This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json) Hash identifier: sXWe0WGqEffwLThen2wSxrer62w2x+X7oxh6DzYLQoA= Subject key identifier: CE:AB:6E:E3:6F:BE:79:CF:F3:42:96:BF:57:F1:88:97:DC:9F:8F:82 Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10 Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10 Certificate serial: 019B1EAB0240974A8CBC0A690C553020E11E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft Manifest number: 0162 Signing time: Sun 14 Dec 2025 21:01:22 +0000 Manifest this update: Sun 14 Dec 2025 21:01:22 +0000 Manifest next update: Mon 15 Dec 2025 21:01:22 +0000 Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=) 2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: OJu4QRGj/5tYXmYVkGrfriEFi3SOHA+HbHZsfkzjqco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:ab:02:40:97:4a:8c:bc:0a:69:0c:55:30:20:e1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10 Validity Not Before: Dec 14 21:01:22 2025 GMT Not After : Dec 15 21:01:22 2025 GMT Subject: CN=ceab6ee36fbe79cff34296bf57f18897dc9f8f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:3d:e7:ae:fd:d2:62:38:f8:6a:d0:49:3d: 3f:36:05:d3:cd:d0:1a:80:06:36:36:1a:1b:d4:65: 29:a6:05:fb:c4:5d:4e:a6:73:12:a2:33:6e:0b:1d: 8f:7d:a7:c9:85:e0:bc:7f:89:64:7d:8a:b5:f3:6b: 74:07:32:92:31:6b:19:7d:b8:2e:ab:b4:ef:26:fb: 39:41:a8:64:aa:e1:4d:a8:8b:09:38:b0:36:0e:5e: a6:1d:c1:2d:76:e0:d0:f2:35:a8:38:a5:76:a2:13: 7a:c8:28:52:59:88:57:75:3a:2d:05:8f:59:a3:ca: 3b:55:9e:7d:cb:b5:b4:b4:53:8a:fb:0b:1e:dd:ba: 64:42:82:b2:c8:d7:93:88:b5:ac:c7:bb:dc:f6:5b: ea:10:92:3e:0c:52:e8:45:c5:ef:1b:53:78:1f:7f: db:c5:f1:3d:2d:88:22:03:e5:7f:9e:88:8d:27:08: 0e:80:1e:74:74:32:07:0b:66:6d:23:e1:a5:b4:2f: 3d:ea:d3:08:65:38:66:60:f4:78:0d:6a:c5:fe:d0: 1f:bf:6d:31:1f:9c:6c:03:9e:db:91:0a:36:38:be: d4:3b:37:04:1f:c7:8f:ee:5f:f2:27:2e:ec:ce:18: 67:ea:d8:02:1a:48:c7:3b:6d:90:7f:e2:e1:e8:68: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AB:6E:E3:6F:BE:79:CF:F3:42:96:BF:57:F1:88:97:DC:9F:8F:82 X509v3 Authority Key Identifier: keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a7:71:6d:38:22:94:36:6c:13:06:cf:e9:a0:ac:35:7a:a8: 22:b4:98:b5:be:ec:09:40:40:3d:09:be:12:1c:91:cc:af:93: f2:47:d1:5e:a1:af:73:62:2e:da:bd:c8:0c:b4:aa:b9:06:66: 0e:2f:57:4c:f6:5c:33:56:42:24:25:9b:0e:a0:9d:de:72:da: 35:92:a4:56:c4:2f:02:58:52:a4:81:16:16:e3:9b:39:ba:1f: b7:db:af:1d:32:c4:69:96:e7:67:31:ac:92:2d:98:36:6e:13: 2d:d9:cf:99:c1:68:db:02:17:8a:a6:0c:a2:7f:c0:5e:5c:98: 84:52:4f:ce:4e:15:af:d7:33:55:a7:e0:ce:cb:fb:8d:68:2e: 69:0b:dc:96:71:b4:89:58:83:f8:5e:77:80:ed:23:02:24:e2: cf:91:93:19:08:53:b4:d6:b7:b8:f6:b6:e8:34:45:28:50:a6: fd:d4:46:36:16:c5:61:1b:ee:15:f4:a5:e2:cd:a1:3a:d9:fa: 5d:6d:a2:c3:da:46:90:19:8e:a9:be:0d:9a:d2:fd:c2:47:36: eb:ea:36:6e:75:8a:02:3c:ed:bf:8b:79:85:5a:22:48:9d:65: c0:99:9c:fe:cf:73:73:e2:16:9b:a4:24:7c:55:35:55:ab:5e: cc:2b:84:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqwJAl0qMvAppDFUwIOEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOWZhZjkzNTI0YmI4MDc3NGZmY2U5MzQxZjQ5NWE4ZmIz MThmMTAwHhcNMjUxMjE0MjEwMTIyWhcNMjUxMjE1MjEwMTIyWjAzMTEwLwYDVQQD EyhjZWFiNmVlMzZmYmU3OWNmZjM0Mjk2YmY1N2YxODg5N2RjOWY4ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07w956790mI4+GrQST0/NgXTzdAa gAY2Nhob1GUppgX7xF1OpnMSojNuCx2PfafJheC8f4lkfYq182t0BzKSMWsZfbgu q7TvJvs5QahkquFNqIsJOLA2Dl6mHcEtduDQ8jWoOKV2ohN6yChSWYhXdTotBY9Z o8o7VZ59y7W0tFOK+wse3bpkQoKyyNeTiLWsx7vc9lvqEJI+DFLoRcXvG1N4H3/b xfE9LYgiA+V/noiNJwgOgB50dDIHC2ZtI+GltC896tMIZThmYPR4DWrF/tAfv20x H5xsA57bkQo2OL7UOzcEH8eP7l/yJy7szhhn6tgCGkjHO22Qf+Lh6GgKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6rbuNvvnnP80KWv1fxiJfcn4+CMB8GA1UdIwQY MBaAFCCfr5NSS7gHdP/Ok0H0laj7MY8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUt ZDE2NGRkZTUzNTFmLzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUtZDE2NGRkZTUzNTFm LzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6dxbTgi lDZsEwbP6aCsNXqoIrSYtb7sCUBAPQm+EhyRzK+T8kfRXqGvc2Iu2r3IDLSquQZm Di9XTPZcM1ZCJCWbDqCd3nLaNZKkVsQvAlhSpIEWFuObOboft9uvHTLEaZbnZzGs ki2YNm4TLdnPmcFo2wIXiqYMon/AXlyYhFJPzk4Vr9czVafgzsv7jWguaQvclnG0 iViD+F53gO0jAiTiz5GTGQhTtNa3uPa26DRFKFCm/dRGNhbFYRvuFfSl4s2hOtn6 XW2iw9pGkBmOqb4NmtL9wkc26+o2bnWKAjztv4t5hVoiSJ1lwJmc/s9zc+IWm6Qk fFU1VatezCuE4Q== -----END CERTIFICATE-----Generated at Sun Dec 14 23:19:14 2025 by rpki-client