This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json) Hash identifier: txKdTCuCdpawerobn+6bBKrCu+sF34s7ZAqnxvHsv90= Subject key identifier: D4:00:1F:2F:73:26:59:1D:6A:84:33:CD:7D:7E:28:70:44:DD:29:F1 Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0 Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0 Certificate serial: 019AF19B456232C3618BC2425E28E8F19D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=) 2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: AUcjkcdqxEBv9Qm73yCN40pf0Es/u/kU0dvQL1dtllQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:45:62:32:c3:61:8b:c2:42:5e:28:e8:f1:9d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=d4001f2f7326591d6a8433cd7d7e287044dd29f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:ce:3f:77:28:a5:c6:4e:fc:2e:1f:20:f3: f4:f8:73:13:9b:15:e1:6b:97:3a:32:31:df:a2:d2: 64:8b:14:1f:f3:60:9d:3c:cb:6d:b1:c3:bb:a9:f1: f8:fb:2b:08:1b:d4:29:68:12:0c:c5:af:c6:05:6a: dd:42:1a:bf:0f:31:a1:23:5d:98:af:8f:07:19:2e: 82:c0:22:60:d6:a2:65:23:81:d6:fd:b7:1b:0b:91: 88:de:7c:33:9d:5e:e9:74:4f:2b:bd:84:de:93:29: 2e:1e:a0:50:a4:cc:a7:3c:b1:27:d2:27:f0:57:94: ea:df:c7:9c:3a:a4:39:e7:c9:25:3b:a0:7e:a3:04: ba:ca:ac:fa:a3:06:a9:69:a5:cb:97:e8:f8:f9:5d: 08:55:8d:44:3e:47:79:08:b6:d2:53:3e:f0:26:bb: 2b:92:13:57:ef:31:9f:12:3d:76:2c:a7:45:cd:6c: 78:de:c2:a5:87:4f:d4:ef:87:00:99:7d:b0:6f:f8: 57:19:ac:ae:62:67:72:2b:59:13:c4:33:1c:ee:ad: 1f:df:73:42:38:b3:99:95:29:36:0d:df:0f:bd:eb: 21:65:d4:53:53:5f:a7:1b:48:48:77:cc:b6:66:01: 1d:1b:05:bf:bc:23:48:13:54:10:fc:37:38:cc:6a: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:00:1F:2F:73:26:59:1D:6A:84:33:CD:7D:7E:28:70:44:DD:29:F1 X509v3 Authority Key Identifier: keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:43:af:6c:51:4e:56:a0:e5:63:77:45:7e:da:52:2e:56:b3: 5c:d4:48:d0:a2:22:30:3d:e7:e8:33:d8:35:44:4e:f7:c2:c2: 9d:fd:76:83:5b:ce:77:b8:52:4e:c4:1b:a3:57:77:e5:40:09: 6d:e4:28:cb:ec:67:92:97:1c:8d:31:5b:b4:5d:93:06:4f:26: 22:61:32:0f:50:70:59:48:90:70:15:6f:2b:78:d7:00:41:db: 83:0b:4b:00:33:99:57:4c:3e:d4:82:37:95:9a:05:83:3b:18: 63:8a:23:b5:11:28:8f:ab:65:23:79:4f:d0:d8:50:51:2d:2c: 48:02:8a:cd:53:ef:d9:94:73:da:27:62:a1:66:59:2a:fa:8c: e0:88:63:46:fe:bb:b2:5e:c9:f3:0d:72:be:d9:11:50:03:5d: bc:21:b8:cf:14:ce:06:86:85:49:92:d4:41:6b:15:a9:7c:87: 53:03:a1:f2:fb:a9:b1:68:08:2a:35:e4:24:a0:38:bf:71:66: cb:2f:14:39:35:29:b9:ca:e4:5a:11:03:7b:f9:c2:5f:dd:38: 91:4e:53:2f:18:74:45:a3:a3:5b:2c:7d:2a:0c:bf:23:a9:76: 83:b4:6e:1f:85:0d:f4:bf:b1:f9:55:4f:11:f1:cb:bb:5d:2d: b1:5d:8e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0ViMsNhi8JCXijo8Z2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTNlMzgzYjJjYzUyZDVlY2EzMGZlYjEyNjk3NTkzYzlj Nzg4YTAwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EyhkNDAwMWYyZjczMjY1OTFkNmE4NDMzY2Q3ZDdlMjg3MDQ0ZGQyOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BjOP3copcZO/C4fIPP0+HMTmxXh a5c6MjHfotJkixQf82CdPMttscO7qfH4+ysIG9QpaBIMxa/GBWrdQhq/DzGhI12Y r48HGS6CwCJg1qJlI4HW/bcbC5GI3nwznV7pdE8rvYTekykuHqBQpMynPLEn0ifw V5Tq38ecOqQ558klO6B+owS6yqz6owapaaXLl+j4+V0IVY1EPkd5CLbSUz7wJrsr khNX7zGfEj12LKdFzWx43sKlh0/U74cAmX2wb/hXGayuYmdyK1kTxDMc7q0f33NC OLOZlSk2Dd8PveshZdRTU1+nG0hId8y2ZgEdGwW/vCNIE1QQ/Dc4zGoTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQAHy9zJlkdaoQzzX1+KHBE3SnxMB8GA1UdIwQY MBaAFCCT44OyzFLV7KMP6xJpdZPJx4igMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2Mt MDQ1MzRlYmNlMzVlLzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2MtMDQ1MzRlYmNlMzVl LzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUOvbFFO VqDlY3dFftpSLlazXNRI0KIiMD3n6DPYNURO98LCnf12g1vOd7hSTsQbo1d35UAJ beQoy+xnkpccjTFbtF2TBk8mImEyD1BwWUiQcBVvK3jXAEHbgwtLADOZV0w+1II3 lZoFgzsYY4ojtREoj6tlI3lP0NhQUS0sSAKKzVPv2ZRz2idioWZZKvqM4IhjRv67 sl7J8w1yvtkRUANdvCG4zxTOBoaFSZLUQWsVqXyHUwOh8vupsWgIKjXkJKA4v3Fm yy8UOTUpucrkWhEDe/nCX904kU5TLxh0RaOjWyx9Kgy/I6l2g7RuH4UN9L+x+VVP EfHLu10tsV2OHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:08 2025 by rpki-client