This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json) Hash identifier: 1mxEzdrGdjQccZ46StUMSO/lVyWSBz9p+RbPtkSK224= Subject key identifier: 47:24:1B:A1:59:8E:17:98:C2:14:7A:23:39:05:E3:81:13:25:3D:A4 Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Certificate serial: 019B3CEBB6788905B3946AA1949038042AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft Manifest number: 1533 Signing time: Sat 20 Dec 2025 18:00:39 +0000 Manifest this update: Sat 20 Dec 2025 18:00:39 +0000 Manifest next update: Sun 21 Dec 2025 18:00:39 +0000 Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=) 2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: CZ4IL3mEdKsvVxEmPaWzF9lSG2arF/7f+PoDPLkb9m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b6:78:89:05:b3:94:6a:a1:94:90:38:04:2a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Validity Not Before: Dec 20 18:00:39 2025 GMT Not After : Dec 21 18:00:39 2025 GMT Subject: CN=47241ba1598e1798c2147a233905e38113253da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:82:4e:6d:e5:c5:aa:b2:bb:8d:b4:47:a6: 6e:13:20:71:39:21:d0:39:cb:70:8a:8b:db:40:db: 88:ee:a2:4c:6d:e0:ba:b8:e7:8f:07:4c:2c:30:d8: 2d:47:8b:84:98:59:da:0b:97:ef:7a:e5:fd:bb:e5: 70:9e:73:1c:19:2c:a6:43:e7:2c:ee:90:a8:35:b1: e9:4a:e4:6a:62:07:3c:e5:97:e3:46:92:3b:f4:39: 64:0b:04:7c:3a:0f:de:4f:de:83:a0:8b:ef:6a:66: e7:af:4f:3f:70:cc:1e:82:19:9e:4a:53:d1:c7:f4: c5:f8:42:4d:43:9c:82:ae:50:07:0f:b2:e5:a2:de: cf:f5:ca:ed:66:97:99:9b:24:51:16:df:88:4b:6f: 09:af:0e:ea:ab:e3:1c:83:d6:be:d6:30:ae:be:55: 19:dd:c6:4b:b8:8b:8f:10:1f:c8:f8:b6:95:3a:0d: ce:14:b9:67:c7:a7:8c:64:ba:44:72:44:65:3b:90: 9e:5f:35:ae:11:e3:68:f6:ec:3d:5e:5a:91:c7:31: 51:6e:4e:29:53:5f:21:78:69:e4:1d:16:65:22:7c: 7f:c8:30:cd:15:0d:cd:eb:71:14:5e:f1:19:39:88: be:2a:6d:15:2c:93:5d:a9:bf:73:59:36:51:d1:61: c6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:24:1B:A1:59:8E:17:98:C2:14:7A:23:39:05:E3:81:13:25:3D:A4 X509v3 Authority Key Identifier: keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e2:92:92:86:ea:a0:ca:2e:21:82:6d:1f:1c:2e:86:96:ba: 9b:cf:ee:7f:79:92:47:2a:1e:37:3d:d8:cc:5c:65:dc:ba:e9: 9f:43:01:aa:4a:6a:8b:f9:3b:9e:cc:f1:a6:de:25:66:ba:72: 61:85:c7:8c:19:df:99:a5:dd:a3:9c:9d:dc:08:46:ae:25:6a: a9:2c:7d:cf:33:d3:fb:9b:3f:d0:fc:22:71:a0:32:0f:98:b6: 70:f3:d6:70:52:8e:48:3f:d8:cb:ce:ec:ed:a4:80:21:1f:12: a9:21:11:b2:2c:dc:9a:24:93:f8:10:78:a5:a4:04:d0:d0:46: 0a:5d:52:ed:22:62:1c:3d:a4:78:6f:66:d5:83:87:82:e0:da: 0a:5e:8f:8c:3c:4e:68:2e:fe:3e:cb:91:4d:e5:29:01:6a:1d: 82:de:65:d9:3a:eb:df:08:0f:65:c1:c2:e0:17:11:d4:a1:4f: 5b:4f:79:0e:bf:8e:51:63:5f:54:97:03:22:29:60:30:83:7d: 00:a4:1d:ac:6c:1d:6b:44:03:d5:3a:bc:bb:2e:a8:f8:f4:2a: 06:76:5b:57:4d:3e:82:7a:4c:a4:83:e9:0f:5c:39:48:7c:e1: d5:ac:c1:3d:df:db:26:7f:85:bf:53:04:5b:49:04:e7:07:13: 28:da:1f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867Z4iQWzlGqhlJA4BCqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw OTY2MDIwHhcNMjUxMjIwMTgwMDM5WhcNMjUxMjIxMTgwMDM5WjAzMTEwLwYDVQQD Eyg0NzI0MWJhMTU5OGUxNzk4YzIxNDdhMjMzOTA1ZTM4MTEzMjUzZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosSCTm3lxaqyu420R6ZuEyBxOSHQ OctwiovbQNuI7qJMbeC6uOePB0wsMNgtR4uEmFnaC5fveuX9u+VwnnMcGSymQ+cs 7pCoNbHpSuRqYgc85ZfjRpI79DlkCwR8Og/eT96DoIvvambnr08/cMweghmeSlPR x/TF+EJNQ5yCrlAHD7Llot7P9crtZpeZmyRRFt+IS28Jrw7qq+Mcg9a+1jCuvlUZ 3cZLuIuPEB/I+LaVOg3OFLlnx6eMZLpEckRlO5CeXzWuEeNo9uw9XlqRxzFRbk4p U18heGnkHRZlInx/yDDNFQ3N63EUXvEZOYi+Km0VLJNdqb9zWTZR0WHGCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEckG6FZjheYwhR6IzkF44ETJT2kMB8GA1UdIwQY MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct MmU3MjEzNzY3NjI4LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4 LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+KSkobq oMouIYJtHxwuhpa6m8/uf3mSRyoeNz3YzFxl3Lrpn0MBqkpqi/k7nszxpt4lZrpy YYXHjBnfmaXdo5yd3AhGriVqqSx9zzPT+5s/0PwicaAyD5i2cPPWcFKOSD/Yy87s 7aSAIR8SqSERsizcmiST+BB4paQE0NBGCl1S7SJiHD2keG9m1YOHguDaCl6PjDxO aC7+PsuRTeUpAWodgt5l2Trr3wgPZcHC4BcR1KFPW095Dr+OUWNfVJcDIilgMIN9 AKQdrGwda0QD1Tq8uy6o+PQqBnZbV00+gnpMpIPpD1w5SHzh1azBPd/bJn+Fv1ME W0kE5wcTKNofOg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:02 2025 by rpki-client