This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json) Hash identifier: 6lbtlC7bcYZSyMIAkoVkOYOUvOuOLn5iNndoRce0L5M= Subject key identifier: 1E:B1:51:23:95:0D:FE:13:1D:4A:53:F5:B3:0B:DB:33:A9:75:54:E5 Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Certificate serial: 019B38A140AB7714F9DE05F60759E497A1E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft Manifest number: 1719 Signing time: Fri 19 Dec 2025 22:00:50 +0000 Manifest this update: Fri 19 Dec 2025 22:00:50 +0000 Manifest next update: Sat 20 Dec 2025 22:00:50 +0000 Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=) 2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=) 3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: l1qygI8YDfaE2ECl+adYhg0REf0RZ7pbAiIc95CYacw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:40:ab:77:14:f9:de:05:f6:07:59:e4:97:a1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Validity Not Before: Dec 19 22:00:50 2025 GMT Not After : Dec 20 22:00:50 2025 GMT Subject: CN=1eb15123950dfe131d4a53f5b30bdb33a97554e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:43:58:7f:a8:2d:a8:42:3e:98:1b:fe:2a: b5:f9:f9:b5:1c:f5:58:09:7a:56:b4:ad:e0:6c:dc: 6d:b6:aa:6c:cd:c4:66:f6:d5:95:70:a0:fc:52:b1: 0f:d7:f8:38:46:b5:c3:d8:da:ae:b8:8c:4c:d3:a8: 27:b4:31:f0:6a:4f:e6:86:2a:0e:2a:93:1e:43:b8: 4f:57:f1:f8:b1:7a:23:40:90:cf:d7:80:26:b4:18: 80:41:50:9e:a2:7f:55:8d:b3:75:e8:ab:7a:9d:cf: f7:6e:b6:ef:7b:ab:c2:bd:10:7d:2d:c0:36:74:b6: 13:c2:52:c6:6b:4e:b1:a9:1b:0c:da:cf:96:db:fc: 07:d1:ce:45:4e:83:ee:40:ca:6e:74:d0:1c:2c:b3: 8a:b4:38:21:83:ae:43:13:ca:f1:0e:e5:1b:ea:0b: c4:79:1d:8a:8b:b5:17:61:d4:ed:1e:4f:50:60:c7: 2e:4f:1a:07:26:95:30:b1:35:89:db:97:8c:ef:96: 93:ae:4f:a6:2e:f7:47:8e:32:ef:69:b3:c1:4f:8b: be:1e:bf:8a:64:27:06:0a:85:8d:b2:5d:ea:6d:ec: fe:57:5f:92:a5:46:c2:79:7f:64:a2:cc:d4:16:0c: 37:00:90:5c:84:e4:40:0c:99:61:4d:20:92:3b:51: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:51:23:95:0D:FE:13:1D:4A:53:F5:B3:0B:DB:33:A9:75:54:E5 X509v3 Authority Key Identifier: keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:09:a4:97:39:bb:c3:27:ec:3f:e7:b4:98:79:f3:d9:ea:b1: 66:8c:a3:57:75:4b:36:b5:26:87:8c:2d:b4:27:75:a8:36:20: 1b:95:9b:15:b1:4f:a8:1b:26:04:0f:45:c8:ea:46:77:f2:56: 0d:f2:9e:b5:f3:9f:42:38:4c:60:85:db:5a:ab:e5:f9:19:3e: c8:48:c2:9b:1a:54:40:44:e9:ba:08:ff:a2:e2:f5:d7:b4:84: de:51:24:95:ad:04:85:b6:6d:6c:d4:41:3b:55:56:03:59:09: da:bc:86:cb:c4:61:7c:20:da:48:1c:2c:51:92:3c:bc:92:32: dc:64:99:80:f3:fd:14:14:f0:c2:b4:d5:3d:40:74:20:2a:36: 0b:d6:fe:12:2b:ad:0d:49:42:bf:3b:5c:62:5f:d0:fc:fd:92: ba:eb:8a:b0:70:24:05:8b:92:8d:bf:31:4a:7c:27:00:6f:8c: 22:f6:ff:da:58:11:87:9c:9c:96:c8:ea:7f:a6:a1:b8:04:13: 89:1f:e5:ea:0e:cc:51:79:7b:c5:67:a1:13:5e:49:aa:09:78: 62:d8:7c:20:14:d3:35:e3:19:9b:bd:1a:9d:e1:1b:ff:d2:6c: d3:d6:de:c5:3c:5b:49:40:2e:0e:9e:da:ac:19:ef:4b:be:51: 26:08:02:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oUCrdxT53gX2B1nkl6HoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4 MGZmYjQwHhcNMjUxMjE5MjIwMDUwWhcNMjUxMjIwMjIwMDUwWjAzMTEwLwYDVQQD EygxZWIxNTEyMzk1MGRmZTEzMWQ0YTUzZjViMzBiZGIzM2E5NzU1NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXtDWH+oLahCPpgb/iq1+fm1HPVY CXpWtK3gbNxttqpszcRm9tWVcKD8UrEP1/g4RrXD2NquuIxM06gntDHwak/mhioO KpMeQ7hPV/H4sXojQJDP14AmtBiAQVCeon9VjbN16Kt6nc/3brbve6vCvRB9LcA2 dLYTwlLGa06xqRsM2s+W2/wH0c5FToPuQMpudNAcLLOKtDghg65DE8rxDuUb6gvE eR2Ki7UXYdTtHk9QYMcuTxoHJpUwsTWJ25eM75aTrk+mLvdHjjLvabPBT4u+Hr+K ZCcGCoWNsl3qbez+V1+SpUbCeX9koszUFgw3AJBchORADJlhTSCSO1FD/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6xUSOVDf4THUpT9bML2zOpdVTlMB8GA1UdIwQY MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt MDYxOGM5YThjYWM0LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0 LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgmklzm7 wyfsP+e0mHnz2eqxZoyjV3VLNrUmh4wttCd1qDYgG5WbFbFPqBsmBA9FyOpGd/JW DfKetfOfQjhMYIXbWqvl+Rk+yEjCmxpUQETpugj/ouL117SE3lEkla0EhbZtbNRB O1VWA1kJ2ryGy8RhfCDaSBwsUZI8vJIy3GSZgPP9FBTwwrTVPUB0ICo2C9b+Eiut DUlCvztcYl/Q/P2SuuuKsHAkBYuSjb8xSnwnAG+MIvb/2lgRh5yclsjqf6ahuAQT iR/l6g7MUXl7xWehE15Jqgl4Yth8IBTTNeMZm70aneEb/9Js09bexTxbSUAuDp7a rBnvS75RJggCwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:38 2025 by rpki-client