This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: Ov/3WJ/+W9gC+8w3JoB3k2b1hlSx9G23s+5vebmlikI= Subject key identifier: 32:8E:97:09:A2:CF:E9:2D:57:8D:EC:BA:6F:EF:F4:48:32:CB:F3:4C Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B5D1B98DD6FD9D8240A2259A5EF103972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 14E9 Signing time: Sat 27 Dec 2025 00:00:48 +0000 Manifest this update: Sat 27 Dec 2025 00:00:48 +0000 Manifest next update: Sun 28 Dec 2025 00:00:48 +0000 Files and hashes: 1: 0I9Mpxbw9rY2nv6567T9OnlePXE.roa (hash: FNX+egBOA1u/y8PX+8PnRV5U1slWHWqeF7gg1PyYBe8=) 2: 1UHsPnht93cnjqacHzDZGozstlU.roa (hash: sn6UImS2sxFUQqqQ+ntyQ/sKctqCKvWxNyVg5LKfCSk=) 3: 37zVP7UkJg0TEDlhuX6Tds3TEYY.roa (hash: xRpj83Tlm0zn7GLk3CyccKosQD+8RAoJJ4bNYsKIjX0=) 4: 3nvUcFRVjzlC5QdtvOYCbRH66QU.roa (hash: HgN+i38sLLtdiaInhtEu2MQsmkYCrPjDVs1tMIP0DHE=) 5: 9fBlTpzE1JBsgOrrxy7zfs5HX8k.roa (hash: pZfUWEYp7quP4c2uEiu9XQOEIJS1Fn2BIiWse8+7UWw=) 6: IXspGN6VJ4LRiPRe1sJmU32gFDE.roa (hash: pPKajCDoUSNbOhah15jfdIPW7tJPsFMgke/5Qnsu+yM=) 7: PweI0mFj3Tiasy_-FgFcdiXd5Wc.roa (hash: h8gryQFmZboK49XsA1Ellb+NtbMnnoryffQmXlXy4Lg=) 8: RGcO3bBqUpTVyIxTF7x8-FPFw5M.roa (hash: fy8VWnQHzfBE+KdfHFqPBqX0lDoeW5vn0OAgRRlRBfU=) 9: W4ZlH3t9eNXJAG1Ggm5lv7G7mOQ.roa (hash: AgwvWRF18WuCtZhgoJvuLZLc+xlbRujNLfGMuxQUJUw=) 10: WGwbeGIUoFwl-1u0c_ifFPFgKH8.roa (hash: gyVFYnAcsaaLwVEd1iixKL/RH7TAmwUXbFoG3gWYfeU=) 11: eNE1gKczXhaDFK6XnoGtDfRLu3c.roa (hash: cmDBhWAdX5HMQq+uTsDFnU6N/qjuh4ugnNLxR0oQNAg=) 12: fmL33jm6pQbJAo5swZ5d7B5LbTk.roa (hash: UvT7sSrI/4M2udwrvWXd5a9wLBdKvu+G0V5zrpplgU0=) 13: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: sj0Jyu0g+HqNUdC662WSGxJjC7DNgSa002aRMa/OyS4=) 14: m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa (hash: L1ifCZ/lpcCqhfhywoza60yVvKF8HYMbgjCFz4+qb5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:1b:98:dd:6f:d9:d8:24:0a:22:59:a5:ef:10:39:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 27 00:00:48 2025 GMT Not After : Dec 28 00:00:48 2025 GMT Subject: CN=328e9709a2cfe92d578decba6feff44832cbf34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:47:7c:da:29:e5:84:2b:cf:12:0b:c1:71: 23:76:db:78:89:26:db:43:a2:8e:53:17:a7:17:be: 78:65:f6:73:f8:4a:bf:97:7b:68:ac:02:01:ba:15: ba:14:dd:20:27:f2:d3:a7:cc:2f:12:c6:b5:a4:11: cc:d1:2d:11:9b:8f:1e:69:bf:64:93:d9:22:81:0e: f1:c8:0d:80:72:ec:89:ae:69:68:a1:98:36:27:97: 04:bb:02:1b:01:34:f2:df:18:5f:80:0d:50:73:bd: e4:d2:01:61:0f:42:3e:1e:dc:dc:1b:18:97:d1:ba: fb:24:f0:23:42:42:90:13:ed:52:86:fb:75:91:e1: