This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft File: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json) Hash identifier: vjyh6Ic3QAVxfJvOWf4AGgZPHO76BUPJdxoNzv8FCEk= Subject key identifier: CD:78:29:63:0E:B2:20:33:A9:09:F1:6C:F7:8E:83:0F:13:10:41:7C Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Certificate serial: 019AF3C0D6CB0CCE8B89592A75C5FC2198A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 13:01:32 +0000 Manifest this update: Sat 06 Dec 2025 13:01:32 +0000 Manifest next update: Sun 07 Dec 2025 13:01:32 +0000 Files and hashes: 1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=) 2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: q3YUD0cTlOGtxIPsnkb2djRRsE1+wLJL6rUsfPO5UhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:d6:cb:0c:ce:8b:89:59:2a:75:c5:fc:21:98:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Validity Not Before: Dec 6 13:01:32 2025 GMT Not After : Dec 7 13:01:32 2025 GMT Subject: CN=cd7829630eb22033a909f16cf78e830f1310417c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:a9:b5:59:a8:3c:5e:69:6e:79:65:04:75: 1a:62:90:36:d9:9d:e7:15:30:c4:3c:39:da:1a:56: b0:9d:25:0f:1d:8a:89:e4:8a:54:0d:22:86:3b:c0: dc:8b:c8:84:c3:16:4e:86:b0:5f:ae:be:78:fb:6e: 09:e7:12:70:a0:c5:a5:36:ff:10:b3:ee:a1:3b:11: 05:5f:c7:04:9f:49:11:f5:2f:37:84:7d:84:a4:e7: a0:9e:6c:43:3e:9a:a2:42:f7:d7:c0:42:15:9f:ee: 45:02:7b:8c:90:ee:71:ab:19:59:04:f2:91:a6:47: ec:63:90:8b:1a:38:5c:97:75:79:5b:fe:86:43:e9: a2:19:0d:c3:32:fb:59:bf:96:0d:c3:1a:ac:24:ec: e0:ed:09:aa:0e:22:26:2a:34:60:1d:0e:1a:70:96: 7e:7f:b0:3a:e8:f3:b4:85:1f:e0:b5:f8:76:37:85: fd:b0:2a:e6:fb:4b:95:07:81:b3:a2:60:1e:b3:e4: e4:40:e9:64:cc:99:f4:7b:93:b5:32:2e:31:35:99: c9:7a:59:97:4f:45:c4:25:b1:e8:b7:3e:ac:cf:58: 07:d5:f8:53:ee:da:ba:82:63:f7:f7:7f:12:a7:ec: b1:5a:f9:09:22:d1:7d:5b:6e:6f:5d:dc:1c:8e:7c: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:78:29:63:0E:B2:20:33:A9:09:F1:6C:F7:8E:83:0F:13:10:41:7C X509v3 Authority Key Identifier: keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e3:f3:f7:45:76:cd:fe:65:f9:03:56:6d:10:f9:d3:d0:37: 8b:98:90:7a:c2:15:32:c7:29:4d:32:d5:5a:24:95:57:a9:f6: 51:c0:b9:db:b3:7d:a9:a7:c6:68:bb:da:cd:8e:2f:03:3c:b3: e2:c0:93:07:b2:91:00:6b:7e:43:9d:61:20:ca:e0:f3:6e:ef: a4:f4:83:4a:bf:93:1a:e5:7d:a6:32:97:73:6d:93:f3:fa:38: 3f:60:fd:c5:24:1b:b6:21:d4:15:d5:af:41:05:a6:77:33:21: 89:0d:e5:99:bf:30:cb:01:91:bc:6e:cf:7c:05:69:37:df:42: 83:f0:3c:70:15:09:6d:22:9e:1a:6c:0a:dd:2f:5d:90:d3:b8: c3:82:f7:c9:af:39:d9:81:89:12:ea:50:41:ee:35:ad:75:bd: 3b:ff:7b:fb:9d:83:24:9d:8d:ef:34:46:64:5a:ad:03:6c:58: 1c:a0:f9:8b:b2:86:00:a1:ba:2b:36:db:76:9d:34:14:51:34: 79:0d:13:8d:4f:a9:05:eb:1a:9f:01:3c:94:91:bc:c6:70:a3: 1c:a2:80:0c:a8:c5:15:6c:4b:3b:60:b5:e4:7f:96:cf:e6:64: fa:0d:e1:cc:cf:a1:56:f5:70:9c:28:a3:1e:72:31:0f:5d:ca: 6d:95:c9:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwNbLDM6LiVkqdcX8IZinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzhkMTE5MWY2NmYxZjAzMTVkZTVmNDVjYzE5NGQxY2Qx OWQxZmIwHhcNMjUxMjA2MTMwMTMyWhcNMjUxMjA3MTMwMTMyWjAzMTEwLwYDVQQD EyhjZDc4Mjk2MzBlYjIyMDMzYTkwOWYxNmNmNzhlODMwZjEzMTA0MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QOptVmoPF5pbnllBHUaYpA22Z3n FTDEPDnaGlawnSUPHYqJ5IpUDSKGO8Dci8iEwxZOhrBfrr54+24J5xJwoMWlNv8Q s+6hOxEFX8cEn0kR9S83hH2EpOegnmxDPpqiQvfXwEIVn+5FAnuMkO5xqxlZBPKR pkfsY5CLGjhcl3V5W/6GQ+miGQ3DMvtZv5YNwxqsJOzg7QmqDiImKjRgHQ4acJZ+ f7A66PO0hR/gtfh2N4X9sCrm+0uVB4GzomAes+TkQOlkzJn0e5O1Mi4xNZnJelmX T0XEJbHotz6sz1gH1fhT7tq6gmP3938Sp+yxWvkJItF9W25vXdwcjnwHHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM14KWMOsiAzqQnxbPeOgw8TEEF8MB8GA1UdIwQY MBaAFIo40RkfZvHwMV3l9FzBlNHNGdH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEt ODRmOGZkYzBjNjk4LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEtODRmOGZkYzBjNjk4 LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOPz90V2 zf5l+QNWbRD509A3i5iQesIVMscpTTLVWiSVV6n2UcC527N9qafGaLvazY4vAzyz 4sCTB7KRAGt+Q51hIMrg827vpPSDSr+TGuV9pjKXc22T8/o4P2D9xSQbtiHUFdWv QQWmdzMhiQ3lmb8wywGRvG7PfAVpN99Cg/A8cBUJbSKeGmwK3S9dkNO4w4L3ya85 2YGJEupQQe41rXW9O/97+52DJJ2N7zRGZFqtA2xYHKD5i7KGAKG6Kzbbdp00FFE0 eQ0TjU+pBesanwE8lJG8xnCjHKKADKjFFWxLO2C15H+Wz+Zk+g3hzM+hVvVwnCij HnIxD13KbZXJ4w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:58 2025 by rpki-client