This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json) Hash identifier: UjgJyesNNakSz2uEKZWW2msI3dUipjKYw7HOnZjPJyI= Subject key identifier: 40:89:93:52:71:88:3A:AE:50:2F:FE:43:C9:8A:E0:A9:FB:9F:06:4D Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f Certificate serial: 019AF464C5DB3A57E4BA3E086189B2F2254D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft Manifest number: 08E4 Signing time: Sat 06 Dec 2025 16:00:35 +0000 Manifest this update: Sat 06 Dec 2025 16:00:35 +0000 Manifest next update: Sun 07 Dec 2025 16:00:35 +0000 Files and hashes: 1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=) 2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: BylxNLO7gqNPq2GTrdrbjE3m6NituQLlWfGzRgeUbCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c5:db:3a:57:e4:ba:3e:08:61:89:b2:f2:25:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f Validity Not Before: Dec 6 16:00:35 2025 GMT Not After : Dec 7 16:00:35 2025 GMT Subject: CN=4089935271883aae502ffe43c98ae0a9fb9f064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:b5:55:f7:e1:99:db:eb:17:1b:96:16:d4: 52:f0:d2:7c:0a:c7:d4:a5:06:7b:55:24:e3:39:7e: 12:65:8d:61:a5:71:c7:62:33:35:6b:1b:d3:2d:81: 8b:26:f1:fd:09:38:2b:a3:c4:7b:17:c7:ec:30:ac: fb:da:f7:83:0a:70:82:eb:06:65:bb:24:c5:cf:ed: c8:87:cd:88:d8:fc:2c:e0:19:54:44:61:61:14:59: 2d:43:b7:22:76:2f:09:c5:35:91:0c:b5:00:59:10: e9:9d:08:6f:3a:43:c9:9e:b2:fb:77:cb:5b:7e:5a: cc:00:18:63:53:ba:af:de:94:06:f4:fb:08:48:04: 6e:fc:4d:a6:ed:b4:5f:89:3f:7d:f2:05:88:fc:bb: e8:aa:c2:ab:e9:95:6c:25:e1:17:b3:f4:70:4d:e5: ef:c1:b6:47:1f:a7:f7:a2:09:a6:d0:02:0a:24:1b: 55:0f:1f:57:29:d0:58:e9:2a:9a:31:e2:88:4a:64: 31:31:85:3b:3a:29:b3:ca:83:77:d6:cc:fe:4c:e6: 0c:b5:e5:fc:e5:c9:8f:26:02:26:b3:ce:b4:c5:48: fb:f1:ab:08:4d:57:dd:36:e4:62:74:aa:82:1c:5b: 7f:bf:42:33:97:3a:18:02:18:9d:57:54:6c:a3:f5: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:89:93:52:71:88:3A:AE:50:2F:FE:43:C9:8A:E0:A9:FB:9F:06:4D X509v3 Authority Key Identifier: keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:05:2e:3d:8e:9a:6f:ff:34:57:86:de:52:b9:c6:da:2f:17: 11:1a:45:a6:d5:fc:a4:40:b6:1a:fe:61:1a:b7:4f:40:9e:d4: 69:2a:35:66:17:80:5e:5a:34:45:19:70:ba:eb:82:7c:19:29: a2:7c:ba:25:ab:3a:84:63:68:a3:dc:4b:18:2d:8e:d8:fa:ba: e4:1a:e9:3f:53:6a:49:4d:d2:5e:89:af:3f:88:35:ac:02:7b: aa:9b:9d:12:1b:88:6f:44:e9:39:0c:79:1c:9b:dc:4b:57:1a: 0f:8d:38:95:20:77:17:ce:77:e5:f3:f1:42:fa:80:3b:21:ef: 88:44:e4:c5:ac:c4:1e:b9:ef:dc:db:af:34:f9:bb:74:07:82: 29:92:64:79:99:f3:37:18:74:6c:a9:0e:fe:eb:9b:aa:a7:43: a6:22:84:b5:42:4c:d1:f3:87:52:25:be:4d:2f:9a:95:ee:11: 33:24:8b:83:a6:f6:d6:1f:91:1b:c5:0f:26:84:40:d0:6d:52: 98:27:b5:04:97:c1:6c:17:12:3c:a0:98:a7:39:b9:8b:03:dd: 15:bf:25:33:a2:9f:55:f1:e2:a2:d6:54:7f:21:9d:93:61:7b: c0:8d:ad:39:ac:96:6f:ed:fe:52:be:bc:f1:c3:b8:61:d6:93: 76:ac:91:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMXbOlfkuj4IYYmy8iVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTdmZThkZDcyYzUwYzYyOGRlYTk3MzE1OGQwZjk0MjMy NmRhOGYwHhcNMjUxMjA2MTYwMDM1WhcNMjUxMjA3MTYwMDM1WjAzMTEwLwYDVQQD Eyg0MDg5OTM1MjcxODgzYWFlNTAyZmZlNDNjOThhZTBhOWZiOWYwNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH+1VffhmdvrFxuWFtRS8NJ8CsfU pQZ7VSTjOX4SZY1hpXHHYjM1axvTLYGLJvH9CTgro8R7F8fsMKz72veDCnCC6wZl uyTFz+3Ih82I2Pws4BlURGFhFFktQ7cidi8JxTWRDLUAWRDpnQhvOkPJnrL7d8tb flrMABhjU7qv3pQG9PsISARu/E2m7bRfiT998gWI/LvoqsKr6ZVsJeEXs/RwTeXv wbZHH6f3ogmm0AIKJBtVDx9XKdBY6SqaMeKISmQxMYU7OimzyoN31sz+TOYMteX8 5cmPJgIms860xUj78asITVfdNuRidKqCHFt/v0IzlzoYAhidV1Rso/Vn+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECJk1JxiDquUC/+Q8mK4Kn7nwZNMB8GA1UdIwQY MBaAFIsX/o3XLFDGKN6pcxWND5QjJtqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUt ZjViYWVhZWU4NjVhLzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUtZjViYWVhZWU4NjVh LzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgUuPY6a b/80V4beUrnG2i8XERpFptX8pEC2Gv5hGrdPQJ7UaSo1ZheAXlo0RRlwuuuCfBkp ony6Jas6hGNoo9xLGC2O2Pq65BrpP1NqSU3SXomvP4g1rAJ7qpudEhuIb0TpOQx5 HJvcS1caD404lSB3F8535fPxQvqAOyHviETkxazEHrnv3NuvNPm7dAeCKZJkeZnz Nxh0bKkO/uubqqdDpiKEtUJM0fOHUiW+TS+ale4RMySLg6b21h+RG8UPJoRA0G1S mCe1BJfBbBcSPKCYpzm5iwPdFb8lM6KfVfHiotZUfyGdk2F7wI2tOayWb+3+Ur68 8cO4YdaTdqyRPw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:26 2025 by rpki-client