b0:ee:aa:35:41:e6:bb:0c:2f:6d:5d:62:85:d6:bb: 5c:3c:de:fa:2a:61:74:98:16:11:d0:c7:54:6c:4a: f5:bd:bf:0b:1e:e3:f3:0e:7f:fb:5c:82:2b:5f:a2: f5:b9:8d:3a:a2:cf:79:6e:98:a8:64:45:e0:5d:0a: dd:29:bf:fa:a4:a7:88:52:ba:2d:66:57:30:ca:72: c7:c6:9a:8f:4b:b4:07:0b:9b:4c:17:d9:57:b4:4b: e9:ec:e5:eb:c8:1d:39:03:b6:21:32:ba:03:e3:89: a3:21:fa:a6:78:ee:e6:69:d6:b0:df:ca:67:35:36: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:97:09:A2:CF:E9:2D:57:8D:EC:BA:6F:EF:F4:48:32:CB:F3:4C X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:62:c3:f1:b1:59:26:c7:1f:b6:a1:20:2c:ba:62:dd:0e:76: 67:af:ce:23:66:e2:da:09:d9:df:98:5c:2c:b4:5a:66:7e:56: 9d:0c:da:82:9a:a7:34:52:f9:0a:48:2a:f2:c8:f4:ed:59:0e: 48:4e:21:0a:86:d6:a3:f6:2f:48:1f:47:79:99:89:27:51:01: 24:15:2d:e9:7b:5e:69:0a:e0:fa:8d:e9:6f:07:8f:31:31:40: f0:95:04:78:44:77:75:69:f8:59:18:fa:6e:31:4a:5b:f0:e1: 86:c3:61:29:d0:45:44:c5:09:b8:62:8b:b6:ef:82:53:39:0a: d8:48:ad:d2:56:9e:80:df:22:e9:e9:d0:a3:8a:06:12:65:84: aa:b6:4b:23:22:04:7d:44:26:37:76:51:75:2f:a0:a6:84:66: b2:7b:f4:98:bc:1e:ff:f1:18:e8:b1:bf:09:de:69:2e:f5:14: c4:5f:dc:32:77:d2:fa:2a:51:05:43:9f:b1:1c:d0:10:c2:0f: 5d:01:a2:31:7a:f6:28:d3:5f:da:56:18:48:4c:c3:17:7e:44: a4:58:2d:bc:e0:4f:4d:46:59:c4:44:3e:d0:d4:66:49:2e:58: eb:51:c9:60:75:f2:54:7c:07:a4:d6:77:84:fa:92:00:22:55: c9:88:e8:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdG5jdb9nYJAoiWaXvEDlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjI3MDAwMDQ4WhcNMjUxMjI4MDAwMDQ4WjAzMTEwLwYDVQQD EygzMjhlOTcwOWEyY2ZlOTJkNTc4ZGVjYmE2ZmVmZjQ0ODMyY2JmMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXhHfNop5YQrzxILwXEjdtt4iSbb Q6KOUxenF754ZfZz+Eq/l3torAIBuhW6FN0gJ/LTp8wvEsa1pBHM0S0Rm48eab9k k9kigQ7xyA2AcuyJrmlooZg2J5cEuwIbATTy3xhfgA1Qc73k0gFhD0I+HtzcGxiX 0br7JPAjQkKQE+1Shvt1keGw7qo1Qea7DC9tXWKF1rtcPN76KmF0mBYR0MdUbEr1 vb8LHuPzDn/7XIIrX6L1uY06os95bpioZEXgXQrdKb/6pKeIUrotZlcwynLHxpqP S7QHC5tMF9lXtEvp7OXryB05A7YhMroD44mjIfqmeO7madaw38pnNTZbPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKOlwmiz+ktV43sum/v9Egyy/NMMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2LD8bFZ JscftqEgLLpi3Q52Z6/OI2bi2gnZ35hcLLRaZn5WnQzagpqnNFL5Ckgq8sj07VkO SE4hCobWo/YvSB9HeZmJJ1EBJBUt6XteaQrg+o3pbwePMTFA8JUEeER3dWn4WRj6 bjFKW/DhhsNhKdBFRMUJuGKLtu+CUzkK2Eit0laegN8i6enQo4oGEmWEqrZLIyIE fUQmN3ZRdS+gpoRmsnv0mLwe//EY6LG/Cd5pLvUUxF/cMnfS+ipRBUOfsRzQEMIP XQGiMXr2KNNf2lYYSEzDF35EpFgtvOBPTUZZxEQ+0NRmSS5Y61HJYHXyVHwHpNZ3 hPqSACJVyYjovA== -----END CERTIFICATE-----Generated at Sat Dec 27 06:54:08 2025 by rpki-client