This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: yuRxVtq6VqHaiiQODWrMqJHM9wPTbI5toxiSrA2/Q5s= Subject key identifier: 14:B9:49:D1:AB:4D:16:1A:38:D8:FC:7C:11:18:AF:37:A9:4D:4E:E2 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B2965584802439CE9624488DE79888089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 178F Signing time: Tue 16 Dec 2025 23:01:06 +0000 Manifest this update: Tue 16 Dec 2025 23:01:06 +0000 Manifest next update: Wed 17 Dec 2025 23:01:06 +0000 Files and hashes: 1: 2gcY3ooMDtENNPRWePtszkCDkgs.roa (hash: PLRCudoMhsoW+Bz0W12dYcuTY5aB41TFPhykgGGz39I=) 2: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 3: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 32EWMttSUlEKt6F/qHb/9Wza9XKUP+wgUs4bG/bWzCc=) 4: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 5: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 6: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 7: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 8: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 9: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 10: XfeVybS-JJmUst6aHDqcoct7XK0.roa (hash: nYNNvQT6vs/H7ho6wlD5EX5eXnEUV3YAmuK8qzDOCmA=) 11: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=) 12: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 13: gmw7pLwjm6vuBLTk-rK2D36QKkA.roa (hash: COLQkZAyHhSJJDAy86nI3z09V/OufPhY+8kBah7bzeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:65:58:48:02:43:9c:e9:62:44:88:de:79:88:80:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Dec 16 23:01:06 2025 GMT Not After : Dec 17 23:01:06 2025 GMT Subject: CN=14b949d1ab4d161a38d8fc7c1118af37a94d4ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:37:df:bb:85:c3:a9:72:e1:df:75:1e:e5: d9:ba:93:71:fa:b3:58:70:d7:e0:1d:3a:1c:d7:52: 0f:07:4f:a3:7c:12:af:c7:c9:05:b1:dc:57:98:c5: ae:78:25:86:24:a9:8b:a7:ee:3b:62:d4:be:af:c3: 0d:d7:b0:1c:3a:07:9c:05:90:5e:cb:3b:39:07:50: 5f:c3:bb:a8:98:29:ed:1d:c4:24:10:21:38:a6:14: c8:26:b1:4a:e2:f9:32:18:98:37:0d:11:42:6b:ac: f8:85:22:a8:f8:dd:a9:c8:4f:b8:2e:cc:98:48:82: 66:54:83:29:7f:03:2d:3d:6e:fb:c7:5b:6c:8d:f4: d8:9a:ff:9f:b3:be:07:9d:c0:60:82:d7:cf:77:de: 60:47:82:34:6d:1c:26:0f:f1:f7:8a:1d:50:be:f9: 61:09:e5:73:0b:4b:dd:68:c0:82:6b:89:39:99:fe: 18:c4:a7:fd:ae:38:ee:f1:89:47:58:44:02:fc:ca: 03:59:56:ff:8c:90:6e:2a:40:35:96:18:16:08:47: b6:a4:1d:98:ab:7b:d9:e3:d6:56:de:90:7c:2c:bd: 55:5f:3f:42:2f:39:4e:f1:ae:94:f7:51:87:4c:49: 46:21:3f:12:62:b9:e1:a3:b0:f2:1f:e2:4d:61:ca: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:49:D1:AB:4D:16:1A:38:D8:FC:7C:11:18:AF:37:A9:4D:4E:E2 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:27:18:07:c2:b7:f1:6b:f5:bb:5f:e7:b1:2e:17:97:7b:43: 74:d4:2d:8d:2f:3c:73:97:5e:3e:ed:85:5b:7b:e8:22:4d:bd: 1d:d7:15:a7:cd:88:86:03:59:84:59:52:d0:53:09:6c:ee:34: d4:c5:50:ec:75:50:9a:02:2f:b7:16:2d:41:7a:26:f3:e5:7a: 94:d6:b4:c0:15:5d:00:d8:2d:81:49:6f:64:cb:12:6d:5a:20: 64:16:f5:7e:90:20:d4:9b:4e:d1:1f:bc:8c:a2:b8:e0:82:b9: 21:5b:ba:b4:f8:b8:62:06:55:3f:59:6e:d0:0d:d9:be:86:d3: f9:4c:2d:32:a1:8e:13:72:5b:da:9d:08:7a:76:72:7f:62:37: c5:5c:34:61:e9:23:10:f1:f6:08:98:b3:99:24:dc:25:bc:98: e5:17:46:e8:79:25:bb:07:e7:85:45:12:f3:5f:6d:88:02:28: 21:71:d0:41:4e:6a:60:84:de:8e:41:55:82:10:fa:f0:44:c1: 39:ab:e9:e1:15:66:49:1d:56:75:8a:da:76:58:21:b9:9c:1b: b2:92:cf:4d:06:0e:cf:a4:55:e3:15:c4:c2:86:86:2b:e6:51: 0f:df:26:d7:ab:73:0d:6c:db:48:7d:ca:27:c3:1c:fb:39:7d: 12:02:e0:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspZVhIAkOc6WJEiN55iICJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUxMjE2MjMwMTA2WhcNMjUxMjE3MjMwMTA2WjAzMTEwLwYDVQQD EygxNGI5NDlkMWFiNGQxNjFhMzhkOGZjN2MxMTE4YWYzN2E5NGQ0ZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R4337uFw6ly4d91HuXZupNx+rNY cNfgHToc11IPB0+jfBKvx8kFsdxXmMWueCWGJKmLp+47YtS+r8MN17AcOgecBZBe yzs5B1Bfw7uomCntHcQkECE4phTIJrFK4vkyGJg3DRFCa6z4hSKo+N2pyE+4LsyY SIJmVIMpfwMtPW77x1tsjfTYmv+fs74HncBggtfPd95gR4I0bRwmD/H3ih1Qvvlh CeVzC0vdaMCCa4k5mf4YxKf9rjju8YlHWEQC/MoDWVb/jJBuKkA1lhgWCEe2pB2Y q3vZ49ZW3pB8LL1VXz9CLzlO8a6U91GHTElGIT8SYrnho7DyH+JNYcqymwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS5SdGrTRYaONj8fBEYrzepTU7iMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUicYB8K3 8Wv1u1/nsS4Xl3tDdNQtjS88c5dePu2FW3voIk29HdcVp82IhgNZhFlS0FMJbO40 1MVQ7HVQmgIvtxYtQXom8+V6lNa0wBVdANgtgUlvZMsSbVogZBb1fpAg1JtO0R+8 jKK44IK5IVu6tPi4YgZVP1lu0A3ZvobT+UwtMqGOE3Jb2p0IenZyf2I3xVw0Yekj EPH2CJizmSTcJbyY5RdG6HkluwfnhUUS819tiAIoIXHQQU5qYITejkFVghD68ETB Oavp4RVmSR1WdYradlghuZwbspLPTQYOz6RV4xXEwoaGK+ZRD98m16tzDWzbSH3K J8Mc+zl9EgLgmA== -----END CERTIFICATE-----Generated at Wed Dec 17 07:56:34 2025 by rpki-client