This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json) Hash identifier: g8QhsKvUtocjG1Th2MqF1jPbUdcQTYBQNQg/f7DhVBc= Subject key identifier: DF:82:B2:31:8C:95:66:B5:F8:61:F7:02:0E:AB:25:DB:2B:AA:81:74 Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45 Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45 Certificate serial: 019AF42E496DEC12BCDFD5587C36BE22292A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft Manifest number: 0A83 Signing time: Sat 06 Dec 2025 15:01:05 +0000 Manifest this update: Sat 06 Dec 2025 15:01:05 +0000 Manifest next update: Sun 07 Dec 2025 15:01:05 +0000 Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=) 2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: ise2DepgFdvlSU98W2hmk52+qOAfIZ/6CbXafkFbN9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:49:6d:ec:12:bc:df:d5:58:7c:36:be:22:29:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45 Validity Not Before: Dec 6 15:01:05 2025 GMT Not After : Dec 7 15:01:05 2025 GMT Subject: CN=df82b2318c9566b5f861f7020eab25db2baa8174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:64:d8:58:92:ef:71:e0:83:e8:80:fc:db: 48:22:bb:7e:ad:49:2d:11:99:19:53:6e:0d:49:17: 3d:c6:55:91:3f:85:33:0d:c1:70:45:cc:f6:33:64: 70:fc:e4:dd:af:20:97:75:58:e3:39:77:d2:91:19: 55:27:e5:a0:ac:bc:13:18:1f:e8:77:8e:07:cf:85: fd:7a:cf:93:2d:63:5c:e7:15:b9:ae:c6:64:d8:e6: ca:0e:15:98:78:25:51:55:e0:8d:00:e1:0d:ca:f6: 7c:4b:f8:11:42:a4:a3:cb:f8:97:c2:a8:12:35:27: 01:d6:41:1f:1b:63:28:81:2b:9f:2f:58:41:82:57: 07:d5:c2:82:15:7e:db:01:7b:1a:2f:d1:63:28:7d: 90:81:cd:e4:38:f6:05:72:06:77:e4:4e:5a:5d:5f: 0d:6b:00:c3:18:fa:52:70:62:e6:03:7e:54:f5:c7: 8d:38:1e:c7:50:83:3f:61:69:dd:80:34:06:66:7e: f4:16:f6:e3:b0:2f:b4:3d:69:94:2c:b5:2d:07:d1: 27:ac:5f:31:2a:e9:3b:11:4d:07:29:cb:85:65:00: 20:37:09:3e:0d:21:6c:48:c9:12:17:9b:f8:d2:91: f8:04:d8:b9:72:a2:45:35:b4:d5:fc:02:08:df:1a: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:82:B2:31:8C:95:66:B5:F8:61:F7:02:0E:AB:25:DB:2B:AA:81:74 X509v3 Authority Key Identifier: keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e3:75:65:61:74:5b:c2:3c:de:c3:fc:1e:b2:96:86:67:4b: 8d:99:44:25:b9:5b:1b:c3:dc:ac:77:31:19:9c:71:32:8d:06: 51:25:07:b3:77:85:8c:58:2e:f3:80:e8:1c:30:af:5f:82:1a: 06:25:e4:cc:05:62:2d:f7:48:74:5b:b1:51:9f:56:0d:c8:94: 25:b6:3b:ec:4b:1b:a8:f6:18:48:cf:c5:12:d8:86:67:27:f9: 7d:85:2d:57:a0:09:b8:c9:e6:d3:e0:01:5a:a6:08:f0:70:28: 42:21:da:00:4e:fb:79:b5:b0:56:a6:4f:c4:77:11:d0:de:f4: 4b:0e:1c:66:22:0d:1c:c6:7b:e8:ad:f6:d8:b3:c8:a9:d5:91: e9:ca:23:64:50:83:66:e9:fb:de:a6:92:db:83:65:d3:f2:95: b7:b7:93:89:d2:a4:a6:81:c0:b7:12:94:b7:ec:32:a7:bf:6e: c8:35:77:ef:a9:2c:78:fc:4b:6b:3a:2d:02:c1:93:43:5a:75: c2:a1:51:fa:01:90:af:71:c4:d9:49:f5:bc:45:84:fd:63:52: 3c:b3:04:d5:dc:36:42:bb:bf:1c:e8:19:03:55:c0:7d:89:4f: 18:58:c6:af:e4:3e:fc:98:82:3d:30:f1:be:c1:a2:a7:0d:42: 31:9f:3a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lklt7BK839VYfDa+IikqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTFhNzdmN2M0MjRlOTEyNzM5ODQ3M2JmYTNhMmI5NzI3 ZWJiNDUwHhcNMjUxMjA2MTUwMTA1WhcNMjUxMjA3MTUwMTA1WjAzMTEwLwYDVQQD EyhkZjgyYjIzMThjOTU2NmI1Zjg2MWY3MDIwZWFiMjVkYjJiYWE4MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA391k2FiS73Hgg+iA/NtIIrt+rUkt EZkZU24NSRc9xlWRP4UzDcFwRcz2M2Rw/OTdryCXdVjjOXfSkRlVJ+WgrLwTGB/o d44Hz4X9es+TLWNc5xW5rsZk2ObKDhWYeCVRVeCNAOENyvZ8S/gRQqSjy/iXwqgS NScB1kEfG2MogSufL1hBglcH1cKCFX7bAXsaL9FjKH2Qgc3kOPYFcgZ35E5aXV8N awDDGPpScGLmA35U9ceNOB7HUIM/YWndgDQGZn70FvbjsC+0PWmULLUtB9EnrF8x Kuk7EU0HKcuFZQAgNwk+DSFsSMkSF5v40pH4BNi5cqJFNbTV/AII3xpnjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+CsjGMlWa1+GH3Ag6rJdsrqoF0MB8GA1UdIwQY MBaAFCCRp398Qk6RJzmEc7+jorlyfrtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMt OWEyMjk3ODBlMGJlLzEvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMtOWEyMjk3ODBlMGJl LzEvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPON1ZWF0 W8I83sP8HrKWhmdLjZlEJblbG8PcrHcxGZxxMo0GUSUHs3eFjFgu84DoHDCvX4Ia BiXkzAViLfdIdFuxUZ9WDciUJbY77EsbqPYYSM/FEtiGZyf5fYUtV6AJuMnm0+AB WqYI8HAoQiHaAE77ebWwVqZPxHcR0N70Sw4cZiINHMZ76K322LPIqdWR6cojZFCD Zun73qaS24Nl0/KVt7eTidKkpoHAtxKUt+wyp79uyDV376ksePxLazotAsGTQ1p1 wqFR+gGQr3HE2Un1vEWE/WNSPLME1dw2Qru/HOgZA1XAfYlPGFjGr+Q+/JiCPTDx vsGipw1CMZ86mw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:18 2025 by rpki-client