This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json) Hash identifier: 8VZxuOHjocqKrefEX7JKrNzZowEQopFJa633I9bKJVg= Subject key identifier: FA:8D:12:B9:C2:30:9A:45:22:6E:10:1D:DC:6D:68:E5:B6:42:C8:90 Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30 Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430 Certificate serial: 019AF12DAF3718B213C6E4D9DFEF171C0493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft Manifest number: 126D Signing time: Sat 06 Dec 2025 01:01:34 +0000 Manifest this update: Sat 06 Dec 2025 01:01:34 +0000 Manifest next update: Sun 07 Dec 2025 01:01:34 +0000 Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: sc1k1+ycQP/TdfvmMALbX1BNM9kSKuhqyc4Mc3RtNew=) 2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:af:37:18:b2:13:c6:e4:d9:df:ef:17:1c:04:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430 Validity Not Before: Dec 6 01:01:34 2025 GMT Not After : Dec 7 01:01:34 2025 GMT Subject: CN=fa8d12b9c2309a45226e101ddc6d68e5b642c890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:e3:3b:e9:a8:42:d3:d9:08:71:da:de:3e: 75:52:90:84:94:d6:2f:70:a0:63:0f:07:68:9e:51: bf:c6:61:d0:e4:81:68:98:c6:c8:3e:8e:c7:6e:99: aa:67:d4:df:a7:dd:5d:2d:be:ec:45:ef:77:ea:6b: af:4a:53:09:71:49:07:86:18:7a:8a:95:dc:e1:a4: 91:71:af:e4:e9:29:bf:41:0e:f5:61:e1:20:0c:81: 7d:c2:37:e5:85:3e:f8:a6:de:6f:a7:07:67:e1:d6: 29:6a:da:96:94:22:46:e9:a7:4b:80:cb:e5:f1:0b: 85:bb:3b:80:dd:4d:ac:17:32:c0:09:b4:d8:65:2d: 41:f7:0e:a4:37:15:15:51:c3:bd:81:f3:cb:07:69: 9d:e9:77:6b:20:d0:f7:ca:33:dd:49:95:63:e7:9a: 21:0d:63:94:d1:d3:06:b5:62:43:82:bc:4c:59:e5: 36:3a:e1:1b:3b:27:a9:c8:6f:f0:35:93:12:d1:ed: d2:1d:05:a0:bc:3a:07:ce:a5:9c:c6:32:28:27:17: 02:24:38:84:81:48:f5:82:fa:cc:49:e3:4c:41:2c: 1b:26:62:33:15:a1:d2:45:28:e1:8b:1e:3f:ba:01: 3d:71:39:74:41:8c:03:07:e6:76:3d:69:bd:5e:ea: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8D:12:B9:C2:30:9A:45:22:6E:10:1D:DC:6D:68:E5:B6:42:C8:90 X509v3 Authority Key Identifier: keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:46:ca:29:d4:8a:07:90:0d:72:59:6f:50:7d:ed:f7:7a:ca: 60:79:00:d0:3a:77:90:81:7a:93:1e:a4:7d:76:1f:ab:18:bf: 4f:64:6a:3f:a5:50:c1:e1:f1:85:84:b8:61:ba:63:dc:70:17: 4d:ba:32:f6:ec:94:35:f8:f7:21:e0:8a:0c:f3:6f:ef:48:85: 2f:6f:b4:e5:91:4c:b4:e8:c5:88:a9:6e:16:97:2d:74:2b:5c: 86:5d:e9:48:10:53:4d:48:1a:82:d4:a3:a5:da:62:fa:8c:41: 91:cf:03:16:bb:d5:94:7e:05:5b:2a:97:bc:51:22:82:b5:06: 7f:48:1c:f3:30:4b:63:13:20:5e:b8:1f:c5:cd:0c:de:b8:38: 7e:24:9b:67:d2:44:08:37:8b:13:32:9a:86:82:76:31:11:87: f7:07:a5:57:e2:5e:44:86:34:35:3d:96:ab:a2:03:c4:f2:28: c6:93:a7:dc:3e:c0:1c:e7:ed:e2:1c:3a:d9:ab:c1:97:1c:bd: b0:ac:be:64:51:31:65:28:44:ae:02:e0:be:69:6b:f0:ca:2d: da:f5:ce:61:48:b8:84:b5:07:ce:b7:52:06:a1:b5:dd:c0:a3: a0:96:fd:a9:6e:fe:1c:fd:9c:97:e1:44:e8:e6:a9:62:37:35: 30:33:fa:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLa83GLITxuTZ3+8XHASTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMDVmZTYzODAyNDk0MjU1NTY4M2Q3NjVlZGY3ZmE5M2Yy ZTg0MzAwHhcNMjUxMjA2MDEwMTM0WhcNMjUxMjA3MDEwMTM0WjAzMTEwLwYDVQQD EyhmYThkMTJiOWMyMzA5YTQ1MjI2ZTEwMWRkYzZkNjhlNWI2NDJjODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA703jO+moQtPZCHHa3j51UpCElNYv cKBjDwdonlG/xmHQ5IFomMbIPo7HbpmqZ9Tfp91dLb7sRe936muvSlMJcUkHhhh6 ipXc4aSRca/k6Sm/QQ71YeEgDIF9wjflhT74pt5vpwdn4dYpatqWlCJG6adLgMvl 8QuFuzuA3U2sFzLACbTYZS1B9w6kNxUVUcO9gfPLB2md6XdrIND3yjPdSZVj55oh DWOU0dMGtWJDgrxMWeU2OuEbOyepyG/wNZMS0e3SHQWgvDoHzqWcxjIoJxcCJDiE gUj1gvrMSeNMQSwbJmIzFaHSRSjhix4/ugE9cTl0QYwDB+Z2PWm9XuqJVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqNErnCMJpFIm4QHdxtaOW2QsiQMB8GA1UdIwQY MBaAFCIF/mOAJJQlVWg9dl7ff6k/LoQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMt ODRlMTFlNTFmMTM0LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMtODRlMTFlNTFmMTM0 LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0bKKdSK B5ANcllvUH3t93rKYHkA0Dp3kIF6kx6kfXYfqxi/T2RqP6VQweHxhYS4Ybpj3HAX Tboy9uyUNfj3IeCKDPNv70iFL2+05ZFMtOjFiKluFpctdCtchl3pSBBTTUgagtSj pdpi+oxBkc8DFrvVlH4FWyqXvFEigrUGf0gc8zBLYxMgXrgfxc0M3rg4fiSbZ9JE CDeLEzKahoJ2MRGH9welV+JeRIY0NT2Wq6IDxPIoxpOn3D7AHOft4hw62avBlxy9 sKy+ZFExZShErgLgvmlr8Mot2vXOYUi4hLUHzrdSBqG13cCjoJb9qW7+HP2cl+FE 6OapYjc1MDP6Og== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:11 2025 by rpki-client