This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json) Hash identifier: oG7GWNVcQgUTsJvcKJp4youW/2aanYGyfOHYMM+SyVs= Subject key identifier: AE:17:10:94:7D:0F:18:A9:92:AE:39:90:56:D8:D9:A3:EF:6B:37:05 Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449 Certificate serial: 019B318CE95DB62C07DBC3CA9DA23BC9B5F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft Manifest number: 17B1 Signing time: Thu 18 Dec 2025 13:01:16 +0000 Manifest this update: Thu 18 Dec 2025 13:01:16 +0000 Manifest next update: Fri 19 Dec 2025 13:01:16 +0000 Files and hashes: 1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=) 2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=) 3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=) 4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=) 5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=) 6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: YbEcyQeYAYvslE/xUe55l0vDChmI+qJHEy8UFhmtj/g=) 7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:e9:5d:b6:2c:07:db:c3:ca:9d:a2:3b:c9:b5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449 Validity Not Before: Dec 18 13:01:16 2025 GMT Not After : Dec 19 13:01:16 2025 GMT Subject: CN=ae1710947d0f18a992ae399056d8d9a3ef6b3705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:e7:d3:92:43:c4:c9:1b:cf:d7:f2:31:2a: bb:3d:4b:00:94:17:4f:c1:21:db:60:cf:94:db:b8: a7:b4:30:23:f2:29:b7:60:f9:8d:34:e4:37:d6:8b: ba:d9:26:12:12:9e:4e:4e:de:33:5e:2a:07:f4:ad: af:85:d5:ea:18:bf:5f:2d:45:49:5c:9a:72:b0:65: 50:7a:a2:3e:53:1b:7a:d5:bc:02:70:18:4b:a9:ff: 10:cd:a0:dc:e7:4c:8c:32:6d:1c:ad:e7:f7:f9:6a: 75:dd:ba:9b:0d:f8:43:5f:29:39:bd:07:d3:a0:b4: 39:45:c1:03:ef:67:a1:fc:18:0c:73:55:1b:0e:1c: b0:bf:db:4c:63:04:98:15:46:1c:fe:8b:54:92:fe: e8:50:51:0d:66:23:d1:79:77:47:f9:ca:b7:57:c8: ac:41:1e:fa:8b:22:1e:de:ca:6f:21:87:40:dd:7f: 52:d1:5a:4f:73:8b:75:60:1f:bc:f7:73:d2:fc:07: 24:4a:8f:c5:f1:e4:5f:36:fb:87:08:3a:d5:d2:36: ed:bb:92:bb:55:93:57:d9:bd:87:a7:9c:20:4d:5e: 23:da:8a:7b:35:c0:c3:af:9d:85:af:61:3c:b2:14: 63:85:9c:91:ec:e2:6d:99:41:36:26:de:da:92:6b: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:17:10:94:7D:0F:18:A9:92:AE:39:90:56:D8:D9:A3:EF:6B:37:05 X509v3 Authority Key Identifier: keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c7:88:25:26:35:be:a3:0e:f1:e4:55:7a:58:2b:73:29:46: 83:74:4a:ee:30:87:8b:6f:1d:dc:e8:bb:c3:60:7e:8d:e2:e9: 20:32:ba:48:ab:fe:28:86:cd:b0:bc:f3:86:0b:3c:24:17:d8: b1:42:4c:a3:30:06:dd:28:ed:01:b4:9f:f7:f2:9b:52:5b:df: 87:ab:a8:2d:d6:66:ae:4e:7a:9e:64:f0:86:54:71:32:95:2d: 45:92:95:fc:cd:e3:8b:a8:57:7c:47:64:cd:ca:53:e6:31:10: a2:b2:12:aa:c8:f5:3d:27:0c:5a:c8:92:74:c8:88:f5:41:0f: 19:19:3e:b6:1e:a6:b2:13:7a:1c:a9:7c:8f:1a:8f:e0:cf:0d: 5e:db:6c:c7:37:15:4e:73:87:93:61:52:e0:10:0f:e9:0f:f8: ad:0e:a7:25:2b:ac:d2:fe:fe:9e:4a:61:42:89:14:a8:e3:46: 30:cd:54:f6:f8:18:c7:d4:5e:2f:d9:1b:68:b3:47:36:d3:e2: ff:75:da:07:54:be:a5:b6:02:f3:6e:6c:7c:48:8a:1f:ec:70: d9:8c:4c:52:6f:25:5d:b4:3e:c1:14:70:c2:8b:80:1a:a2:3f: c9:9c:59:9c:91:20:5e:c0:db:5e:e2:07:c3:ff:d9:05:7d:67: 1c:6a:5b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjOldtiwH28PKnaI7ybXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy NWM0NDkwHhcNMjUxMjE4MTMwMTE2WhcNMjUxMjE5MTMwMTE2WjAzMTEwLwYDVQQD EyhhZTE3MTA5NDdkMGYxOGE5OTJhZTM5OTA1NmQ4ZDlhM2VmNmIzNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIzn05JDxMkbz9fyMSq7PUsAlBdP wSHbYM+U27intDAj8im3YPmNNOQ31ou62SYSEp5OTt4zXioH9K2vhdXqGL9fLUVJ XJpysGVQeqI+Uxt61bwCcBhLqf8QzaDc50yMMm0cref3+Wp13bqbDfhDXyk5vQfT oLQ5RcED72eh/BgMc1UbDhywv9tMYwSYFUYc/otUkv7oUFENZiPReXdH+cq3V8is QR76iyIe3spvIYdA3X9S0VpPc4t1YB+893PS/AckSo/F8eRfNvuHCDrV0jbtu5K7 VZNX2b2Hp5wgTV4j2op7NcDDr52Fr2E8shRjhZyR7OJtmUE2Jt7akmvSoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4XEJR9Dxipkq45kFbY2aPvazcFMB8GA1UdIwQY MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt Njk4OTBjODI5ZTMzLzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVseIJSY1 vqMO8eRVelgrcylGg3RK7jCHi28d3Oi7w2B+jeLpIDK6SKv+KIbNsLzzhgs8JBfY sUJMozAG3SjtAbSf9/KbUlvfh6uoLdZmrk56nmTwhlRxMpUtRZKV/M3ji6hXfEdk zcpT5jEQorISqsj1PScMWsiSdMiI9UEPGRk+th6mshN6HKl8jxqP4M8NXttsxzcV TnOHk2FS4BAP6Q/4rQ6nJSus0v7+nkphQokUqONGMM1U9vgYx9ReL9kbaLNHNtPi /3XaB1S+pbYC825sfEiKH+xw2YxMUm8lXbQ+wRRwwouAGqI/yZxZnJEgXsDbXuIH w//ZBX1nHGpb0A== -----END CERTIFICATE-----Generated at Thu Dec 18 16:12:16 2025 by rpki-client