This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json) Hash identifier: 9gPS1vpGFKFTndQMleQFfkOBJA3Y8/2Bbk3qAfKFG0c= Subject key identifier: DE:79:0E:6A:79:CF:C4:5E:4E:FC:4E:BA:87:80:21:F3:2B:A7:28:03 Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Certificate serial: 019B46939E399BE55B16D98AF4D4079F0B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft Manifest number: 1538 Signing time: Mon 22 Dec 2025 15:00:37 +0000 Manifest this update: Mon 22 Dec 2025 15:00:37 +0000 Manifest next update: Tue 23 Dec 2025 15:00:37 +0000 Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=) 2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: Vtsygzura4bwf3HOw38Z8ih1h8D+7npIQPzJ788VdqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:9e:39:9b:e5:5b:16:d9:8a:f4:d4:07:9f:0b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Validity Not Before: Dec 22 15:00:37 2025 GMT Not After : Dec 23 15:00:37 2025 GMT Subject: CN=de790e6a79cfc45e4efc4eba878021f32ba72803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:aa:87:ab:09:9c:8e:73:cb:e6:1d:3b:89: b4:5d:99:89:7b:18:58:03:6c:93:fd:c4:c4:dd:aa: c9:b5:4c:b0:6c:b0:09:4a:4b:62:d1:84:22:83:2d: cd:c2:b6:d4:8e:8a:24:29:0b:ab:32:a7:4f:3a:28: bd:c8:8a:b6:36:75:c6:41:90:45:a7:5a:c4:62:4c: ae:cf:bd:83:fd:65:ed:b6:f3:bf:9f:44:55:b8:49: a8:34:f8:59:07:90:1d:0c:a6:27:05:f2:74:c0:23: 92:ef:ce:70:2e:c7:19:a9:81:00:ac:b5:af:d6:fc: 53:7a:5c:27:db:3e:34:33:14:ab:07:78:a4:1f:33: e2:74:06:c1:9e:f5:d5:1c:af:3d:1b:89:2c:b8:38: bf:76:53:29:92:2e:5d:94:4d:61:96:e6:bd:63:d2: a3:c9:65:ac:56:af:cc:72:65:5f:72:8c:44:0d:c0: c5:a8:89:cc:99:79:9f:99:4c:bd:75:be:73:89:96: a0:0d:5c:22:cf:91:3b:8e:26:9a:91:d0:b0:d8:df: eb:d8:f1:bb:cf:65:20:0e:fc:79:16:13:79:34:ff: 34:a2:61:2d:07:22:ca:f8:d9:06:e5:4f:e3:46:b1: de:78:62:3c:46:ec:d5:57:96:fe:e5:8e:b8:1e:40: 10:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:0E:6A:79:CF:C4:5E:4E:FC:4E:BA:87:80:21:F3:2B:A7:28:03 X509v3 Authority Key Identifier: keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:92:f5:17:90:0d:76:60:13:23:a6:e5:0d:d3:97:00:c2: da:64:57:0c:c4:7b:cf:97:f1:95:a8:b6:2f:9d:24:13:d2:12: f0:b2:8a:b0:7a:07:4c:7e:71:45:fa:96:ba:28:48:7d:d7:86: d1:01:bf:c6:dc:bb:dd:86:d8:64:5a:7b:6b:c2:05:23:98:e3: 00:70:38:aa:bf:e2:4a:c8:fb:16:42:b9:da:d3:f9:6b:3d:38: 93:db:c7:06:44:05:b8:5c:05:65:d9:8b:87:f3:fe:20:d5:f5: 3b:b9:58:42:f3:75:71:80:94:9c:ef:1d:c0:26:24:44:b1:97: e3:b3:ef:aa:4d:e7:b1:da:6a:5d:ef:cc:7a:97:44:cc:3f:0f: 63:22:d6:a2:b4:80:2b:5a:9b:8d:ec:64:1e:9f:a5:cd:be:dd: d6:86:0f:8f:0d:c1:4e:01:c6:1b:5c:3e:be:5e:00:9f:80:26: 86:3b:e7:ad:ba:72:b8:d2:17:1f:e6:9c:70:85:d8:c8:51:e0: 40:b7:cc:d2:e8:4c:8a:15:a1:9b:f3:13:ce:af:2d:52:af:9e: 62:44:3e:e0:e5:52:5f:e6:9c:41:eb:4c:ff:0d:56:8b:82:c0: 93:f6:40:a7:69:25:6b:08:83:be:df:60:70:f8:d0:7e:ae:3b: ac:36:16:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk545m+VbFtmK9NQHnwsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw OTY2MDIwHhcNMjUxMjIyMTUwMDM3WhcNMjUxMjIzMTUwMDM3WjAzMTEwLwYDVQQD EyhkZTc5MGU2YTc5Y2ZjNDVlNGVmYzRlYmE4NzgwMjFmMzJiYTcyODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA2qh6sJnI5zy+YdO4m0XZmJexhY A2yT/cTE3arJtUywbLAJSkti0YQigy3NwrbUjookKQurMqdPOii9yIq2NnXGQZBF p1rEYkyuz72D/WXttvO/n0RVuEmoNPhZB5AdDKYnBfJ0wCOS785wLscZqYEArLWv 1vxTelwn2z40MxSrB3ikHzPidAbBnvXVHK89G4ksuDi/dlMpki5dlE1hlua9Y9Kj yWWsVq/McmVfcoxEDcDFqInMmXmfmUy9db5ziZagDVwiz5E7jiaakdCw2N/r2PG7 z2UgDvx5FhN5NP80omEtByLK+NkG5U/jRrHeeGI8RuzVV5b+5Y64HkAQrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN55Dmp5z8ReTvxOuoeAIfMrpygDMB8GA1UdIwQY MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct MmU3MjEzNzY3NjI4LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4 LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbOS9ReQ DXZgEyOm5Q3TlwDC2mRXDMR7z5fxlai2L50kE9IS8LKKsHoHTH5xRfqWuihIfdeG 0QG/xty73YbYZFp7a8IFI5jjAHA4qr/iSsj7FkK52tP5az04k9vHBkQFuFwFZdmL h/P+INX1O7lYQvN1cYCUnO8dwCYkRLGX47Pvqk3nsdpqXe/MepdEzD8PYyLWorSA K1qbjexkHp+lzb7d1oYPjw3BTgHGG1w+vl4An4AmhjvnrbpyuNIXH+accIXYyFHg QLfM0uhMihWhm/MTzq8tUq+eYkQ+4OVSX+acQetM/w1Wi4LAk/ZAp2klawiDvt9g cPjQfq47rDYW9Q== -----END CERTIFICATE-----Generated at Mon Dec 22 22:24:32 2025 by rpki-client