This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json) Hash identifier: JCxgIKCXeWT+aJGYwIIk/5NyJZR8/VfSGQJ1QXsgf6U= Subject key identifier: E0:16:B3:F0:2A:83:2C:E1:56:4A:CD:A2:85:3B:E7:10:E4:E2:F7:44 Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Certificate serial: 019AF388FE553AD7C0B2F001EC15FE6161B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft Manifest number: 150D Signing time: Sat 06 Dec 2025 12:00:32 +0000 Manifest this update: Sat 06 Dec 2025 12:00:32 +0000 Manifest next update: Sun 07 Dec 2025 12:00:32 +0000 Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=) 2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: rVkjE4gK9VkRQ28Gd90b0cvFkuWDo4ZVU8Kg1asmkxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:fe:55:3a:d7:c0:b2:f0:01:ec:15:fe:61:61:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Validity Not Before: Dec 6 12:00:32 2025 GMT Not After : Dec 7 12:00:32 2025 GMT Subject: CN=e016b3f02a832ce1564acda2853be710e4e2f744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:16:10:d0:a4:e8:f4:5c:eb:37:73:7d:a8: b1:da:04:de:09:96:c7:e8:94:e2:a5:ce:d0:20:cf: a1:de:d3:23:fd:f0:fa:75:d9:97:7d:e1:b1:34:ad: b6:d1:bf:59:b9:fb:da:db:bf:a0:d8:8a:35:1c:98: ac:28:1f:c7:23:da:f2:da:5a:16:56:6c:15:52:c1: 50:6a:a4:75:0d:04:f5:90:05:8d:53:0c:5d:7f:dc: ff:11:b0:ba:5a:b0:b8:1f:22:7b:79:72:98:27:27: f7:5b:53:e9:07:b8:3e:cc:02:e7:67:11:2e:c8:f9: e4:35:82:0e:e1:72:10:28:05:bf:5e:42:f0:6a:db: 61:45:1b:7a:2a:42:0c:e1:d3:3a:f3:b1:ef:aa:c2: ab:fe:d6:af:fb:3f:95:51:8b:f8:b3:49:f5:cb:75: ee:dc:33:6d:5f:c5:2e:9f:f1:0a:8a:19:92:1e:e8: 51:ba:4f:51:e3:a3:01:92:8d:6d:55:f2:eb:cc:d7: 75:a0:f3:9e:6c:4d:67:01:85:b9:72:81:a0:cd:a0: 29:e9:3c:d8:ae:df:bf:9f:6e:62:67:90:31:06:32: 14:bf:ae:d3:08:b8:f8:dd:98:30:32:8c:25:27:bc: 4d:c7:d3:e5:38:ce:83:88:68:74:60:de:b7:78:76: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:16:B3:F0:2A:83:2C:E1:56:4A:CD:A2:85:3B:E7:10:E4:E2:F7:44 X509v3 Authority Key Identifier: keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e5:ca:83:95:dd:16:5d:87:f0:94:f8:ed:39:3e:27:cd:ec: 4c:80:d6:07:20:14:fa:aa:1c:6a:67:9c:99:05:45:f7:9b:1b: 8e:07:13:04:bb:88:e0:fb:0b:da:46:00:a1:1b:31:c2:4c:72: 15:f9:13:41:ff:23:af:d6:07:cf:d6:a6:88:50:19:56:c8:8b: 84:a3:a8:be:9a:2c:c8:fc:09:26:76:e0:d8:99:c7:70:f6:1a: 1e:75:b0:fa:1d:fb:5b:f7:a8:b3:16:40:24:ab:22:7d:03:09: 5b:11:c8:82:5b:b1:d7:2d:c9:9f:f5:bb:30:46:75:e8:39:fc: e7:81:36:3e:b6:3e:3e:3d:1a:c0:2f:84:0c:9d:96:79:e4:03: 42:2c:b1:a3:98:13:57:73:80:97:20:5d:42:4f:b3:3a:a7:b2: 64:e4:70:26:7b:7c:74:8f:2b:e8:d5:cc:20:4c:01:4a:b3:d9: ed:4b:8b:1f:ce:d4:c5:a0:c8:b8:c8:4f:82:49:43:ef:3b:1e: 0a:e6:aa:fa:eb:59:d6:83:f0:eb:74:fb:12:b0:e6:48:a2:aa: 5e:1f:8a:3f:26:10:b5:1b:6b:11:41:36:d3:3d:02:1c:f6:b8: 5f:36:55:a9:df:1f:a7:f8:4f:d6:d1:8b:a1:8d:40:05:7a:4d: 61:a0:98:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziP5VOtfAsvAB7BX+YWGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw OTY2MDIwHhcNMjUxMjA2MTIwMDMyWhcNMjUxMjA3MTIwMDMyWjAzMTEwLwYDVQQD EyhlMDE2YjNmMDJhODMyY2UxNTY0YWNkYTI4NTNiZTcxMGU0ZTJmNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVUWENCk6PRc6zdzfaix2gTeCZbH 6JTipc7QIM+h3tMj/fD6ddmXfeGxNK220b9Zufva27+g2Io1HJisKB/HI9ry2loW VmwVUsFQaqR1DQT1kAWNUwxdf9z/EbC6WrC4HyJ7eXKYJyf3W1PpB7g+zALnZxEu yPnkNYIO4XIQKAW/XkLwatthRRt6KkIM4dM687HvqsKr/tav+z+VUYv4s0n1y3Xu 3DNtX8Uun/EKihmSHuhRuk9R46MBko1tVfLrzNd1oPOebE1nAYW5coGgzaAp6TzY rt+/n25iZ5AxBjIUv67TCLj43ZgwMowlJ7xNx9PlOM6DiGh0YN63eHartwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAWs/AqgyzhVkrNooU75xDk4vdEMB8GA1UdIwQY MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct MmU3MjEzNzY3NjI4LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4 LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeXKg5Xd Fl2H8JT47Tk+J83sTIDWByAU+qocamecmQVF95sbjgcTBLuI4PsL2kYAoRsxwkxy FfkTQf8jr9YHz9amiFAZVsiLhKOovposyPwJJnbg2JnHcPYaHnWw+h37W/eosxZA JKsifQMJWxHIglux1y3Jn/W7MEZ16Dn854E2PrY+Pj0awC+EDJ2WeeQDQiyxo5gT V3OAlyBdQk+zOqeyZORwJnt8dI8r6NXMIEwBSrPZ7UuLH87UxaDIuMhPgklD7zse Cuaq+utZ1oPw63T7ErDmSKKqXh+KPyYQtRtrEUE20z0CHPa4XzZVqd8fp/hP1tGL oY1ABXpNYaCYKA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:27 2025 by rpki-client