This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json) Hash identifier: gtAwqYI3rXrrvZR75uhibf8xMh7xupK5EykIYZWDR/A= Subject key identifier: DF:7B:C0:03:1A:8B:C0:F3:86:E9:81:99:EB:CB:6D:05:F1:C9:10:A7 Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed Certificate serial: 019B240841F7CDEA4CD79F6116809EEE6DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft Manifest number: 0B13 Signing time: Mon 15 Dec 2025 22:01:19 +0000 Manifest this update: Mon 15 Dec 2025 22:01:19 +0000 Manifest next update: Tue 16 Dec 2025 22:01:19 +0000 Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: x+h6DMM/nuVQAODLMDNiQ0l7r4dmb+JHVc+Z8bD/5f4=) 2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:41:f7:cd:ea:4c:d7:9f:61:16:80:9e:ee:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed Validity Not Before: Dec 15 22:01:19 2025 GMT Not After : Dec 16 22:01:19 2025 GMT Subject: CN=df7bc0031a8bc0f386e98199ebcb6d05f1c910a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:c2:d4:79:5c:dc:41:55:1f:98:70:26:c6: 20:42:70:69:82:09:f8:4e:c0:d3:ea:26:cb:58:35: 39:2b:58:2a:3b:32:d2:c6:31:5b:76:04:32:b5:38: 50:a7:25:1a:98:33:2a:92:75:c1:c8:95:d8:3d:33: 88:74:9b:13:2c:30:d3:f8:21:b1:76:0c:78:45:77: 4e:fd:5b:68:50:a4:28:10:0d:c0:ef:d9:5a:7c:32: 29:c4:1a:29:52:a4:ac:f3:7e:58:ae:0e:80:12:d8: e0:b1:0c:00:f9:a0:37:b8:f8:52:0d:91:f1:d3:66: 78:a5:4d:ad:ac:7a:7d:17:97:5b:5f:eb:eb:fa:c8: 21:25:a0:9b:ef:b0:c7:a4:81:69:90:0e:c0:05:9b: 98:34:ce:42:f9:f7:07:f2:78:e5:57:02:22:9a:dc: 54:e7:84:ec:c1:6d:e3:b4:9e:4c:96:66:f5:3c:d9: 57:81:88:82:7a:d7:0f:5d:aa:0c:0b:11:34:13:32: 11:2d:e2:18:a8:ad:4e:93:da:4f:4e:69:da:f1:76: 4b:1d:69:d4:fa:32:bf:0d:4c:c5:06:3d:b4:cd:66: 74:00:b9:d3:4a:e7:48:00:aa:50:7b:a5:ec:6b:82: 20:37:98:11:9d:a3:96:ec:fe:44:e2:33:78:bd:01: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7B:C0:03:1A:8B:C0:F3:86:E9:81:99:EB:CB:6D:05:F1:C9:10:A7 X509v3 Authority Key Identifier: keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:2b:01:dc:c9:e6:58:d3:1b:a5:6c:bf:1f:10:47:11:8a:76: d5:42:65:6c:68:4d:0d:82:e3:eb:0d:e3:b5:99:ac:ad:1c:65: bb:c2:9c:ba:25:81:17:dc:cd:d4:12:d7:79:04:81:a1:0e:57: 3e:f7:8a:70:6f:41:7d:d0:8e:a5:dd:64:f9:b1:71:49:c1:09: de:6d:fb:48:07:9d:25:d5:72:49:ac:30:56:49:f9:0c:c2:7c: 99:4b:98:ca:1e:61:00:f7:ea:77:5f:e6:43:45:fb:50:61:6f: f3:a6:0a:9e:ca:1e:81:40:85:db:e9:ad:4a:b6:93:a0:6f:77: a9:bf:b4:2c:93:97:fd:16:a5:86:7b:92:73:fb:f3:5c:93:3c: 5e:fb:9b:58:e8:5b:0b:f3:95:29:fb:0e:c7:02:15:23:60:1b: 3b:e2:c0:5c:af:44:d3:de:94:4d:a0:68:cc:a6:f1:56:37:f3: e0:74:0e:24:54:e3:7d:90:b5:02:75:0a:44:df:2c:fd:f8:68: 71:20:40:ce:d1:a4:a3:9c:7b:6d:f9:84:6c:67:dd:8a:a2:b7: 2a:61:9b:32:11:11:3f:a2:89:79:a4:51:3b:84:35:9d:07:92: c0:1c:90:61:53:b0:62:82:d7:cd:00:0f:01:a8:2e:aa:6a:4c: 81:bd:74:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCEH3zepM159hFoCe7m3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDc0Y2M3YmY1MjRhYjkzYmQwZjBlNDFiYjU3OWU5MThi YjEzZWQwHhcNMjUxMjE1MjIwMTE5WhcNMjUxMjE2MjIwMTE5WjAzMTEwLwYDVQQD EyhkZjdiYzAwMzFhOGJjMGYzODZlOTgxOTllYmNiNmQwNWYxYzkxMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW7C1Hlc3EFVH5hwJsYgQnBpggn4 TsDT6ibLWDU5K1gqOzLSxjFbdgQytThQpyUamDMqknXByJXYPTOIdJsTLDDT+CGx dgx4RXdO/VtoUKQoEA3A79lafDIpxBopUqSs835Yrg6AEtjgsQwA+aA3uPhSDZHx 02Z4pU2trHp9F5dbX+vr+sghJaCb77DHpIFpkA7ABZuYNM5C+fcH8njlVwIimtxU 54TswW3jtJ5Mlmb1PNlXgYiCetcPXaoMCxE0EzIRLeIYqK1Ok9pPTmna8XZLHWnU +jK/DUzFBj20zWZ0ALnTSudIAKpQe6Xsa4IgN5gRnaOW7P5E4jN4vQGDfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN97wAMai8DzhumBmevLbQXxyRCnMB8GA1UdIwQY MBaAFIoHTMe/Ukq5O9Dw5Bu1eekYuxPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYt OWVkN2UzNjMyYmQwLzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYtOWVkN2UzNjMyYmQw LzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSsB3Mnm WNMbpWy/HxBHEYp21UJlbGhNDYLj6w3jtZmsrRxlu8KcuiWBF9zN1BLXeQSBoQ5X PveKcG9BfdCOpd1k+bFxScEJ3m37SAedJdVySawwVkn5DMJ8mUuYyh5hAPfqd1/m Q0X7UGFv86YKnsoegUCF2+mtSraToG93qb+0LJOX/RalhnuSc/vzXJM8XvubWOhb C/OVKfsOxwIVI2AbO+LAXK9E096UTaBozKbxVjfz4HQOJFTjfZC1AnUKRN8s/fho cSBAztGko5x7bfmEbGfdiqK3KmGbMhERP6KJeaRRO4Q1nQeSwByQYVOwYoLXzQAP AaguqmpMgb10wQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:39:18 2025 by rpki-client