This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft File: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json) Hash identifier: dLJJBLjG2ZrZgvXikc1OiJx53pprn8rCHls1OC6or9Q= Subject key identifier: 28:E8:9F:8E:D4:26:32:42:84:CF:EB:23:16:EE:79:82:1E:F6:E0:91 Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Certificate serial: 019B337B6F20218DCE091D3D5861E256EAE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:01:25 +0000 Manifest this update: Thu 18 Dec 2025 22:01:25 +0000 Manifest next update: Fri 19 Dec 2025 22:01:25 +0000 Files and hashes: 1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=) 2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: egziJ6+ThruNiW5bNHIY30MSXplP6weyKMN43Dywc64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:6f:20:21:8d:ce:09:1d:3d:58:61:e2:56:ea:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Validity Not Before: Dec 18 22:01:25 2025 GMT Not After : Dec 19 22:01:25 2025 GMT Subject: CN=28e89f8ed426324284cfeb2316ee79821ef6e091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:a0:f2:ae:7a:9f:6e:fe:7d:c8:3d:2e:28: d7:40:a5:53:25:ad:ca:90:1f:94:c7:46:88:7e:38: de:07:15:e3:42:aa:fc:dd:d9:91:f4:8c:e9:99:0b: 7f:d2:f1:7a:53:52:f5:34:6c:fb:7a:80:ab:7f:d3: 83:de:2c:3b:36:da:8b:d1:30:77:ff:2c:31:11:06: d6:33:f6:71:4a:8d:6b:cb:84:7f:95:7f:2c:88:3a: 74:7f:71:e3:f0:0a:78:93:12:ef:15:71:bf:9d:66: 20:f8:2c:1f:3b:12:a9:33:f6:44:d0:4e:4a:bf:af: 39:28:48:08:45:da:1e:24:f4:74:a8:18:5c:0b:05: 15:25:44:85:03:9c:70:8e:1b:f9:44:44:f8:a0:1c: 82:00:52:44:d2:30:1d:0c:24:bd:74:be:51:c8:04: 68:f2:fd:ab:5d:92:43:8b:0b:ed:79:c8:84:2d:9d: 13:49:38:99:ef:e1:ab:a7:e4:cb:f4:e1:fa:5a:ee: b9:ee:da:e6:24:28:dc:9d:7d:30:43:b1:2c:f1:5f: 9c:44:10:2a:30:fe:18:20:cb:38:bf:07:a3:24:2f: a5:91:28:64:0a:f4:ef:49:54:8e:16:ef:ff:f6:6d: ff:2e:c6:8d:74:36:d7:9b:b8:ce:ab:54:74:1b:7a: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E8:9F:8E:D4:26:32:42:84:CF:EB:23:16:EE:79:82:1E:F6:E0:91 X509v3 Authority Key Identifier: keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c4:f5:c1:6a:dd:6d:92:54:70:69:e7:e4:ec:87:99:44:6e: cb:ed:74:58:48:14:2b:6f:67:c9:75:55:84:8e:19:0d:e8:89: 6e:23:e6:a8:d3:44:e3:4c:13:ba:f4:20:d4:45:bf:3f:eb:e7: 76:ce:e1:7b:2a:5d:ba:60:fe:28:d4:55:d8:fc:15:09:68:e3: 8c:71:30:10:0a:f0:ab:a8:6d:8c:62:94:b5:cf:35:1d:59:98: 1c:81:50:f5:c5:95:eb:15:89:92:8e:b6:f9:b0:ef:21:6e:30: da:fd:7d:d4:13:6b:1b:10:f0:ec:16:ac:6a:ec:05:74:9d:99: 40:a3:b7:48:29:2b:31:8d:7b:29:ab:99:15:bb:c1:8a:bc:a9: 3d:d3:be:ce:f2:3e:fe:20:65:a8:ad:cb:a6:98:60:35:29:31: 26:a6:59:73:86:24:71:98:34:66:c5:eb:eb:73:4f:b5:99:61: 2e:a5:bc:e1:f5:1b:04:10:8b:e2:fb:ac:01:06:9a:a0:3e:76: 9e:03:49:35:9e:c8:a5:78:f0:ba:1d:70:f6:4b:0a:de:68:b0: d3:89:f7:20:37:09:bc:2c:72:4d:18:0d:22:fb:44:90:50:1e: 79:5e:1d:7f:40:7b:4d:12:52:e6:8d:25:32:49:99:77:11:48: 70:8c:e8:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze28gIY3OCR09WGHiVurhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzhkMTE5MWY2NmYxZjAzMTVkZTVmNDVjYzE5NGQxY2Qx OWQxZmIwHhcNMjUxMjE4MjIwMTI1WhcNMjUxMjE5MjIwMTI1WjAzMTEwLwYDVQQD EygyOGU4OWY4ZWQ0MjYzMjQyODRjZmViMjMxNmVlNzk4MjFlZjZlMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml6g8q56n27+fcg9LijXQKVTJa3K kB+Ux0aIfjjeBxXjQqr83dmR9IzpmQt/0vF6U1L1NGz7eoCrf9OD3iw7NtqL0TB3 /ywxEQbWM/ZxSo1ry4R/lX8siDp0f3Hj8Ap4kxLvFXG/nWYg+CwfOxKpM/ZE0E5K v685KEgIRdoeJPR0qBhcCwUVJUSFA5xwjhv5RET4oByCAFJE0jAdDCS9dL5RyARo 8v2rXZJDiwvteciELZ0TSTiZ7+Grp+TL9OH6Wu657trmJCjcnX0wQ7Es8V+cRBAq MP4YIMs4vwejJC+lkShkCvTvSVSOFu//9m3/LsaNdDbXm7jOq1R0G3pifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjon47UJjJChM/rIxbueYIe9uCRMB8GA1UdIwQY MBaAFIo40RkfZvHwMV3l9FzBlNHNGdH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEt ODRmOGZkYzBjNjk4LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEtODRmOGZkYzBjNjk4 LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcT1wWrd bZJUcGnn5OyHmURuy+10WEgUK29nyXVVhI4ZDeiJbiPmqNNE40wTuvQg1EW/P+vn ds7heypdumD+KNRV2PwVCWjjjHEwEArwq6htjGKUtc81HVmYHIFQ9cWV6xWJko62 +bDvIW4w2v191BNrGxDw7BasauwFdJ2ZQKO3SCkrMY17KauZFbvBirypPdO+zvI+ /iBlqK3LpphgNSkxJqZZc4YkcZg0ZsXr63NPtZlhLqW84fUbBBCL4vusAQaaoD52 ngNJNZ7IpXjwuh1w9ksK3miw04n3IDcJvCxyTRgNIvtEkFAeeV4df0B7TRJS5o0l MkmZdxFIcIzoJA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:57:32 2025 by rpki-client