This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json) Hash identifier: mQRPHxnwAWtJ3X8pp44dCvPk4pwZ6Oii7kcD+r7O4x0= Subject key identifier: 07:D5:86:8F:6F:FD:F2:C0:6A:5F:8C:70:7D:5A:47:7B:3E:53:DA:3B Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1 Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1 Certificate serial: 019AF12D649AE5188CF67FC1505FE2B04376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft Manifest number: 1516 Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=) 2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: Ug+CoTqQ/visAjz7IW8YKNaAZUaLxCtUAjK8TEc3t5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:64:9a:e5:18:8c:f6:7f:c1:50:5f:e2:b0:43:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1 Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=07d5868f6ffdf2c06a5f8c707d5a477b3e53da3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:25:3e:d1:a6:b7:5a:fb:5e:c7:0b:7c:b7: a0:39:7e:37:37:54:30:59:25:a8:7b:64:c4:6a:41: 73:7a:03:98:9c:59:25:ed:d8:5b:02:94:0b:1f:66: cb:d8:79:3a:aa:f4:9c:f5:56:e9:8f:0d:9d:22:cf: 4e:01:91:80:1f:b3:80:30:b8:af:2c:7a:7a:b1:9a: 8c:7d:5d:20:dc:20:b3:8e:ac:c3:a3:f6:37:41:57: 6d:5c:01:e2:a8:3f:f2:c8:a5:aa:c9:5c:c0:c3:93: a6:d7:32:0f:b6:c4:c7:38:d5:48:71:5c:7d:33:10: f9:1a:f1:a4:d5:b4:77:54:63:71:01:74:04:f6:9b: 5e:b2:20:87:47:2b:7c:8e:7e:b2:89:78:88:4f:54: 26:47:d8:1c:21:59:57:56:31:d3:43:27:bd:55:7a: 95:40:ce:00:fe:f4:86:01:7a:e3:0e:43:90:a7:d2: 30:02:51:68:62:ec:7a:bf:12:ee:d0:f3:d9:65:d2: d5:c7:ed:15:a6:36:ca:01:17:96:6e:e4:ce:03:c9: a1:5f:62:61:ad:98:65:3a:14:90:f1:d6:9e:a1:e4: ff:7a:37:46:44:16:fa:46:be:63:81:b6:b4:6a:bd: 57:31:44:f7:c8:55:ab:f6:f6:0c:da:bb:5c:e0:c9: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D5:86:8F:6F:FD:F2:C0:6A:5F:8C:70:7D:5A:47:7B:3E:53:DA:3B X509v3 Authority Key Identifier: keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b3:f1:58:ae:c5:00:f6:3c:78:5a:fa:45:d8:98:d0:9b:65: 08:18:8f:b0:72:c7:f2:83:69:ac:1a:e0:81:f4:cf:e6:0c:ef: fe:a8:b3:45:a7:cf:89:6e:2a:53:1f:ae:50:a8:e3:f1:d3:70: 52:36:e6:c6:da:d9:a0:04:f4:56:5a:01:24:81:e1:e8:7e:cb: 54:34:15:c7:ee:52:97:4d:31:da:f4:48:e0:9b:85:af:b9:bf: 17:29:f9:64:b1:6e:41:91:04:2f:4a:8e:21:7e:68:0a:38:a6: 7a:fe:54:d7:75:9c:ac:3b:da:9d:1a:25:5c:d7:ca:95:28:d2: 5e:26:66:ff:41:12:c9:ab:fb:60:64:3d:ef:8a:3b:7f:1c:a4: fd:30:27:72:6b:57:58:2c:01:8d:0a:6e:8c:97:c0:9e:b1:8d: 7e:a6:60:f8:db:22:ac:fa:cd:25:fc:6f:6b:92:42:53:f1:7a: 69:96:d5:72:86:ec:b3:e4:0e:d8:b5:89:53:ab:66:9d:d3:11: b2:8e:3a:56:60:f6:d5:23:a9:6b:bd:52:63:08:32:58:d6:32: 18:5f:56:e1:c4:aa:1f:16:4c:8c:d7:e6:8f:24:ba:2c:d5:9e: fd:d2:90:1f:94:90:d9:44:fd:82:37:f8:e0:c4:a8:31:a4:d1: bf:bc:f3:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWSa5RiM9n/BUF/isEN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjliZDhiYjQ5YTgwOTk2YjQ2MGY1MDI4ZWQ1MmE4ZTA1 N2MwYjEwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD EygwN2Q1ODY4ZjZmZmRmMmMwNmE1ZjhjNzA3ZDVhNDc3YjNlNTNkYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl68lPtGmt1r7XscLfLegOX43N1Qw WSWoe2TEakFzegOYnFkl7dhbApQLH2bL2Hk6qvSc9Vbpjw2dIs9OAZGAH7OAMLiv LHp6sZqMfV0g3CCzjqzDo/Y3QVdtXAHiqD/yyKWqyVzAw5Om1zIPtsTHONVIcVx9 MxD5GvGk1bR3VGNxAXQE9ptesiCHRyt8jn6yiXiIT1QmR9gcIVlXVjHTQye9VXqV QM4A/vSGAXrjDkOQp9IwAlFoYux6vxLu0PPZZdLVx+0VpjbKAReWbuTOA8mhX2Jh rZhlOhSQ8daeoeT/ejdGRBb6Rr5jgba0ar1XMUT3yFWr9vYM2rtc4Ml9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfVho9v/fLAal+McH1aR3s+U9o7MB8GA1UdIwQY MBaAFP4pvYu0moCZa0YPUCjtUqjgV8CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWIt MDZiOGRmZTQ5OGJkLzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWItMDZiOGRmZTQ5OGJk LzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobPxWK7F APY8eFr6RdiY0JtlCBiPsHLH8oNprBrggfTP5gzv/qizRafPiW4qUx+uUKjj8dNw UjbmxtrZoAT0VloBJIHh6H7LVDQVx+5Sl00x2vRI4JuFr7m/Fyn5ZLFuQZEEL0qO IX5oCjimev5U13WcrDvanRolXNfKlSjSXiZm/0ESyav7YGQ974o7fxyk/TAncmtX WCwBjQpujJfAnrGNfqZg+NsirPrNJfxva5JCU/F6aZbVcobss+QO2LWJU6tmndMR so46VmD21SOpa71SYwgyWNYyGF9W4cSqHxZMjNfmjyS6LNWe/dKQH5SQ2UT9gjf4 4MSoMaTRv7zz6g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:59 2025 by rpki-client