This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json) Hash identifier: de9ResH9kt5RkQcBCmS7hPAP5TN1LV/KUJy2DGXorME= Subject key identifier: 6C:DF:25:B0:E8:95:24:88:8E:1C:60:22:B9:F3:97:2D:A0:04:1F:E7 Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Certificate serial: 019B19BB5D8322574FA06EE58A0308984612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft Manifest number: 0849 Signing time: Sat 13 Dec 2025 22:01:08 +0000 Manifest this update: Sat 13 Dec 2025 22:01:08 +0000 Manifest next update: Sun 14 Dec 2025 22:01:08 +0000 Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=) 2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: FQPO8eGr5QaVSBE4Lt4nI3gxY1y83HTjHY5+mz0tKM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:5d:83:22:57:4f:a0:6e:e5:8a:03:08:98:46:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Validity Not Before: Dec 13 22:01:08 2025 GMT Not After : Dec 14 22:01:08 2025 GMT Subject: CN=6cdf25b0e89524888e1c6022b9f3972da0041fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:32:81:4d:86:de:1a:2d:6d:a1:ce:84:04: 50:94:0b:0e:fb:fb:4b:4e:3c:78:7f:b6:67:d1:5e: 06:61:19:49:43:b7:b7:86:84:4b:31:d4:f6:37:03: 37:60:06:4c:82:95:e8:8a:2c:b7:5a:4f:76:3a:0d: 70:4a:a4:96:cb:32:5a:d2:50:c3:5b:60:96:2c:f6: 9c:64:b2:b0:af:7c:2c:bf:30:2b:34:35:d5:23:4d: c4:05:77:00:5a:04:3e:52:69:bb:b5:4d:1f:eb:12: d1:fe:97:dc:5a:6e:4c:02:05:90:1f:8b:70:ac:de: 6e:7e:21:b7:01:84:a2:62:62:b5:a7:8b:b4:e9:92: 75:1f:e4:20:c8:17:2d:66:35:ea:4a:d8:7b:50:8b: 7f:ff:d7:78:79:0c:96:52:f4:7a:b7:35:38:8f:68: c4:68:da:e5:c0:5a:e7:55:76:e5:ea:47:21:67:e4: f6:b4:36:80:81:6d:2b:90:95:90:1f:e0:c1:9e:42: 0d:a6:ef:3e:6b:c1:23:71:f2:7f:31:49:d9:47:13: b9:6a:10:9e:3f:44:58:d3:bc:e3:e3:b4:e4:60:0f: 86:d0:d7:fd:6b:02:ac:b8:b6:a9:ab:9b:5f:58:af: 7e:87:a7:d5:57:3a:8f:45:6c:f5:44:b3:2c:f3:d7: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DF:25:B0:E8:95:24:88:8E:1C:60:22:B9:F3:97:2D:A0:04:1F:E7 X509v3 Authority Key Identifier: keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b0:ef:e3:6d:ef:a6:a6:6b:0c:41:8a:ae:db:be:8b:cf:14: 76:4c:36:ca:0c:25:35:24:18:6d:1c:7c:cb:dc:e4:5e:b2:ca: 3c:f9:e6:69:0d:f1:dc:dc:8a:51:b6:e7:26:89:75:ab:0d:cf: 57:5b:96:35:95:09:1f:60:69:e7:6d:13:23:57:2c:db:35:73: e7:85:32:45:cc:b0:34:3a:a1:06:85:5f:79:b9:1c:49:43:f2: c6:ec:26:a2:53:e9:bb:2f:cd:59:8c:30:16:fc:24:57:30:f2: 9a:38:99:85:6b:b4:9b:d2:12:84:65:cf:08:f3:28:a3:60:0f: 6b:67:48:96:3b:1e:63:e7:c0:ab:d7:ba:a4:78:8d:e9:e1:88: 7e:76:dd:62:7b:2d:8b:0d:16:81:ca:ce:27:a1:03:e3:a0:f1: ba:62:0b:7f:cf:27:90:82:72:4c:f3:39:68:0e:30:bd:22:e3: b4:f7:06:b6:c6:1b:7b:3b:5f:17:00:c1:42:b0:6d:b0:e3:44: 72:11:0d:db:44:d3:94:01:c5:9c:ab:ab:59:0c:eb:b9:24:43: 3e:9b:cd:30:66:4b:57:c7:11:6d:3b:74:b7:f6:d6:65:bf:8b: 6f:6f:31:b9:d5:f4:d7:ae:28:98:f1:65:82:01:e0:12:02:20: 77:1d:57:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu12DIldPoG7ligMImEYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl NmRhNDEwHhcNMjUxMjEzMjIwMTA4WhcNMjUxMjE0MjIwMTA4WjAzMTEwLwYDVQQD Eyg2Y2RmMjViMGU4OTUyNDg4OGUxYzYwMjJiOWYzOTcyZGEwMDQxZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/sygU2G3hotbaHOhARQlAsO+/tL Tjx4f7Zn0V4GYRlJQ7e3hoRLMdT2NwM3YAZMgpXoiiy3Wk92Og1wSqSWyzJa0lDD W2CWLPacZLKwr3wsvzArNDXVI03EBXcAWgQ+Umm7tU0f6xLR/pfcWm5MAgWQH4tw rN5ufiG3AYSiYmK1p4u06ZJ1H+QgyBctZjXqSth7UIt//9d4eQyWUvR6tzU4j2jE aNrlwFrnVXbl6kchZ+T2tDaAgW0rkJWQH+DBnkINpu8+a8EjcfJ/MUnZRxO5ahCe P0RY07zj47TkYA+G0Nf9awKsuLapq5tfWK9+h6fVVzqPRWz1RLMs89fqUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzfJbDolSSIjhxgIrnzly2gBB/nMB8GA1UdIwQY MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbDv423v pqZrDEGKrtu+i88Udkw2ygwlNSQYbRx8y9zkXrLKPPnmaQ3x3NyKUbbnJol1qw3P V1uWNZUJH2Bp520TI1cs2zVz54UyRcywNDqhBoVfebkcSUPyxuwmolPpuy/NWYww FvwkVzDymjiZhWu0m9IShGXPCPMoo2APa2dIljseY+fAq9e6pHiN6eGIfnbdYnst iw0WgcrOJ6ED46DxumILf88nkIJyTPM5aA4wvSLjtPcGtsYbeztfFwDBQrBtsONE chEN20TTlAHFnKurWQzruSRDPpvNMGZLV8cRbTt0t/bWZb+Lb28xudX0164omPFl ggHgEgIgdx1XAg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:29 2025 by rpki-client