This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json) Hash identifier: rfOWyTw+Qp8631qf4s9xp6Yoyq81PSZ3VbbEVrfyndM= Subject key identifier: 4E:74:75:6A:F1:50:E3:E8:AD:DD:7E:F0:1A:94:70:C9:C8:21:23:AE Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10 Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10 Certificate serial: 019AF2401AEF968FB2ED97DF8C66FC9329F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft Manifest number: 014B Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=) 2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: kMND5yygI5G67v+gko4vU6bDmmCSHK8oxRYh+2fTp7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1a:ef:96:8f:b2:ed:97:df:8c:66:fc:93:29:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10 Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=4e74756af150e3e8addd7ef01a9470c9c82123ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:03:18:24:d1:ef:ab:78:59:fd:41:ea:8b: 3f:16:ae:7b:70:c0:00:86:04:fa:44:73:08:14:4a: 8b:f0:34:5e:4a:f5:75:ff:3b:9f:f7:ea:7f:97:f3: b8:2c:fc:2b:ea:d8:fb:09:73:d1:ba:d2:03:90:16: 6c:ec:ae:f8:ac:44:d9:c2:27:33:85:cc:fc:07:57: 5a:48:b1:54:c0:dc:9d:85:60:11:59:9f:c2:0b:bd: b1:1e:34:41:1b:67:ec:90:78:68:d1:30:a7:a5:d8: 86:ea:56:74:77:da:cc:27:cd:0b:2a:c7:d0:90:a7: 8a:c5:84:8a:bc:e0:cc:e2:9b:7b:75:fb:5f:1f:bc: cc:51:ee:88:96:e8:32:c6:3e:5e:b5:23:88:1a:fa: a6:f5:7c:2c:2f:80:22:b1:29:e5:e5:1d:10:cf:7d: fb:74:ca:4a:1a:02:40:4a:fc:f7:63:d3:91:a1:20: 44:17:3c:1d:4a:98:f6:a2:f9:5a:52:9d:5e:2d:31: 68:2e:5a:f6:b4:12:9b:a7:da:38:75:29:c2:96:31: 1f:f3:c7:6c:96:91:20:cb:09:28:44:d0:c4:32:48: a7:ec:57:bb:21:cf:5e:6f:a0:25:b7:92:45:37:c3: c5:cf:8b:a6:0f:0b:8d:f1:43:3d:44:d6:30:46:fe: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:75:6A:F1:50:E3:E8:AD:DD:7E:F0:1A:94:70:C9:C8:21:23:AE X509v3 Authority Key Identifier: keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:78:54:92:0e:5c:55:1f:b8:a7:b0:99:f8:5f:c2:51:53:0f: 30:d0:c5:32:c6:50:72:05:b4:fe:05:21:3e:aa:b7:ba:d3:f8: 87:1d:bb:0f:f0:08:7e:54:29:90:3c:49:c0:78:f4:58:e7:43: 29:e1:70:31:da:9b:d3:36:0e:22:65:61:24:aa:3c:4c:20:23: 79:57:ab:c7:a9:27:eb:eb:3f:ad:d4:78:58:cc:61:8e:df:43: 1b:4d:77:69:d6:6d:42:4d:c7:09:66:61:32:84:1e:04:a9:6a: 87:2b:f3:4b:59:a6:54:1a:f0:d4:2c:06:e1:14:bc:a1:22:7b: 0f:e6:47:19:67:f4:d7:8a:27:96:36:69:d1:d6:42:46:91:1b: 67:0b:c4:6f:ac:01:9c:c7:a8:df:48:af:ed:bd:32:eb:ee:3c: 40:f8:9e:c5:10:04:4f:37:51:eb:3f:45:69:1e:7f:dd:b5:c0: 72:1a:b9:1b:0d:d2:d3:aa:07:b3:6e:87:80:e9:22:26:17:a1: ac:16:f7:03:f4:0d:36:fa:00:f4:39:dc:f8:1a:ad:09:e5:6f: b5:78:d9:20:c9:54:0a:8a:c3:f0:1c:81:f7:02:3d:84:11:e1: da:7b:fc:b0:e6:b8:02:eb:4c:74:cd:05:96:e1:d0:9c:f2:be: b3:8a:0b:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBrvlo+y7ZffjGb8kyn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOWZhZjkzNTI0YmI4MDc3NGZmY2U5MzQxZjQ5NWE4ZmIz MThmMTAwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD Eyg0ZTc0NzU2YWYxNTBlM2U4YWRkZDdlZjAxYTk0NzBjOWM4MjEyM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJADGCTR76t4Wf1B6os/Fq57cMAA hgT6RHMIFEqL8DReSvV1/zuf9+p/l/O4LPwr6tj7CXPRutIDkBZs7K74rETZwicz hcz8B1daSLFUwNydhWARWZ/CC72xHjRBG2fskHho0TCnpdiG6lZ0d9rMJ80LKsfQ kKeKxYSKvODM4pt7dftfH7zMUe6Ilugyxj5etSOIGvqm9XwsL4AisSnl5R0Qz337 dMpKGgJASvz3Y9ORoSBEFzwdSpj2ovlaUp1eLTFoLlr2tBKbp9o4dSnCljEf88ds lpEgywkoRNDEMkin7Fe7Ic9eb6Alt5JFN8PFz4umDwuN8UM9RNYwRv7yjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE50dWrxUOPord1+8BqUcMnIISOuMB8GA1UdIwQY MBaAFCCfr5NSS7gHdP/Ok0H0laj7MY8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUt ZDE2NGRkZTUzNTFmLzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUtZDE2NGRkZTUzNTFm LzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3hUkg5c VR+4p7CZ+F/CUVMPMNDFMsZQcgW0/gUhPqq3utP4hx27D/AIflQpkDxJwHj0WOdD KeFwMdqb0zYOImVhJKo8TCAjeVerx6kn6+s/rdR4WMxhjt9DG013adZtQk3HCWZh MoQeBKlqhyvzS1mmVBrw1CwG4RS8oSJ7D+ZHGWf014onljZp0dZCRpEbZwvEb6wB nMeo30iv7b0y6+48QPiexRAETzdR6z9FaR5/3bXAchq5Gw3S06oHs26HgOkiJheh rBb3A/QNNvoA9Dnc+BqtCeVvtXjZIMlUCorD8ByB9wI9hBHh2nv8sOa4AutMdM0F luHQnPK+s4oL4w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:01 2025 by rpki-client