This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json) Hash identifier: jZhCendNnS/VMTAue3lJkUIH5+/i20/X+vrQcnRUOE0= Subject key identifier: B2:7F:85:7F:69:F1:11:D6:AC:64:B8:21:D8:87:0A:C4:4E:0D:F3:EE Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7 Certificate serial: 019AF051165F3CF08751111D1ECF342999AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft Manifest number: 12B4 Signing time: Fri 05 Dec 2025 21:00:37 +0000 Manifest this update: Fri 05 Dec 2025 21:00:37 +0000 Manifest next update: Sat 06 Dec 2025 21:00:37 +0000 Files and hashes: 1: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (hash: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=) 2: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: wLToPrPcIT6FCsElBRC5rgezCiyAbE/85OYRrMDxDrI=) 3: nrEMql0zV0P3dpHmZH6RSxKuJFg.roa (hash: 1gVFTzoG8NuAbMx8im63wNse5kBK1gIOddqrPu/oX6A=) 4: oCdnapI8_jAqvSx-q8QqfeZBfpI.roa (hash: 4dP+f2erpGi6jIqWI+u+ltnYaQjR1Rx/ox+mHYa6aIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:16:5f:3c:f0:87:51:11:1d:1e:cf:34:29:99:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7 Validity Not Before: Dec 5 21:00:37 2025 GMT Not After : Dec 6 21:00:37 2025 GMT Subject: CN=b27f857f69f111d6ac64b821d8870ac44e0df3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:dc:01:d2:f4:2a:8b:55:53:03:90:4f:23: 14:86:25:ac:78:68:d2:c8:d4:da:76:21:3e:f5:6f: 2f:7e:3d:53:74:a9:f2:34:b8:88:52:b2:8b:92:17: 90:3c:d2:83:2d:ce:85:28:b0:5c:b7:0f:78:3c:92: 20:c5:b9:de:bc:09:7f:5e:c8:a6:9c:f2:57:c2:47: d8:7e:be:95:3e:79:0f:8f:f3:17:aa:0b:52:4b:d5: df:2a:be:b9:9b:ee:e5:18:11:22:ed:e6:64:97:47: 36:2b:9a:eb:56:77:63:3b:75:35:3a:33:82:df:22: 1a:0b:0e:f6:a8:70:b4:51:40:30:58:56:2e:f3:4d: ec:76:fc:75:35:fc:21:fe:22:a5:08:8d:5a:6c:f2: da:ee:6b:9a:f4:99:95:b1:99:6e:fa:d4:9d:9b:75: e9:87:83:9a:ca:14:58:70:ae:81:aa:0b:28:15:6c: 1e:65:03:85:4a:d5:43:c2:b7:95:81:c3:84:cb:c7: 41:66:ed:8e:71:2b:39:8c:ef:22:ef:94:08:65:24: df:a2:cd:9d:38:17:e4:73:4e:f1:b2:7d:82:de:62: 47:81:2e:f3:b9:72:2c:89:01:81:0b:13:0f:a6:cb: f0:30:8a:9d:29:38:8b:f6:6f:26:84:6b:af:ee:a9: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:85:7F:69:F1:11:D6:AC:64:B8:21:D8:87:0A:C4:4E:0D:F3:EE X509v3 Authority Key Identifier: keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f4:55:91:c4:48:45:db:54:a9:7c:3a:4b:96:b3:32:57:0c: 46:13:0f:5e:6f:79:06:0b:cd:e2:50:e8:6a:d6:0d:42:da:b7: 65:5b:87:ca:07:a7:55:37:bc:1d:57:9b:6c:a9:47:89:6a:73: 37:10:a0:f5:26:b4:90:fb:e6:7a:72:29:68:9d:3d:32:5d:20: 46:d1:5f:e3:79:05:33:5a:dd:25:10:12:af:1a:80:0b:35:9a: d8:60:f3:58:2b:0f:5d:5b:53:bb:29:94:78:79:74:4e:b2:72: ea:04:86:12:00:27:d6:74:11:39:74:73:3d:20:21:58:4f:98: a9:17:ca:21:9e:e9:9d:a0:52:81:51:9a:82:82:06:8b:2d:28: 97:2e:bd:89:f7:73:35:c9:4b:4b:45:45:0e:09:ee:80:e2:77: 83:e3:45:dc:5e:79:6c:4c:3b:1c:f5:54:97:a5:86:7b:4c:c1: db:1b:a3:af:a5:d1:4a:62:94:ad:04:aa:f7:6e:58:21:00:91: 1f:16:55:48:f5:12:5b:9a:14:be:f1:cb:63:88:74:70:f7:24: d2:c8:9a:15:49:a4:f2:45:2f:b3:f9:25:00:27:22:fe:54:5e: 1e:86:5c:da:62:f1:f3:58:56:30:c2:ae:80:d1:70:54:77:c4: 29:9c:36:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwURZfPPCHUREdHs80KZmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm ZmQ4ZDcwHhcNMjUxMjA1MjEwMDM3WhcNMjUxMjA2MjEwMDM3WjAzMTEwLwYDVQQD EyhiMjdmODU3ZjY5ZjExMWQ2YWM2NGI4MjFkODg3MGFjNDRlMGRmM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv3cAdL0KotVUwOQTyMUhiWseGjS yNTadiE+9W8vfj1TdKnyNLiIUrKLkheQPNKDLc6FKLBctw94PJIgxbnevAl/Xsim nPJXwkfYfr6VPnkPj/MXqgtSS9XfKr65m+7lGBEi7eZkl0c2K5rrVndjO3U1OjOC 3yIaCw72qHC0UUAwWFYu803sdvx1Nfwh/iKlCI1abPLa7mua9JmVsZlu+tSdm3Xp h4OayhRYcK6BqgsoFWweZQOFStVDwreVgcOEy8dBZu2OcSs5jO8i75QIZSTfos2d OBfkc07xsn2C3mJHgS7zuXIsiQGBCxMPpsvwMIqdKTiL9m8mhGuv7qkonwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJ/hX9p8RHWrGS4IdiHCsRODfPuMB8GA1UdIwQY MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt NmRlMDVhMzE2MjM5LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5 LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfRVkcRI RdtUqXw6S5azMlcMRhMPXm95BgvN4lDoatYNQtq3ZVuHygenVTe8HVebbKlHiWpz NxCg9Sa0kPvmenIpaJ09Ml0gRtFf43kFM1rdJRASrxqACzWa2GDzWCsPXVtTuymU eHl0TrJy6gSGEgAn1nQROXRzPSAhWE+YqRfKIZ7pnaBSgVGagoIGiy0oly69ifdz NclLS0VFDgnugOJ3g+NF3F55bEw7HPVUl6WGe0zB2xujr6XRSmKUrQSq925YIQCR HxZVSPUSW5oUvvHLY4h0cPck0siaFUmk8kUvs/klACci/lReHoZc2mLx81hWMMKu gNFwVHfEKZw2OA== -----END CERTIFICATE-----Generated at Fri Dec 5 23:04:25 2025 by rpki-client