This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft File: IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json) Hash identifier: VNyjRSCeHZs8jD+A7wydCpURlFLbsQLQPqNRFLdbE5Q= Subject key identifier: A7:8C:6A:88:05:6D:0B:29:60:6B:A6:83:0A:A0:7D:12:54:50:22:0C Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Certificate serial: 019B05221B0639D7DBBA2B1617B150CEC122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft Manifest number: 17A1 Signing time: Tue 09 Dec 2025 22:01:19 +0000 Manifest this update: Tue 09 Dec 2025 22:01:19 +0000 Manifest next update: Wed 10 Dec 2025 22:01:19 +0000 Files and hashes: 1: 6w9YYZofXuAgxjk7hq0MFU5TxUA.roa (hash: psQbqp3Dv/axG/Fm+AyyjZW7+7TGZniv6yrpPXuxg9E=) 2: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: aFyLnhw0JFvXzKooroxd9hlHp78ZgaQj5EIRYYslH58=) 3: NWZ6X9b-5hxEfJ9QrTP9jZ_zmYY.roa (hash: 8br5HNMvqSMJ3h3ONJIZMwSXpIgb/ZWSf4M8Oa8bT9o=) 4: YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa (hash: JJTAqpTGe2vNlEv4BQ7ae6jf0gv/R7qn+RigFBVB2r8=) 5: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (hash: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=) 6: oHh9HVxtMu6mNRpoXoeU65t9c7Y.roa (hash: G+2g4aHJLaIaMhKuUJAYSptAUkZNd7lrZ4J05sdateo=) 7: q_DU4LpYW5iMWWvp18KMkPW4jyE.roa (hash: dS1YtoKx6Fr5PPMvDkPqkspr86D+De4f+k+4trrsOTk=) 8: xv12OPtaTpKWrICjs27-0WrsmIg.roa (hash: X8XG/cdIF+kjQf+VKvmL60lRdGE9r9sJ1I4ddr9jEgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:22:1b:06:39:d7:db:ba:2b:16:17:b1:50:ce:c1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Validity Not Before: Dec 9 22:01:19 2025 GMT Not After : Dec 10 22:01:19 2025 GMT Subject: CN=a78c6a88056d0b29606ba6830aa07d125450220c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:ea:0d:53:c8:e5:65:37:a4:23:3d:86:95: a7:4b:59:72:39:e2:89:77:51:a2:04:af:47:81:22: 5e:30:ea:b8:20:72:b2:2d:12:47:41:e6:ef:80:0a: f8:8f:86:de:23:8b:9f:79:da:d0:81:ac:3f:64:57: 3c:57:ed:cd:bb:c3:4f:41:92:33:ef:4f:78:3a:b3: 8c:b9:6a:a2:e3:32:d1:99:52:9c:f2:f4:80:e2:e4: 12:cd:46:b4:42:df:ba:00:14:c0:a9:bb:cb:ab:d2: 5a:ed:25:e4:76:08:b5:d9:d6:58:9a:a9:5c:ae:a2: e9:6c:aa:24:4c:1f:70:1d:50:03:e3:59:8f:0a:ac: b3:45:e7:38:da:30:52:ce:de:26:1d:84:63:ee:b4: 0a:1e:97:a7:05:ee:51:9a:f0:34:df:ca:f9:c0:41: a0:79:21:65:63:64:68:07:88:14:09:a9:33:3e:2c: 86:f1:ff:22:9d:8e:b5:5f:ef:75:b3:89:14:67:60: 9e:15:ce:9c:ed:18:a7:d5:26:97:1c:3c:f9:82:ba: 