This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json) Hash identifier: WelwRwUfzBj5LOm/NYEygydNz8c6wb2v6zm4BxZmcgY= Subject key identifier: F6:6C:F8:C2:A8:C0:97:19:9F:A6:9E:23:BD:FA:B8:E7:FD:E8:31:3F Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Certificate serial: 019AF12D6E6D04C959960BABBC7C2A5B0CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: cxeROvkDnYkC9Xze69rNjyEPCaQpXQD8xiOJQ6phvE0=) 2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=) 3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=) 4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=) 5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=) 6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=) 7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=) 8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=) 9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6e:6d:04:c9:59:96:0b:ab:bc:7c:2a:5b:0c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=f66cf8c2a8c097199fa69e23bdfab8e7fde8313f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:94:9a:b1:4b:e1:66:fd:37:e4:4f:b2:a9: 54:19:0e:a8:82:4c:78:ca:8a:f1:b1:67:97:45:08: e4:41:a8:b5:eb:36:fb:89:f8:ca:ee:7d:48:68:32: fa:0b:d4:d5:57:8b:69:3d:ef:d1:f5:40:c7:97:d2: 03:90:9b:c6:f2:38:ee:1a:14:e2:c8:4f:7d:4b:e1: 64:7f:c0:14:1f:e7:1c:cd:57:ff:b9:c3:eb:da:a3: b7:c3:f9:a0:08:f5:b8:6e:0b:fe:10:0d:ff:5f:4b: ab:15:05:36:45:8c:dc:86:a7:d9:5f:be:52:f3:b5: 58:ce:43:27:1b:31:4e:bd:42:8e:02:6f:dd:bf:9a: 01:37:95:6e:a2:c1:85:5b:17:d7:d7:12:83:15:10: e5:29:a5:64:ea:b4:6c:ed:99:ab:d8:7f:76:6e:02: a7:a2:fa:e7:ff:28:cf:3e:fc:88:bb:6d:63:85:fb: 9e:1f:8b:85:99:0c:ff:ae:98:20:1f:c0:c2:1a:2a: cc:ec:67:70:d6:4e:fe:f6:59:8b:09:4c:ba:97:d2: 9b:4e:1a:bb:e5:08:f5:f5:bf:8b:ad:a3:ec:51:fe: e1:34:51:28:86:ed:cb:59:b1:32:c3:64:b8:3a:49: d6:9f:77:5c:e0:02:c6:05:1c:41:77:66:48:40:a2: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6C:F8:C2:A8:C0:97:19:9F:A6:9E:23:BD:FA:B8:E7:FD:E8:31:3F X509v3 Authority Key Identifier: keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:88:47:53:39:84:66:26:91:b8:b6:62:a6:2d:30:40:4f:10: b4:c2:94:d6:6f:32:23:da:f6:00:5b:15:92:37:be:63:4e:0d: db:61:61:6f:2b:3f:92:17:d5:ee:6e:95:73:be:10:0b:d7:4f: be:c2:a0:c2:31:17:11:0a:40:76:35:b9:16:08:1b:8d:73:06: 7b:aa:07:bf:6d:07:28:c6:cd:f3:da:c1:d0:98:41:6b:f8:82: 48:50:bb:8c:ea:2a:d7:ec:59:02:be:e8:eb:f2:7e:82:8c:77: 9d:07:dc:b5:64:3a:27:3b:93:0c:c0:a9:46:72:31:0e:2e:a9: e4:d2:f6:ff:25:c2:2f:d2:eb:60:04:cf:96:db:78:56:49:0e: d3:ec:43:ee:c0:d8:d8:1a:7f:a7:d0:d7:b5:0e:1e:aa:26:0d: b3:b1:fe:b6:a3:96:79:5d:8b:4c:87:c8:d3:cb:6d:ae:b4:25: 2e:07:5a:2e:ac:a4:fd:b2:1c:d0:45:48:9f:c1:84:32:67:65: eb:3d:96:5c:25:68:4f:e4:35:3e:0d:27:88:fd:c5:51:86:7d: 95:f6:0e:00:05:bf:98:4e:9a:02:ad:c2:98:57:87:02:46:6d: 46:de:a6:d5:40:ff:e7:98:47:cd:13:0b:96:12:ce:7d:8c:f6: 55:ce:88:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLW5tBMlZlgurvHwqWwzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj ZDVhYWUwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD EyhmNjZjZjhjMmE4YzA5NzE5OWZhNjllMjNiZGZhYjhlN2ZkZTgzMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5KUmrFL4Wb9N+RPsqlUGQ6ogkx4 yorxsWeXRQjkQai16zb7ifjK7n1IaDL6C9TVV4tpPe/R9UDHl9IDkJvG8jjuGhTi yE99S+Fkf8AUH+cczVf/ucPr2qO3w/mgCPW4bgv+EA3/X0urFQU2RYzchqfZX75S 87VYzkMnGzFOvUKOAm/dv5oBN5VuosGFWxfX1xKDFRDlKaVk6rRs7Zmr2H92bgKn ovrn/yjPPvyIu21jhfueH4uFmQz/rpggH8DCGirM7Gdw1k7+9lmLCUy6l9KbThq7 5Qj19b+LraPsUf7hNFEohu3LWbEyw2S4OknWn3dc4ALGBRxBd2ZIQKI+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZs+MKowJcZn6aeI736uOf96DE/MB8GA1UdIwQY MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYhHUzmE ZiaRuLZipi0wQE8QtMKU1m8yI9r2AFsVkje+Y04N22Fhbys/khfV7m6Vc74QC9dP vsKgwjEXEQpAdjW5FggbjXMGe6oHv20HKMbN89rB0JhBa/iCSFC7jOoq1+xZAr7o 6/J+gox3nQfctWQ6JzuTDMCpRnIxDi6p5NL2/yXCL9LrYATPltt4VkkO0+xD7sDY 2Bp/p9DXtQ4eqiYNs7H+tqOWeV2LTIfI08ttrrQlLgdaLqyk/bIc0EVIn8GEMmdl 6z2WXCVoT+Q1Pg0niP3FUYZ9lfYOAAW/mE6aAq3CmFeHAkZtRt6m1UD/55hHzRML lhLOfYz2Vc6Iog== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:00 2025 by rpki-client