This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json) Hash identifier: 5zPYO8ug7NNYnIwm8/SOyrIVl13uwOysPHPfT0sI/Lk= Subject key identifier: 7D:32:F1:D9:54:F8:54:23:53:2E:92:E9:98:EE:34:86:A0:0C:EA:77 Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6 Certificate serial: 019AF208C1CF3CD5B8876B311D11BD963EB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft Manifest number: 0B18 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=) 2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: E8IK6UzP/oEPHcimCG8kzu7sskvdSwncdW5gwRZpgo4=) 3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c1:cf:3c:d5:b8:87:6b:31:1d:11:bd:96:3e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=7d32f1d954f85423532e92e998ee3486a00cea77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:eb:b5:70:ad:5a:3a:1d:9a:98:3a:25:bd: df:cf:39:95:70:6f:33:d9:7e:7d:84:9a:4f:64:0d: d4:eb:fc:ce:6d:0c:0c:76:22:28:cd:62:5f:b6:aa: 0f:3b:e1:a9:c7:7a:c5:d4:8a:6d:cf:b1:75:6a:ee: 44:58:88:df:9d:ec:91:c4:61:5c:78:ae:a9:41:ca: da:c9:cc:df:42:0a:dc:91:18:f4:c0:1c:85:44:64: da:2a:ba:88:bf:ae:77:f5:f2:1d:ae:a6:e8:d5:60: ca:4d:7c:79:89:d2:af:19:c7:72:25:62:67:2e:4e: 2b:77:01:fc:6b:fc:f2:64:41:66:8c:74:79:ab:37: 69:81:7e:5a:86:12:d8:d5:0c:cb:fb:c6:60:34:cd: 7b:53:7d:75:05:80:06:7a:e4:73:01:15:10:75:e8: e8:2a:15:dd:a6:d4:97:5e:73:85:88:42:51:b0:1a: 42:66:82:8a:be:ef:59:58:9c:dc:a6:9d:f0:ff:bb: 85:0b:03:a8:10:19:b8:b2:2f:15:36:5f:24:2b:e0: 64:1b:0c:2f:fd:84:d0:fc:9f:5b:10:7c:cd:b5:0d: 28:86:5d:ff:e0:9f:21:b2:09:79:93:3e:35:99:f1: c6:c1:8d:4a:2a:e9:e4:33:ae:cd:d9:91:56:87:d0: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:32:F1:D9:54:F8:54:23:53:2E:92:E9:98:EE:34:86:A0:0C:EA:77 X509v3 Authority Key Identifier: keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2e:34:11:e0:8f:b4:96:b4:70:8b:00:df:d1:f3:b3:18:26: fb:7b:b1:d0:06:3b:4b:e5:13:25:88:e1:d2:c9:a8:df:fc:06: f5:82:9f:8f:a5:06:7f:a0:07:09:d8:07:8d:4e:a0:85:49:a1: 06:72:b6:19:34:b6:3f:54:d4:ae:a5:a1:f0:4c:db:4f:f3:cd: 8d:4f:d8:78:e5:8e:2c:6e:53:0b:36:65:88:13:d0:6d:18:e1: dc:0d:7c:e5:92:52:87:5b:87:5c:b3:d8:8a:bb:15:9b:3a:27: 75:df:60:d4:42:07:cc:73:ab:a6:ae:10:70:1b:e6:7d:3f:1d: 59:ea:e3:12:94:2f:47:3e:59:ab:c9:86:4f:41:91:9c:1c:55: 3a:54:f3:77:e5:1e:4f:d8:37:1b:ac:19:fb:c1:5f:7a:6d:d2: 2d:8f:50:3d:c2:5e:ab:1f:f4:03:a6:05:f4:5c:81:f0:c9:0e: ed:59:2d:fa:7d:41:8f:f9:11:48:51:c1:d8:5f:4f:bc:a9:61: 27:ce:78:b0:31:ce:e1:91:17:fa:0e:b5:61:3a:cc:41:3e:6f: dc:29:b6:cd:aa:39:b1:9c:dc:fc:26:81:d2:47:08:f4:b6:fa: 4f:99:36:ec:b0:c0:fc:f6:d0:55:71:29:3a:02:19:14:b8:93: 0b:d1:75:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMHPPNW4h2sxHRG9lj60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi OWQ2ZDYwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg3ZDMyZjFkOTU0Zjg1NDIzNTMyZTkyZTk5OGVlMzQ4NmEwMGNlYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtezrtXCtWjodmpg6Jb3fzzmVcG8z 2X59hJpPZA3U6/zObQwMdiIozWJftqoPO+Gpx3rF1Iptz7F1au5EWIjfneyRxGFc eK6pQcrayczfQgrckRj0wByFRGTaKrqIv6539fIdrqbo1WDKTXx5idKvGcdyJWJn Lk4rdwH8a/zyZEFmjHR5qzdpgX5ahhLY1QzL+8ZgNM17U311BYAGeuRzARUQdejo KhXdptSXXnOFiEJRsBpCZoKKvu9ZWJzcpp3w/7uFCwOoEBm4si8VNl8kK+BkGwwv /YTQ/J9bEHzNtQ0ohl3/4J8hsgl5kz41mfHGwY1KKunkM67N2ZFWh9BJswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0y8dlU+FQjUy6S6ZjuNIagDOp3MB8GA1UdIwQY MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQi40EeCP tJa0cIsA39Hzsxgm+3ux0AY7S+UTJYjh0smo3/wG9YKfj6UGf6AHCdgHjU6ghUmh BnK2GTS2P1TUrqWh8EzbT/PNjU/YeOWOLG5TCzZliBPQbRjh3A185ZJSh1uHXLPY irsVmzondd9g1EIHzHOrpq4QcBvmfT8dWerjEpQvRz5Zq8mGT0GRnBxVOlTzd+Ue T9g3G6wZ+8Ffem3SLY9QPcJeqx/0A6YF9FyB8MkO7Vkt+n1Bj/kRSFHB2F9PvKlh J854sDHO4ZEX+g61YTrMQT5v3Cm2zao5sZzc/CaB0kcI9Lb6T5k27LDA/PbQVXEp OgIZFLiTC9F1iA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:50 2025 by rpki-client