This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json) Hash identifier: nsGhuI/CFz36YdN2zc5gNvAw9bEbFjQPGPtK+eJytmY= Subject key identifier: F2:2B:26:12:1F:C5:B4:B8:A5:64:F0:7A:85:E7:88:91:E9:C1:08:61 Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Certificate serial: 019AF2AD3E4715B4708BC3074CAD81E3CF29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft Manifest number: 0F48 Signing time: Sat 06 Dec 2025 08:00:31 +0000 Manifest this update: Sat 06 Dec 2025 08:00:31 +0000 Manifest next update: Sun 07 Dec 2025 08:00:31 +0000 Files and hashes: 1: 2aoaMcLeoHsRYMrDwR7GYBYfV38.roa (hash: jssRFClKzuPy7Bnng6eFWBTeCatBaCf3VHUaJ2d4iI0=) 2: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=) 3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: vZ49yAzyA/tqt2N+QQhUsQr0vh2VxMd06O670Hs34Vk=) 4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3e:47:15:b4:70:8b:c3:07:4c:ad:81:e3:cf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Validity Not Before: Dec 6 08:00:31 2025 GMT Not After : Dec 7 08:00:31 2025 GMT Subject: CN=f22b26121fc5b4b8a564f07a85e78891e9c10861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:a4:7f:ac:28:be:36:94:17:95:11:c8:fe: ba:d1:51:e5:95:a8:54:c0:ab:6b:b1:27:7c:a1:a8: 45:f8:6c:7c:4a:16:cc:55:29:51:78:d5:74:6a:c9: ba:32:0f:03:d8:82:f5:61:f4:09:0e:b3:5a:d6:45: 2c:3d:48:56:8f:68:6f:e0:eb:79:fa:81:22:a7:ed: fd:e1:66:fd:0b:35:94:79:97:38:a7:89:96:e9:59: f4:28:01:81:de:b8:6c:07:06:75:c0:d3:86:0a:10: f9:ec:aa:6c:60:30:7c:8c:fa:63:8b:5d:af:e7:49: 3a:b2:66:88:96:04:e0:ad:ac:d5:01:55:80:d5:e8: 79:0b:49:70:a7:5c:43:7c:ae:ac:db:3a:e5:83:c1: 3a:64:a4:93:26:42:f6:ee:92:97:44:b9:e9:0b:8d: 24:ef:ed:d8:45:43:3e:e2:c9:8b:fb:6d:e1:f0:0d: b4:d7:7e:f4:3a:63:14:ae:51:92:29:17:82:73:4c: cf:82:44:ca:48:11:7d:66:f0:f2:97:68:ad:6e:ed: 91:56:fb:68:9e:ee:06:ab:4d:af:a1:ae:76:66:d5: 74:4c:cf:8d:43:dc:31:df:73:6f:52:00:99:bf:71: 9c:b1:85:ff:80:71:9d:4a:24:54:12:4d:e4:a5:3f: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:26:12:1F:C5:B4:B8:A5:64:F0:7A:85:E7:88:91:E9:C1:08:61 X509v3 Authority Key Identifier: keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1c:27:bb:67:dd:c3:b3:fa:47:ac:9b:97:f6:b2:ba:8b:b4: 68:af:81:cf:79:13:b3:ff:52:14:26:8c:b8:5b:a9:e7:1d:78: c8:19:3a:9c:76:c4:70:ee:20:32:c4:1c:33:9c:7a:4b:ba:45: e2:bb:10:96:d1:29:f0:36:fd:cf:da:f8:4c:c5:32:6c:6c:bc: 17:e4:36:f9:0d:49:87:61:47:ff:20:b2:8b:20:d6:0f:b8:21: 41:86:5a:80:a6:8a:6e:84:9f:2a:d6:e5:ff:a2:67:8e:79:b1: 50:b6:96:ed:30:31:b6:29:ca:53:0a:c5:71:0c:c6:e4:fe:e2: 3f:e8:cb:bc:44:66:c3:37:c6:ce:d4:72:03:e9:71:f7:da:ea: 63:bf:c8:a1:19:5c:0e:8e:ec:ad:16:dc:e5:b6:c0:99:fd:f6: 5f:76:10:71:01:b9:68:bf:77:3f:2d:fc:37:39:40:74:36:95: 4a:5f:d0:66:2c:f4:61:5c:e9:a3:89:a3:34:a8:37:3d:4d:93: 24:ab:22:a5:b3:b4:07:04:41:4a:24:ce:80:a6:dc:d8:3c:e8: 55:08:18:bb:25:77:a3:89:50:5b:14:6a:67:7a:b7:c0:46:a8: 21:f1:f7:57:91:3f:06:59:67:89:82:5f:27:3a:97:24:c2:c4: 8d:0c:be:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrT5HFbRwi8MHTK2B488pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1 Y2IxN2UwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD EyhmMjJiMjYxMjFmYzViNGI4YTU2NGYwN2E4NWU3ODg5MWU5YzEwODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25ykf6wovjaUF5URyP660VHllahU wKtrsSd8oahF+Gx8ShbMVSlReNV0asm6Mg8D2IL1YfQJDrNa1kUsPUhWj2hv4Ot5 +oEip+394Wb9CzWUeZc4p4mW6Vn0KAGB3rhsBwZ1wNOGChD57KpsYDB8jPpji12v 50k6smaIlgTgrazVAVWA1eh5C0lwp1xDfK6s2zrlg8E6ZKSTJkL27pKXRLnpC40k 7+3YRUM+4smL+23h8A201370OmMUrlGSKReCc0zPgkTKSBF9ZvDyl2itbu2RVvto nu4Gq02voa52ZtV0TM+NQ9wx33NvUgCZv3GcsYX/gHGdSiRUEk3kpT9QfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIrJhIfxbS4pWTweoXniJHpwQhhMB8GA1UdIwQY MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct NGQxNmJlOWJhMTMyLzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBwnu2fd w7P6R6ybl/ayuou0aK+Bz3kTs/9SFCaMuFup5x14yBk6nHbEcO4gMsQcM5x6S7pF 4rsQltEp8Db9z9r4TMUybGy8F+Q2+Q1Jh2FH/yCyiyDWD7ghQYZagKaKboSfKtbl /6JnjnmxULaW7TAxtinKUwrFcQzG5P7iP+jLvERmwzfGztRyA+lx99rqY7/IoRlc Do7srRbc5bbAmf32X3YQcQG5aL93Py38NzlAdDaVSl/QZiz0YVzpo4mjNKg3PU2T JKsipbO0BwRBSiTOgKbc2DzoVQgYuyV3o4lQWxRqZ3q3wEaoIfH3V5E/BllniYJf JzqXJMLEjQy+Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:03 2025 by rpki-client