This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json) Hash identifier: KKm9Rade6UEH6U/3SsLL9I8fVNscVVia9CABqtemqxU= Subject key identifier: E9:34:7F:83:60:41:BC:69:9A:B2:8A:E3:AF:1A:2A:FD:01:A0:49:53 Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9 Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9 Certificate serial: 019B3231C495DC9843569BEA2382BAFB3B60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 16:01:20 +0000 Manifest this update: Thu 18 Dec 2025 16:01:20 +0000 Manifest next update: Fri 19 Dec 2025 16:01:20 +0000 Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=) 2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: LbywEEYmwQtvPytXAVwTOKKEHPwVmdIYzgiqBbdbrRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:c4:95:dc:98:43:56:9b:ea:23:82:ba:fb:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9 Validity Not Before: Dec 18 16:01:20 2025 GMT Not After : Dec 19 16:01:20 2025 GMT Subject: CN=e9347f836041bc699ab28ae3af1a2afd01a04953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:8a:17:1e:1c:d4:fc:ea:5b:6c:e3:f9:08: ab:db:1c:0a:a6:a4:56:ee:fe:bc:7c:d2:50:ca:5f: d0:f8:3d:bc:0f:2a:cf:5a:c8:79:90:0b:49:56:75: ef:2b:2d:55:87:31:45:ee:53:81:8c:13:6b:1e:97: a0:8b:72:da:d3:7e:1e:c6:85:ad:a3:61:b1:e7:f3: a0:1e:8e:27:9f:eb:9b:23:40:9b:85:dc:33:e2:18: 45:11:b8:17:fc:eb:f8:6b:db:a9:ca:5c:21:a0:d1: 10:37:e5:25:04:7b:83:fa:d1:23:36:f9:e3:7d:fe: 42:02:59:1c:c0:fd:26:7c:0a:a0:45:3c:14:a9:61: 71:98:df:20:c5:e1:17:e5:3c:8d:b5:2b:c6:f9:7d: b6:02:28:db:98:f8:f4:de:5b:1a:e9:b1:39:ac:16: 87:81:ec:7a:d3:2b:75:87:36:0a:9b:49:fb:15:81: 08:fc:78:9d:35:04:a4:72:78:12:db:f5:d8:8b:db: e6:65:0f:a2:ec:91:76:7c:38:7c:5f:f2:9a:7e:98: f3:4b:f4:1e:46:6b:d8:0b:56:85:6d:7b:95:3d:7e: 15:e6:cb:06:4e:8e:e2:f9:8c:a3:ba:f5:78:34:5c: bf:bb:66:41:88:d9:0f:10:88:98:bb:a0:38:78:f0: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:7F:83:60:41:BC:69:9A:B2:8A:E3:AF:1A:2A:FD:01:A0:49:53 X509v3 Authority Key Identifier: keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a5:4c:d5:a7:78:a8:03:93:19:27:3b:6a:5c:47:c3:d8:e2: d0:89:6d:c9:47:c3:d8:93:a9:69:a5:5f:22:e5:6d:58:c3:90: 9a:36:81:09:63:2c:21:e3:a3:99:5e:d4:5b:e7:ca:ca:0a:9c: e5:f6:58:c6:a9:34:1a:bb:4d:63:d6:d4:fc:f8:d4:86:fd:bd: 4e:81:45:23:ee:7e:16:bb:72:81:b6:ae:e8:29:d8:8d:6d:20: b9:7f:3f:93:af:cd:25:ed:2a:94:23:86:45:bc:84:4c:c4:3a: 4a:4d:b5:29:33:46:73:8e:73:1e:54:19:ca:19:a1:01:c2:bf: f2:24:75:94:95:c9:fd:14:f8:e6:5b:02:cf:d4:53:99:ac:57: ce:d0:71:b0:4d:bf:23:6c:f8:7a:13:54:54:34:d2:b0:6e:37: 4a:79:8a:fa:ea:78:31:04:c4:e7:0c:ce:e7:7a:64:39:dc:bc: 76:0a:55:6f:29:cf:4d:64:38:e8:30:22:8d:3a:58:24:b9:27: a5:e3:46:8f:a4:12:d3:6e:32:ce:2f:27:2e:72:61:08:3c:ab: 4a:f6:4e:70:10:e2:3b:2d:91:ea:9b:67:3a:4f:58:96:df:3b: 24:09:10:48:27:ca:0d:8f:fc:41:91:e5:b8:57:39:b1:a9:9e: 21:ae:d0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMcSV3JhDVpvqI4K6+ztgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjVmZjA3NjcwNDUyM2ZmNmJlODgyYjg3ZWVmYTgwN2Ix ODhhYTkwHhcNMjUxMjE4MTYwMTIwWhcNMjUxMjE5MTYwMTIwWjAzMTEwLwYDVQQD EyhlOTM0N2Y4MzYwNDFiYzY5OWFiMjhhZTNhZjFhMmFmZDAxYTA0OTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY+KFx4c1PzqW2zj+Qir2xwKpqRW 7v68fNJQyl/Q+D28DyrPWsh5kAtJVnXvKy1VhzFF7lOBjBNrHpegi3La034exoWt o2Gx5/OgHo4nn+ubI0Cbhdwz4hhFEbgX/Ov4a9upylwhoNEQN+UlBHuD+tEjNvnj ff5CAlkcwP0mfAqgRTwUqWFxmN8gxeEX5TyNtSvG+X22AijbmPj03lsa6bE5rBaH gex60yt1hzYKm0n7FYEI/HidNQSkcngS2/XYi9vmZQ+i7JF2fDh8X/KafpjzS/Qe RmvYC1aFbXuVPX4V5ssGTo7i+YyjuvV4NFy/u2ZBiNkPEIiYu6A4ePAoRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk0f4NgQbxpmrKK468aKv0BoElTMB8GA1UdIwQY MBaAFCD1/wdnBFI/9r6IK4fu+oB7GIqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDct ZjZhN2I0OWY5ODFhLzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDctZjZhN2I0OWY5ODFh LzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6VM1ad4 qAOTGSc7alxHw9ji0IltyUfD2JOpaaVfIuVtWMOQmjaBCWMsIeOjmV7UW+fKygqc 5fZYxqk0GrtNY9bU/PjUhv29ToFFI+5+Frtygbau6CnYjW0guX8/k6/NJe0qlCOG RbyETMQ6Sk21KTNGc45zHlQZyhmhAcK/8iR1lJXJ/RT45lsCz9RTmaxXztBxsE2/ I2z4ehNUVDTSsG43SnmK+up4MQTE5wzO53pkOdy8dgpVbynPTWQ46DAijTpYJLkn peNGj6QS024yzi8nLnJhCDyrSvZOcBDiOy2R6ptnOk9Ylt87JAkQSCfKDY/8QZHl uFc5sameIa7QOw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:28:20 2025 by rpki-client