This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json) Hash identifier: 9ZwpjafK+o0lRAcr4F2nee0gC+pl29ZaqnhEf9AaPzs= Subject key identifier: 82:8C:3B:6C:BC:49:AB:88:A4:51:54:71:AE:28:4A:4E:CB:3A:BE:EF Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Certificate serial: 019B23D167CA60EA9584C4614E8D77E534AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft Manifest number: 02B3 Signing time: Mon 15 Dec 2025 21:01:24 +0000 Manifest this update: Mon 15 Dec 2025 21:01:24 +0000 Manifest next update: Tue 16 Dec 2025 21:01:24 +0000 Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: rQQSQnb7a/0EIypZBHWWUlts0LCGsVdO5Df81+S8sHQ=) 2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:67:ca:60:ea:95:84:c4:61:4e:8d:77:e5:34:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Validity Not Before: Dec 15 21:01:24 2025 GMT Not After : Dec 16 21:01:24 2025 GMT Subject: CN=828c3b6cbc49ab88a4515471ae284a4ecb3abeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:39:77:d1:8b:26:8d:e8:c6:ba:2c:fd:1b:93: 1d:f0:8e:6e:bc:1c:4f:d6:87:f7:5d:45:38:84:81: 29:8c:d7:19:aa:0d:51:4f:be:9e:a7:cf:1a:6d:09: 86:36:85:db:ff:69:6a:d1:49:db:08:79:af:35:45: ed:1f:4d:72:63:76:af:db:11:4d:bf:57:2f:c5:77: 48:5c:5c:c3:7d:54:64:a7:21:88:2e:6e:c7:fb:e8: 53:c6:2b:d0:72:fa:92:27:c4:78:5b:3a:ef:46:ae: 2b:51:1c:98:c8:c5:e5:6e:bd:63:a5:e6:4e:5c:a8: 39:fc:13:52:fe:1d:85:4b:47:7d:7e:3d:be:d0:13: 7a:f0:23:a1:fc:59:18:0b:fe:18:03:97:8c:9d:dc: 9a:26:b2:9f:d3:3e:91:0c:66:1f:c2:92:82:30:19: 09:07:0e:30:e1:80:30:7b:1a:d1:e8:d0:c2:db:86: 03:73:8e:d8:a7:e1:f3:12:4b:f1:f3:3b:4f:41:1d: ba:95:5e:24:f2:49:7d:b4:59:85:dd:d3:10:fe:fb: 48:04:70:3b:2e:a6:80:37:6d:f0:d6:22:7e:41:d4: ff:50:b4:21:dd:9e:e7:6e:36:63:66:3b:5b:a8:1c: 0a:a3:4b:4c:d8:9b:3d:11:77:4b:25:40:a5:8f:ed: 8c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8C:3B:6C:BC:49:AB:88:A4:51:54:71:AE:28:4A:4E:CB:3A:BE:EF X509v3 Authority Key Identifier: keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9b:4a:d3:03:90:ed:b4:d3:e3:ee:26:2b:7b:4f:e6:21:b7: eb:63:27:b3:c8:a9:4c:e0:a8:e4:51:a8:5d:de:3a:3f:50:28: ac:8d:56:9c:60:17:da:35:77:f8:bd:76:7d:7e:8f:32:ae:00: 8b:bc:45:37:61:b9:1a:49:6b:da:dd:a2:ed:b5:19:f9:2f:27: 0b:75:11:a6:16:29:58:cc:61:ad:5b:83:16:34:a7:49:e0:5a: 90:34:dc:ee:0b:d6:75:96:1c:d0:48:13:ec:a7:a5:f8:e6:2b: 73:7e:c6:3e:9e:c7:f5:16:b9:f7:b9:4d:f6:8f:8c:0a:45:78: 68:d0:2b:b8:f7:ce:73:f9:78:78:84:9e:1b:1f:e0:ef:5f:36: 04:f2:2d:e7:34:51:bd:5f:e5:0a:2e:0f:fc:51:64:9d:1c:fd: 2b:b9:b3:49:26:3c:9a:d8:3d:30:41:6b:31:fd:57:49:0c:52: 81:e7:95:79:52:ff:e3:4d:24:66:88:7e:61:c5:5a:2d:bb:70: 01:e0:1f:35:3a:42:2f:93:46:f6:1d:af:7a:72:33:ba:65:89: 0d:f9:0f:90:de:9c:fe:b3:59:df:fa:2f:be:ce:2e:27:ce:7a: 65:fb:37:dc:44:42:a2:f8:46:5f:eb:4f:07:8b:22:a8:32:97: 5b:68:e8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0WfKYOqVhMRhTo135TSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw YjFmOTcwHhcNMjUxMjE1MjEwMTI0WhcNMjUxMjE2MjEwMTI0WjAzMTEwLwYDVQQD Eyg4MjhjM2I2Y2JjNDlhYjg4YTQ1MTU0NzFhZTI4NGE0ZWNiM2FiZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dl30YsmjejGuiz9G5Md8I5uvBxP 1of3XUU4hIEpjNcZqg1RT76ep88abQmGNoXb/2lq0UnbCHmvNUXtH01yY3av2xFN v1cvxXdIXFzDfVRkpyGILm7H++hTxivQcvqSJ8R4WzrvRq4rURyYyMXlbr1jpeZO XKg5/BNS/h2FS0d9fj2+0BN68COh/FkYC/4YA5eMndyaJrKf0z6RDGYfwpKCMBkJ Bw4w4YAwexrR6NDC24YDc47Yp+HzEkvx8ztPQR26lV4k8kl9tFmF3dMQ/vtIBHA7 LqaAN23w1iJ+QdT/ULQh3Z7nbjZjZjtbqBwKo0tM2Js9EXdLJUClj+2MUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKMO2y8SauIpFFUca4oSk7LOr7vMB8GA1UdIwQY MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0 LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJtK0wOQ 7bTT4+4mK3tP5iG362Mns8ipTOCo5FGoXd46P1AorI1WnGAX2jV3+L12fX6PMq4A i7xFN2G5Gklr2t2i7bUZ+S8nC3URphYpWMxhrVuDFjSnSeBakDTc7gvWdZYc0EgT 7Kel+OYrc37GPp7H9Ra597lN9o+MCkV4aNAruPfOc/l4eISeGx/g7182BPIt5zRR vV/lCi4P/FFknRz9K7mzSSY8mtg9MEFrMf1XSQxSgeeVeVL/400kZoh+YcVaLbtw AeAfNTpCL5NG9h2venIzumWJDfkPkN6c/rNZ3/ovvs4uJ856Zfs33ERCovhGX+tP B4siqDKXW2joDA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:45:27 2025 by rpki-client