This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json) Hash identifier: szMMFPLYSHv+pbXk1Ju8nU/pUK/F3U2V5M1i5t50oTA= Subject key identifier: DE:2E:E1:B0:E5:AC:8C:FC:92:5D:F6:A6:13:64:F5:09:DA:3B:59:36 Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad Certificate serial: 019AF2093F08FC8F495E39621F78DC52FB3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft Manifest number: 0E89 Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=) 2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: kUc9sGCiILCSgXUN0uGYdFBnf7mNu1Apzx0OmJlEI/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3f:08:fc:8f:49:5e:39:62:1f:78:dc:52:fb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=de2ee1b0e5ac8cfc925df6a61364f509da3b5936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:c7:6f:89:48:72:29:54:a8:e9:2f:4e:ca: 1f:45:63:a9:ba:91:1b:d1:df:7a:de:1b:e2:13:1a: 7a:6b:12:cd:09:23:3a:de:69:5b:29:37:ba:8c:77: 5e:0d:40:35:02:4c:64:f5:9a:b5:58:8c:a8:71:5d: ac:26:af:1b:3f:a9:82:77:38:a0:92:ca:1f:1a:8f: f5:05:c0:ef:c2:e4:87:64:68:12:99:7a:7e:1f:48: db:0f:f9:0d:c6:1a:53:74:fa:a9:f7:ae:ad:e4:d5: 4f:d0:50:2c:df:81:cc:a0:82:28:ce:71:67:b2:ea: 7d:7a:84:2b:a1:d8:2d:b8:8f:15:06:a8:4c:72:e4: f9:77:65:e4:87:17:c4:77:af:bc:fa:67:54:ee:c3: 3e:5d:2b:17:04:ea:84:52:cc:00:e3:35:73:70:02: 33:00:f4:a1:5d:d7:0e:75:b4:48:1b:1f:18:3d:47: ca:90:34:66:23:be:ca:2b:cc:f1:53:6c:95:ae:ba: 81:86:e4:75:50:50:88:d4:19:06:48:67:4c:7a:7d: 1d:3d:cb:b4:e8:74:c0:fb:0a:1a:10:24:9b:4d:fc: db:65:69:af:e4:ec:7c:4b:1e:07:7a:d6:58:41:6d: 01:5f:02:b1:76:4f:c4:4e:5a:3a:dd:49:30:4e:50: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2E:E1:B0:E5:AC:8C:FC:92:5D:F6:A6:13:64:F5:09:DA:3B:59:36 X509v3 Authority Key Identifier: keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:40:48:10:b1:e4:b4:13:13:53:0a:a7:9b:83:2a:41:bd:fa: 6c:57:f2:25:01:da:48:af:9b:c9:2f:a0:3d:b0:00:85:0e:ca: 2e:32:8e:c4:a1:98:15:8b:b9:47:e4:65:2e:0e:a4:4f:ca:4d: 1f:7a:b4:b1:63:c1:26:c1:f6:e3:cc:3e:f4:b2:68:b4:b1:99: cf:87:73:6b:f1:11:41:2f:67:ca:ed:03:29:3c:c2:d8:4c:01: 88:d5:47:bc:49:a0:df:60:3e:6f:57:8e:83:77:b0:03:02:0a: 39:df:60:6f:ab:b4:17:a0:15:09:6c:13:d7:dc:c6:b7:92:fa: bc:3d:91:10:cd:6a:46:cb:bd:bb:64:79:75:1a:34:c8:2b:c3: 57:19:58:a2:0d:fb:8b:09:66:18:dc:dd:19:c9:d9:ec:a9:cf: de:c4:6b:f7:47:92:92:a8:53:f2:02:d9:8b:64:81:99:60:c9: 05:e3:84:d2:65:e0:4e:5d:17:66:26:e4:95:89:87:39:9f:d2: cf:b5:b4:1f:36:f3:74:55:76:43:6b:8b:a9:c2:5e:2e:47:93: bd:46:1f:85:83:6b:d5:24:01:97:17:cd:00:0b:3f:c1:a2:15: 0d:70:8a:a3:65:d7:49:2f:d5:0c:62:cf:49:9c:c0:d7:8c:73: 00:fd:1d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCT8I/I9JXjliH3jcUvs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi ZTcwYWQwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD EyhkZTJlZTFiMGU1YWM4Y2ZjOTI1ZGY2YTYxMzY0ZjUwOWRhM2I1OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7XHb4lIcilUqOkvTsofRWOpupEb 0d963hviExp6axLNCSM63mlbKTe6jHdeDUA1Akxk9Zq1WIyocV2sJq8bP6mCdzig ksofGo/1BcDvwuSHZGgSmXp+H0jbD/kNxhpTdPqp966t5NVP0FAs34HMoIIoznFn sup9eoQrodgtuI8VBqhMcuT5d2XkhxfEd6+8+mdU7sM+XSsXBOqEUswA4zVzcAIz APShXdcOdbRIGx8YPUfKkDRmI77KK8zxU2yVrrqBhuR1UFCI1BkGSGdMen0dPcu0 6HTA+woaECSbTfzbZWmv5Ox8Sx4HetZYQW0BXwKxdk/ETlo63UkwTlDaSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4u4bDlrIz8kl32phNk9QnaO1k2MB8GA1UdIwQY MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt NjY4MTQ5MjYzNTM5LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5 LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkBIELHk tBMTUwqnm4MqQb36bFfyJQHaSK+byS+gPbAAhQ7KLjKOxKGYFYu5R+RlLg6kT8pN H3q0sWPBJsH248w+9LJotLGZz4dza/ERQS9nyu0DKTzC2EwBiNVHvEmg32A+b1eO g3ewAwIKOd9gb6u0F6AVCWwT19zGt5L6vD2REM1qRsu9u2R5dRo0yCvDVxlYog37 iwlmGNzdGcnZ7KnP3sRr90eSkqhT8gLZi2SBmWDJBeOE0mXgTl0XZibklYmHOZ/S z7W0HzbzdFV2Q2uLqcJeLkeTvUYfhYNr1SQBlxfNAAs/waIVDXCKo2XXSS/VDGLP SZzA14xzAP0dRA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:21 2025 by rpki-client