This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json) Hash identifier: l1RaH0YNAO259eFY2qV56Sl6hBOlGsr6C+qSCi6moqc= Subject key identifier: EB:35:A7:33:0A:1A:B0:EF:D6:9E:F7:7E:D8:EE:0A:06:D4:BE:4D:58 Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de Certificate serial: 019AF2AD44E5E96303ADF625E0CB48D4FABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft Manifest number: 1796 Signing time: Sat 06 Dec 2025 08:00:32 +0000 Manifest this update: Sat 06 Dec 2025 08:00:32 +0000 Manifest next update: Sun 07 Dec 2025 08:00:32 +0000 Files and hashes: 1: 5lfSf59AY-hC6ZBpQqdqsyBgfw4.roa (hash: hg0a1WqZnkeotSAobKNfSLW7zXmEvmKKXZqeOoYZdnY=) 2: HNhf-D_PEssdX9LVrnIMDsv0KIw.roa (hash: bVdo4uf32LEDJaY4T2QwPbWvITwhd4KcifOR3lFOhpg=) 3: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: 1DeK+JEBIX/1nXfHXRJjPkK+U9GE+S4SvXnnpLgXuzE=) 4: dgWxkYz27ClPX3P2Urg7lNK59jM.roa (hash: MvtqmyAEkvOlQrUInWf+whz/VlGH9I7ctl61Hj5EUxE=) 5: v7n-0r9KgIhGKTchu2jwbHB0z74.roa (hash: Uqi7ReaJs7BBVFTKxxZ3ijn7JitQR2P+yiINISqSbUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:44:e5:e9:63:03:ad:f6:25:e0:cb:48:d4:fa:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de Validity Not Before: Dec 6 08:00:32 2025 GMT Not After : Dec 7 08:00:32 2025 GMT Subject: CN=eb35a7330a1ab0efd69ef77ed8ee0a06d4be4d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:ce:1c:c2:c6:22:29:df:bb:30:e1:f1:f6: 63:99:e8:62:f9:07:b6:f6:79:54:5f:65:a9:90:9e: ce:5c:07:da:e0:49:5d:f8:c3:3c:af:f1:8c:0e:73: e4:2c:0a:a1:46:58:b7:c4:42:97:93:9b:1e:55:c6: 98:65:fd:74:1f:5b:90:fa:61:f1:60:c2:c0:89:24: 5a:ba:59:7c:0a:7d:bc:0e:71:7a:35:e5:ca:52:78: 77:7e:f7:2e:a1:3c:83:4d:64:b4:e6:78:bf:86:e7: 40:47:58:46:67:e5:90:e9:77:f7:79:46:4d:e0:93: a2:ee:bf:8b:49:d7:d7:43:0e:7a:92:8c:32:e6:9c: 61:4b:14:e2:07:0c:5c:87:b5:e0:e4:27:87:76:6f: 31:da:5c:a2:9f:e1:53:c7:58:73:ff:32:0d:0b:a3: 32:94:51:7c:51:47:ac:3a:82:ff:9e:5c:2a:83:73: 10:52:3d:46:30:c8:7d:17:13:8f:a2:b8:94:d1:05: 4b:17:bb:ff:de:e3:8d:8f:c8:7e:67:21:33:f3:c5: 46:c1:7e:68:f5:68:4f:29:8c:f0:43:14:43:dc:e0: 17:7e:70:c7:ed:5f:40:99:9f:09:0e:fb:1d:66:e3: 22:5a:49:4e:3c:45:a6:4f:00:af:20:8c:03:c3:77: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:35:A7:33:0A:1A:B0:EF:D6:9E:F7:7E:D8:EE:0A:06:D4:BE:4D:58 X509v3 Authority Key Identifier: keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:88:6d:70:a4:3e:8d:1f:ed:cb:52:47:1c:0f:28:b9:61:9f: 36:b0:10:b3:3d:b9:55:b9:84:83:9c:32:9f:5a:34:70:53:30: 29:e4:8b:1d:a0:21:39:21:51:7d:c9:2a:df:de:6b:f3:0a:c4: 6a:69:b1:6f:b4:c5:19:8e:9f:fd:6f:99:1d:5c:27:11:24:06: 1c:75:e4:9a:0a:af:b9:b1:30:38:fe:d4:81:f2:70:d3:82:cf: 03:e7:a0:52:65:aa:43:1f:27:1c:e0:c7:9b:44:ed:11:36:9d: 64:40:79:86:d7:13:b7:64:60:39:f4:22:ad:ae:6c:ad:6a:0c: d0:9b:7c:3c:ea:d8:70:fe:d9:b3:65:0d:e1:f7:20:97:ac:df: 22:34:ce:ee:67:0b:81:ab:45:30:24:a5:bd:71:5e:49:10:6b: 73:bc:a5:2f:24:03:3b:75:13:88:15:d2:13:46:7a:a6:af:b8: 5e:56:40:0f:66:9f:e9:51:e4:23:df:ef:73:69:33:d8:47:73: a1:77:7d:f3:29:87:4d:15:28:70:ff:d1:66:fb:a1:c0:3e:3a: 96:c3:59:a0:68:f6:f6:88:9e:2f:fa:3b:ed:61:fd:70:8e:44: 98:7f:5c:d2:57:75:c7:c3:40:6a:c8:ff:f2:1b:7d:e9:31:b7: 31:72:83:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUTl6WMDrfYl4MtI1Pq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYWE2MGNiMDAyNDMzMmEyZGI2ODk5M2YzMzU3MTU4YWY2 MGM4ZGUwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD EyhlYjM1YTczMzBhMWFiMGVmZDY5ZWY3N2VkOGVlMGEwNmQ0YmU0ZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fDOHMLGIinfuzDh8fZjmehi+Qe2 9nlUX2WpkJ7OXAfa4Eld+MM8r/GMDnPkLAqhRli3xEKXk5seVcaYZf10H1uQ+mHx YMLAiSRaull8Cn28DnF6NeXKUnh3fvcuoTyDTWS05ni/hudAR1hGZ+WQ6Xf3eUZN 4JOi7r+LSdfXQw56kowy5pxhSxTiBwxch7Xg5CeHdm8x2lyin+FTx1hz/zINC6My lFF8UUesOoL/nlwqg3MQUj1GMMh9FxOPoriU0QVLF7v/3uONj8h+ZyEz88VGwX5o 9WhPKYzwQxRD3OAXfnDH7V9AmZ8JDvsdZuMiWklOPEWmTwCvIIwDw3dW7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs1pzMKGrDv1p73ftjuCgbUvk1YMB8GA1UdIwQY MBaAFCCqYMsAJDMqLbaJk/M1cVivYMjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYt NzNmN2QxMTBiODJhLzEvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYtNzNmN2QxMTBiODJh LzEvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbohtcKQ+ jR/ty1JHHA8ouWGfNrAQsz25VbmEg5wyn1o0cFMwKeSLHaAhOSFRfckq395r8wrE ammxb7TFGY6f/W+ZHVwnESQGHHXkmgqvubEwOP7UgfJw04LPA+egUmWqQx8nHODH m0TtETadZEB5htcTt2RgOfQira5srWoM0Jt8POrYcP7Zs2UN4fcgl6zfIjTO7mcL gatFMCSlvXFeSRBrc7ylLyQDO3UTiBXSE0Z6pq+4XlZAD2af6VHkI9/vc2kz2Edz oXd98ymHTRUocP/RZvuhwD46lsNZoGj29oieL/o77WH9cI5EmH9c0ld1x8NAasj/ 8ht96TG3MXKDOg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:19:11 2025 by rpki-client