This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json) Hash identifier: qes8r1977Bg77vqESvgnctyhjT2GT2SQan4Ye7+vrXQ= Subject key identifier: A4:A4:3B:47:7B:71:34:EF:07:DC:4F:71:B3:ED:56:E6:7D:8F:97:05 Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac Certificate serial: 019B311E8243AEE8E096040EEE99DE2D3CBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 11:00:41 +0000 Manifest this update: Thu 18 Dec 2025 11:00:41 +0000 Manifest next update: Fri 19 Dec 2025 11:00:41 +0000 Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: wBNendRm11c5xcSxWXhdSbR9HlAVwbrxtq+mO0npvYQ=) 2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=) 3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:82:43:ae:e8:e0:96:04:0e:ee:99:de:2d:3c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac Validity Not Before: Dec 18 11:00:41 2025 GMT Not After : Dec 19 11:00:41 2025 GMT Subject: CN=a4a43b477b7134ef07dc4f71b3ed56e67d8f9705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:ba:a6:7e:7f:5a:b2:93:7e:bc:9f:e6:11: 98:ed:b4:ce:07:ca:c0:21:bc:99:ee:08:ba:e3:da: 1c:f1:42:58:42:18:16:02:87:83:5a:14:ca:9b:54: 9f:ce:36:22:cc:5a:38:b8:5a:38:e0:99:fd:53:bc: 97:77:66:ac:e1:7f:8e:54:c0:24:87:29:2e:b2:6e: 5f:66:45:ec:c0:60:f3:ce:6a:13:28:a0:d2:e4:1c: 5f:ad:32:8e:63:95:ab:5a:08:03:a9:e0:ed:5a:b7: e8:f3:f7:03:e1:3b:81:be:81:c3:06:05:ec:6b:7e: 31:c0:e7:99:bc:9b:7a:fb:50:83:a6:f6:92:81:d4: a7:7d:b6:83:04:88:14:82:1a:e6:89:11:c9:0b:bd: 56:50:bf:10:f3:be:28:c4:60:df:6b:5b:56:9b:ea: 2c:43:42:9b:2c:e1:eb:d2:b1:75:df:4f:1c:a6:98: b4:1e:f1:8c:bd:de:fc:23:13:61:53:b6:48:4f:3e: ea:68:72:f5:81:05:8d:5b:70:df:79:c6:e0:40:25: e1:97:7a:59:72:df:19:51:68:64:ff:dd:2a:9f:74: f0:f4:5a:28:3c:81:6e:08:e8:e4:e8:45:a4:e9:05: 25:4e:48:bf:5f:81:9b:b6:31:25:d1:77:1c:ed:c1: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A4:3B:47:7B:71:34:EF:07:DC:4F:71:B3:ED:56:E6:7D:8F:97:05 X509v3 Authority Key Identifier: keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5c:e1:8f:3c:b1:f3:81:30:b0:fe:81:10:31:3f:4a:8d:a7: a2:ea:35:4c:d8:3c:78:bf:ac:58:7c:c2:3d:76:00:bc:6d:64: fa:f5:4f:48:c1:0f:96:d7:36:6d:9a:98:d3:a8:f6:4d:0f:1b: ef:94:98:40:66:5c:28:5e:b1:20:27:66:d5:13:30:3c:b7:d0: 25:2e:35:24:c1:29:42:78:72:f7:4b:d1:69:21:af:b0:25:72: 11:77:17:2d:5e:bd:58:30:dd:e8:d5:dc:0d:d1:b3:7d:55:d9: d4:95:a4:4c:79:6c:95:6a:f6:75:c4:cf:93:36:ae:4a:bc:94: ca:e1:ac:14:ca:dc:cd:44:3a:25:94:d0:c5:71:f0:8f:df:db: e1:9a:4f:2a:ae:35:65:8a:56:f8:14:2f:22:8c:d7:19:25:b2: 41:68:90:71:db:12:d3:92:68:b3:d0:f7:55:f4:e8:ce:9d:50: ad:3d:b8:dc:4f:84:c8:68:8d:c8:64:16:1f:59:34:a7:10:1f: 5d:13:d1:d2:28:52:17:88:53:9b:37:d3:99:2f:cc:8a:96:6f: 0f:49:8c:33:55:19:b7:72:06:64:fd:98:05:5d:4a:85:62:84: 4d:0c:95:aa:50:d8:17:9b:db:ee:98:c6:3d:09:c8:7a:52:5e: a1:78:60:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHoJDrujglgQO7pneLTy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyODM3MTFiZDdhYjEzZGEzZDExZjI1YmI1N2E0ZjQ4M2Mx Zjk5YWMwHhcNMjUxMjE4MTEwMDQxWhcNMjUxMjE5MTEwMDQxWjAzMTEwLwYDVQQD EyhhNGE0M2I0NzdiNzEzNGVmMDdkYzRmNzFiM2VkNTZlNjdkOGY5NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Pe6pn5/WrKTfryf5hGY7bTOB8rA IbyZ7gi649oc8UJYQhgWAoeDWhTKm1SfzjYizFo4uFo44Jn9U7yXd2as4X+OVMAk hykusm5fZkXswGDzzmoTKKDS5BxfrTKOY5WrWggDqeDtWrfo8/cD4TuBvoHDBgXs a34xwOeZvJt6+1CDpvaSgdSnfbaDBIgUghrmiRHJC71WUL8Q874oxGDfa1tWm+os Q0KbLOHr0rF1308cppi0HvGMvd78IxNhU7ZITz7qaHL1gQWNW3DfecbgQCXhl3pZ ct8ZUWhk/90qn3Tw9FooPIFuCOjk6EWk6QUlTki/X4GbtjEl0Xcc7cET8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSkO0d7cTTvB9xPcbPtVuZ9j5cFMB8GA1UdIwQY MBaAFCKDcRvXqxPaPRHyW7V6T0g8H5msMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85Y2JlODgtM2U3NS00MmVmLWI4NzEt NWVlNzZmMGY2NGUyLzEvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85Y2JlODgtM2U3NS00MmVmLWI4NzEtNWVlNzZmMGY2NGUy LzEvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFzhjzyx 84EwsP6BEDE/So2nouo1TNg8eL+sWHzCPXYAvG1k+vVPSMEPltc2bZqY06j2TQ8b 75SYQGZcKF6xICdm1RMwPLfQJS41JMEpQnhy90vRaSGvsCVyEXcXLV69WDDd6NXc DdGzfVXZ1JWkTHlslWr2dcTPkzauSryUyuGsFMrczUQ6JZTQxXHwj9/b4ZpPKq41 ZYpW+BQvIozXGSWyQWiQcdsS05Jos9D3VfTozp1QrT243E+EyGiNyGQWH1k0pxAf XRPR0ihSF4hTmzfTmS/MipZvD0mMM1UZt3IGZP2YBV1KhWKETQyVqlDYF5vb7pjG PQnIelJeoXhgIA== -----END CERTIFICATE-----Generated at Thu Dec 18 16:55:11 2025 by rpki-client