This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json) Hash identifier: 7EXdpb9+RThcceKm9hwVJZgZCtuOjbLpPvh/wXal4eI= Subject key identifier: 69:1E:BC:B2:CF:27:BA:FD:25:D7:5B:1E:49:B9:1E:F7:94:BA:5B:70 Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32 Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932 Certificate serial: 019B2C2F0BCE1B92DB6138E664C5F24E7E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft Manifest number: 175A Signing time: Wed 17 Dec 2025 12:00:39 +0000 Manifest this update: Wed 17 Dec 2025 12:00:39 +0000 Manifest next update: Thu 18 Dec 2025 12:00:39 +0000 Files and hashes: 1: 2ttxDr4pGnjxuFL3h06WTGhjE60.roa (hash: gb8hbvNo/pcY/swamzsbRwiOgi4eH7YRN51AtOhEfsU=) 2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: /Y6/QhVeBA76oo5oyxIV35QzdUp50RzEcjwDrW7FkKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:0b:ce:1b:92:db:61:38:e6:64:c5:f2:4e:7e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932 Validity Not Before: Dec 17 12:00:39 2025 GMT Not After : Dec 18 12:00:39 2025 GMT Subject: CN=691ebcb2cf27bafd25d75b1e49b91ef794ba5b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:99:d5:d5:35:02:fe:14:87:a3:ea:1f:1e: 58:ee:4c:b7:e2:59:f6:85:f3:87:f3:75:87:81:79: 44:d3:fd:a1:50:28:45:7d:f3:76:5f:01:6b:12:3e: 32:f4:23:75:f7:c4:8e:9a:44:1f:bb:c9:24:24:76: f2:e9:db:c7:a3:53:0f:d0:8f:74:cc:c1:0a:6b:be: 77:18:a4:55:d2:ba:ae:cb:10:7a:a6:39:82:7d:45: 41:44:d9:25:87:e9:c4:9a:8e:58:35:90:b0:41:df: d2:ef:c4:6f:51:0a:32:5a:fe:b0:ca:b0:93:6e:c3: e1:21:47:ae:fa:df:43:32:8a:6d:56:8f:d0:75:f2: 5c:2c:1b:31:81:54:54:e4:d7:7f:64:a0:e9:67:35: d4:87:fa:43:59:aa:f9:cc:9e:a1:a1:d2:dc:71:ac: 69:a0:88:a3:7c:ea:bf:17:f8:02:0a:d4:6d:ce:64: fd:4d:f5:c3:c1:0c:37:2b:ee:95:75:79:7a:89:ee: 76:9f:3a:ed:5f:e5:44:ad:78:62:9f:0a:d7:90:4d: f4:7c:d0:b4:08:63:fe:7c:4f:90:bb:75:0b:d6:e8: e9:f8:7a:e0:ca:54:53:84:fe:86:9b:0f:99:e7:d6: d2:e6:f9:e8:62:c7:90:50:66:b3:20:e5:0c:4e:d8: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:BC:B2:CF:27:BA:FD:25:D7:5B:1E:49:B9:1E:F7:94:BA:5B:70 X509v3 Authority Key Identifier: keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c7:22:d6:fd:e1:07:8e:f4:93:bc:c0:45:bb:3b:63:d1:e2: de:5d:b4:15:b2:ef:d0:27:78:70:89:5d:74:ef:05:ad:b9:f5: fa:80:66:73:86:b2:1f:f5:53:19:4d:c8:ed:83:74:2b:5b:af: 81:bc:1f:62:14:6d:8c:33:34:ee:c6:fc:12:43:4a:10:a9:a8: c4:54:32:96:c9:32:fe:66:6f:4c:1c:22:6a:68:0e:33:bb:9c: 93:1c:37:63:2c:a5:e9:f3:6e:c2:22:c4:96:5b:1f:2a:87:be: 68:72:8b:2d:1d:db:4d:6f:65:0f:06:e1:e3:99:6a:8f:b0:94: 9a:17:b7:e0:1a:4d:b0:00:fc:c7:8a:4c:c2:2a:de:cb:2f:d3: 6c:ad:60:cd:42:59:cf:b7:28:ca:d8:2e:98:d0:45:a2:cc:de: 04:c5:54:e5:0c:8b:ad:8a:0c:86:a2:d4:2a:6d:ff:50:65:ed: b5:65:85:84:03:de:34:bc:10:b5:26:5c:41:4f:a0:ee:63:f5: 12:ce:fb:b3:e6:18:80:1b:ad:3e:63:df:4d:c0:66:4b:8e:02: 2e:3a:3e:d2:c2:18:50:b2:58:a8:ed:e3:e1:b1:1f:55:2d:ad: 22:33:89:39:35:e1:3b:84:4c:b6:19:f4:47:4f:9e:d8:f8:dc: 27:92:b5:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLwvOG5LbYTjmZMXyTn6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhM2ZlMGI5YzYzMGEzM2UxNzFhMGE1Yzc5M2YzNDBiNDM0 NDY5MzIwHhcNMjUxMjE3MTIwMDM5WhcNMjUxMjE4MTIwMDM5WjAzMTEwLwYDVQQD Eyg2OTFlYmNiMmNmMjdiYWZkMjVkNzViMWU0OWI5MWVmNzk0YmE1YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2+Z1dU1Av4Uh6PqHx5Y7ky34ln2 hfOH83WHgXlE0/2hUChFffN2XwFrEj4y9CN198SOmkQfu8kkJHby6dvHo1MP0I90 zMEKa753GKRV0rquyxB6pjmCfUVBRNklh+nEmo5YNZCwQd/S78RvUQoyWv6wyrCT bsPhIUeu+t9DMoptVo/QdfJcLBsxgVRU5Nd/ZKDpZzXUh/pDWar5zJ6hodLccaxp oIijfOq/F/gCCtRtzmT9TfXDwQw3K+6VdXl6ie52nzrtX+VErXhinwrXkE30fNC0 CGP+fE+Qu3UL1ujp+HrgylRThP6Gmw+Z59bS5vnoYseQUGazIOUMTtge5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkevLLPJ7r9JddbHkm5HveUultwMB8GA1UdIwQY MBaAFIo/4LnGMKM+FxoKXHk/NAtDRGkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMt NTNhYWI0MmY0NzZlLzEvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMtNTNhYWI0MmY0NzZl LzEvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcci1v3h B470k7zARbs7Y9Hi3l20FbLv0Cd4cIlddO8Frbn1+oBmc4ayH/VTGU3I7YN0K1uv gbwfYhRtjDM07sb8EkNKEKmoxFQylsky/mZvTBwiamgOM7uckxw3Yyyl6fNuwiLE llsfKoe+aHKLLR3bTW9lDwbh45lqj7CUmhe34BpNsAD8x4pMwireyy/TbK1gzUJZ z7coytgumNBFoszeBMVU5QyLrYoMhqLUKm3/UGXttWWFhAPeNLwQtSZcQU+g7mP1 Es77s+YYgButPmPfTcBmS44CLjo+0sIYULJYqO3j4bEfVS2tIjOJOTXhO4RMthn0 R0+e2PjcJ5K13g== -----END CERTIFICATE-----Generated at Wed Dec 17 17:47:07 2025 by rpki-client