This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json) Hash identifier: 0UJlZIeHuRyZMwXuePfumpN+fH1c8yB1C2+eCIEC6LU= Subject key identifier: 15:B7:1A:15:CE:31:19:04:6F:C3:C8:FA:73:42:20:1C:99:FB:65:17 Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0 Certificate serial: 019B0E25256E55C4601221B57A1101F9275B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft Manifest number: 0489 Signing time: Thu 11 Dec 2025 16:01:13 +0000 Manifest this update: Thu 11 Dec 2025 16:01:13 +0000 Manifest next update: Fri 12 Dec 2025 16:01:13 +0000 Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: 9wJjpw3bwrZje1xj/OtXTsuRXwZwbEzKfKyzrK6hCXw=) 2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:25:6e:55:c4:60:12:21:b5:7a:11:01:f9:27:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0 Validity Not Before: Dec 11 16:01:13 2025 GMT Not After : Dec 12 16:01:13 2025 GMT Subject: CN=15b71a15ce3119046fc3c8fa7342201c99fb6517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e7:7f:ea:31:fc:80:b2:b9:6f:d7:4c:b6:c3: 2c:0a:e0:16:6f:25:f4:e6:19:ca:42:d0:0f:ce:18: 29:83:8e:e4:6f:3f:c6:32:8a:f5:9d:50:21:85:32: da:36:cb:d4:0b:8f:18:f6:85:20:0a:67:6a:4f:1f: e1:05:a5:2d:3e:df:c6:31:16:db:fe:0e:1f:ac:c6: 6f:04:f9:3f:82:ed:2a:fb:c5:4e:30:5a:b1:69:ef: 25:3a:63:54:5d:0b:06:85:55:cd:be:b0:f4:69:59: d2:84:e2:25:12:a5:92:f9:a6:1d:c3:ab:95:61:b2: fa:7b:7d:b3:39:f2:d2:c3:2f:55:8a:e7:53:4f:b2: 74:6b:15:47:95:2f:83:47:64:af:7d:19:6c:f8:db: 60:76:51:ae:f9:64:2d:61:b0:c9:60:8e:c3:b0:b4: c1:da:b4:f4:cb:cf:da:9f:ea:39:97:71:b5:31:8c: c1:f9:f8:d9:0b:fa:44:4b:6b:f2:d6:b4:8e:32:3b: c1:c2:65:2a:0b:e2:bb:1a:74:39:0e:d8:21:5c:f8: 53:c6:bb:32:19:3c:f3:59:dc:d8:79:f4:87:6c:12: 75:b5:88:9c:21:58:c7:bb:80:d8:bc:34:d2:fa:62: c1:c7:33:02:25:dd:3e:eb:42:db:e4:8b:86:84:df: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B7:1A:15:CE:31:19:04:6F:C3:C8:FA:73:42:20:1C:99:FB:65:17 X509v3 Authority Key Identifier: keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ec:5a:41:cf:cb:64:59:ff:db:08:b9:c6:6b:f8:6e:44:d3: 4a:00:9b:70:ce:3f:7f:4a:58:62:80:9f:0a:75:40:fb:88:d6: 99:87:99:7e:cb:f9:1a:a6:43:16:0a:be:e8:ea:0f:1c:0a:55: 5f:fe:59:40:86:b1:3f:b4:61:4b:67:ae:6d:85:47:53:f0:d3: 81:54:1b:5b:2c:96:4d:78:d9:16:f9:6e:73:16:0d:9a:a3:a0: 62:ab:43:eb:a2:a2:f3:69:36:94:4d:29:c3:e6:9a:a9:19:f4: c6:9b:86:5a:0a:ba:0a:3e:0e:59:b0:e2:1f:0d:63:6b:ed:0b: b5:de:7f:33:8e:c6:36:37:af:50:d0:dd:b3:4c:a0:bc:33:34: 0e:fa:24:39:0b:c8:9b:b8:1f:04:98:a3:29:9b:30:6a:0a:57: f6:45:39:07:f4:e4:ce:aa:c4:d9:04:c6:bd:83:97:37:5e:0c: 43:5d:5a:9f:5b:54:79:05:c0:05:ac:43:e6:03:01:1e:62:7d: d6:36:d8:07:c8:2c:82:7e:88:47:80:c5:19:46:93:26:62:6e: 2c:10:d2:98:ea:50:76:f3:d6:00:83:e6:29:15:93:83:ae:5c: ec:8e:fe:7f:fc:1f:33:e4:ea:0f:e4:5b:84:ca:60:04:b2:3e: 57:35:28:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJSVuVcRgEiG1ehEB+SdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx NjI3ZTAwHhcNMjUxMjExMTYwMTEzWhcNMjUxMjEyMTYwMTEzWjAzMTEwLwYDVQQD EygxNWI3MWExNWNlMzExOTA0NmZjM2M4ZmE3MzQyMjAxYzk5ZmI2NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+d/6jH8gLK5b9dMtsMsCuAWbyX0 5hnKQtAPzhgpg47kbz/GMor1nVAhhTLaNsvUC48Y9oUgCmdqTx/hBaUtPt/GMRbb /g4frMZvBPk/gu0q+8VOMFqxae8lOmNUXQsGhVXNvrD0aVnShOIlEqWS+aYdw6uV YbL6e32zOfLSwy9ViudTT7J0axVHlS+DR2SvfRls+NtgdlGu+WQtYbDJYI7DsLTB 2rT0y8/an+o5l3G1MYzB+fjZC/pES2vy1rSOMjvBwmUqC+K7GnQ5DtghXPhTxrsy GTzzWdzYefSHbBJ1tYicIVjHu4DYvDTS+mLBxzMCJd0+60Lb5IuGhN827QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW3GhXOMRkEb8PI+nNCIByZ+2UXMB8GA1UdIwQY MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+xaQc/L ZFn/2wi5xmv4bkTTSgCbcM4/f0pYYoCfCnVA+4jWmYeZfsv5GqZDFgq+6OoPHApV X/5ZQIaxP7RhS2eubYVHU/DTgVQbWyyWTXjZFvlucxYNmqOgYqtD66Ki82k2lE0p w+aaqRn0xpuGWgq6Cj4OWbDiHw1ja+0Ltd5/M47GNjevUNDds0ygvDM0DvokOQvI m7gfBJijKZswagpX9kU5B/TkzqrE2QTGvYOXN14MQ11an1tUeQXABaxD5gMBHmJ9 1jbYB8gsgn6IR4DFGUaTJmJuLBDSmOpQdvPWAIPmKRWTg65c7I7+f/wfM+TqD+Rb hMpgBLI+VzUolQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:18 2025 by rpki-client