This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json) Hash identifier: ICj1nMJintQbDull+0UjSft0S9SHJex7Z1pMKa0NSgc= Subject key identifier: 92:87:A5:FB:2F:43:C3:2B:B0:CC:0C:34:13:1F:68:A3:6B:BC:DF:B5 Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d Certificate serial: 019B353217BB3DC1D2E3C3AEC102BDCE453C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 06:00:33 +0000 Manifest this update: Fri 19 Dec 2025 06:00:33 +0000 Manifest next update: Sat 20 Dec 2025 06:00:33 +0000 Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=) 2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: BR917snv2clyvIsEMeyve8kOvNDIEtHWg5RcTfmki6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:17:bb:3d:c1:d2:e3:c3:ae:c1:02:bd:ce:45:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d Validity Not Before: Dec 19 06:00:33 2025 GMT Not After : Dec 20 06:00:33 2025 GMT Subject: CN=9287a5fb2f43c32bb0cc0c34131f68a36bbcdfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:7e:06:83:8a:13:80:70:aa:ff:1f:2e:3e: 9e:2e:2f:b7:16:e6:33:74:e9:69:67:cd:cb:61:00: da:68:78:43:be:fa:33:dc:17:54:5d:32:3a:68:e2: 1f:44:61:e2:1d:af:64:e5:65:1d:0a:4c:73:60:1f: b6:3e:80:ee:43:27:11:85:fa:3d:7f:c6:47:05:33: 22:f9:b4:b5:f0:3d:fd:33:c8:a0:f4:c9:30:8f:37: dd:c8:e6:69:b3:e7:6d:54:e0:d8:df:ab:6b:19:72: 9b:f3:96:25:13:b1:d2:94:b1:15:3d:10:0e:00:ed: 10:75:83:f1:a0:74:94:83:45:54:82:6c:c4:ae:f9: c8:1d:ec:6c:35:8c:e8:e3:73:88:0c:55:95:6c:ae: 00:ff:06:7a:5e:53:42:17:94:40:e3:72:d1:ab:be: 1b:c2:69:ad:13:a9:b0:9c:f7:09:a9:13:76:08:c1: 22:43:36:59:26:1d:bb:95:53:64:2d:f4:ac:87:6f: 20:31:54:a8:26:d3:2e:98:5e:d9:cd:f3:fb:53:74: 29:90:00:93:b2:7b:c9:40:f8:67:a2:54:93:8a:a2: d9:f6:d4:fe:ce:51:25:57:6c:bf:cb:87:d6:24:7e: d6:31:26:68:2c:76:9c:94:32:fa:ab:a3:21:3b:e4: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:87:A5:FB:2F:43:C3:2B:B0:CC:0C:34:13:1F:68:A3:6B:BC:DF:B5 X509v3 Authority Key Identifier: keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:66:20:31:b2:88:50:ec:d2:a2:d0:20:b4:b0:7b:d3:e6:e3: 22:1d:1c:ee:b3:9e:aa:5f:42:1c:6b:65:ea:ef:55:bd:3f:c8: fc:86:91:35:db:80:e2:a7:49:20:30:31:48:1d:f0:29:77:fd: ae:34:d0:1d:dc:45:11:d0:30:48:e7:be:a9:f2:56:39:b4:4d: 8d:7e:17:2d:a0:5d:c5:a9:91:d4:1e:c1:ea:ee:93:06:a7:11: 07:18:ad:fc:a8:04:81:8d:5c:ad:fd:9e:1f:d1:f3:1c:d6:67: 59:82:a2:38:c9:41:75:c8:e5:51:f5:af:ba:6c:5c:79:af:c7: b0:fa:2e:d4:9e:3b:81:be:ba:fe:44:02:2c:fd:1e:cf:fb:cb: 65:12:b8:83:c1:29:bf:7d:a2:7b:e7:cd:1d:2a:27:d6:db:0d: 3c:40:c7:ed:7c:e5:47:26:1b:7b:ae:64:63:8a:3f:5a:05:9c: 09:0a:53:b6:00:43:f0:7b:b5:1b:5a:dc:f2:7a:94:4e:19:59: 31:ff:0a:37:c0:0b:f8:61:0e:cd:0f:7e:14:5e:ef:dd:fc:c3: f3:d1:a2:db:b6:27:60:fa:04:4d:6f:8d:bf:35:6e:4e:20:4a: 62:30:13:ba:e6:7f:0f:9e:ea:3b:12:40:02:4c:a4:d5:52:f2: 5b:14:29:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mhe7PcHS48OuwQK9zkU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDVlMDlhZjgyYTk2OTE4Yzg2YTY0N2I0ZWRjZDhlYmIy MzgyMGQwHhcNMjUxMjE5MDYwMDMzWhcNMjUxMjIwMDYwMDMzWjAzMTEwLwYDVQQD Eyg5Mjg3YTVmYjJmNDNjMzJiYjBjYzBjMzQxMzFmNjhhMzZiYmNkZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tp+BoOKE4Bwqv8fLj6eLi+3FuYz dOlpZ83LYQDaaHhDvvoz3BdUXTI6aOIfRGHiHa9k5WUdCkxzYB+2PoDuQycRhfo9 f8ZHBTMi+bS18D39M8ig9MkwjzfdyOZps+dtVODY36trGXKb85YlE7HSlLEVPRAO AO0QdYPxoHSUg0VUgmzErvnIHexsNYzo43OIDFWVbK4A/wZ6XlNCF5RA43LRq74b wmmtE6mwnPcJqRN2CMEiQzZZJh27lVNkLfSsh28gMVSoJtMumF7ZzfP7U3QpkACT snvJQPhnolSTiqLZ9tT+zlElV2y/y4fWJH7WMSZoLHaclDL6q6MhO+TH9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKHpfsvQ8MrsMwMNBMfaKNrvN+1MB8GA1UdIwQY MBaAFIjV4Jr4KpaRjIamR7TtzY67I4INMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMt MjkzYjYyNzk0ODUwLzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMtMjkzYjYyNzk0ODUw LzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmYgMbKI UOzSotAgtLB70+bjIh0c7rOeql9CHGtl6u9VvT/I/IaRNduA4qdJIDAxSB3wKXf9 rjTQHdxFEdAwSOe+qfJWObRNjX4XLaBdxamR1B7B6u6TBqcRBxit/KgEgY1crf2e H9HzHNZnWYKiOMlBdcjlUfWvumxcea/HsPou1J47gb66/kQCLP0ez/vLZRK4g8Ep v32ie+fNHSon1tsNPEDH7XzlRyYbe65kY4o/WgWcCQpTtgBD8Hu1G1rc8nqUThlZ Mf8KN8AL+GEOzQ9+FF7v3fzD89Gi27YnYPoETW+NvzVuTiBKYjATuuZ/D57qOxJA Akyk1VLyWxQphA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:00:11 2025 by rpki-client