This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json) Hash identifier: bGQxt2sc8part1yrc1+UnBGfGzU719ySbmW6Ji7K1QM= Subject key identifier: CB:29:A3:2C:E3:66:E2:27:DD:12:A2:7A:24:20:93:D0:6A:71:4B:06 Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f Certificate serial: 019AF208CE40C14F136723D7DD3C5B9A77B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=) 2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=) 3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: P+P7c6ez2Psjk2HwpniWdiT9lL9wiBBgUCFmaXgljdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ce:40:c1:4f:13:67:23:d7:dd:3c:5b:9a:77:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=cb29a32ce366e227dd12a27a242093d06a714b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:63:5b:f4:b4:1f:0c:c9:e9:60:27:5c:e2: e2:1c:12:ef:d1:73:18:d7:b7:e3:ec:f5:e9:a8:40: 67:ed:4e:2c:03:89:38:59:9d:d6:a8:aa:82:e5:50: 19:97:f8:ba:2f:96:d4:c4:bd:ca:a6:52:d1:31:51: 96:ea:84:bf:36:af:cb:4d:f8:83:ae:14:16:d5:59: 97:f7:a9:c2:9f:8f:c6:4d:83:d2:23:18:49:b3:40: 93:12:26:ee:61:92:46:fb:9b:47:96:13:c0:78:8f: 6e:a8:fd:c4:f0:70:34:81:d8:17:14:17:fe:93:98: 14:9f:54:3e:7d:a8:4a:99:27:ad:38:24:6f:19:73: e1:ea:31:25:ac:37:14:4a:50:03:64:62:ee:81:e5: 92:a3:d8:f2:5b:fd:23:22:21:81:e0:59:21:f3:85: 55:8a:c8:d3:61:fb:ff:e3:04:e1:4d:9e:bb:6a:27: 9f:6c:bb:59:ad:17:c1:62:73:6d:f7:7c:0a:ce:61: 25:d5:0e:58:08:47:99:5d:a2:63:54:7a:cc:0c:64: 74:75:08:fc:71:ae:0b:a5:28:01:d6:aa:68:1e:ad: 21:a4:95:5c:5c:60:66:95:e1:24:a1:99:eb:00:ce: b1:7b:df:55:6e:e4:a4:03:8a:be:4e:bc:26:14:ef: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:29:A3:2C:E3:66:E2:27:DD:12:A2:7A:24:20:93:D0:6A:71:4B:06 X509v3 Authority Key Identifier: keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:47:8d:5e:8d:af:93:cf:d2:6f:31:0f:c0:bd:fb:dc:2e:f6: d8:dc:99:5d:e4:13:41:20:e6:4e:76:3c:c3:14:97:19:82:3a: 6e:35:4e:cf:5d:cf:43:9f:00:35:bc:f9:15:8c:d0:c5:06:52: 3d:8d:aa:a5:70:95:ee:43:0c:fd:f1:d5:3f:07:e0:5a:d3:9c: a6:3c:7f:9e:b5:52:88:fb:07:48:1e:72:76:c5:e4:6a:41:17: ca:27:75:a0:5c:17:92:a0:85:41:fd:8e:e2:b7:e1:cb:0f:6c: d0:cd:93:ed:73:b9:bb:ed:55:1a:cb:04:f0:03:02:6a:84:fc: ee:cf:91:a7:97:53:8b:5b:01:99:2b:86:07:da:dc:f5:9a:b7: 7e:b7:c3:1f:17:ae:16:ee:52:b6:32:8f:86:e2:cb:3e:2a:fa: ed:f8:7c:61:73:60:70:42:00:22:cd:f3:30:60:78:19:88:8f: f1:7a:f0:70:d9:a7:46:ff:ce:e1:09:0f:0d:6a:c2:a2:20:a1: 03:e1:ff:49:4e:db:07:e8:82:57:1c:4b:83:37:87:76:b1:25: 90:47:89:45:ff:81:19:6f:ff:1b:ea:a6:15:cd:83:98:e3:47: 85:89:1a:eb:d8:fa:2d:0d:17:87:07:ce:bf:49:39:72:d6:8b: c6:a7:b9:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM5AwU8TZyPX3Txbmne0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzFmOGJlYTMzYjAwNTY0NDZlMzMyMWVlZGUzYTE3MGZi ZDdjMWYwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EyhjYjI5YTMyY2UzNjZlMjI3ZGQxMmEyN2EyNDIwOTNkMDZhNzE0YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A1jW/S0HwzJ6WAnXOLiHBLv0XMY 17fj7PXpqEBn7U4sA4k4WZ3WqKqC5VAZl/i6L5bUxL3KplLRMVGW6oS/Nq/LTfiD rhQW1VmX96nCn4/GTYPSIxhJs0CTEibuYZJG+5tHlhPAeI9uqP3E8HA0gdgXFBf+ k5gUn1Q+fahKmSetOCRvGXPh6jElrDcUSlADZGLugeWSo9jyW/0jIiGB4Fkh84VV isjTYfv/4wThTZ67aiefbLtZrRfBYnNt93wKzmEl1Q5YCEeZXaJjVHrMDGR0dQj8 ca4LpSgB1qpoHq0hpJVcXGBmleEkoZnrAM6xe99VbuSkA4q+TrwmFO/S1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMspoyzjZuIn3RKieiQgk9BqcUsGMB8GA1UdIwQY MBaAFIox+L6jOwBWRG4zIe7eOhcPvXwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MGZjMGQtMGViOS00MjRjLWE2MzAt OWE1YzczYmZmYTIzLzEvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82MGZjMGQtMGViOS00MjRjLWE2MzAtOWE1YzczYmZmYTIz LzEvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0eNXo2v k8/SbzEPwL373C722NyZXeQTQSDmTnY8wxSXGYI6bjVOz13PQ58ANbz5FYzQxQZS PY2qpXCV7kMM/fHVPwfgWtOcpjx/nrVSiPsHSB5ydsXkakEXyid1oFwXkqCFQf2O 4rfhyw9s0M2T7XO5u+1VGssE8AMCaoT87s+Rp5dTi1sBmSuGB9rc9Zq3frfDHxeu Fu5StjKPhuLLPir67fh8YXNgcEIAIs3zMGB4GYiP8XrwcNmnRv/O4QkPDWrCoiCh A+H/SU7bB+iCVxxLgzeHdrElkEeJRf+BGW//G+qmFc2DmONHhYka69j6LQ0XhwfO v0k5ctaLxqe5ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:09 2025 by rpki-client