67:51:94:d5:fd:8f:c3:77:73:90:93:dc:b1:a1:ed: a5:d4:0f:d0:e9:66:a1:c6:97:a6:2d:90:30:61:9b: 1b:8d:85:49:fc:7d:2d:1d:80:03:8b:ae:1c:26:9d: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8C:6A:88:05:6D:0B:29:60:6B:A6:83:0A:A0:7D:12:54:50:22:0C X509v3 Authority Key Identifier: keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:df:28:fd:7f:90:82:42:5d:ae:a3:89:6c:54:3c:40:a0:c3: 5f:fe:53:eb:64:ea:6c:56:e6:23:e9:35:d8:38:f7:5e:74:83: af:5a:93:a1:f2:a1:6d:89:25:f9:02:54:b5:eb:68:fa:f5:eb: 5d:40:3d:88:ca:a9:c0:15:c0:86:81:1d:41:69:39:f3:3a:bc: ba:d2:30:cd:91:a7:0d:8f:e0:8a:fd:00:77:f9:66:a5:e8:d5: 96:cf:11:89:ca:55:8f:ab:13:f5:28:53:8d:26:13:ea:a9:5b: 4e:c3:66:f6:e2:71:f8:72:48:a6:bf:8f:a1:6e:75:eb:84:c9: 55:1f:e9:76:10:c3:d8:03:46:73:57:25:92:30:84:c2:ca:5e: 46:1f:f0:71:74:eb:e0:db:d6:b0:55:87:7c:19:45:6c:5e:47: a3:11:78:5d:dc:5b:8b:03:3c:8c:e3:cf:e6:b2:b6:99:df:bb: 35:ed:1a:22:71:9b:0c:c1:62:08:66:59:3b:40:ca:e3:61:d5: 92:fd:64:fe:11:fc:26:01:97:47:c5:d9:06:92:4f:d7:f7:5e: db:a3:2e:f2:48:7e:fe:0c:fc:93:3b:ea:bf:7c:e5:92:ff:6b: 90:4f:f4:2e:0b:b0:f9:3d:ff:e1:5c:d3:41:05:17:eb:1f:cf: 0f:24:e8:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFIhsGOdfbuisWF7FQzsEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi OWQ2MDgwHhcNMjUxMjA5MjIwMTE5WhcNMjUxMjEwMjIwMTE5WjAzMTEwLwYDVQQD EyhhNzhjNmE4ODA1NmQwYjI5NjA2YmE2ODMwYWEwN2QxMjU0NTAyMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkPqDVPI5WU3pCM9hpWnS1lyOeKJ d1GiBK9HgSJeMOq4IHKyLRJHQebvgAr4j4beI4ufedrQgaw/ZFc8V+3Nu8NPQZIz 7094OrOMuWqi4zLRmVKc8vSA4uQSzUa0Qt+6ABTAqbvLq9Ja7SXkdgi12dZYmqlc rqLpbKokTB9wHVAD41mPCqyzRec42jBSzt4mHYRj7rQKHpenBe5RmvA038r5wEGg eSFlY2RoB4gUCakzPiyG8f8inY61X+91s4kUZ2CeFc6c7Rin1SaXHDz5grpnUZTV /Y/Dd3OQk9yxoe2l1A/Q6WahxpemLZAwYZsbjYVJ/H0tHYADi64cJp3UpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeMaogFbQspYGumgwqgfRJUUCIMMB8GA1UdIwQY MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt YmM5M2NhNjc5ZTFmLzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit8o/X+Q gkJdrqOJbFQ8QKDDX/5T62TqbFbmI+k12Dj3XnSDr1qTofKhbYkl+QJUteto+vXr XUA9iMqpwBXAhoEdQWk58zq8utIwzZGnDY/giv0Ad/lmpejVls8RicpVj6sT9ShT jSYT6qlbTsNm9uJx+HJIpr+PoW5164TJVR/pdhDD2ANGc1clkjCEwspeRh/wcXTr 4NvWsFWHfBlFbF5HoxF4XdxbiwM8jOPP5rK2md+7Ne0aInGbDMFiCGZZO0DK42HV kv1k/hH8JgGXR8XZBpJP1/de26Mu8kh+/gz8kzvqv3zlkv9rkE/0Lguw+T3/4VzT QQUX6x/PDyToAg== -----END CERTIFICATE-----Generated at Wed Dec 10 07:55:00 2025 by rpki-client