This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft File: ikAMEXs2e5IxswUvpRV8OaXgxJs.mft (raw, json) Hash identifier: 6kWYzZs20iCD2m1uw4KvqMW4owxNPCC0YJDBzc/VeSQ= Subject key identifier: 89:09:41:09:6F:8B:82:6A:6A:ED:71:51:33:64:39:6E:F1:FC:D6:0D Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b Certificate serial: 019B59E381B7530231C08955087E6F07F479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft Manifest number: 1A Signing time: Fri 26 Dec 2025 09:00:40 +0000 Manifest this update: Fri 26 Dec 2025 09:00:40 +0000 Manifest next update: Sat 27 Dec 2025 09:00:40 +0000 Files and hashes: 1: 1-KOkWOaQ8TOsTMFwMFLisSfYRxc.roa (hash: 4qMgExjvtBoaAgy7IxXM+b9rk+ulCL/b8iFfK1Kf3yE=) 2: ikAMEXs2e5IxswUvpRV8OaXgxJs.crl (hash: tWiyRMOTZyhSg/JLjRXR6c2xTvkapMPx8bmyao2Z3v0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:81:b7:53:02:31:c0:89:55:08:7e:6f:07:f4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b Validity Not Before: Dec 26 09:00:40 2025 GMT Not After : Dec 27 09:00:40 2025 GMT Subject: CN=890941096f8b826a6aed71513364396ef1fcd60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:29:7d:e7:72:9a:e0:36:ed:04:72:65:9c: e9:84:76:d8:e0:04:c0:52:6b:b2:53:b2:cb:e7:55: e2:46:7e:ea:5d:1e:33:69:c7:eb:5c:c0:b0:a9:e9: b2:11:6f:f8:fe:e8:4c:49:b9:52:1f:25:12:6f:1f: f1:16:d4:ed:1f:98:1c:18:f5:93:24:3f:08:9c:85: 48:d2:8f:79:19:3a:44:60:d5:03:22:e6:82:8e:5e: ad:7b:7e:7a:d5:04:19:82:62:f0:a5:27:61:70:8e: 4c:75:26:0a:5a:fa:35:f7:17:ec:64:53:63:7b:00: 89:72:9f:77:84:b4:d3:4d:b9:80:7a:0a:48:72:2a: 03:9c:7b:c4:d9:ad:0d:63:0e:00:e2:e8:2d:19:4f: 7d:c3:c3:1c:15:cf:29:0d:74:aa:45:7a:9f:02:14: f9:2e:c5:1c:45:bb:19:1f:f5:ee:55:36:4a:f3:9a: dc:e4:98:9b:41:58:ce:11:a8:49:68:90:f7:eb:62: c9:30:69:4e:3c:cf:e2:4d:a1:44:15:ab:4d:5c:7f: 36:6c:6b:9d:6d:87:f6:82:84:82:3d:87:1d:89:59: e8:2d:91:f0:1a:5a:9f:7d:b6:c2:06:ed:53:5e:81: b0:b7:50:40:8c:f8:e4:43:45:f2:17:05:7c:5c:08: cb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:41:09:6F:8B:82:6A:6A:ED:71:51:33:64:39:6E:F1:FC:D6:0D X509v3 Authority Key Identifier: keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ca:18:2d:05:4d:97:c4:2c:73:b5:9b:d7:25:eb:a3:16:3a: 65:7f:42:ee:d7:e8:1b:c5:d4:8a:16:7f:fa:23:88:9c:b1:49: 5c:0f:ad:07:fc:c3:9e:e0:08:23:fa:61:98:72:06:e8:23:ed: e6:f4:36:21:a3:97:2f:88:0c:47:63:ea:de:88:3e:cc:96:20: ae:f0:31:66:75:16:97:21:eb:72:d3:9c:33:6d:c1:64:1d:5c: 6f:05:f5:a0:c0:78:c9:1b:a6:d0:ae:9a:65:53:c2:42:e4:c1: 6d:ec:ee:35:29:60:1b:a4:37:da:a1:29:87:2c:bd:aa:fe:16: 5f:34:91:27:d6:c5:23:18:7a:c6:aa:45:90:24:ee:f1:a3:62: ce:77:d4:03:9a:a6:3c:d0:f0:e0:78:cb:fb:6b:fa:3c:cc:f3: ff:fa:f0:6a:71:59:99:62:3e:19:5d:fc:5b:b8:df:4b:6f:0a: ec:ce:03:04:1c:ba:69:76:5e:94:0b:5d:61:85:55:37:76:60: c8:b5:63:d1:df:a5:af:8c:a4:be:18:8a:6b:cf:88:54:78:f3: 9d:8f:62:02:4a:0b:6a:df:d2:1d:6a:04:be:2e:e7:b9:0b:96: cc:d9:3e:56:b6:56:b6:29:47:ae:27:dd:c0:83:ea:a0:3e:59: c0:09:f0:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44G3UwIxwIlVCH5vB/R5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDAwYzExN2IzNjdiOTIzMWIzMDUyZmE1MTU3YzM5YTVl MGM0OWIwHhcNMjUxMjI2MDkwMDQwWhcNMjUxMjI3MDkwMDQwWjAzMTEwLwYDVQQD Eyg4OTA5NDEwOTZmOGI4MjZhNmFlZDcxNTEzMzY0Mzk2ZWYxZmNkNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZApfedymuA27QRyZZzphHbY4ATA UmuyU7LL51XiRn7qXR4zacfrXMCwqemyEW/4/uhMSblSHyUSbx/xFtTtH5gcGPWT JD8InIVI0o95GTpEYNUDIuaCjl6te3561QQZgmLwpSdhcI5MdSYKWvo19xfsZFNj ewCJcp93hLTTTbmAegpIcioDnHvE2a0NYw4A4ugtGU99w8McFc8pDXSqRXqfAhT5 LsUcRbsZH/XuVTZK85rc5JibQVjOEahJaJD362LJMGlOPM/iTaFEFatNXH82bGud bYf2goSCPYcdiVnoLZHwGlqffbbCBu1TXoGwt1BAjPjkQ0XyFwV8XAjLNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkJQQlvi4Jqau1xUTNkOW7x/NYNMB8GA1UdIwQY MBaAFIpADBF7NnuSMbMFL6UVfDml4MSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtBTUVYczJlNUl4c3dVdnBSVjhPYVhneEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83NTg2ZGItNWQ2MS00NzhkLWE0Yjgt NmFlMzI1NDQzMmIzLzEvaWtBTUVYczJlNUl4c3dVdnBSVjhPYVhneEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi83NTg2ZGItNWQ2MS00NzhkLWE0YjgtNmFlMzI1NDQzMmIz LzEvaWtBTUVYczJlNUl4c3dVdnBSVjhPYVhneEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsoYLQVN l8Qsc7Wb1yXroxY6ZX9C7tfoG8XUihZ/+iOInLFJXA+tB/zDnuAII/phmHIG6CPt 5vQ2IaOXL4gMR2Pq3og+zJYgrvAxZnUWlyHrctOcM23BZB1cbwX1oMB4yRum0K6a ZVPCQuTBbezuNSlgG6Q32qEphyy9qv4WXzSRJ9bFIxh6xqpFkCTu8aNiznfUA5qm PNDw4HjL+2v6PMzz//rwanFZmWI+GV38W7jfS28K7M4DBBy6aXZelAtdYYVVN3Zg yLVj0d+lr4ykvhiKa8+IVHjznY9iAkoLat/SHWoEvi7nuQuWzNk+VrZWtilHrifd wIPqoD5ZwAnwFw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client