This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json) Hash identifier: VKzp2BVQnsPttgurDL81QXQ8zXXd+MkBATKFHBF4Pag= Subject key identifier: 54:E2:E6:A8:61:76:AC:D3:D5:CF:20:B9:55:57:E2:16:1C:D8:AF:6A Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Certificate serial: 019AF50A26BA2DF9DC64FF7D23EDCBDD79D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft Manifest number: 0836 Signing time: Sat 06 Dec 2025 19:01:14 +0000 Manifest this update: Sat 06 Dec 2025 19:01:14 +0000 Manifest next update: Sun 07 Dec 2025 19:01:14 +0000 Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=) 2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: +1mwAGqA/w+pL+ayTwawaONndxbD05o2EwdoLi6ELJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:26:ba:2d:f9:dc:64:ff:7d:23:ed:cb:dd:79:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Validity Not Before: Dec 6 19:01:14 2025 GMT Not After : Dec 7 19:01:14 2025 GMT Subject: CN=54e2e6a86176acd3d5cf20b95557e2161cd8af6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f8:38:c6:02:60:c7:4e:ed:25:54:b5:f0:4d: 10:c5:0b:09:34:84:cc:16:38:3d:b1:21:be:83:7e: e5:c3:5e:ed:87:1e:77:00:d0:bb:60:aa:fc:d1:ad: da:79:c7:f9:41:10:1f:b5:41:f5:c4:fb:46:79:cb: ee:c5:d1:b9:d1:ea:91:cd:c4:ca:82:12:fa:c0:df: 19:b2:82:c5:a8:24:aa:71:69:ec:09:ab:a7:96:1f: 6d:d7:0e:a5:21:a5:63:1e:1a:f6:40:b4:6f:ff:2e: 1b:31:96:06:63:1d:46:4a:69:2c:59:d6:74:f7:d3: c3:3c:13:96:8d:05:35:18:7b:56:11:06:23:31:f6: 1e:29:5b:1a:20:97:72:bd:99:f4:21:39:d3:60:ba: cb:2f:3b:74:64:81:e6:8c:28:f0:a7:93:29:88:25: e6:ce:e5:24:d1:90:8a:2b:5d:6b:b8:0f:a1:c8:7e: 15:a6:9b:72:d7:2b:40:32:a7:b8:a0:eb:ca:8e:0a: b0:14:c8:00:1c:d2:9c:27:c7:9b:03:6d:4f:6f:e4: 9f:97:07:89:f6:93:d3:ed:22:af:83:b1:bb:91:5d: 8a:1b:b6:38:44:52:ef:b1:75:57:21:95:c5:a5:35: ea:39:bd:5a:37:16:1e:f8:d3:53:df:f4:86:59:09: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E2:E6:A8:61:76:AC:D3:D5:CF:20:B9:55:57:E2:16:1C:D8:AF:6A X509v3 Authority Key Identifier: keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2e:76:42:68:74:c8:53:ef:45:26:ad:e9:75:3b:5e:73:65: 36:59:8b:bb:7f:1c:b0:b2:f9:21:14:d0:95:6b:8e:9d:61:ea: 31:04:b8:c1:ab:9f:2d:52:d6:f7:f3:13:25:28:17:a8:f2:22: d3:91:b5:d7:c6:fe:0d:df:31:c1:a5:fc:be:0c:13:39:4b:4e: 19:4d:36:73:9f:67:45:ca:5f:0e:81:ae:9e:5f:24:42:e5:fc: 7e:94:5f:96:ab:82:b6:48:73:c0:c9:73:c3:1a:73:5c:d1:70: 29:8f:7a:25:45:f0:4a:62:4e:35:fd:24:4e:97:0e:b9:a1:76: 8f:0f:af:18:90:6c:60:6a:89:89:8b:6c:de:e2:03:c5:4b:10: 65:6f:57:a4:37:59:01:fe:20:49:18:e2:0a:36:dd:f8:11:f4: 1c:7a:ac:1a:55:1e:dc:29:77:9d:2c:b6:25:fa:b8:78:9d:f9: f4:e3:9f:a1:09:a4:a2:fb:9e:88:cc:ff:27:cb:52:da:6e:9a: a1:42:39:f2:e9:95:8f:c1:42:c3:9e:07:1a:49:c1:fb:93:92: 5e:96:5b:60:c5:ed:37:8c:ef:2e:c6:42:d9:2f:cc:fc:87:3b: 7f:ed:4c:77:d7:de:97:4d:0b:a7:1d:34:b2:5c:b1:f7:d7:5a: 11:00:9d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cia6LfncZP99I+3L3XnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl NmRhNDEwHhcNMjUxMjA2MTkwMTE0WhcNMjUxMjA3MTkwMTE0WjAzMTEwLwYDVQQD Eyg1NGUyZTZhODYxNzZhY2QzZDVjZjIwYjk1NTU3ZTIxNjFjZDhhZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvg4xgJgx07tJVS18E0QxQsJNITM Fjg9sSG+g37lw17thx53ANC7YKr80a3aecf5QRAftUH1xPtGecvuxdG50eqRzcTK ghL6wN8ZsoLFqCSqcWnsCaunlh9t1w6lIaVjHhr2QLRv/y4bMZYGYx1GSmksWdZ0 99PDPBOWjQU1GHtWEQYjMfYeKVsaIJdyvZn0ITnTYLrLLzt0ZIHmjCjwp5MpiCXm zuUk0ZCKK11ruA+hyH4Vppty1ytAMqe4oOvKjgqwFMgAHNKcJ8ebA21Pb+SflweJ 9pPT7SKvg7G7kV2KG7Y4RFLvsXVXIZXFpTXqOb1aNxYe+NNT3/SGWQn2uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTi5qhhdqzT1c8guVVX4hYc2K9qMB8GA1UdIwQY MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS52Qmh0 yFPvRSat6XU7XnNlNlmLu38csLL5IRTQlWuOnWHqMQS4waufLVLW9/MTJSgXqPIi 05G118b+Dd8xwaX8vgwTOUtOGU02c59nRcpfDoGunl8kQuX8fpRflquCtkhzwMlz wxpzXNFwKY96JUXwSmJONf0kTpcOuaF2jw+vGJBsYGqJiYts3uIDxUsQZW9XpDdZ Af4gSRjiCjbd+BH0HHqsGlUe3Cl3nSy2Jfq4eJ359OOfoQmkovueiMz/J8tS2m6a oUI58umVj8FCw54HGknB+5OSXpZbYMXtN4zvLsZC2S/M/Ic7f+1Md9fel00Lpx00 slyx99daEQCd4A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:16:49 2025 by rpki-client