This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json) Hash identifier: jAveDSgUxm/NIp2ePHLsw6vBms7TVk1ASpMt1Rjl2KQ= Subject key identifier: D6:97:4F:07:CC:40:B8:9A:0C:96:74:E6:DB:79:F5:7D:99:C4:89:F2 Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Certificate serial: 019AF31C5B1B354542A1FC70FF8CCD91E747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: 6V5pj+mq4mUzOZI7RI6IfNissSkAO5lOwJRgQVDa6Ps=) 2: X26sGkQxHUd6ANya0fQeGbUaN2o.roa (hash: 72k/JceoXf+vjqY9cY+dmTPspA3n9C9nG7V6AU5QpNs=) 3: ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa (hash: 2iTmqWC/xN+Zadr2KJDlI5cxPwSqu9GxPi/bRx/hmlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5b:1b:35:45:42:a1:fc:70:ff:8c:cd:91:e7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=d6974f07cc40b89a0c9674e6db79f57d99c489f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:27:c5:96:85:1e:fa:18:13:d7:75:11:ed:74: cb:08:80:b9:e6:b4:0d:c1:97:ef:6a:57:c2:d3:f1: ac:5f:82:27:d6:7c:8c:0a:0e:d3:1a:22:19:4a:4c: c4:ab:8c:4e:5a:d9:2e:cb:80:d4:e8:a3:62:d9:88: 4b:e6:da:3c:3f:99:64:87:b7:6d:54:61:ea:c3:88: 9f:3e:7c:92:e4:3f:58:62:82:73:20:78:2b:24:e0: b8:8f:db:7f:24:b8:9a:43:95:41:da:2d:f9:4e:ca: f3:8a:83:57:1b:e8:9f:1e:e0:7e:55:a3:04:43:fd: 20:64:09:a9:94:4d:58:61:52:e1:a3:54:cb:43:ec: 26:4e:9a:76:16:1d:66:cb:08:53:91:01:06:a2:ce: 61:13:b2:2d:7e:cc:1d:0a:aa:ba:3b:b1:81:5c:cf: f0:91:b9:eb:13:4f:6a:91:30:b2:7a:b7:a6:a3:e4: 6e:35:1b:dd:29:21:46:56:87:5b:ee:e9:e6:75:d7: 6d:b8:f1:9f:6e:ad:fe:14:bf:b1:9d:e5:65:0d:88: d3:d6:3c:55:11:c8:58:29:54:03:bd:a3:06:c9:a1: 73:3b:54:f2:de:a7:ba:fe:9b:c1:5b:0a:6f:e8:0a: 07:44:cf:b8:83:b5:10:5c:50:c6:28:a8:3f:60:cd: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:4F:07:CC:40:B8:9A:0C:96:74:E6:DB:79:F5:7D:99:C4:89:F2 X509v3 Authority Key Identifier: keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:68:3e:d1:a1:cc:db:9b:76:3a:b6:91:e8:af:c5:29:4f:69: c4:75:68:6b:dc:cb:be:f9:40:21:d8:d5:90:23:c6:10:7b:1e: 2c:e2:f2:ed:9c:2c:48:d3:69:87:ce:52:7b:78:4f:dd:21:31: 19:cc:8c:01:ef:62:c2:c9:d3:00:62:a7:bc:2f:ea:89:73:f0: 91:02:b8:5f:b3:dd:50:7f:3c:f1:29:cf:30:6c:ae:6d:12:ed: 67:ae:92:d7:61:b4:d6:ef:e6:6b:94:8b:21:88:19:cc:7c:96: b7:28:52:6d:33:2e:7f:f1:85:12:a1:e4:9e:d8:b4:68:29:fe: a5:40:eb:f3:33:b3:34:72:36:6e:13:4b:22:31:77:28:37:7e: 1f:d8:27:58:aa:e0:db:53:a0:c0:97:49:aa:80:82:e5:20:07: d7:cb:1e:fd:ad:d2:2f:5a:a0:6f:8b:26:c1:b9:b7:70:fb:df: 65:ac:ba:74:07:37:11:77:64:ee:e3:c8:0d:b3:b1:38:88:c8: 6b:c7:e7:f0:91:30:d0:95:b3:1b:7d:5b:d1:f7:0e:b4:92:ed: 53:ba:b6:ab:51:28:12:f9:bb:a5:a8:1f:89:f6:b3:92:b7:d1: c6:1b:44:e4:a4:0b:78:9e:d9:2c:28:9f:10:69:ad:4c:ff:0e: f2:7d:6b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFsbNUVCofxw/4zNkedHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4 ZTkwMTkwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD EyhkNjk3NGYwN2NjNDBiODlhMGM5Njc0ZTZkYjc5ZjU3ZDk5YzQ4OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ifFloUe+hgT13UR7XTLCIC55rQN wZfvalfC0/GsX4In1nyMCg7TGiIZSkzEq4xOWtkuy4DU6KNi2YhL5to8P5lkh7dt VGHqw4ifPnyS5D9YYoJzIHgrJOC4j9t/JLiaQ5VB2i35TsrzioNXG+ifHuB+VaME Q/0gZAmplE1YYVLho1TLQ+wmTpp2Fh1mywhTkQEGos5hE7ItfswdCqq6O7GBXM/w kbnrE09qkTCyeremo+RuNRvdKSFGVodb7unmdddtuPGfbq3+FL+xneVlDYjT1jxV EchYKVQDvaMGyaFzO1Ty3qe6/pvBWwpv6AoHRM+4g7UQXFDGKKg/YM1bVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaXTwfMQLiaDJZ05tt59X2ZxInyMB8GA1UdIwQY MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWg+0aHM 25t2OraR6K/FKU9pxHVoa9zLvvlAIdjVkCPGEHseLOLy7ZwsSNNph85Se3hP3SEx GcyMAe9iwsnTAGKnvC/qiXPwkQK4X7PdUH888SnPMGyubRLtZ66S12G01u/ma5SL IYgZzHyWtyhSbTMuf/GFEqHknti0aCn+pUDr8zOzNHI2bhNLIjF3KDd+H9gnWKrg 21OgwJdJqoCC5SAH18se/a3SL1qgb4smwbm3cPvfZay6dAc3EXdk7uPIDbOxOIjI a8fn8JEw0JWzG31b0fcOtJLtU7q2q1EoEvm7pagfifazkrfRxhtE5KQLeJ7ZLCif EGmtTP8O8n1rqw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:26:07 2025 by rpki-client