This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json) Hash identifier: q5a8L0PuhXwDCEI4p/NW+QDkTSMMvk0dQl6nqnf/qc8= Subject key identifier: 29:B8:EE:84:47:51:96:5F:FE:A4:18:81:82:6F:09:E1:8B:98:49:45 Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Certificate serial: 019B34C435F3561606D47D1F496D3072641E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft Manifest number: 1717 Signing time: Fri 19 Dec 2025 04:00:32 +0000 Manifest this update: Fri 19 Dec 2025 04:00:32 +0000 Manifest next update: Sat 20 Dec 2025 04:00:32 +0000 Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=) 2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=) 3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: iOV/ddDk5U93tSw/oblAMvlz3btFE8X7ghDjbTGymOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:35:f3:56:16:06:d4:7d:1f:49:6d:30:72:64:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Validity Not Before: Dec 19 04:00:32 2025 GMT Not After : Dec 20 04:00:32 2025 GMT Subject: CN=29b8ee844751965ffea41881826f09e18b984945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:88:c8:51:79:0b:51:82:dd:0c:83:38:f8: 78:5c:74:4c:d1:1b:3f:1f:ae:c6:3a:5e:75:9c:d3: d3:9f:af:1f:c7:18:97:02:93:25:05:c0:20:9f:4e: 11:26:84:59:ac:7f:8c:65:91:3e:08:42:05:77:23: 9b:c0:eb:8e:ec:af:f8:b5:54:76:0d:5e:04:1c:b0: fb:07:26:6a:1e:03:f3:0f:04:67:da:f0:e2:19:b6: 47:67:62:55:de:4a:06:64:69:e5:8f:b1:ae:b4:a3: 42:ef:d9:75:20:4a:87:b4:bc:58:f3:2c:ef:0a:b3: bb:0d:aa:a7:40:fa:aa:be:d5:d3:c0:da:0a:66:dc: 62:61:05:fe:96:41:72:72:a9:b9:79:aa:ad:4c:4f: 01:54:10:67:c5:17:fc:68:f9:41:b5:36:76:12:21: ca:17:a2:ce:1a:b4:f3:5d:b5:78:c9:4e:61:bb:85: 29:76:37:35:e7:58:32:ec:8b:50:e2:da:bb:48:80: 63:8d:45:34:e2:7c:de:db:44:d5:ef:2b:e6:2c:83: d1:fe:45:7f:6f:22:b5:7d:c5:59:25:ff:68:8d:c0: 93:23:3f:9f:61:f7:88:8d:fe:4d:86:40:a1:69:02: b7:0b:ad:b4:29:4b:90:87:3e:dd:dd:1e:c6:e9:2d: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B8:EE:84:47:51:96:5F:FE:A4:18:81:82:6F:09:E1:8B:98:49:45 X509v3 Authority Key Identifier: keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d7:a0:b9:98:89:6a:c7:e5:62:26:8a:64:a0:90:28:13:dc: df:14:d9:04:2a:f3:45:1c:4d:48:b2:98:99:55:d7:5c:11:cf: 8d:f8:93:16:3d:91:89:b4:36:41:2b:54:7d:a3:dc:5b:13:be: 46:d2:6b:09:7e:ac:4c:0a:af:0e:17:8e:e1:fd:ec:a8:06:71: 42:ee:19:83:5a:0f:de:1f:e3:e9:2b:9e:55:b8:16:3d:44:82: c6:cb:57:ad:7d:24:19:bf:a8:ef:fe:fb:bd:0c:0b:f3:52:6e: 3c:c6:f6:89:6c:da:2d:e6:4b:a8:b2:de:c8:a2:ee:0d:f7:58: bb:5e:74:cb:10:77:96:a3:5f:8a:be:94:24:d0:5b:28:cb:a3: d9:c4:82:9f:8a:08:dd:2e:4a:6e:63:ac:e8:b1:65:48:06:be: c4:90:3b:a4:db:b2:54:8b:78:0a:a5:65:d6:d7:35:2a:b7:ee: 2c:da:1e:80:28:0c:c6:cd:32:08:69:e3:3f:b2:c5:42:97:13: 04:1a:6f:dd:c1:30:37:66:6e:48:a0:95:81:c6:3a:31:7e:b5: ad:ed:24:7c:31:95:59:30:77:51:14:65:82:87:7e:a8:cb:33: ba:b8:36:3e:1e:90:57:62:0e:cf:cd:56:fc:6a:37:ae:2d:b7: 9e:30:d7:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDXzVhYG1H0fSW0wcmQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4 MGZmYjQwHhcNMjUxMjE5MDQwMDMyWhcNMjUxMjIwMDQwMDMyWjAzMTEwLwYDVQQD EygyOWI4ZWU4NDQ3NTE5NjVmZmVhNDE4ODE4MjZmMDllMThiOTg0OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDaIyFF5C1GC3QyDOPh4XHRM0Rs/ H67GOl51nNPTn68fxxiXApMlBcAgn04RJoRZrH+MZZE+CEIFdyObwOuO7K/4tVR2 DV4EHLD7ByZqHgPzDwRn2vDiGbZHZ2JV3koGZGnlj7GutKNC79l1IEqHtLxY8yzv CrO7DaqnQPqqvtXTwNoKZtxiYQX+lkFycqm5eaqtTE8BVBBnxRf8aPlBtTZ2EiHK F6LOGrTzXbV4yU5hu4Updjc151gy7ItQ4tq7SIBjjUU04nze20TV7yvmLIPR/kV/ byK1fcVZJf9ojcCTIz+fYfeIjf5NhkChaQK3C620KUuQhz7d3R7G6S2ZIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm47oRHUZZf/qQYgYJvCeGLmElFMB8GA1UdIwQY MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt MDYxOGM5YThjYWM0LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0 LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9eguZiJ asflYiaKZKCQKBPc3xTZBCrzRRxNSLKYmVXXXBHPjfiTFj2RibQ2QStUfaPcWxO+ RtJrCX6sTAqvDheO4f3sqAZxQu4Zg1oP3h/j6SueVbgWPUSCxstXrX0kGb+o7/77 vQwL81JuPMb2iWzaLeZLqLLeyKLuDfdYu150yxB3lqNfir6UJNBbKMuj2cSCn4oI 3S5KbmOs6LFlSAa+xJA7pNuyVIt4CqVl1tc1KrfuLNoegCgMxs0yCGnjP7LFQpcT BBpv3cEwN2ZuSKCVgcY6MX61re0kfDGVWTB3URRlgod+qMszurg2Ph6QV2IOz81W /Go3ri23njDXdA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:10:00 2025 by rpki-client