This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json) Hash identifier: W7gQc3sL6rMXK7C/PojfDxZhyE7b2UG8KZkNOItRB7c= Subject key identifier: 01:46:83:83:57:2B:36:28:9C:52:BB:A3:64:5B:12:4B:DF:BF:8E:F3 Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Certificate serial: 019B274019A93805A3F3687B28578F64AD5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft Manifest number: 0850 Signing time: Tue 16 Dec 2025 13:01:10 +0000 Manifest this update: Tue 16 Dec 2025 13:01:10 +0000 Manifest next update: Wed 17 Dec 2025 13:01:10 +0000 Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=) 2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: fuDYAReTK2N9aqqvQQimeuj0rnHCPXI9iygz4rrqHKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:19:a9:38:05:a3:f3:68:7b:28:57:8f:64:ad:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Validity Not Before: Dec 16 13:01:10 2025 GMT Not After : Dec 17 13:01:10 2025 GMT Subject: CN=01468383572b36289c52bba3645b124bdfbf8ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:e2:9a:51:fc:4d:b4:a0:f4:3c:71:dc:6f: 75:15:f5:37:c7:88:a6:2e:08:5e:27:2c:13:87:2e: 1e:99:fa:5f:2d:08:09:fd:8c:cc:7e:78:c6:f2:2f: a8:de:7e:c6:01:d4:44:75:8a:4f:75:2c:3e:61:fb: 5c:05:f9:b6:9e:2f:47:98:b7:da:e7:39:81:09:f1: 4b:0a:5d:ba:38:cc:ca:b5:e6:9c:0a:6e:25:ad:c4: 26:f5:f1:63:66:87:a9:e3:84:de:82:a3:a9:64:58: 5a:0f:1d:e3:3a:b0:1e:c2:11:d4:ae:b4:9e:23:40: 33:18:81:9e:81:10:65:d9:eb:fc:40:aa:69:7b:33: 39:3d:2e:a5:bf:4f:77:a0:a8:6c:de:29:de:ae:72: be:e4:24:e3:bd:d9:b7:2e:ea:94:1b:a9:d9:d7:be: 4f:55:2e:ac:63:d4:73:92:7d:bf:bb:3a:98:a5:9b: b5:10:02:53:42:49:58:87:b4:ee:d4:09:8e:c1:22: d0:3d:3b:1b:94:47:5a:8e:f0:ab:13:6a:36:7d:e6: bf:06:6e:7e:71:2a:0f:a9:6a:3a:7e:81:3d:4e:eb: 1e:2d:9d:f8:51:db:46:48:ce:1a:2a:2b:82:0f:f8: 2c:6e:82:7d:eb:2d:ac:a1:bb:f8:32:09:95:b2:d7: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:46:83:83:57:2B:36:28:9C:52:BB:A3:64:5B:12:4B:DF:BF:8E:F3 X509v3 Authority Key Identifier: keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:99:28:e9:20:cb:20:3a:7e:b5:73:72:7a:15:2d:65:ca:fe: 42:b5:1c:67:f7:19:3c:ba:7a:a4:bb:49:71:03:78:26:f7:6f: 03:84:79:1d:13:68:5d:4c:13:34:c2:22:c9:10:3e:d9:ec:cd: e5:fc:a4:f8:3b:35:1c:cc:47:16:75:69:36:1e:bb:8a:b2:63: 09:25:26:de:2c:9e:22:93:89:e3:a9:12:4f:6c:14:c0:e1:45: 4d:c4:f5:b0:1e:d8:42:ec:2c:7f:a7:1d:f6:ba:7c:12:11:9a: 6d:1c:f3:92:63:ff:eb:41:1a:42:cd:6d:dd:07:be:95:60:21: 0e:01:b0:af:c7:f5:db:ea:98:e7:06:6f:be:19:99:44:07:1c: 61:b4:7c:45:9d:5a:8c:9e:32:06:93:d9:2a:bd:3f:ed:e8:37: f5:c7:ea:3d:f8:8c:23:f9:ec:8e:d8:19:83:f8:8a:5c:b7:4e: 39:b8:cf:3d:24:50:da:40:4e:5b:2b:3e:55:a9:19:1e:e0:af: 79:14:05:cd:4a:6c:0f:78:7d:b4:ae:a8:c8:81:81:01:94:54: 0c:da:b6:b3:8c:71:76:b5:3c:66:2c:07:d5:e1:db:a8:2e:23: 32:61:2d:5a:96:77:22:5e:f1:57:00:b4:b4:60:41:c1:e6:bd: 55:82:81:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQBmpOAWj82h7KFePZK1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl NmRhNDEwHhcNMjUxMjE2MTMwMTEwWhcNMjUxMjE3MTMwMTEwWjAzMTEwLwYDVQQD EygwMTQ2ODM4MzU3MmIzNjI4OWM1MmJiYTM2NDViMTI0YmRmYmY4ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArebimlH8TbSg9Dxx3G91FfU3x4im LgheJywThy4emfpfLQgJ/YzMfnjG8i+o3n7GAdREdYpPdSw+YftcBfm2ni9HmLfa 5zmBCfFLCl26OMzKteacCm4lrcQm9fFjZoep44TegqOpZFhaDx3jOrAewhHUrrSe I0AzGIGegRBl2ev8QKppezM5PS6lv093oKhs3inernK+5CTjvdm3LuqUG6nZ175P VS6sY9Rzkn2/uzqYpZu1EAJTQklYh7Tu1AmOwSLQPTsblEdajvCrE2o2fea/Bm5+ cSoPqWo6foE9TuseLZ34UdtGSM4aKiuCD/gsboJ96y2sobv4MgmVstdkkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFGg4NXKzYonFK7o2RbEkvfv47zMB8GA1UdIwQY MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpko6SDL IDp+tXNyehUtZcr+QrUcZ/cZPLp6pLtJcQN4JvdvA4R5HRNoXUwTNMIiyRA+2ezN 5fyk+Ds1HMxHFnVpNh67irJjCSUm3iyeIpOJ46kST2wUwOFFTcT1sB7YQuwsf6cd 9rp8EhGabRzzkmP/60EaQs1t3Qe+lWAhDgGwr8f12+qY5wZvvhmZRAccYbR8RZ1a jJ4yBpPZKr0/7eg39cfqPfiMI/nsjtgZg/iKXLdOObjPPSRQ2kBOWys+VakZHuCv eRQFzUpsD3h9tK6oyIGBAZRUDNq2s4xxdrU8ZiwH1eHbqC4jMmEtWpZ3Il7xVwC0 tGBBwea9VYKBYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:50 2025 by rpki-client