This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json) Hash identifier: vwsG+ZNqmnKGPa4cA21lsonzgB9nIG/ka6J0V9UxgSA= Subject key identifier: B6:C9:C9:41:C2:8F:47:DF:D6:0E:BB:6B:5D:C2:EF:5F:54:DD:4A:0D Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 Certificate issuer: /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3 Certificate serial: 019AF1D198BA3EFDA08D7101C33B5E81468C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft Manifest number: 06B0 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=) 2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: /Mr/sBEPT6xX0Y7GuLyY3nNWjJPy5WnQ1PfoEe4dlA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:98:ba:3e:fd:a0:8d:71:01:c3:3b:5e:81:46:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=b6c9c941c28f47dfd60ebb6b5dc2ef5f54dd4a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:fa:bd:ad:1d:4f:bf:4d:99:b8:d9:d2:d5: c9:49:e7:18:01:61:69:ae:ac:00:df:bb:6d:66:02: e7:d8:1f:5a:dc:48:56:94:51:a0:9b:4a:62:64:8f: 1e:ff:72:ed:b4:97:37:fa:7f:4b:53:b6:b0:05:71: a5:1e:8e:d9:72:9d:58:8a:3d:cf:f3:88:ed:7e:2a: 0a:a1:30:9f:4c:4e:17:e0:e2:56:76:1f:0a:60:90: f9:bc:9b:c9:12:09:65:77:eb:56:d3:d8:b3:59:e8: 07:c8:ff:82:5e:0e:2e:24:6f:97:ad:f2:55:9f:68: 27:43:6e:94:65:a1:80:5c:d4:8e:23:96:c5:ba:f8: 1e:4d:8f:97:90:e7:fa:b5:6d:cf:a5:af:b8:71:4b: 60:07:2b:5b:a2:55:cf:0a:57:61:5e:94:22:cf:ab: 0a:62:af:df:d3:cd:df:83:fd:48:82:fe:ee:0d:ed: c1:fb:e9:39:eb:4f:e5:96:40:aa:5e:37:93:94:bd: 5f:82:0b:e0:22:48:a1:fc:49:2d:77:c2:6d:a3:f0: 38:a7:1a:06:2e:0e:ba:16:5f:b8:aa:6a:c1:ab:58: 6c:00:b1:c7:bc:cf:05:e8:d0:84:c0:b0:cb:40:8f: 27:12:19:32:d4:aa:1e:16:b4:51:8e:63:65:dd:2c: 63:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C9:C9:41:C2:8F:47:DF:D6:0E:BB:6B:5D:C2:EF:5F:54:DD:4A:0D X509v3 Authority Key Identifier: keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d5:31:44:c7:15:f7:20:e2:b3:18:fa:44:fd:f4:02:8f:2b: 85:06:a8:21:45:ef:5b:65:8e:38:e9:8b:ae:13:f3:70:c8:31: 1a:73:39:cf:02:2e:6f:fc:4e:e5:80:7e:a0:56:f1:e5:de:30: ad:26:f7:4b:32:72:02:fa:f1:79:8e:29:5b:fc:01:f0:60:6d: 0b:a5:28:60:ac:f0:4c:12:c1:22:3c:c5:57:d9:c6:cb:39:d3: 52:17:61:3e:00:81:9f:32:df:25:df:cc:c7:99:9c:04:99:2b: 5a:9a:00:02:db:89:e9:3a:83:b7:31:3b:a4:62:53:73:96:9b: 79:27:2d:a9:a7:9f:ca:8d:b3:6f:00:15:03:5d:f0:82:5d:dc: df:fa:ff:93:3e:c8:39:b4:38:c2:d2:88:f7:17:ee:c8:4f:1d: 92:17:65:b6:91:d5:79:c3:fe:89:01:82:05:97:60:07:7c:89: 74:fe:b6:63:31:d2:f4:34:9e:e3:7a:93:da:62:36:bb:1e:98: 60:e1:f5:a4:95:87:5c:13:9e:c3:29:ff:23:69:20:1c:6f:99: fd:86:73:54:2d:79:f5:5d:59:e2:88:a3:da:49:67:b1:e4:c0: 7a:b3:94:03:d3:30:ad:91:6e:f4:38:da:66:4f:7e:0a:56:2d: 54:62:fe:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zi6Pv2gjXEBwztegUaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMWVkZjUyNmIxY2E1ZmYwZTY4MmZmNDhhZWNlMTIxZDI3 YmMwYzMwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EyhiNmM5Yzk0MWMyOGY0N2RmZDYwZWJiNmI1ZGMyZWY1ZjU0ZGQ0YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5X6va0dT79NmbjZ0tXJSecYAWFp rqwA37ttZgLn2B9a3EhWlFGgm0piZI8e/3LttJc3+n9LU7awBXGlHo7Zcp1Yij3P 84jtfioKoTCfTE4X4OJWdh8KYJD5vJvJEglld+tW09izWegHyP+CXg4uJG+XrfJV n2gnQ26UZaGAXNSOI5bFuvgeTY+XkOf6tW3Ppa+4cUtgBytbolXPCldhXpQiz6sK Yq/f083fg/1Igv7uDe3B++k560/llkCqXjeTlL1fggvgIkih/Ektd8Jto/A4pxoG Lg66Fl+4qmrBq1hsALHHvM8F6NCEwLDLQI8nEhky1KoeFrRRjmNl3Sxj3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbJyUHCj0ff1g67a13C719U3UoNMB8GA1UdIwQY MBaAFIse31JrHKX/Dmgv9Irs4SHSe8DDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYt MjUxMTY4ZWRkM2U0LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYtMjUxMTY4ZWRkM2U0 LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltUxRMcV 9yDisxj6RP30Ao8rhQaoIUXvW2WOOOmLrhPzcMgxGnM5zwIub/xO5YB+oFbx5d4w rSb3SzJyAvrxeY4pW/wB8GBtC6UoYKzwTBLBIjzFV9nGyznTUhdhPgCBnzLfJd/M x5mcBJkrWpoAAtuJ6TqDtzE7pGJTc5abeSctqaefyo2zbwAVA13wgl3c3/r/kz7I ObQ4wtKI9xfuyE8dkhdltpHVecP+iQGCBZdgB3yJdP62YzHS9DSe43qT2mI2ux6Y YOH1pJWHXBOewyn/I2kgHG+Z/YZzVC159V1Z4oij2klnseTAerOUA9MwrZFu9Dja Zk9+ClYtVGL+mw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:01 2025 by rpki-client