This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json) Hash identifier: W2PZ8Etl4/pQ/t9bq1FgrxGi4/ON2aMJTih8CBAMuXw= Subject key identifier: 4B:CC:F8:43:CD:49:5F:12:AF:3C:B2:BE:94:6A:8E:00:C7:DA:D2:3E Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019B0634174C5A6A0CEAB0F21C239F3B592C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft Manifest number: 0EBD Signing time: Wed 10 Dec 2025 03:00:35 +0000 Manifest this update: Wed 10 Dec 2025 03:00:35 +0000 Manifest next update: Thu 11 Dec 2025 03:00:35 +0000 Files and hashes: 1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=) 2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: nbBRN1TPQT/bhYaDAlJpilZjdOa6FNurWtCNi4AuMLk=) 3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=) 4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=) 5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=) 6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=) 7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:34:17:4c:5a:6a:0c:ea:b0:f2:1c:23:9f:3b:59:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Dec 10 03:00:35 2025 GMT Not After : Dec 11 03:00:35 2025 GMT Subject: CN=4bccf843cd495f12af3cb2be946a8e00c7dad23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:a2:fa:96:cd:53:5e:41:e5:21:87:04:57: e7:b1:fa:ee:51:95:ab:9f:e9:77:94:9b:66:a8:f1: e2:48:21:40:61:16:c6:21:6e:74:99:2b:81:43:b9: 3f:df:8f:c9:c3:f1:0a:a1:cb:db:7f:bb:65:fd:30: b2:e7:c9:e9:0b:8e:a8:06:96:b4:8c:7a:50:a0:29: 0a:f3:33:1e:34:ca:6c:ac:54:78:04:6e:59:c1:9d: 86:9d:f4:14:c7:c8:06:2f:d5:76:fb:6f:cb:41:b2: 98:5a:4e:e7:ad:c3:63:f2:ef:33:ca:89:8f:54:a9: ac:8a:34:3d:fd:b9:fe:ae:9c:6d:89:f6:d0:db:77: 91:9f:97:6c:d8:9a:62:fe:5e:0b:4a:3f:6e:c6:26: 74:b0:07:85:7d:1f:6f:8c:9e:ae:d3:23:99:77:7e: e8:dd:94:41:4c:d0:e4:ee:f8:bb:ce:df:2c:c7:c9: 78:64:e0:88:5f:bf:cf:ec:ce:91:bb:33:1f:b1:4a: d7:e3:49:7a:22:21:0e:13:bc:83:45:91:cd:99:98: a5:ab:3f:88:c3:30:25:2c:2c:04:da:14:29:98:8e: 05:3d:78:a6:bd:2f:33:cd:5a:52:5e:b9:5a:e0:7d: 28:25:b2:4c:ae:f7:c5:5d:c0:82:5b:0a:17:ff:07: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CC:F8:43:CD:49:5F:12:AF:3C:B2:BE:94:6A:8E:00:C7:DA:D2:3E X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f5:4b:a6:4b:bb:21:3d:97:44:4b:17:3b:ac:91:fc:89:2d: ba:5d:0d:3c:ee:b4:3c:2f:c7:ff:28:85:87:4e:ca:5a:7a:fc: 6c:51:8e:21:18:c1:d1:ca:1a:e8:86:eb:7a:03:a8:7d:3a:da: a5:5e:51:ad:10:a9:2f:3f:9b:19:75:83:2f:a7:26:0a:2f:f3: 15:2e:11:5f:a8:10:1a:7a:17:94:56:ec:f6:ed:d4:5a:03:c4: d5:da:81:2e:99:27:10:47:83:89:f7:f7:3c:73:6c:78:e3:4b: 25:95:10:cf:13:40:66:2a:ef:02:70:40:9e:ff:e9:82:69:6e: 61:fd:ed:8a:d7:fa:95:7f:37:96:a3:03:b5:18:98:db:54:a1: 99:f3:ef:86:bd:cd:06:4d:2e:7d:5e:47:ae:55:35:6e:0c:30: 00:dd:16:5f:01:5d:f0:97:af:48:77:16:25:a4:cb:df:9d:ca: 9f:20:0d:3a:db:76:03:71:5d:cd:e8:49:52:8b:61:fd:a2:02: e6:a9:92:f2:f2:26:18:7e:5f:c5:e9:ae:77:01:a0:24:63:ab: e5:4f:a1:7b:58:28:49:f6:a7:3a:81:05:e3:4e:b8:ae:b5:44: 9e:94:7f:45:43:0e:9c:e0:aa:60:12:d1:9b:28:35:74:ef:fb: 0a:b2:56:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGNBdMWmoM6rDyHCOfO1ksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjUxMjEwMDMwMDM1WhcNMjUxMjExMDMwMDM1WjAzMTEwLwYDVQQD Eyg0YmNjZjg0M2NkNDk1ZjEyYWYzY2IyYmU5NDZhOGUwMGM3ZGFkMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMCi+pbNU15B5SGHBFfnsfruUZWr n+l3lJtmqPHiSCFAYRbGIW50mSuBQ7k/34/Jw/EKocvbf7tl/TCy58npC46oBpa0 jHpQoCkK8zMeNMpsrFR4BG5ZwZ2GnfQUx8gGL9V2+2/LQbKYWk7nrcNj8u8zyomP VKmsijQ9/bn+rpxtifbQ23eRn5ds2Jpi/l4LSj9uxiZ0sAeFfR9vjJ6u0yOZd37o 3ZRBTNDk7vi7zt8sx8l4ZOCIX7/P7M6RuzMfsUrX40l6IiEOE7yDRZHNmZilqz+I wzAlLCwE2hQpmI4FPXimvS8zzVpSXrla4H0oJbJMrvfFXcCCWwoX/wcUlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvM+EPNSV8SrzyyvpRqjgDH2tI+MB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfVLpku7 IT2XREsXO6yR/Iktul0NPO60PC/H/yiFh07KWnr8bFGOIRjB0coa6IbregOofTra pV5RrRCpLz+bGXWDL6cmCi/zFS4RX6gQGnoXlFbs9u3UWgPE1dqBLpknEEeDiff3 PHNseONLJZUQzxNAZirvAnBAnv/pgmluYf3titf6lX83lqMDtRiY21ShmfPvhr3N Bk0ufV5HrlU1bgwwAN0WXwFd8JevSHcWJaTL353KnyANOtt2A3FdzehJUoth/aIC 5qmS8vImGH5fxemudwGgJGOr5U+he1goSfanOoEF4064rrVEnpR/RUMOnOCqYBLR myg1dO/7CrJWqw== -----END CERTIFICATE-----Generated at Wed Dec 10 13:17:40 2025 by rpki-client