This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: BqsYEfT5Xjcy5QSPAaArSoXunxB/H3vKU/LSgtp89SM= Subject key identifier: D4:EF:71:23:85:3E:96:3A:4D:3B:2C:88:34:BD:3D:85:0B:BA:7A:EC Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019AF1644AAB23244417C01CC8F8AE144B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: 2gcY3ooMDtENNPRWePtszkCDkgs.roa (hash: PLRCudoMhsoW+Bz0W12dYcuTY5aB41TFPhykgGGz39I=) 2: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 3: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 0uAICRqbOc35jMkk0NKT4hf8J30sin++gIppq0OyZlQ=) 4: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 5: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 6: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 7: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 8: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 9: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 10: XfeVybS-JJmUst6aHDqcoct7XK0.roa (hash: nYNNvQT6vs/H7ho6wlD5EX5eXnEUV3YAmuK8qzDOCmA=) 11: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=) 12: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 13: gmw7pLwjm6vuBLTk-rK2D36QKkA.roa (hash: COLQkZAyHhSJJDAy86nI3z09V/OufPhY+8kBah7bzeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4a:ab:23:24:44:17:c0:1c:c8:f8:ae:14:4b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=d4ef7123853e963a4d3b2c8834bd3d850bba7aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:ba:cf:88:71:4c:0b:68:ec:d8:1c:4d:32: 33:0b:60:b0:e1:ec:eb:2b:90:e2:c1:32:3b:45:38: 2e:b1:e4:a7:56:94:0d:37:87:35:ad:b3:a1:f2:3b: 57:98:95:ae:1f:9b:ab:d8:8d:14:d2:21:3d:00:97: 61:06:ff:3c:27:95:76:6b:4b:c1:d7:92:86:2a:74: 4b:2c:72:2c:f8:50:40:5d:65:c0:3d:eb:bb:7c:4f: d7:f2:fe:b2:67:75:5f:a0:84:f9:0c:80:c3:22:62: 7b:39:09:59:9e:d6:96:75:31:5e:08:0f:02:b1:ca: 26:da:98:d7:ab:f0:f9:b8:5c:d4:b2:a0:a0:66:4f: bf:f3:ea:10:2b:7c:46:b4:2b:9b:88:5a:a1:d0:6b: ac:97:0a:9d:11:93:b5:f5:83:a2:dc:93:e9:32:0c: dc:3a:a4:82:19:71:a4:fd:f1:ba:fa:18:eb:14:ab: 19:1f:7e:1f:2a:f3:86:65:f7:98:98:85:42:99:94: 5d:f9:4c:8d:ee:f9:d4:60:e9:e8:77:86:c2:24:79: 02:58:14:db:ba:30:55:a1:be:a5:e4:f5:42:21:00: cb:85:f8:09:7a:ab:b0:1b:0e:00:de:9d:8d:68:d9: 42:77:d6:18:6d:1e:5e:5f:7e:b2:7f:0e:de:a5:aa: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EF:71:23:85:3E:96:3A:4D:3B:2C:88:34:BD:3D:85:0B:BA:7A:EC X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0a:34:21:d3:7f:17:d1:47:09:a5:88:f3:ff:df:a1:f4:83: 8b:4e:b3:bd:ac:68:98:13:52:2c:54:03:9b:ea:04:97:9b:85: 61:25:ff:d0:0b:34:03:e3:8c:6e:65:ee:b1:0e:78:44:d7:ae: 39:6b:c4:ce:af:ee:28:dc:2b:bd:1b:4f:dc:b3:cd:29:4b:e5: 5b:3c:36:00:90:36:39:42:3b:2e:f9:92:bf:32:3f:f3:55:92: 21:3a:d6:48:f2:76:94:eb:56:d3:5d:6a:44:1c:41:90:0f:ca: d9:f1:90:2f:97:6a:63:42:07:f8:6b:28:e4:20:8a:eb:ad:6c: 02:59:0f:96:b3:a6:b1:1f:32:88:37:60:41:4f:94:66:b9:d8: ba:aa:eb:3b:94:5e:66:d4:3a:c2:58:cc:7e:75:73:13:2c:e8: 59:9c:e8:0d:aa:ab:e6:6c:db:f3:ce:74:fb:dd:7c:c2:0c:4f: 5c:83:c6:aa:05:24:9b:a7:f8:d3:d1:fb:d0:be:e4:14:b8:2f: f5:ed:59:8d:ac:4c:1c:2e:31:7f:b8:86:51:68:2e:59:90:7d: ab:12:35:0f:c0:ab:c4:dd:4c:9a:9d:ca:e0:92:ca:7d:d4:cd: c5:d9:23:4e:65:13:f5:54:f6:f3:ae:93:a0:da:8d:ba:46:59: 42:bf:14:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEqrIyREF8AcyPiuFEtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD EyhkNGVmNzEyMzg1M2U5NjNhNGQzYjJjODgzNGJkM2Q4NTBiYmE3YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzK6z4hxTAto7NgcTTIzC2Cw4ezr K5DiwTI7RTguseSnVpQNN4c1rbOh8jtXmJWuH5ur2I0U0iE9AJdhBv88J5V2a0vB 15KGKnRLLHIs+FBAXWXAPeu7fE/X8v6yZ3VfoIT5DIDDImJ7OQlZntaWdTFeCA8C scom2pjXq/D5uFzUsqCgZk+/8+oQK3xGtCubiFqh0GuslwqdEZO19YOi3JPpMgzc OqSCGXGk/fG6+hjrFKsZH34fKvOGZfeYmIVCmZRd+UyN7vnUYOnod4bCJHkCWBTb ujBVob6l5PVCIQDLhfgJequwGw4A3p2NaNlCd9YYbR5eX36yfw7eparg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTvcSOFPpY6TTssiDS9PYULunrsMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAo0IdN/ F9FHCaWI8//fofSDi06zvaxomBNSLFQDm+oEl5uFYSX/0As0A+OMbmXusQ54RNeu OWvEzq/uKNwrvRtP3LPNKUvlWzw2AJA2OUI7LvmSvzI/81WSITrWSPJ2lOtW011q RBxBkA/K2fGQL5dqY0IH+Gso5CCK661sAlkPlrOmsR8yiDdgQU+UZrnYuqrrO5Re ZtQ6wljMfnVzEyzoWZzoDaqr5mzb8850+918wgxPXIPGqgUkm6f409H70L7kFLgv 9e1ZjaxMHC4xf7iGUWguWZB9qxI1D8CrxN1Mmp3K4JLKfdTNxdkjTmUT9VT2866T oNqNukZZQr8U9A== -----END CERTIFICATE-----Generated at Sat Dec 6 05:49:19 2025 by rpki-client