This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json) Hash identifier: MwO8nsSwa0QyFkDMJWCfBZPDwUPOeR+9Nk+ReZs5TJQ= Subject key identifier: DE:15:1F:D3:FC:1F:1E:B5:F1:9A:34:14:D3:E1:A5:AF:23:C0:70:02 Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Certificate serial: 019B32D5E0EB0FC1696692DA1E017B9A3531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 19:00:36 +0000 Manifest this update: Thu 18 Dec 2025 19:00:36 +0000 Manifest next update: Fri 19 Dec 2025 19:00:36 +0000 Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: fbkWNI4XNhnN36foaLlwxKpJLy9Q4vKMbjWcQam4VTQ=) 2: X26sGkQxHUd6ANya0fQeGbUaN2o.roa (hash: 72k/JceoXf+vjqY9cY+dmTPspA3n9C9nG7V6AU5QpNs=) 3: ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa (hash: 2iTmqWC/xN+Zadr2KJDlI5cxPwSqu9GxPi/bRx/hmlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:e0:eb:0f:c1:69:66:92:da:1e:01:7b:9a:35:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Validity Not Before: Dec 18 19:00:36 2025 GMT Not After : Dec 19 19:00:36 2025 GMT Subject: CN=de151fd3fc1f1eb5f19a3414d3e1a5af23c07002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:32:b8:f9:4e:77:0a:68:5b:41:66:31:1a: ab:e1:81:20:57:3a:48:6c:d5:ca:a3:ca:c0:b3:ef: 76:d6:c1:15:fb:f8:54:8b:a4:e1:f4:79:b2:2c:60: ea:ec:16:6d:6d:66:87:25:89:f1:1c:39:7f:1c:fb: e0:f3:85:0c:72:e0:bf:69:60:ee:6f:6a:44:60:6a: a4:6a:97:a8:56:66:ec:c3:73:ea:f1:b5:ba:a9:0d: 88:3b:bc:11:2e:30:92:f1:39:76:c0:ce:b7:49:f2: e1:43:87:a8:4f:a5:e8:df:b9:85:1d:2b:f3:a9:92: 59:b1:c9:32:da:b9:5e:53:83:64:f1:8c:40:24:a5: 0c:76:1a:1e:1c:6d:6e:6c:a7:27:19:37:df:65:4e: 40:e9:4a:51:d0:65:0c:da:bf:a9:c5:31:72:33:87: f8:fc:c6:06:3f:7c:a8:06:10:2f:f5:f3:13:af:b7: 1a:19:7f:18:d6:91:32:6b:ad:63:47:a1:64:14:f2: da:52:de:91:5f:66:72:bc:59:2b:b1:aa:d1:fa:41: 1e:42:e0:42:8b:b0:ca:cc:e4:6e:86:eb:71:8e:a4: af:09:e8:54:3b:ee:00:a7:fc:8f:fa:3e:b4:81:9d: f5:07:e4:ca:df:51:38:20:81:2e:d9:c2:3e:9d:52: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:15:1F:D3:FC:1F:1E:B5:F1:9A:34:14:D3:E1:A5:AF:23:C0:70:02 X509v3 Authority Key Identifier: keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a4:96:31:14:0c:1f:9a:d3:f0:87:cd:e0:13:fa:ba:22:3c: fd:c6:d6:c9:d2:3a:a7:5b:db:54:f5:9d:ee:46:a7:0f:b3:2e: 73:1b:e8:af:fe:71:52:10:89:9e:18:f8:70:3f:6e:62:fd:b0: 75:7d:de:22:0e:04:a8:20:5c:7a:f3:92:bb:f8:f2:42:60:91: dd:31:89:30:62:02:34:ea:68:df:a4:7c:4b:1b:eb:05:32:1c: f2:b2:66:a3:12:e1:a9:18:be:27:4a:2d:79:0f:6b:85:f1:9f: 2a:4f:1c:f0:ac:26:7d:7c:3b:95:7f:33:53:f8:d0:f2:68:8b: 8a:7e:d6:14:94:ce:a4:40:be:7e:26:ae:16:f1:60:84:e0:58: 9c:3c:b4:3a:15:37:14:26:1f:5f:1a:cb:3d:b0:41:4b:b5:b3: 54:70:92:a9:72:45:da:0d:d7:6e:b8:32:3b:40:b7:18:e7:c5: 70:23:0e:d6:4d:52:22:10:ea:ef:70:2d:ba:8c:6b:b4:f6:51: c4:5b:f0:b1:84:52:b0:45:fe:8b:42:29:d2:b3:0e:ae:1c:3b: ba:88:d2:bd:0b:3b:2a:f3:bd:19:71:9b:85:e4:c5:80:e0:d0: be:00:94:34:51:12:33:59:c0:7e:69:f7:b3:26:57:ab:c7:84: a2:b2:1a:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1eDrD8FpZpLaHgF7mjUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4 ZTkwMTkwHhcNMjUxMjE4MTkwMDM2WhcNMjUxMjE5MTkwMDM2WjAzMTEwLwYDVQQD EyhkZTE1MWZkM2ZjMWYxZWI1ZjE5YTM0MTRkM2UxYTVhZjIzYzA3MDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEUyuPlOdwpoW0FmMRqr4YEgVzpI bNXKo8rAs+921sEV+/hUi6Th9HmyLGDq7BZtbWaHJYnxHDl/HPvg84UMcuC/aWDu b2pEYGqkapeoVmbsw3Pq8bW6qQ2IO7wRLjCS8Tl2wM63SfLhQ4eoT6Xo37mFHSvz qZJZscky2rleU4Nk8YxAJKUMdhoeHG1ubKcnGTffZU5A6UpR0GUM2r+pxTFyM4f4 /MYGP3yoBhAv9fMTr7caGX8Y1pEya61jR6FkFPLaUt6RX2ZyvFkrsarR+kEeQuBC i7DKzORuhutxjqSvCehUO+4Ap/yP+j60gZ31B+TK31E4IIEu2cI+nVIYtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4VH9P8Hx618Zo0FNPhpa8jwHACMB8GA1UdIwQY MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKSWMRQM H5rT8IfN4BP6uiI8/cbWydI6p1vbVPWd7kanD7Mucxvor/5xUhCJnhj4cD9uYv2w dX3eIg4EqCBcevOSu/jyQmCR3TGJMGICNOpo36R8SxvrBTIc8rJmoxLhqRi+J0ot eQ9rhfGfKk8c8KwmfXw7lX8zU/jQ8miLin7WFJTOpEC+fiauFvFghOBYnDy0OhU3 FCYfXxrLPbBBS7WzVHCSqXJF2g3XbrgyO0C3GOfFcCMO1k1SIhDq73AtuoxrtPZR xFvwsYRSsEX+i0Ip0rMOrhw7uojSvQs7KvO9GXGbheTFgODQvgCUNFESM1nAfmn3 syZXq8eEorIaNA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:35:36 2025 by rpki-client