This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json) Hash identifier: u7z29bwFvB8NBln6wkBAgHq2mOse5GKu6ppjxze/0kk= Subject key identifier: 8F:DA:80:6F:F6:0E:C2:80:55:7E:46:C5:56:16:77:42:05:B5:DE:03 Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08 Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108 Certificate serial: 019AF509D58D825433347CE598A5857F0A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft Manifest number: 0559 Signing time: Sat 06 Dec 2025 19:00:53 +0000 Manifest this update: Sat 06 Dec 2025 19:00:53 +0000 Manifest next update: Sun 07 Dec 2025 19:00:53 +0000 Files and hashes: 1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=) 2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: UfTTvCpWbQJITmaTM3sVicXC1C93m0raGQliEzfQLOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d5:8d:82:54:33:34:7c:e5:98:a5:85:7f:0a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108 Validity Not Before: Dec 6 19:00:53 2025 GMT Not After : Dec 7 19:00:53 2025 GMT Subject: CN=8fda806ff60ec280557e46c55616774205b5de03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:07:57:e1:fa:48:61:a1:e2:e5:1f:68:bb: 73:74:0e:a3:1f:75:2f:4b:59:b4:23:4f:1a:c1:99: e2:46:88:74:88:78:46:ba:50:6c:ab:2e:30:3a:ec: 36:26:56:30:8e:5b:29:01:29:8d:ac:41:db:8f:d6: 0c:9d:66:69:5a:d9:00:d9:b3:3c:4c:a1:9c:b2:9e: 36:fd:5f:3d:78:ab:35:45:7a:ba:ce:3b:f2:b6:fc: d4:e2:aa:dc:12:2e:15:fe:fc:c8:45:18:38:6c:52: 28:fa:f5:78:1e:12:bb:81:67:1e:b2:8f:75:6f:36: 13:36:b5:bc:a0:c4:00:04:3b:00:8f:d6:e2:94:5b: 40:e2:45:bd:79:a5:dc:5b:44:20:65:f6:79:f1:86: ed:f7:38:0b:1d:6b:c5:2d:b4:12:59:50:3d:c7:7d: 71:20:bc:b5:4c:78:de:6e:4c:71:59:cd:a8:b4:f8: ee:29:b0:8a:a4:d8:ef:97:a2:be:d3:ec:c3:a4:5a: a8:5f:6b:7d:2c:ae:b3:fe:2d:34:37:75:f7:f2:5e: 97:c4:1f:ac:43:61:5f:09:51:8e:77:0f:8b:c2:32: 2e:19:f7:a1:ad:16:54:77:4f:b3:19:3b:fc:1f:48: 6a:00:36:67:7a:bc:c0:e4:fb:fb:50:7e:c8:14:b3: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:80:6F:F6:0E:C2:80:55:7E:46:C5:56:16:77:42:05:B5:DE:03 X509v3 Authority Key Identifier: keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:42:a6:21:ee:6c:0e:54:b8:cc:ec:5a:83:ab:ff:84:00: eb:c9:0c:5a:7c:2a:da:a6:a6:07:17:3e:8b:cb:87:10:9a:08: f3:6b:5c:7c:3c:bf:b4:9a:d5:ec:38:e9:e3:64:cc:35:b7:0e: 06:96:a6:dc:ff:02:46:05:7b:fd:c5:70:66:2d:1a:6b:b1:16: 56:a4:70:67:e4:62:90:8c:85:6f:53:23:06:39:ee:4c:3a:e4: 2b:ba:1a:50:e2:4f:58:6d:bc:d4:60:2a:1b:76:5e:30:c7:aa: 18:78:29:0a:a6:11:3c:d5:b2:e3:d2:66:4d:7d:e8:f3:cc:b9: c3:40:6e:24:e5:8e:11:b3:75:e7:46:99:68:09:49:4f:0d:e1: fe:7a:73:6f:f5:7b:b8:73:8d:c0:f9:b4:a8:d0:c4:e5:30:97: 25:a6:58:1f:d0:50:ec:94:38:1a:d7:52:a6:54:df:20:45:36: fb:a7:d2:e7:c8:56:9b:d5:2e:f6:96:b8:02:32:c7:45:0b:6a: 95:1e:de:2b:88:bf:17:e8:90:be:e2:ec:0f:d0:55:6e:9d:46: c7:2b:ce:97:13:24:66:ff:35:46:bb:94:54:21:ec:39:60:03: 70:04:e0:31:3a:61:85:75:9d:51:8b:0f:64:37:7c:4d:72:3f: 92:ab:8c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdWNglQzNHzlmKWFfwpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhM2YyN2M5M2VmYjdiYmMwYjBhZmU4ZWNjMjRmNzAzOWQy NzUxMDgwHhcNMjUxMjA2MTkwMDUzWhcNMjUxMjA3MTkwMDUzWjAzMTEwLwYDVQQD Eyg4ZmRhODA2ZmY2MGVjMjgwNTU3ZTQ2YzU1NjE2Nzc0MjA1YjVkZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IEHV+H6SGGh4uUfaLtzdA6jH3Uv S1m0I08awZniRoh0iHhGulBsqy4wOuw2JlYwjlspASmNrEHbj9YMnWZpWtkA2bM8 TKGcsp42/V89eKs1RXq6zjvytvzU4qrcEi4V/vzIRRg4bFIo+vV4HhK7gWceso91 bzYTNrW8oMQABDsAj9bilFtA4kW9eaXcW0QgZfZ58Ybt9zgLHWvFLbQSWVA9x31x ILy1THjebkxxWc2otPjuKbCKpNjvl6K+0+zDpFqoX2t9LK6z/i00N3X38l6XxB+s Q2FfCVGOdw+LwjIuGfehrRZUd0+zGTv8H0hqADZnerzA5Pv7UH7IFLOGMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/agG/2DsKAVX5GxVYWd0IFtd4DMB8GA1UdIwQY MBaAFIo/J8k++3u8Cwr+jswk9wOdJ1EIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzct ZWJmODM0ZmU5YTE1LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzctZWJmODM0ZmU5YTE1 LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbxCpiHu bA5UuMzsWoOr/4QA68kMWnwq2qamBxc+i8uHEJoI82tcfDy/tJrV7Djp42TMNbcO Bpam3P8CRgV7/cVwZi0aa7EWVqRwZ+RikIyFb1MjBjnuTDrkK7oaUOJPWG281GAq G3ZeMMeqGHgpCqYRPNWy49JmTX3o88y5w0BuJOWOEbN150aZaAlJTw3h/npzb/V7 uHONwPm0qNDE5TCXJaZYH9BQ7JQ4GtdSplTfIEU2+6fS58hWm9Uu9pa4AjLHRQtq lR7eK4i/F+iQvuLsD9BVbp1GxyvOlxMkZv81RruUVCHsOWADcATgMTphhXWdUYsP ZDd8TXI/kquM4g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:40 2025 by rpki-client