This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json) Hash identifier: a62wzJ2DHi98y2B0cHFd6GdIG/J95MNCUwgfO2g8PZo= Subject key identifier: 66:34:23:6F:17:A7:DF:6F:7E:D2:F1:A2:B1:47:9A:67:2E:9D:27:39 Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Certificate serial: 019AEE9A37E611534CA681986CEAA84ADDE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 13:01:15 +0000 Manifest this update: Fri 05 Dec 2025 13:01:15 +0000 Manifest next update: Sat 06 Dec 2025 13:01:15 +0000 Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=) 2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=) 3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: UoGTNo+KvLvX3Agf7GQHDPA/r0S7rhGiB/rSoX5Ojns=) 4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:9a:37:e6:11:53:4c:a6:81:98:6c:ea:a8:4a:dd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Validity Not Before: Dec 5 13:01:15 2025 GMT Not After : Dec 6 13:01:15 2025 GMT Subject: CN=6634236f17a7df6f7ed2f1a2b1479a672e9d2739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:bc:cd:5a:de:fa:2d:bd:29:45:8b:23:db:4e: 00:4f:75:07:e8:59:7a:03:ea:4a:21:ba:43:e3:48: 14:b1:57:8a:39:92:08:62:6b:bb:29:cb:17:8d:b1: 43:51:d8:aa:63:cc:bd:c6:02:5a:76:81:d7:bb:e9: 7b:b2:90:65:3b:5d:f2:02:83:04:1c:4d:6e:40:90: ed:d9:89:2f:79:be:53:88:23:be:49:5f:c2:4c:fb: b5:9d:4d:59:b7:d6:bc:00:1c:04:45:c3:7b:96:3c: 12:48:be:a2:d8:c0:a6:dc:2e:b9:c1:85:d4:2c:1a: 61:60:b6:cc:0b:7b:b8:ba:03:b0:a0:87:2e:d7:f0: 13:b7:4e:ea:5c:8a:62:2f:94:42:84:5b:f4:fa:47: 69:5a:f0:72:11:49:4f:72:d0:a7:cb:60:dd:0c:04: ef:c1:5d:d1:0c:4b:f7:53:82:dd:b4:2a:df:6f:29: d8:af:43:38:50:c7:02:37:bd:2a:53:ba:06:c2:ef: d1:0e:ed:6a:73:49:74:b9:51:ce:7c:8a:ca:a4:7b: 6c:3d:86:1b:21:64:b8:a5:2e:f9:0c:75:88:c5:f6: bf:86:f5:7d:ea:5f:52:94:f7:c6:67:1d:51:cf:f7: 39:02:ec:e2:f6:90:69:79:aa:dc:0d:09:e5:65:74: e8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:34:23:6F:17:A7:DF:6F:7E:D2:F1:A2:B1:47:9A:67:2E:9D:27:39 X509v3 Authority Key Identifier: keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c1:c3:25:ab:87:c1:75:1e:b2:8c:16:ce:dc:0b:5e:b5:da: 07:51:b8:b0:31:ae:61:59:70:7e:bb:02:bb:e2:28:f9:a0:ab: 55:05:da:63:69:d6:c4:71:3c:6b:f4:10:19:da:93:71:0d:91: 82:e6:c9:01:53:63:f9:e1:7e:24:11:b4:41:19:31:9f:e1:22: fd:cf:3c:7e:e8:8f:40:57:32:ea:d2:70:5e:72:e2:24:66:89: b6:47:a7:5e:a9:88:13:b7:57:79:8b:a3:a5:96:b7:01:57:19: 0e:4b:73:c6:4a:35:da:16:fc:2c:b1:44:9a:7f:30:0f:39:72: 6e:ce:c4:d1:c7:7b:f6:f7:d4:25:39:01:12:e1:b1:ed:ab:ee: 6e:52:76:aa:b9:12:26:01:a5:9d:03:dc:6a:dd:78:83:3b:6c: 6f:cf:84:5d:a4:e8:2c:a5:f5:7e:fe:ea:b6:30:06:ca:c6:21: 5d:41:5c:c6:61:c9:f9:9f:2d:bb:90:27:52:d8:22:81:40:4d: 24:80:e1:9d:3a:af:3d:1f:aa:ec:a2:b5:61:44:80:fb:58:31: 1e:cc:b1:34:86:60:98:37:02:00:1a:2f:01:11:bd:ea:e9:a7: 0c:a1:7a:b0:36:9d:37:64:68:2d:7c:95:4f:41:33:26:59:03: 9f:96:c6:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumjfmEVNMpoGYbOqoSt3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl ZDRiYjAwHhcNMjUxMjA1MTMwMTE1WhcNMjUxMjA2MTMwMTE1WjAzMTEwLwYDVQQD Eyg2NjM0MjM2ZjE3YTdkZjZmN2VkMmYxYTJiMTQ3OWE2NzJlOWQyNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rzNWt76Lb0pRYsj204AT3UH6Fl6 A+pKIbpD40gUsVeKOZIIYmu7KcsXjbFDUdiqY8y9xgJadoHXu+l7spBlO13yAoME HE1uQJDt2Ykveb5TiCO+SV/CTPu1nU1Zt9a8ABwERcN7ljwSSL6i2MCm3C65wYXU LBphYLbMC3u4ugOwoIcu1/ATt07qXIpiL5RChFv0+kdpWvByEUlPctCny2DdDATv wV3RDEv3U4LdtCrfbynYr0M4UMcCN70qU7oGwu/RDu1qc0l0uVHOfIrKpHtsPYYb IWS4pS75DHWIxfa/hvV96l9SlPfGZx1Rz/c5Auzi9pBpearcDQnlZXToDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGY0I28Xp99vftLxorFHmmcunSc5MB8GA1UdIwQY MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt ODJlYmEwY2IzYjBkLzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcHDJauH wXUesowWztwLXrXaB1G4sDGuYVlwfrsCu+Io+aCrVQXaY2nWxHE8a/QQGdqTcQ2R gubJAVNj+eF+JBG0QRkxn+Ei/c88fuiPQFcy6tJwXnLiJGaJtkenXqmIE7dXeYuj pZa3AVcZDktzxko12hb8LLFEmn8wDzlybs7E0cd79vfUJTkBEuGx7avublJ2qrkS JgGlnQPcat14gztsb8+EXaToLKX1fv7qtjAGysYhXUFcxmHJ+Z8tu5AnUtgigUBN JIDhnTqvPR+q7KK1YUSA+1gxHsyxNIZgmDcCABovARG96umnDKF6sDadN2RoLXyV T0EzJlkDn5bGKA== -----END CERTIFICATE-----Generated at Fri Dec 5 23:01:05 2025 by rpki-client