This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json) Hash identifier: Lw4Ec+gDtZfZ3QK4DKEGkD7xUkZOVLc2qPu6X/v9eI0= Subject key identifier: FC:73:56:19:DF:59:7D:8E:4E:75:91:C6:04:D9:D1:57:28:A9:D5:2C Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad Certificate serial: 019B0F373E873326387A914040FAB12396AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 21:00:37 +0000 Manifest this update: Thu 11 Dec 2025 21:00:37 +0000 Manifest next update: Fri 12 Dec 2025 21:00:37 +0000 Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: mqtcTiytwgDR+leOzRXbCCXd271jK3GlxTd/SwuTfqw=) 2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:3e:87:33:26:38:7a:91:40:40:fa:b1:23:96:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad Validity Not Before: Dec 11 21:00:37 2025 GMT Not After : Dec 12 21:00:37 2025 GMT Subject: CN=fc735619df597d8e4e7591c604d9d15728a9d52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:1e:1e:52:29:87:df:dc:69:1e:76:33:81: 69:f1:ab:71:ed:b1:37:93:4c:56:77:9c:59:9b:5d: 4f:2b:d2:e9:51:12:74:fc:5c:c8:86:7b:31:bf:d5: 42:91:7e:d3:6f:70:2d:d7:99:3e:5f:e4:ae:83:e7: 46:02:5a:ad:9a:2c:f1:38:6c:af:16:33:06:1e:5d: 39:07:d4:a4:c5:85:26:5b:cb:f5:62:93:7b:83:b3: 04:55:28:56:4e:71:52:b0:e4:13:f6:be:74:6a:2a: 9f:4a:63:03:57:d6:3b:ac:a6:54:ef:86:7a:9d:f4: 72:b3:e1:1a:ca:e0:f7:00:76:5f:3f:b9:55:aa:c7: 32:a0:0e:c8:c7:6a:56:f0:43:19:da:e3:9f:f5:20: 17:0f:ce:e7:90:8d:f1:a0:61:5b:86:1e:42:46:10: 38:65:aa:80:b7:a7:2e:ef:9b:da:e5:0b:77:e1:11: 09:d2:22:97:db:b3:1b:59:58:90:a6:64:39:03:bc: 14:0c:d3:83:36:4e:1e:6a:a9:6c:c4:8d:44:49:4e: 8b:be:7c:27:b2:a1:fb:60:70:4d:0e:c3:d1:2e:da: 74:31:ff:2c:67:98:9d:e2:36:8f:2f:93:39:d9:06: 5b:c6:43:ff:09:4c:7f:9f:0a:92:c7:03:b1:2c:84: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:73:56:19:DF:59:7D:8E:4E:75:91:C6:04:D9:D1:57:28:A9:D5:2C X509v3 Authority Key Identifier: keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:32:66:d7:9c:12:65:f1:9d:62:3e:76:48:59:76:da:ea:0e: be:13:48:b2:da:c0:8f:fb:f5:26:1d:89:1c:28:1a:c8:f2:30: 8a:9b:66:91:4b:c9:45:1f:d2:81:9c:8e:69:fb:ce:d6:b3:a7: 84:ee:77:42:40:04:d1:8e:da:03:56:61:c5:9d:6b:ea:eb:30: c0:f3:a4:80:aa:d5:a9:55:f1:65:e4:34:14:8b:7a:66:0c:a1: d7:30:7c:e2:8b:f7:79:95:75:f4:ed:82:c3:5c:1c:78:7e:fe: a4:4c:9f:f8:4a:42:32:cc:dc:03:21:91:d5:84:f5:41:15:65: ba:93:6a:3e:ee:1f:99:7f:94:74:cf:6d:00:f7:fa:00:87:da: 53:88:4d:6e:c0:d2:3b:79:09:58:11:ad:18:df:45:d6:20:9f: 18:7f:9e:03:0c:ea:4c:14:70:2e:a8:6a:1b:cd:17:3c:19:0e: ab:83:1e:b5:c8:fa:25:57:ed:87:59:e5:03:61:ea:d0:e6:36: 05:08:aa:49:07:36:06:e8:da:8c:3c:8b:04:91:c7:1e:0f:e8: 20:98:ea:12:43:32:50:f9:3c:91:08:d4:bf:81:7e:e1:d8:b7: 8b:e0:12:ad:13:1c:bf:81:43:32:83:31:86:57:61:7e:e0:e1: a8:7d:86:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNz6HMyY4epFAQPqxI5arMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk OTM2YWQwHhcNMjUxMjExMjEwMDM3WhcNMjUxMjEyMjEwMDM3WjAzMTEwLwYDVQQD EyhmYzczNTYxOWRmNTk3ZDhlNGU3NTkxYzYwNGQ5ZDE1NzI4YTlkNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e8eHlIph9/caR52M4Fp8atx7bE3 k0xWd5xZm11PK9LpURJ0/FzIhnsxv9VCkX7Tb3At15k+X+Sug+dGAlqtmizxOGyv FjMGHl05B9SkxYUmW8v1YpN7g7MEVShWTnFSsOQT9r50aiqfSmMDV9Y7rKZU74Z6 nfRys+EayuD3AHZfP7lVqscyoA7Ix2pW8EMZ2uOf9SAXD87nkI3xoGFbhh5CRhA4 ZaqAt6cu75va5Qt34REJ0iKX27MbWViQpmQ5A7wUDNODNk4eaqlsxI1ESU6Lvnwn sqH7YHBNDsPRLtp0Mf8sZ5id4jaPL5M52QZbxkP/CUx/nwqSxwOxLIRZBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxzVhnfWX2OTnWRxgTZ0VcoqdUsMB8GA1UdIwQY MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijJm15wS ZfGdYj52SFl22uoOvhNIstrAj/v1Jh2JHCgayPIwiptmkUvJRR/SgZyOafvO1rOn hO53QkAE0Y7aA1ZhxZ1r6uswwPOkgKrVqVXxZeQ0FIt6Zgyh1zB84ov3eZV19O2C w1wceH7+pEyf+EpCMszcAyGR1YT1QRVlupNqPu4fmX+UdM9tAPf6AIfaU4hNbsDS O3kJWBGtGN9F1iCfGH+eAwzqTBRwLqhqG80XPBkOq4Metcj6JVfth1nlA2Hq0OY2 BQiqSQc2BujajDyLBJHHHg/oIJjqEkMyUPk8kQjUv4F+4di3i+ASrRMcv4FDMoMx hldhfuDhqH2Ghw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:08:43 2025 by rpki-client