This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json) Hash identifier: 68kgH1Q560w2MgzVcXVzW8zfkzVQF3xPvJyQRQcax5Q= Subject key identifier: 2C:5E:2B:9B:53:C6:3E:E9:B9:F6:6E:E9:BE:A2:B9:52:AB:78:50:CC Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc Certificate serial: 019B59763C0B546F7215BC087C77213DDEEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft Manifest number: 024C Signing time: Fri 26 Dec 2025 07:01:19 +0000 Manifest this update: Fri 26 Dec 2025 07:01:19 +0000 Manifest next update: Sat 27 Dec 2025 07:01:19 +0000 Files and hashes: 1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=) 2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: qwJfSQ4GETGuQx/0y78suOpVqMFwX/lqe3slWer7AyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:3c:0b:54:6f:72:15:bc:08:7c:77:21:3d:de:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc Validity Not Before: Dec 26 07:01:19 2025 GMT Not After : Dec 27 07:01:19 2025 GMT Subject: CN=2c5e2b9b53c63ee9b9f66ee9bea2b952ab7850cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cc:48:28:0e:39:cd:f5:ba:f2:46:15:4c:54: 54:b4:d4:b9:d4:e8:9a:09:15:aa:97:47:04:82:6d: c3:9a:ab:70:dc:06:8f:17:d1:57:35:ce:2e:4d:15: af:3a:d8:2c:20:51:62:4c:4b:5a:7f:2b:4a:c9:36: d0:52:db:e1:97:41:44:7b:df:ef:e5:0b:6c:7a:af: 32:9f:af:e6:0f:5e:09:73:e8:5b:b6:46:60:06:d2: bd:91:61:52:70:c8:6f:8d:22:fc:95:38:eb:ab:9d: 15:da:28:52:dd:0c:ac:1e:71:b5:d8:db:10:cc:49: 13:c8:a2:46:01:0d:da:e9:cd:df:a8:30:28:ad:cb: 68:aa:d1:e9:e5:58:d5:11:a5:e1:0f:a1:d0:fe:3b: bf:46:21:91:cc:0a:06:30:1e:8e:07:0c:b7:cc:e8: a7:c9:eb:5b:47:24:ec:ff:2e:80:49:73:c6:1a:ac: 34:0f:e9:33:fc:b6:e3:47:c8:1e:d4:13:b2:64:ec: 11:89:f2:16:0e:18:72:b6:35:15:4c:8a:60:13:0a: 82:d6:af:18:7d:16:59:f8:aa:85:e8:2f:90:c8:09: 24:12:5e:42:aa:75:11:15:08:d3:dd:84:0e:dc:da: 74:21:d9:69:de:88:24:1e:a5:64:e4:d0:7a:36:1f: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5E:2B:9B:53:C6:3E:E9:B9:F6:6E:E9:BE:A2:B9:52:AB:78:50:CC X509v3 Authority Key Identifier: keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6b:71:d5:4a:a6:51:a6:2c:0e:10:1f:d8:b6:45:2b:fd:f4: b0:07:a4:59:d7:60:7a:51:a3:16:e5:2d:f8:b9:07:63:4a:e8: 7d:8e:15:65:48:a5:cc:03:98:5c:d4:10:2b:e6:bc:16:40:f9: 64:8e:3e:9f:af:80:cc:90:ec:2f:da:53:c2:dd:53:1c:d4:aa: 4e:13:29:38:cc:dd:5e:4c:6d:8f:ac:f7:fe:3b:c1:dc:1f:07: 9f:72:04:d0:9e:ba:2f:6e:c2:89:51:8a:0c:ee:b9:d8:de:9b: d0:39:df:97:c2:9b:cb:5d:1d:74:55:1c:aa:9e:56:52:8e:33: b2:a4:e6:bd:f2:e3:b5:1f:61:f8:4e:e2:cf:4c:9a:b4:37:d0: a8:b8:0d:84:89:c6:91:f6:eb:df:b2:b7:94:41:7e:54:e7:c4: 05:b9:b9:40:c0:b2:88:87:96:b0:67:5f:c6:dd:30:6c:e1:59: 29:15:52:f8:c1:da:8e:4c:80:86:d7:11:c0:d6:a9:68:ae:7f: 30:c5:61:54:2a:4f:b3:ad:77:01:73:0f:eb:09:60:f5:78:b1: 00:56:e1:f5:02:54:ba:8c:53:c2:23:a5:ed:33:f6:d0:3a:cf: c8:93:ff:85:a6:b5:96:da:40:43:87:58:4e:f5:e0:ea:90:39: fc:32:cf:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdjwLVG9yFbwIfHchPd7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjBhODZjZGVmMWQ2ODU1ZDE5ZGU3NDE3NTM3M2NkYzgx YWVmY2MwHhcNMjUxMjI2MDcwMTE5WhcNMjUxMjI3MDcwMTE5WjAzMTEwLwYDVQQD EygyYzVlMmI5YjUzYzYzZWU5YjlmNjZlZTliZWEyYjk1MmFiNzg1MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8xIKA45zfW68kYVTFRUtNS51Oia CRWql0cEgm3Dmqtw3AaPF9FXNc4uTRWvOtgsIFFiTEtafytKyTbQUtvhl0FEe9/v 5Qtseq8yn6/mD14Jc+hbtkZgBtK9kWFScMhvjSL8lTjrq50V2ihS3QysHnG12NsQ zEkTyKJGAQ3a6c3fqDAorctoqtHp5VjVEaXhD6HQ/ju/RiGRzAoGMB6OBwy3zOin yetbRyTs/y6ASXPGGqw0D+kz/LbjR8ge1BOyZOwRifIWDhhytjUVTIpgEwqC1q8Y fRZZ+KqF6C+QyAkkEl5CqnURFQjT3YQO3Np0Idlp3ogkHqVk5NB6Nh+OTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxeK5tTxj7pufZu6b6iuVKreFDMMB8GA1UdIwQY MBaAFIqwqGze8daFXRnedBdTc83IGu/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWIt ZDBmMjQ5YmMzZmVkLzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWItZDBmMjQ5YmMzZmVk LzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2tx1Uqm UaYsDhAf2LZFK/30sAekWddgelGjFuUt+LkHY0rofY4VZUilzAOYXNQQK+a8FkD5 ZI4+n6+AzJDsL9pTwt1THNSqThMpOMzdXkxtj6z3/jvB3B8Hn3IE0J66L27CiVGK DO652N6b0Dnfl8Kby10ddFUcqp5WUo4zsqTmvfLjtR9h+E7iz0yatDfQqLgNhInG kfbr37K3lEF+VOfEBbm5QMCyiIeWsGdfxt0wbOFZKRVS+MHajkyAhtcRwNapaK5/ MMVhVCpPs613AXMP6wlg9XixAFbh9QJUuoxTwiOl7TP20DrPyJP/haa1ltpAQ4dY TvXg6pA5/DLPbA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:59:55 2025 by rpki-client