This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json) Hash identifier: BtS/Q2prod6CE+/B+Dz88Ex+Vm7Juiu+KIuZreCeyy8= Subject key identifier: 1F:93:69:24:4C:3F:D7:F2:A8:7C:D2:C9:B4:D8:46:E1:6F:B2:4D:16 Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd Certificate serial: 019AF35276C93DDD7B8692CFF4BF66EB9E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:59 +0000 Manifest this update: Sat 06 Dec 2025 11:00:59 +0000 Manifest next update: Sun 07 Dec 2025 11:00:59 +0000 Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: 9+wG4OxfP50BnLjla8QnQIlx54Y6vMZ1sMLJQAVzZwU=) 2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=) 3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:76:c9:3d:dd:7b:86:92:cf:f4:bf:66:eb:9e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd Validity Not Before: Dec 6 11:00:59 2025 GMT Not After : Dec 7 11:00:59 2025 GMT Subject: CN=1f9369244c3fd7f2a87cd2c9b4d846e16fb24d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:ba:3f:df:2a:28:10:60:aa:28:0b:ba:2d: 02:98:35:3f:9e:bb:f9:dc:60:9f:6c:ca:ab:69:bf: b4:c6:4e:56:aa:7d:86:1e:80:27:2c:f8:7d:ec:21: 73:ba:e7:a8:e5:6a:b3:98:ce:d6:64:c1:5c:0e:88: fd:cd:fd:41:4d:4f:8d:6f:b5:b3:ed:3a:88:a7:11: af:b8:17:34:93:62:5c:e3:52:50:1f:a1:eb:8a:b2: 21:da:42:91:9a:08:87:e8:77:73:58:9f:48:40:3e: fe:c8:a2:c9:4c:b3:2f:50:d1:ea:94:c4:a0:46:ad: 75:95:97:91:f7:84:38:4c:9b:6e:7e:1e:35:6b:44: fe:95:32:1d:87:4f:4d:56:65:04:fc:0e:34:31:3f: 7b:3e:9f:39:44:9f:63:0c:e3:ad:15:2e:99:e2:bc: 85:83:52:7c:51:35:a3:15:95:6d:91:66:99:fd:d6: 22:a5:d2:19:25:fc:c6:63:4f:47:d2:48:44:ec:51: a8:0d:03:87:35:1d:0a:67:8a:8f:7f:04:6e:db:9d: 14:ef:05:a1:fd:78:ce:07:3b:f3:4b:96:df:2b:18: da:be:6d:2f:bb:03:3e:ba:fb:a2:a5:ab:dc:9e:26: 8a:e1:dc:be:c2:71:8c:64:5a:cb:18:93:7e:b2:ad: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:69:24:4C:3F:D7:F2:A8:7C:D2:C9:B4:D8:46:E1:6F:B2:4D:16 X509v3 Authority Key Identifier: keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:a9:78:98:54:6d:c5:45:e6:9d:29:2b:65:a8:e0:ca:a4:64: 61:88:40:5b:55:89:b6:be:4b:80:f3:e5:da:37:4a:7d:ac:c8: d8:a5:ca:57:9c:25:2b:54:a7:2d:9e:ef:35:16:4b:63:fa:19: bc:86:43:2d:fe:7c:da:b9:98:18:48:0f:ce:e8:60:00:94:ba: e0:7c:d8:7b:e7:ff:12:9f:24:2f:92:f7:6a:9e:10:99:52:1a: 74:89:f8:c7:e1:00:d9:1b:41:56:40:14:03:87:73:8a:03:3a: 6c:8e:cb:de:49:e7:bf:29:38:ac:12:ff:0f:36:af:2a:6b:8e: 5a:94:6e:00:55:62:e3:c5:5c:43:4e:ce:ea:b6:7b:33:6b:c6: 9a:01:58:76:87:b2:a1:87:0d:ce:52:ca:01:ac:ba:f0:6e:55: 69:cc:ac:ff:47:14:df:6a:99:75:42:9a:e6:b4:e5:0e:81:b0: 2e:23:2c:6e:7c:02:f4:e3:e8:17:71:06:04:b1:9b:28:5f:25: 39:77:7a:51:82:88:93:b3:b9:cf:7a:39:e0:71:c0:6b:2e:09: 29:dd:d2:65:21:11:43:b6:aa:cd:e3:25:20:db:89:6c:a8:91: 3a:97:52:d0:0f:88:92:ae:0a:56:dd:1f:24:dc:63:ec:fe:dd: e7:49:fc:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnbJPd17hpLP9L9m654UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5 OGVjZGQwHhcNMjUxMjA2MTEwMDU5WhcNMjUxMjA3MTEwMDU5WjAzMTEwLwYDVQQD EygxZjkzNjkyNDRjM2ZkN2YyYTg3Y2QyYzliNGQ4NDZlMTZmYjI0ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV26P98qKBBgqigLui0CmDU/nrv5 3GCfbMqrab+0xk5Wqn2GHoAnLPh97CFzuueo5WqzmM7WZMFcDoj9zf1BTU+Nb7Wz 7TqIpxGvuBc0k2Jc41JQH6HrirIh2kKRmgiH6HdzWJ9IQD7+yKLJTLMvUNHqlMSg Rq11lZeR94Q4TJtufh41a0T+lTIdh09NVmUE/A40MT97Pp85RJ9jDOOtFS6Z4ryF g1J8UTWjFZVtkWaZ/dYipdIZJfzGY09H0khE7FGoDQOHNR0KZ4qPfwRu250U7wWh /XjOBzvzS5bfKxjavm0vuwM+uvuipavcniaK4dy+wnGMZFrLGJN+sq2V5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+TaSRMP9fyqHzSybTYRuFvsk0WMB8GA1UdIwQY MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5 LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA16l4mFRt xUXmnSkrZajgyqRkYYhAW1WJtr5LgPPl2jdKfazI2KXKV5wlK1SnLZ7vNRZLY/oZ vIZDLf582rmYGEgPzuhgAJS64HzYe+f/Ep8kL5L3ap4QmVIadIn4x+EA2RtBVkAU A4dzigM6bI7L3knnvyk4rBL/DzavKmuOWpRuAFVi48VcQ07O6rZ7M2vGmgFYdoey oYcNzlLKAay68G5Vacys/0cU32qZdUKa5rTlDoGwLiMsbnwC9OPoF3EGBLGbKF8l OXd6UYKIk7O5z3o54HHAay4JKd3SZSERQ7aqzeMlINuJbKiROpdS0A+Ikq4KVt0f JNxj7P7d50n8RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:51 2025 by rpki-client