This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json) Hash identifier: 767Ae/AA1INrW/rcGKoKOWLBioRDuD6TeCstxj5mDf8= Subject key identifier: 1D:ED:DC:AA:53:F6:C2:28:CA:D4:91:4D:DC:3A:BF:85:13:BC:06:2A Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Certificate serial: 019AFA30B9A7E613F2A483501BF723C8CCF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft Manifest number: E0 Signing time: Sun 07 Dec 2025 19:01:28 +0000 Manifest this update: Sun 07 Dec 2025 19:01:28 +0000 Manifest next update: Mon 08 Dec 2025 19:01:28 +0000 Files and hashes: 1: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: lAgfWwUD0/Fp9NJTgymoiguFda44dJseRtg4tSZRYXs=) 2: Y_oYNTABqXVE9GTLe20SGiBKmm8.roa (hash: oNuhka5sSAjP9HueZy64ACfp5Ut+NkJyfMXj1b7/13Y=) 3: efy5oJUo9vlNOp71j63zeVEmmxU.roa (hash: CC82OGeCqrXuJ1H3eqUShF4IKs0H5muAyFZDrElp2iw=) 4: gfJqz6llA6HPBbhUclOoBOQtzwA.roa (hash: RevaPA0FwqLm6G8w6EGXV/kc0l56ywZoZvqxJEm3YF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:30:b9:a7:e6:13:f2:a4:83:50:1b:f7:23:c8:cc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Validity Not Before: Dec 7 19:01:28 2025 GMT Not After : Dec 8 19:01:28 2025 GMT Subject: CN=1deddcaa53f6c228cad4914ddc3abf8513bc062a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:3a:0d:a9:bb:99:8a:9f:44:76:e5:36:e7: 5e:83:a6:3d:f9:77:b2:bf:8c:55:d1:fa:97:95:5c: ee:c2:f8:0b:6d:66:4b:a9:50:c5:af:cd:d4:35:5e: db:c4:fb:ba:de:d3:4e:7f:f4:e1:47:81:40:eb:c2: 0b:1f:bb:10:7c:80:e0:3e:d5:7f:3d:f8:a7:b0:13: 17:bf:72:00:2c:2f:93:90:47:fa:4a:b1:c3:8a:ab: ba:8e:79:6f:48:c7:d6:64:7c:db:26:ac:b1:15:c2: 95:79:18:02:73:02:77:12:9b:0c:36:5b:94:e3:97: 9d:2d:ac:50:69:18:12:da:f0:7f:37:01:d4:2d:a0: 58:8c:16:39:cd:22:85:52:5c:10:af:58:59:b2:8b: 82:d3:4a:e8:5b:a6:02:37:88:52:de:e0:a8:3e:64: ec:88:b9:9c:1c:41:5d:d7:07:b1:30:57:01:f6:4b: f9:e0:a6:6e:82:14:c3:85:41:33:58:d2:10:5a:35: fe:3b:67:32:20:f7:5e:71:ec:9c:05:f0:65:c9:ac: a1:6e:9a:37:f6:89:5a:6c:5d:c9:80:33:10:34:d7: 92:98:3e:03:e5:ec:73:92:f4:a3:bb:98:3b:40:c2: b8:6e:f9:de:c0:23:75:b2:36:79:45:f6:84:3c:25: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:ED:DC:AA:53:F6:C2:28:CA:D4:91:4D:DC:3A:BF:85:13:BC:06:2A X509v3 Authority Key Identifier: keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:bd:ad:95:d1:68:23:d1:51:54:81:10:f2:86:2c:27:b3:66: 61:8b:fd:b3:70:3f:0d:8e:95:61:4a:ee:b2:b0:29:50:7d:51: 01:e0:60:d6:3e:4d:8c:5c:6c:52:cd:eb:27:f9:a4:05:01:67: 20:26:5d:6d:43:b3:31:a8:3e:ed:72:b3:55:16:60:07:a5:05: 82:10:97:b6:a0:7f:c6:a3:75:fc:3e:4f:c9:55:24:45:6d:f8: 56:cb:95:50:f2:56:d9:87:a5:f3:62:23:bf:8e:55:c5:4e:bd: 27:c7:fe:a7:f9:2c:d3:01:f6:a6:f1:c7:ff:99:29:bd:b2:3c: aa:de:1c:fa:1c:37:12:c2:31:b0:37:3e:47:f2:09:0b:a4:2d: 7c:88:71:88:00:3f:c0:7a:eb:11:09:c5:22:6b:9a:56:9b:84: f2:7b:b2:14:7f:55:f4:b1:ae:e8:19:4a:6f:fd:28:7b:6f:79: 72:02:d1:d9:37:28:5b:39:7d:57:ca:72:3a:cf:ca:c0:99:42: 33:54:cb:e2:f6:ab:5e:d9:e0:10:43:61:09:8c:69:a4:0d:d6: 67:d9:18:fe:ad:70:05:1b:e1:df:dc:99:f7:4f:40:0b:a3:c2: c8:f6:27:b6:22:b9:e1:9c:e1:20:44:ab:f2:1a:82:f7:47:70: 43:2e:9b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6MLmn5hPypINQG/cjyMzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh NjU4MjkwHhcNMjUxMjA3MTkwMTI4WhcNMjUxMjA4MTkwMTI4WjAzMTEwLwYDVQQD EygxZGVkZGNhYTUzZjZjMjI4Y2FkNDkxNGRkYzNhYmY4NTEzYmMwNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2U6Dam7mYqfRHblNudeg6Y9+Xey v4xV0fqXlVzuwvgLbWZLqVDFr83UNV7bxPu63tNOf/ThR4FA68ILH7sQfIDgPtV/ PfinsBMXv3IALC+TkEf6SrHDiqu6jnlvSMfWZHzbJqyxFcKVeRgCcwJ3EpsMNluU 45edLaxQaRgS2vB/NwHULaBYjBY5zSKFUlwQr1hZsouC00roW6YCN4hS3uCoPmTs iLmcHEFd1wexMFcB9kv54KZughTDhUEzWNIQWjX+O2cyIPdeceycBfBlyayhbpo3 9olabF3JgDMQNNeSmD4D5exzkvSju5g7QMK4bvnewCN1sjZ5RfaEPCVWHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3t3KpT9sIoytSRTdw6v4UTvAYqMB8GA1UdIwQY MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3 LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuL2tldFo I9FRVIEQ8oYsJ7NmYYv9s3A/DY6VYUrusrApUH1RAeBg1j5NjFxsUs3rJ/mkBQFn ICZdbUOzMag+7XKzVRZgB6UFghCXtqB/xqN1/D5PyVUkRW34VsuVUPJW2Yel82Ij v45VxU69J8f+p/ks0wH2pvHH/5kpvbI8qt4c+hw3EsIxsDc+R/IJC6QtfIhxiAA/ wHrrEQnFImuaVpuE8nuyFH9V9LGu6BlKb/0oe295cgLR2TcoWzl9V8pyOs/KwJlC M1TL4varXtngEENhCYxppA3WZ9kY/q1wBRvh39yZ909AC6PCyPYntiK54ZzhIESr 8hqC90dwQy6btg== -----END CERTIFICATE-----Generated at Sun Dec 7 21:34:50 2025 by rpki-client