67:9f:a7:37: 45:1b:f0:05:a4:5a:16:6f:51:52:c4:c2:67:fe:1a: d4:ed:de:d7:70:9c:3c:18:2c:85:76:5c:49:d4:73: f0:b0:ea:6e:60:ac:2e:d0:e5:2e:47:7a:77:e1:5d: 5f:e7:4a:03:d4:26:30:a5:e8:2f:e8:e4:bc:9d:b4: e9:f7:f1:d0:1c:7c:af:ed:20:38:ac:67:a8:48:0f: 9c:2f:13:52:da:05:25:c7:13:10:93:78:1a:91:54: be:1e:b7:3e:ab:39:e2:c3:b0:37:4b:29:5c:4b:43: 30:ae:68:5a:7a:2e:ca:b9:a9:12:40:28:87:9b:60: f4:b2:a8:85:31:80:63:ea:34:c9:9a:ec:d0:d1:a4: f9:21:ea:3a:db:86:67:d8:5b:d3:ad:a9:de:64:27: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1A:D6:F2:8C:FE:B4:92:64:E4:74:BC:A8:A8:13:B3:1E:67:83:0F X509v3 Authority Key Identifier: keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d9:ea:c6:84:24:a6:85:32:c3:3a:8b:d3:36:9d:b6:8e:62: 8a:67:2a:d0:dc:97:06:fd:3b:98:11:a5:11:5a:1d:9b:f3:33: f5:3d:d5:c0:a6:cf:0b:dd:9a:4e:44:d4:e1:79:df:f0:ea:a3: fb:9f:8e:3d:f6:78:96:d7:65:13:3c:bc:df:d2:9b:29:5b:e6: 56:fb:ea:0a:9d:14:6c:d1:8f:9c:38:69:60:03:eb:31:e3:43: b7:c6:d1:00:80:05:5b:4d:22:b8:97:a9:24:17:c8:a7:4d:78: a2:36:46:a4:b6:0e:8f:91:3d:69:09:1d:7d:8a:d8:ae:d8:9a: ae:af:21:27:e7:ce:71:dc:b4:c8:69:23:4e:9b:18:8a:a8:fa: ae:a5:87:07:29:09:5e:75:ee:7d:ba:a6:6b:11:34:a1:91:11: 0b:60:d6:1c:ed:59:9a:1b:c4:fa:34:d4:f3:4f:56:07:bb:23: 1d:5e:4f:a7:1f:d7:30:93:93:61:bf:91:bf:24:dd:cf:3e:d8: 6e:84:55:19:69:a9:72:99:fe:1f:a3:76:c1:db:f2:1f:1b:cf: ed:c6:3d:47:b9:9c:bf:91:92:84:bc:0b:9a:68:48:b4:df:a9: 56:bd:14:9f:79:e8:47:cc:2a:84:88:e2:84:18:10:58:2e:12: 1c:dc:48:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZv8govTf4Oj4UnKPrdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzRhN2EzZmViYWZiYzg0MDBhYmUxZGMxMmYyMmM2YzFl OGE1YmUwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EygwMTFhZDZmMjhjZmViNDkyNjRlNDc0YmNhOGE4MTNiMzFlNjc4MzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SPcpet2NJNXir5IZkBnKb7grAHj G6Got41qCJg3XGIHL2udnWT/yuktDw3egMYGAt1sLlGAfedjFui3ooEB2wmj+RiQ RNLfmGKzap4C79Y5rr4CwYp/PObwdcBP59E9asdUlWefpzdFG/AFpFoWb1FSxMJn /hrU7d7XcJw8GCyFdlxJ1HPwsOpuYKwu0OUuR3p34V1f50oD1CYwpegv6OS8nbTp 9/HQHHyv7SA4rGeoSA+cLxNS2gUlxxMQk3gakVS+Hrc+qzniw7A3SylcS0Mwrmha ei7KuakSQCiHm2D0sqiFMYBj6jTJmuzQ0aT5Ieo624Zn2FvTraneZCd45wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEa1vKM/rSSZOR0vKioE7MeZ4MPMB8GA1UdIwQY MBaAFIo0p6P+uvvIQAq+HcEvIsbB6KW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMt YjYyOWJiNDc2MmYwLzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMtYjYyOWJiNDc2MmYw LzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdnqxoQk poUywzqL0zadto5iimcq0NyXBv07mBGlEVodm/Mz9T3VwKbPC92aTkTU4Xnf8Oqj +5+OPfZ4ltdlEzy839KbKVvmVvvqCp0UbNGPnDhpYAPrMeNDt8bRAIAFW00iuJep JBfIp014ojZGpLYOj5E9aQkdfYrYrtiarq8hJ+fOcdy0yGkjTpsYiqj6rqWHBykJ XnXufbqmaxE0oZERC2DWHO1ZmhvE+jTU809WB7sjHV5Ppx/XMJOTYb+RvyTdzz7Y boRVGWmpcpn+H6N2wdvyHxvP7cY9R7mcv5GShLwLmmhItN+pVr0Un3noR8wqhIji hBgQWC4SHNxISQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:13 2025 by rpki-client