This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json) Hash identifier: KyaCEANmiF9LBgd6vNam19l64R20WpVAXemBnZbpY+k= Subject key identifier: 7F:B6:F7:A4:AB:69:EA:D7:45:33:9A:BF:C1:BF:66:C0:AE:65:AF:95 Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6 Certificate serial: 019B281B9ECCF8C4273C6985C9C5E8FADED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft Manifest number: 0B34 Signing time: Tue 16 Dec 2025 17:00:57 +0000 Manifest this update: Tue 16 Dec 2025 17:00:57 +0000 Manifest next update: Wed 17 Dec 2025 17:00:57 +0000 Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=) 2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: r3G3PpBTH0o2ClpXph5TiGBfH8JAkduLpG+QCH5qkGQ=) 3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:9e:cc:f8:c4:27:3c:69:85:c9:c5:e8:fa:de:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6 Validity Not Before: Dec 16 17:00:57 2025 GMT Not After : Dec 17 17:00:57 2025 GMT Subject: CN=7fb6f7a4ab69ead745339abfc1bf66c0ae65af95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:02:8d:2f:20:b8:12:2f:d4:a7:cc:bb:37: 5f:0f:75:b1:e7:e2:1f:b9:37:f4:5b:61:e4:54:a4: d3:be:69:a1:40:d8:4a:08:9c:47:ab:ec:35:c4:a0: 78:ec:45:3d:66:39:fd:a4:68:ca:45:37:ff:9b:82: 49:2b:5e:af:49:28:d4:ca:c9:1e:cc:6a:e6:99:5b: 38:77:8e:84:3c:35:2a:25:af:b7:f1:60:fd:ab:f7: 2c:16:2d:1f:0d:7e:e3:e1:6e:7a:82:91:0f:ea:72: 29:c3:5b:ee:13:27:f3:92:a6:20:4c:18:f6:84:ba: 86:02:4f:8f:74:44:14:8a:f8:d7:38:f2:9b:e0:60: b3:b9:5c:fc:a2:3e:ad:d0:79:55:ad:32:b2:f9:ae: 6b:68:32:c9:42:72:de:89:e6:a2:cf:84:1f:08:44: 2a:f5:4b:0f:96:b5:8f:11:53:c1:1e:ac:c3:b1:f6: b0:f0:4c:29:71:c5:16:c9:58:1e:f4:00:f5:85:41: 7d:fd:59:cb:6c:06:92:e6:5c:a4:af:10:62:a4:02: 72:fb:85:c5:71:b5:48:30:53:61:50:22:82:23:1c: e7:e5:0b:f5:be:d8:2a:9e:9c:7a:af:83:d5:a4:ae: 6a:e9:a9:64:2d:ef:08:a4:d5:6a:fd:0c:12:8f:6a: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B6:F7:A4:AB:69:EA:D7:45:33:9A:BF:C1:BF:66:C0:AE:65:AF:95 X509v3 Authority Key Identifier: keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:68:bf:8e:ae:cf:92:52:d5:19:b2:46:46:ab:d9:7c:f5:f1: 16:1e:0a:f9:fb:bc:3d:07:f0:64:f8:79:b8:0a:47:d3:6f:75: 46:28:d4:23:6b:0e:a3:83:d6:c5:be:26:75:44:a8:5e:38:28: dc:ba:d7:dc:ac:91:7e:41:e6:eb:92:92:59:07:62:1c:a9:ca: 29:01:5e:a1:81:4d:26:97:77:3a:98:b3:57:ea:67:91:a5:7d: 1c:ba:10:90:32:05:99:c1:e2:7a:c3:d2:47:be:85:ed:95:e5: df:e1:5f:5d:fd:ed:ad:96:ae:ad:83:55:6a:48:f4:f9:83:a7: 46:68:1e:e5:e4:06:e7:28:8e:f3:cd:aa:d8:ab:0c:c4:42:19: a6:71:85:0d:47:1f:3f:ca:d9:22:4c:4b:83:46:ae:8b:a5:04: 7a:81:27:e9:10:e9:a5:2b:57:4f:aa:46:d4:7a:2d:9c:c6:99: 87:89:b9:28:76:29:0b:af:d1:86:67:72:49:e4:1c:c0:2f:38: 97:7a:f3:bb:e1:63:7b:41:3b:83:66:17:66:49:41:11:7f:de: 55:54:03:2e:0a:05:95:86:e1:2a:5c:8b:f8:8a:d3:26:5e:f8: 86:22:a5:bb:77:1b:bc:68:5c:aa:a6:3c:50:fe:a4:63:b8:2b: 81:e6:d7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG57M+MQnPGmFycXo+t7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi OWQ2ZDYwHhcNMjUxMjE2MTcwMDU3WhcNMjUxMjE3MTcwMDU3WjAzMTEwLwYDVQQD Eyg3ZmI2ZjdhNGFiNjllYWQ3NDUzMzlhYmZjMWJmNjZjMGFlNjVhZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuACjS8guBIv1KfMuzdfD3Wx5+If uTf0W2HkVKTTvmmhQNhKCJxHq+w1xKB47EU9Zjn9pGjKRTf/m4JJK16vSSjUyske zGrmmVs4d46EPDUqJa+38WD9q/csFi0fDX7j4W56gpEP6nIpw1vuEyfzkqYgTBj2 hLqGAk+PdEQUivjXOPKb4GCzuVz8oj6t0HlVrTKy+a5raDLJQnLeieaiz4QfCEQq 9UsPlrWPEVPBHqzDsfaw8EwpccUWyVge9AD1hUF9/VnLbAaS5lykrxBipAJy+4XF cbVIMFNhUCKCIxzn5Qv1vtgqnpx6r4PVpK5q6alkLe8IpNVq/QwSj2qCSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+296SraerXRTOav8G/ZsCuZa+VMB8GA1UdIwQY MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAami/jq7P klLVGbJGRqvZfPXxFh4K+fu8PQfwZPh5uApH0291RijUI2sOo4PWxb4mdUSoXjgo 3LrX3KyRfkHm65KSWQdiHKnKKQFeoYFNJpd3OpizV+pnkaV9HLoQkDIFmcHiesPS R76F7ZXl3+FfXf3trZaurYNVakj0+YOnRmge5eQG5yiO882q2KsMxEIZpnGFDUcf P8rZIkxLg0aui6UEeoEn6RDppStXT6pG1HotnMaZh4m5KHYpC6/RhmdySeQcwC84 l3rzu+Fje0E7g2YXZklBEX/eVVQDLgoFlYbhKlyL+IrTJl74hiKlu3cbvGhcqqY8 UP6kY7grgebXZw== -----END CERTIFICATE-----Generated at Tue Dec 16 21:39:03 2025 by rpki-client