This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json) Hash identifier: wb4uEbRcIs4n0hyClvOGBC+uaYT5BQt8ivLR67j6SRY= Subject key identifier: 84:A4:F3:21:51:C3:E1:6F:E5:82:AC:D7:1E:1A:3C:98:86:C6:C4:89 Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Certificate serial: 019B5AF60897984C8D92911FB3D7C9B48802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft Manifest number: 0F7E Signing time: Fri 26 Dec 2025 14:00:31 +0000 Manifest this update: Fri 26 Dec 2025 14:00:31 +0000 Manifest next update: Sat 27 Dec 2025 14:00:31 +0000 Files and hashes: 1: 2aoaMcLeoHsRYMrDwR7GYBYfV38.roa (hash: jssRFClKzuPy7Bnng6eFWBTeCatBaCf3VHUaJ2d4iI0=) 2: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=) 3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: FoPMCxgZyEcVevYM9cD8lOS4DHHzQ1trfxovceQVU7M=) 4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:08:97:98:4c:8d:92:91:1f:b3:d7:c9:b4:88:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Validity Not Before: Dec 26 14:00:31 2025 GMT Not After : Dec 27 14:00:31 2025 GMT Subject: CN=84a4f32151c3e16fe582acd71e1a3c9886c6c489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:f3:c0:d1:76:09:c5:53:e0:3a:c5:a3:60: b4:63:f0:db:d4:fd:c9:18:9a:13:1f:26:cd:1a:ae: 42:91:cd:6b:b3:ec:05:24:70:e1:02:a3:80:0d:ec: c4:26:8b:a6:77:21:dd:69:db:29:2d:1c:9c:9c:7e: 99:24:3d:84:f1:a2:85:f5:56:79:47:21:b8:e9:8d: 28:c7:ba:2d:28:06:d0:0e:93:4f:9f:c6:2f:f2:e8: 1b:92:71:b7:e2:bb:1e:3b:35:81:a8:5f:6f:3a:e5: 50:b6:4e:60:a5:7a:74:99:13:70:45:0a:ca:d6:9e: 28:53:94:ba:0c:59:9f:9d:fd:22:8b:8d:6c:e6:e5: 9e:aa:cf:97:ce:69:08:04:a5:9d:c2:a1:e2:2b:7f: fc:a4:02:c3:43:81:a1:e5:fd:d2:8b:91:e5:e8:47: f6:a1:71:3b:fb:64:82:31:93:89:47:e9:84:d7:0d: 4f:fc:c3:c3:74:68:35:53:29:9c:f7:64:d9:13:45: 72:93:cf:f8:8e:8c:fa:7a:e6:d7:36:ce:65:eb:66: d7:bf:dd:79:ac:60:9a:0b:82:f9:ba:0e:5a:fe:7b: 4c:a8:0a:c9:a9:c3:8e:be:c1:a7:09:6d:ed:7c:37: ff:7f:f7:6b:94:75:3a:5b:36:54:a3:74:1c:81:0b: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A4:F3:21:51:C3:E1:6F:E5:82:AC:D7:1E:1A:3C:98:86:C6:C4:89 X509v3 Authority Key Identifier: keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fe:8a:07:6b:6c:6b:84:d4:db:fe:cd:2a:23:7b:0c:ed:f9: 4c:0c:9b:b2:8b:58:96:54:9f:70:5b:26:cb:b2:1c:62:5f:da: e2:b7:cd:b5:09:62:81:36:50:c5:79:ac:74:64:6e:a2:be:af: f9:e7:d7:c4:db:2f:6d:02:bb:66:0f:09:c9:d6:43:d2:8a:d1: e7:1f:22:59:69:5f:93:fd:b9:98:9e:58:5b:a6:13:6a:d0:33: 03:08:99:68:28:ed:97:49:4a:3f:c4:15:81:f6:99:e7:95:52: d1:56:b1:da:e5:87:21:1a:00:d6:d1:54:40:4a:55:71:1d:76: 28:93:c5:8a:f9:90:27:35:72:39:26:a5:75:9f:4a:d4:05:81: ea:c4:12:98:7a:c7:51:42:85:ab:2a:a7:64:8e:2b:fc:af:a2: f2:2f:9e:94:8b:bf:e3:65:e4:9c:a7:78:44:b8:44:51:df:67: ed:2c:ad:ad:99:c5:a7:7e:00:91:8f:25:18:82:92:87:06:74: a4:8f:df:00:1a:10:e3:0a:18:d5:0f:8b:b8:4f:d0:72:b2:8b: d5:fe:40:15:d0:6e:17:bc:de:97:79:17:a7:74:1d:3c:4c:40: 8a:ae:63:5f:05:19:32:d5:48:3e:f5:c8:6d:4b:7a:11:75:52: 41:4c:1c:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9giXmEyNkpEfs9fJtIgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1 Y2IxN2UwHhcNMjUxMjI2MTQwMDMxWhcNMjUxMjI3MTQwMDMxWjAzMTEwLwYDVQQD Eyg4NGE0ZjMyMTUxYzNlMTZmZTU4MmFjZDcxZTFhM2M5ODg2YzZjNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAHzwNF2CcVT4DrFo2C0Y/Db1P3J GJoTHybNGq5Ckc1rs+wFJHDhAqOADezEJoumdyHdadspLRycnH6ZJD2E8aKF9VZ5 RyG46Y0ox7otKAbQDpNPn8Yv8ugbknG34rseOzWBqF9vOuVQtk5gpXp0mRNwRQrK 1p4oU5S6DFmfnf0ii41s5uWeqs+XzmkIBKWdwqHiK3/8pALDQ4Gh5f3Si5Hl6Ef2 oXE7+2SCMZOJR+mE1w1P/MPDdGg1Uymc92TZE0Vyk8/4joz6eubXNs5l62bXv915 rGCaC4L5ug5a/ntMqArJqcOOvsGnCW3tfDf/f/drlHU6WzZUo3QcgQvq2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISk8yFRw+Fv5YKs1x4aPJiGxsSJMB8GA1UdIwQY MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct NGQxNmJlOWJhMTMyLzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOP6KB2ts a4TU2/7NKiN7DO35TAybsotYllSfcFsmy7IcYl/a4rfNtQligTZQxXmsdGRuor6v +efXxNsvbQK7Zg8JydZD0orR5x8iWWlfk/25mJ5YW6YTatAzAwiZaCjtl0lKP8QV gfaZ55VS0Vax2uWHIRoA1tFUQEpVcR12KJPFivmQJzVyOSaldZ9K1AWB6sQSmHrH UUKFqyqnZI4r/K+i8i+elIu/42XknKd4RLhEUd9n7SytrZnFp34AkY8lGIKShwZ0 pI/fABoQ4woY1Q+LuE/QcrKL1f5AFdBuF7zel3kXp3QdPExAiq5jXwUZMtVIPvXI bUt6EXVSQUwcRg== -----END CERTIFICATE-----Generated at Fri Dec 26 21:03:35 2025 by rpki-client