This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json) Hash identifier: Kb8Eh3cxse+fQDXXRSaDKnHE5pCdGhd6YC5oKGeJgm0= Subject key identifier: C8:0D:EB:80:B3:74:CB:84:E1:38:91:23:07:3D:8C:8B:7F:7D:7C:DB Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0 Certificate serial: 019B36B306A21B6AC371E19D5CF2FF9CFF65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft Manifest number: 049E Signing time: Fri 19 Dec 2025 13:01:00 +0000 Manifest this update: Fri 19 Dec 2025 13:01:00 +0000 Manifest next update: Sat 20 Dec 2025 13:01:00 +0000 Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: thzox20tsGlHKEt0MtL9TtJ2o2nL8RzsIihrp7HyyQI=) 2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:06:a2:1b:6a:c3:71:e1:9d:5c:f2:ff:9c:ff:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0 Validity Not Before: Dec 19 13:01:00 2025 GMT Not After : Dec 20 13:01:00 2025 GMT Subject: CN=c80deb80b374cb84e1389123073d8c8b7f7d7cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:8c:7e:18:ac:1a:8e:ef:bb:7f:17:7a:4a: 46:70:fa:52:17:bc:d2:d9:da:7f:e1:ab:64:51:9e: ab:d3:69:c2:cb:5b:56:8e:20:b7:e7:38:d4:d6:88: 2c:43:38:47:e3:79:74:4c:f9:ea:cc:23:44:e8:7b: d2:5c:d8:a4:5b:b7:9a:a0:af:68:b8:f4:5e:e7:53: a2:cb:45:ad:da:02:aa:79:9f:40:88:de:95:ab:ab: d9:a6:56:d7:43:12:79:fe:ce:14:0c:5a:5f:4c:72: f8:0a:ca:6d:3b:d8:c9:52:4b:6f:f9:fa:b0:0a:45: a5:6b:0d:e0:fd:85:6b:c2:ba:84:c4:12:9b:73:00: 0e:64:82:48:98:1d:b8:88:cf:e6:17:7a:b1:a6:df: 05:f8:e9:ef:5c:ed:f8:39:e8:b7:33:ff:18:89:50: 8a:8e:96:78:89:6e:ca:2a:a6:a5:ee:0e:2a:9d:7e: a3:2b:65:b5:ec:a9:7b:3b:20:aa:0b:11:c8:21:8e: eb:21:9d:3c:1f:78:fe:b2:27:20:10:e2:e2:a9:a3: 7c:ff:17:36:45:6e:02:fb:5f:62:37:5b:f1:5c:85: cd:22:d9:c4:83:28:6e:87:63:40:b3:79:40:01:79: b5:e9:cb:f2:16:c6:d7:26:19:73:54:46:4e:b2:ce: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0D:EB:80:B3:74:CB:84:E1:38:91:23:07:3D:8C:8B:7F:7D:7C:DB X509v3 Authority Key Identifier: keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:70:4d:84:e8:c7:cb:2a:e3:3e:eb:03:32:38:ed:65:a2: 5e:b1:95:f9:53:b9:66:b6:55:5c:08:61:c1:36:f7:d7:b4:8c: 8d:8c:0a:a0:a9:18:0f:b8:06:c5:cd:bc:6a:5c:da:e1:04:85: fd:6e:28:a9:4e:41:68:8b:0a:5e:c3:75:f6:e2:03:63:79:17: c7:28:04:84:8f:41:5c:e9:fe:91:b6:87:f4:a9:c6:cf:0f:50: b4:de:24:dd:86:4d:8b:ce:2f:11:fe:11:2f:e8:cf:12:95:34: 3d:cb:1c:87:63:a4:fc:14:d7:e1:c2:ef:e8:4b:a3:3a:42:70: 52:ec:30:50:ac:d3:d3:9a:5d:50:09:92:79:cf:52:8a:53:15: 96:e5:f8:1c:51:a6:ca:e7:bb:8b:9a:65:c0:e6:39:be:93:00: 96:a5:f1:00:8f:5b:b7:02:d2:b3:9b:b1:3f:05:e2:42:b6:75: 3f:5a:15:2b:cb:15:fc:74:93:8b:17:a5:c9:71:51:af:60:b8: 46:f3:8f:03:e6:16:ec:35:c7:53:c3:89:cc:69:fc:ab:65:86: e5:c7:0e:82:3c:7b:a7:f7:50:54:62:39:89:32:b9:e1:e7:fb: 22:9b:09:55:e1:06:5d:cf:cd:bb:cc:17:4d:a8:5a:4b:c8:59: 0d:7c:52:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2swaiG2rDceGdXPL/nP9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx NjI3ZTAwHhcNMjUxMjE5MTMwMTAwWhcNMjUxMjIwMTMwMTAwWjAzMTEwLwYDVQQD EyhjODBkZWI4MGIzNzRjYjg0ZTEzODkxMjMwNzNkOGM4YjdmN2Q3Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pCMfhisGo7vu38XekpGcPpSF7zS 2dp/4atkUZ6r02nCy1tWjiC35zjU1ogsQzhH43l0TPnqzCNE6HvSXNikW7eaoK9o uPRe51Oiy0Wt2gKqeZ9AiN6Vq6vZplbXQxJ5/s4UDFpfTHL4CsptO9jJUktv+fqw CkWlaw3g/YVrwrqExBKbcwAOZIJImB24iM/mF3qxpt8F+OnvXO34Oei3M/8YiVCK jpZ4iW7KKqal7g4qnX6jK2W17Kl7OyCqCxHIIY7rIZ08H3j+sicgEOLiqaN8/xc2 RW4C+19iN1vxXIXNItnEgyhuh2NAs3lAAXm16cvyFsbXJhlzVEZOss49FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgN64CzdMuE4TiRIwc9jIt/fXzbMB8GA1UdIwQY MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIFwTYTo x8sq4z7rAzI47WWiXrGV+VO5ZrZVXAhhwTb317SMjYwKoKkYD7gGxc28alza4QSF /W4oqU5BaIsKXsN19uIDY3kXxygEhI9BXOn+kbaH9KnGzw9QtN4k3YZNi84vEf4R L+jPEpU0Pcsch2Ok/BTX4cLv6EujOkJwUuwwUKzT05pdUAmSec9SilMVluX4HFGm yue7i5plwOY5vpMAlqXxAI9btwLSs5uxPwXiQrZ1P1oVK8sV/HSTixelyXFRr2C4 RvOPA+YW7DXHU8OJzGn8q2WG5ccOgjx7p/dQVGI5iTK54ef7IpsJVeEGXc/Nu8wX TahaS8hZDXxShg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:54:08 2025 by rpki-client