This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json) Hash identifier: /z3TJjUH9CbITq7SImYGv9mCyF4OyluE5fDJ/lPU/Rk= Subject key identifier: BF:EC:63:05:85:CE:70:5B:E3:5D:8F:89:83:19:E7:4F:1A:6E:CD:13 Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Certificate serial: 019B30E95A9DB7CA06E2401539F9168AC472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 10:02:37 +0000 Manifest this update: Thu 18 Dec 2025 10:02:37 +0000 Manifest next update: Fri 19 Dec 2025 10:02:37 +0000 Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: RqJyVt4EjAL1hwUoxazgg7M5IZPneZfPhbKDJS7LB9I=) 2: X26sGkQxHUd6ANya0fQeGbUaN2o.roa (hash: 72k/JceoXf+vjqY9cY+dmTPspA3n9C9nG7V6AU5QpNs=) 3: ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa (hash: 2iTmqWC/xN+Zadr2KJDlI5cxPwSqu9GxPi/bRx/hmlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:5a:9d:b7:ca:06:e2:40:15:39:f9:16:8a:c4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Validity Not Before: Dec 18 10:02:37 2025 GMT Not After : Dec 19 10:02:37 2025 GMT Subject: CN=bfec630585ce705be35d8f898319e74f1a6ecd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:d8:56:ef:25:de:04:31:cd:0d:a8:d4:05: 88:e6:e0:88:37:d4:76:e0:3a:d3:ad:31:e0:2f:58: 4a:a2:24:b0:3e:1f:85:fe:18:32:59:cd:4a:52:55: c3:34:bf:98:bb:af:f1:54:17:a6:92:e9:9e:69:cc: 58:75:49:5a:8a:19:04:8c:69:9b:78:d9:ca:46:70: 24:da:43:7a:f2:96:bb:e8:6f:db:7c:8d:24:43:d4: 30:91:f0:b9:96:11:ec:82:b3:9c:61:f7:4e:ae:6a: 2a:9a:a1:b7:a0:d8:ad:8f:c3:53:b7:04:85:8b:c7: 68:b9:4a:40:a6:bc:ae:e5:b3:4e:b4:ee:b7:e5:83: 59:fe:8d:18:0c:ac:fc:cc:95:77:07:21:69:bb:c8: 57:bf:92:85:d4:c7:cb:01:c8:01:b5:e2:f1:09:06: 01:d0:0d:53:8c:81:02:dd:9d:fa:ed:36:42:a5:f2: 62:d1:40:5c:fd:f6:78:ed:ce:af:9b:bd:d2:20:d3: ee:75:d1:9b:60:9c:83:1d:f1:62:ef:3f:48:cd:19: 7e:08:64:ff:fe:e8:70:b1:56:25:bc:d2:ab:f6:50: 6a:77:37:c8:51:02:02:80:e1:02:79:70:05:92:d1: 75:b6:73:c7:e8:63:5b:01:82:61:8c:9e:fd:b8:02: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EC:63:05:85:CE:70:5B:E3:5D:8F:89:83:19:E7:4F:1A:6E:CD:13 X509v3 Authority Key Identifier: keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ba:2d:2f:5c:57:e8:ed:82:f0:bb:95:d3:6f:19:5b:20:60: 05:f1:4e:21:5a:a9:fa:6b:e9:1d:2a:30:7a:c8:31:3b:23:bf: f6:b4:6f:c4:80:2a:c4:a2:6c:a3:79:75:c7:ce:2c:46:f2:ef: a8:5f:59:4c:51:24:cd:d3:19:f6:dd:c6:78:b4:f0:91:35:ba: b1:4e:45:ed:36:b1:42:e2:1c:99:2e:6a:f4:a8:92:b5:e5:36: 12:2d:46:05:76:1c:c7:36:fb:66:c9:2b:f2:40:7e:c0:02:5a: 2f:a5:0a:c1:f8:91:f0:52:ba:9e:30:14:b6:19:0b:93:e7:46: e2:1e:3d:4e:b9:6e:38:f0:38:b9:c5:f5:b0:26:e6:c3:65:a0: 66:56:cb:54:e4:1d:b6:9b:4d:02:ba:bd:b6:f5:47:e2:3e:3b: 73:f4:bf:d4:c3:90:2e:25:eb:5c:a4:d2:17:16:81:1a:02:61: 81:74:36:3e:0c:71:9f:6b:cd:b8:a8:9a:42:15:ba:b3:42:79: b1:49:14:70:69:4e:46:4e:89:07:9c:f6:7a:a7:4e:7d:e2:35: 51:45:de:d5:78:98:ff:84:c3:23:86:7b:06:bb:ed:5a:9a:4e: fa:47:e8:cd:7b:c8:7d:9d:3a:eb:42:0b:38:1f:a7:04:56:10: 09:e4:9f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Vqdt8oG4kAVOfkWisRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4 ZTkwMTkwHhcNMjUxMjE4MTAwMjM3WhcNMjUxMjE5MTAwMjM3WjAzMTEwLwYDVQQD EyhiZmVjNjMwNTg1Y2U3MDViZTM1ZDhmODk4MzE5ZTc0ZjFhNmVjZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+zYVu8l3gQxzQ2o1AWI5uCIN9R2 4DrTrTHgL1hKoiSwPh+F/hgyWc1KUlXDNL+Yu6/xVBemkumeacxYdUlaihkEjGmb eNnKRnAk2kN68pa76G/bfI0kQ9QwkfC5lhHsgrOcYfdOrmoqmqG3oNitj8NTtwSF i8douUpApryu5bNOtO635YNZ/o0YDKz8zJV3ByFpu8hXv5KF1MfLAcgBteLxCQYB 0A1TjIEC3Z367TZCpfJi0UBc/fZ47c6vm73SINPuddGbYJyDHfFi7z9IzRl+CGT/ /uhwsVYlvNKr9lBqdzfIUQICgOECeXAFktF1tnPH6GNbAYJhjJ79uAKT9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/sYwWFznBb412PiYMZ508abs0TMB8GA1UdIwQY MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbotL1xX 6O2C8LuV028ZWyBgBfFOIVqp+mvpHSowesgxOyO/9rRvxIAqxKJso3l1x84sRvLv qF9ZTFEkzdMZ9t3GeLTwkTW6sU5F7TaxQuIcmS5q9KiSteU2Ei1GBXYcxzb7Zskr 8kB+wAJaL6UKwfiR8FK6njAUthkLk+dG4h49TrluOPA4ucX1sCbmw2WgZlbLVOQd tptNArq9tvVH4j47c/S/1MOQLiXrXKTSFxaBGgJhgXQ2Pgxxn2vNuKiaQhW6s0J5 sUkUcGlORk6JB5z2eqdOfeI1UUXe1XiY/4TDI4Z7BrvtWppO+kfozXvIfZ0660IL OB+nBFYQCeSf7A== -----END CERTIFICATE-----Generated at Thu Dec 18 17:32:46 2025 by rpki-client