This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json) Hash identifier: QE4xOQMSxS+LtxjbSjaDZ4pRSvJKaRC6ikK4+ATg9FQ= Subject key identifier: 42:56:B8:53:E7:1E:65:DD:9C:DF:67:60:57:9A:C9:72:62:56:8D:82 Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef Certificate serial: 019AF5AEE948386AD1709ACC04A4E4ADBFB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft Manifest number: 0BDB Signing time: Sat 06 Dec 2025 22:01:12 +0000 Manifest this update: Sat 06 Dec 2025 22:01:12 +0000 Manifest next update: Sun 07 Dec 2025 22:01:12 +0000 Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=) 2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: vgdJDFu5Rpa4emPA0JdPg3YF3LfD/JZZ3sKf5NJmsaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:e9:48:38:6a:d1:70:9a:cc:04:a4:e4:ad:bf:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef Validity Not Before: Dec 6 22:01:12 2025 GMT Not After : Dec 7 22:01:12 2025 GMT Subject: CN=4256b853e71e65dd9cdf6760579ac97262568d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:14:28:4d:84:b1:76:04:3c:60:be:18:4a: 4d:37:e0:57:a7:10:c3:87:ec:94:5d:aa:89:ff:69: e3:75:9d:c8:1d:bb:34:56:98:68:c9:6b:31:62:1e: 6b:40:02:ec:e7:35:24:d1:51:bf:27:06:33:0f:28: d9:0d:50:f8:4e:96:81:46:db:84:5e:49:a4:2e:cf: d0:3c:18:a4:d4:1b:0e:6a:29:b4:17:a6:50:ef:4b: 8b:07:3c:c3:20:5b:55:00:3b:ec:93:ab:da:e1:29: 1e:10:4e:d9:f8:75:09:c1:28:84:aa:64:7c:9b:10: 4b:0b:01:f2:72:2f:a5:19:ff:4e:9d:e5:2c:54:1b: 40:60:7f:42:5d:fe:4b:bf:32:cf:7c:8b:f4:81:47: 89:63:b5:ee:f8:2f:ec:77:38:ff:c7:e1:cf:62:85: 3c:2e:f5:e8:5d:ae:9f:60:fe:95:a5:c5:69:0b:9d: fe:36:98:d1:14:f8:f4:4f:b2:1c:5f:9f:72:39:81: 68:20:ab:43:f5:b9:d7:0b:cd:ae:74:bd:ab:b9:7b: 46:df:7f:1d:6d:56:f2:37:12:f1:ab:f7:71:01:27: 72:21:38:f7:c9:78:25:5c:56:89:be:af:c2:9d:83: 91:0c:c4:e2:9a:9e:39:89:76:2c:78:01:3b:ae:92: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:B8:53:E7:1E:65:DD:9C:DF:67:60:57:9A:C9:72:62:56:8D:82 X509v3 Authority Key Identifier: keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9e:68:5c:a1:9d:9b:6a:49:35:b8:9d:a7:5b:5c:f2:55:3d: 19:b9:45:13:82:a0:ea:a9:42:5b:05:c8:2f:16:b0:3d:81:ef: 91:28:6d:32:69:3a:83:3f:e0:ff:f2:5b:ce:89:72:7e:f9:89: 94:0d:15:c4:f2:46:61:b5:e6:ff:0d:45:8f:2b:b2:b5:92:af: 86:c7:da:5c:65:dc:e2:64:2f:9a:e9:ba:9d:03:e6:35:eb:26: 08:96:cb:68:53:fe:b5:57:3d:c9:9f:f1:82:13:1a:5e:3d:e0: 5c:f2:e0:e3:d6:4b:e3:1c:fa:09:69:9b:fb:e8:8e:45:04:83: 07:b0:2f:ea:56:2b:c1:d7:8e:76:46:54:13:7c:73:ff:89:ac: a1:1a:ca:96:4d:37:a0:f1:2c:ed:65:1e:8f:a9:1a:c4:13:18: d4:fc:48:32:18:a9:fa:44:0d:68:1a:90:06:62:34:1f:7b:b5: b8:fd:ed:d7:18:2a:34:48:e8:5c:f0:8f:18:fb:ec:2a:8c:6a: 1b:15:42:5e:1f:9e:eb:73:69:43:5a:3d:83:e4:88:0b:d2:b9: 69:bb:d1:23:e9:98:37:75:ae:2c:f8:16:e8:1e:62:cb:c5:64: 27:a9:a9:f0:9f:ff:96:7e:0c:b2:58:ad:bd:ce:32:9d:84:b0: 89:17:83:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rulIOGrRcJrMBKTkrb+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDI2MzNiZmZiMTZkYTJkNzVlZGFmNDliYzgyMTE4N2Nm Yjg4ZWYwHhcNMjUxMjA2MjIwMTEyWhcNMjUxMjA3MjIwMTEyWjAzMTEwLwYDVQQD Eyg0MjU2Yjg1M2U3MWU2NWRkOWNkZjY3NjA1NzlhYzk3MjYyNTY4ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFkUKE2EsXYEPGC+GEpNN+BXpxDD h+yUXaqJ/2njdZ3IHbs0VphoyWsxYh5rQALs5zUk0VG/JwYzDyjZDVD4TpaBRtuE XkmkLs/QPBik1BsOaim0F6ZQ70uLBzzDIFtVADvsk6va4SkeEE7Z+HUJwSiEqmR8 mxBLCwHyci+lGf9OneUsVBtAYH9CXf5LvzLPfIv0gUeJY7Xu+C/sdzj/x+HPYoU8 LvXoXa6fYP6VpcVpC53+NpjRFPj0T7IcX59yOYFoIKtD9bnXC82udL2ruXtG338d bVbyNxLxq/dxASdyITj3yXglXFaJvq/CnYORDMTimp45iXYseAE7rpLU9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJWuFPnHmXdnN9nYFeayXJiVo2CMB8GA1UdIwQY MBaAFCDSYzv/sW2i117a9JvIIRh8+4jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAt MWNkNmM4NzFjMWU4LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAtMWNkNmM4NzFjMWU4 LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ5oXKGd m2pJNbidp1tc8lU9GblFE4Kg6qlCWwXILxawPYHvkShtMmk6gz/g//JbzolyfvmJ lA0VxPJGYbXm/w1FjyuytZKvhsfaXGXc4mQvmum6nQPmNesmCJbLaFP+tVc9yZ/x ghMaXj3gXPLg49ZL4xz6CWmb++iORQSDB7Av6lYrwdeOdkZUE3xz/4msoRrKlk03 oPEs7WUej6kaxBMY1PxIMhip+kQNaBqQBmI0H3u1uP3t1xgqNEjoXPCPGPvsKoxq GxVCXh+e63NpQ1o9g+SIC9K5abvRI+mYN3WuLPgW6B5iy8VkJ6mp8J//ln4Mslit vc4ynYSwiReDcw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:57 2025 by rpki-client