This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json) Hash identifier: tbfURYQKVPuNG7f1vBGvHa2H/AGZJKT9vfI3O+IeBzI= Subject key identifier: 10:9F:EA:C9:70:E5:19:29:28:C8:7E:21:0E:E4:BC:7F:7D:B6:E1:49 Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Certificate serial: 019AF4658D18AAC474553D3436DE69844A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft Manifest number: DD Signing time: Sat 06 Dec 2025 16:01:27 +0000 Manifest this update: Sat 06 Dec 2025 16:01:27 +0000 Manifest next update: Sun 07 Dec 2025 16:01:27 +0000 Files and hashes: 1: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: yTt3IrspK9RRsCaiDETuKiZ39vSbDyrmtLum6X40zZk=) 2: Y_oYNTABqXVE9GTLe20SGiBKmm8.roa (hash: oNuhka5sSAjP9HueZy64ACfp5Ut+NkJyfMXj1b7/13Y=) 3: efy5oJUo9vlNOp71j63zeVEmmxU.roa (hash: CC82OGeCqrXuJ1H3eqUShF4IKs0H5muAyFZDrElp2iw=) 4: gfJqz6llA6HPBbhUclOoBOQtzwA.roa (hash: RevaPA0FwqLm6G8w6EGXV/kc0l56ywZoZvqxJEm3YF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8d:18:aa:c4:74:55:3d:34:36:de:69:84:4a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Validity Not Before: Dec 6 16:01:27 2025 GMT Not After : Dec 7 16:01:27 2025 GMT Subject: CN=109feac970e5192928c87e210ee4bc7f7db6e149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:7a:07:0d:64:67:7c:b8:63:86:7b:2c:8a: b3:19:33:b0:fd:59:ce:ba:c0:bd:c4:2a:e6:66:97: 0a:ba:1a:58:0e:b2:dd:d9:a5:a3:1d:76:8e:28:26: c3:fe:7d:2f:a0:30:b8:1c:52:36:fc:46:63:12:37: 5f:b5:ae:1d:48:6a:64:62:ad:75:ae:fa:ab:9d:e5: bc:b2:db:9b:73:b7:97:6d:fe:b1:6d:91:5e:e4:a1: 48:02:b2:a7:49:3a:07:88:fb:9f:be:eb:b0:85:ab: af:ee:22:4b:18:46:7e:ce:db:ab:e6:9c:9b:b0:f1: 13:2f:06:8e:14:2e:f5:7e:9e:15:a0:9a:17:63:c6: 2f:36:87:07:56:dd:ce:ef:7f:76:02:f5:3b:b6:5a: 17:71:32:5e:81:d5:93:75:3a:8f:cb:b6:1c:86:f3: f2:46:d4:ee:93:6e:bd:e3:1b:e5:fa:ac:0c:f6:1b: 08:24:3f:5d:ce:2c:9e:85:8c:c8:e0:a2:c2:c0:e9: 42:90:e4:29:e8:0a:40:f2:f8:dc:dc:db:be:b4:13: 74:3f:bc:24:2b:82:eb:14:08:f6:de:b0:75:10:52: 28:b2:4e:78:17:4a:9d:e4:c1:d2:ec:4a:2b:67:e8: ba:90:ec:9c:d1:4c:2e:3b:65:4f:90:25:9e:09:a6: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9F:EA:C9:70:E5:19:29:28:C8:7E:21:0E:E4:BC:7F:7D:B6:E1:49 X509v3 Authority Key Identifier: keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0d:d4:07:53:f5:2d:2a:50:d4:92:97:91:a5:53:73:64:22: 42:34:ad:97:9e:65:e4:51:79:83:95:b6:a5:28:9c:bd:69:c6: e8:bf:2d:6e:3a:18:cb:20:1e:f4:74:d1:73:50:b8:2d:b3:7a: 77:aa:86:69:1f:5c:78:76:e7:e0:83:ae:ed:ea:d4:d0:5e:a6: 16:42:b5:d6:7c:79:8d:86:fd:c5:e9:e0:82:6d:3e:45:51:27: 79:9e:62:44:d6:2a:74:5a:10:29:1e:e3:7a:24:24:df:fa:2f: 37:98:51:7d:a4:37:66:b0:cf:83:9c:74:30:e2:6b:7a:4d:99: e5:af:2e:61:d8:12:3d:85:70:36:6d:d8:4a:66:ce:66:af:cd: af:37:38:02:47:6c:af:ae:15:4a:b1:dd:f7:4d:eb:4a:4b:cd: 9e:be:52:6a:43:2c:e6:d3:5e:59:fa:9d:18:6b:93:19:70:0b: dd:e9:7f:67:6e:f2:2d:e4:22:f5:8e:21:98:90:bb:d0:98:e8: 4a:78:d4:23:28:9c:0e:90:bd:13:5a:65:d2:da:47:8c:4e:df: c4:08:2c:46:e2:07:b9:91:d4:9f:9f:d9:99:29:b8:f8:a3:e0: a1:dc:e3:c6:2d:d4:89:ff:75:87:20:9d:f3:80:59:56:e6:e9: 3d:bb:df:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZY0YqsR0VT00Nt5phEo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh NjU4MjkwHhcNMjUxMjA2MTYwMTI3WhcNMjUxMjA3MTYwMTI3WjAzMTEwLwYDVQQD EygxMDlmZWFjOTcwZTUxOTI5MjhjODdlMjEwZWU0YmM3ZjdkYjZlMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXd6Bw1kZ3y4Y4Z7LIqzGTOw/VnO usC9xCrmZpcKuhpYDrLd2aWjHXaOKCbD/n0voDC4HFI2/EZjEjdfta4dSGpkYq11 rvqrneW8stubc7eXbf6xbZFe5KFIArKnSToHiPufvuuwhauv7iJLGEZ+ztur5pyb sPETLwaOFC71fp4VoJoXY8YvNocHVt3O7392AvU7tloXcTJegdWTdTqPy7YchvPy RtTuk2694xvl+qwM9hsIJD9dziyehYzI4KLCwOlCkOQp6ApA8vjc3Nu+tBN0P7wk K4LrFAj23rB1EFIosk54F0qd5MHS7EorZ+i6kOyc0UwuO2VPkCWeCaYTMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCf6slw5RkpKMh+IQ7kvH99tuFJMB8GA1UdIwQY MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3 LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApA3UB1P1 LSpQ1JKXkaVTc2QiQjStl55l5FF5g5W2pSicvWnG6L8tbjoYyyAe9HTRc1C4LbN6 d6qGaR9ceHbn4IOu7erU0F6mFkK11nx5jYb9xenggm0+RVEneZ5iRNYqdFoQKR7j eiQk3/ovN5hRfaQ3ZrDPg5x0MOJrek2Z5a8uYdgSPYVwNm3YSmbOZq/Nrzc4Akds r64VSrHd903rSkvNnr5SakMs5tNeWfqdGGuTGXAL3el/Z27yLeQi9Y4hmJC70Jjo SnjUIyicDpC9E1pl0tpHjE7fxAgsRuIHuZHUn5/ZmSm4+KPgodzjxi3Uif91hyCd 84BZVubpPbvf/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:03 2025 by rpki-client