This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json) Hash identifier: 5+4/XM3mZbhZX1gqnWURceFa0yUwth3nC+vH1KrCvOs= Subject key identifier: A7:B9:C1:95:AC:CA:F3:30:A5:F4:85:36:25:5C:E6:95:1A:B7:43:43 Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad Certificate serial: 019AF23F75A74E9908226F7A549302779CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: KrBGSfOs2Dr9zelfQlrzr7rhOMWkFYHceXgPtw2n12I=) 2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:75:a7:4e:99:08:22:6f:7a:54:93:02:77:9c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=a7b9c195accaf330a5f48536255ce6951ab74343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:3b:c1:89:72:83:96:78:91:11:0a:95:7a: 53:f4:04:8c:e9:17:3d:c6:72:ef:c7:bf:7b:e3:b0: df:d1:2e:80:b7:7b:cc:86:b0:e7:31:33:f5:0b:7e: 9e:dd:80:2d:c0:27:0b:76:49:97:8e:58:3f:6b:93: 9b:78:af:77:55:9f:55:41:a9:03:a3:bf:be:98:9d: 3b:82:94:07:39:5f:bc:29:d1:f8:10:f9:93:fe:cf: ca:eb:b1:4f:ca:8b:45:24:c2:3f:2c:77:06:f7:fa: 1d:4c:66:7a:37:2d:78:7c:cf:f7:a5:f5:37:4e:ab: ae:8f:d3:d6:90:e8:ab:3f:be:61:55:09:1a:ae:2e: 8a:db:53:c3:03:6d:f4:a2:bc:19:7d:9a:2c:74:fc: 9c:aa:a2:68:06:83:6c:76:7a:83:da:2e:0a:d4:bb: 23:c8:b3:fc:04:96:fb:5f:a0:0a:7e:75:8f:b8:16: ac:62:56:0e:f8:c3:6d:2f:0e:7d:06:6e:c9:a5:5a: 68:5c:0e:f7:83:a4:43:51:9e:76:9f:d6:ca:ee:ce: 0b:65:6b:eb:88:ee:fb:78:c7:a3:c3:39:d9:b9:7f: 30:ee:6f:dd:11:b0:1d:39:46:4b:73:59:59:4c:a2: 17:c3:5e:58:22:5c:7b:eb:bc:eb:fa:0b:14:71:b8: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B9:C1:95:AC:CA:F3:30:A5:F4:85:36:25:5C:E6:95:1A:B7:43:43 X509v3 Authority Key Identifier: keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1e:38:f7:42:be:46:a7:8a:8f:9c:39:bd:f3:2d:77:ea:5c: dd:f3:9d:63:e5:c2:08:1e:ba:5b:d8:da:ab:79:19:f3:cb:95: 18:8a:6c:95:b7:17:68:f4:ce:c3:28:56:49:1f:17:fa:8e:b0: 29:31:96:f3:87:d5:ab:39:fa:4d:68:95:3f:64:00:e8:89:3b: 22:83:90:fa:ec:69:3c:da:89:77:d9:67:77:c2:94:6f:a4:8e: 73:be:00:e3:a8:b7:3b:7b:25:ce:e9:46:53:4d:aa:87:0d:f2: d6:ae:cc:f1:e1:76:a2:2e:c1:96:82:b8:10:8b:69:51:33:41: 4d:55:41:82:30:5b:0b:94:b7:e6:e6:a8:15:66:cc:d3:00:84: 34:26:94:1a:c2:76:fb:68:7c:14:75:b1:9f:cd:f7:ce:24:c1: d7:df:91:a6:a6:ff:74:db:93:a2:98:1d:ef:33:b1:da:75:1b: d3:e0:4a:63:98:88:aa:c3:7e:fa:00:c3:d7:5e:5c:23:cb:5c: 0b:92:55:26:f9:05:d1:33:59:23:89:c7:a1:59:ec:8d:8c:2e: cf:a2:4d:ff:23:8b:54:04:47:8f:e3:16:6b:76:57:89:63:c0: b2:46:c2:74:08:65:d0:1d:99:35:52:4f:20:67:92:c7:d3:ac: 3b:c9:a0:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3WnTpkIIm96VJMCd5ztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk OTM2YWQwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EyhhN2I5YzE5NWFjY2FmMzMwYTVmNDg1MzYyNTVjZTY5NTFhYjc0MzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7M7wYlyg5Z4kREKlXpT9ASM6Rc9 xnLvx79747Df0S6At3vMhrDnMTP1C36e3YAtwCcLdkmXjlg/a5ObeK93VZ9VQakD o7++mJ07gpQHOV+8KdH4EPmT/s/K67FPyotFJMI/LHcG9/odTGZ6Ny14fM/3pfU3 Tquuj9PWkOirP75hVQkari6K21PDA230orwZfZosdPycqqJoBoNsdnqD2i4K1Lsj yLP8BJb7X6AKfnWPuBasYlYO+MNtLw59Bm7JpVpoXA73g6RDUZ52n9bK7s4LZWvr iO77eMejwznZuX8w7m/dEbAdOUZLc1lZTKIXw15YIlx767zr+gsUcbhFWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe5wZWsyvMwpfSFNiVc5pUat0NDMB8GA1UdIwQY MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAah4490K+ RqeKj5w5vfMtd+pc3fOdY+XCCB66W9jaq3kZ88uVGIpslbcXaPTOwyhWSR8X+o6w KTGW84fVqzn6TWiVP2QA6Ik7IoOQ+uxpPNqJd9lnd8KUb6SOc74A46i3O3slzulG U02qhw3y1q7M8eF2oi7BloK4EItpUTNBTVVBgjBbC5S35uaoFWbM0wCENCaUGsJ2 +2h8FHWxn833ziTB19+Rpqb/dNuTopgd7zOx2nUb0+BKY5iIqsN++gDD115cI8tc C5JVJvkF0TNZI4nHoVnsjYwuz6JN/yOLVARHj+MWa3ZXiWPAskbCdAhl0B2ZNVJP IGeSx9OsO8mg4A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:16 2025 by rpki-client