This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json) Hash identifier: UWXtQe1WMt+37CcVjKFZO84OLf4PgzJfXLWU5um1bSs= Subject key identifier: 66:4D:09:B6:03:1E:CA:4E:92:18:5E:80:18:0B:94:A0:B9:16:24:8F Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0 Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0 Certificate serial: 019B1A2936B874BB6B3B7D5F44D88D8E4D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 00:01:07 +0000 Manifest this update: Sun 14 Dec 2025 00:01:07 +0000 Manifest next update: Mon 15 Dec 2025 00:01:07 +0000 Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=) 2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: soLL4o5SMxU0S4S06fRiabD0Xh8SWx2iwjRt0HKm288=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:36:b8:74:bb:6b:3b:7d:5f:44:d8:8d:8e:4d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0 Validity Not Before: Dec 14 00:01:07 2025 GMT Not After : Dec 15 00:01:07 2025 GMT Subject: CN=664d09b6031eca4e92185e80180b94a0b916248f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:07:dd:fe:d1:16:e6:47:5b:2e:df:4d:3d:bd: 42:41:a6:ad:46:01:8a:96:c0:72:cc:f3:fe:3b:2f: 7c:53:e6:f5:32:bc:08:50:e7:dc:77:b4:07:67:77: 16:40:24:bb:3a:fc:3b:cd:a8:f7:66:98:f6:d1:8b: 72:09:5c:5e:81:06:d9:4e:4f:ab:1f:88:5b:e0:5d: f7:41:3b:08:63:93:09:db:76:e8:42:84:95:72:99: e4:cd:b9:fa:33:c6:07:de:53:75:51:03:dc:af:99: 4d:7f:e2:75:21:99:0b:fa:da:40:0d:7f:78:23:b1: 35:0c:84:dd:20:09:94:b5:23:3b:94:40:88:a0:a6: 5a:9f:09:e0:17:61:05:a6:d0:f7:f9:c6:9b:dc:84: 64:2d:da:3f:4b:6f:f9:51:51:a7:7c:8d:79:76:c6: 33:12:d7:76:28:42:9e:be:39:90:c6:3d:55:c0:23: 5d:1c:b5:5d:d9:99:33:ad:0c:38:91:39:1d:e7:88: 6a:11:10:f0:a1:06:4e:d6:df:c6:f8:fb:10:cb:fc: c7:0d:73:b8:59:fb:4e:0e:f1:b5:2f:11:8e:89:2d: 43:4f:22:24:0f:76:8b:7e:86:65:2f:7f:fa:f3:c4: 7e:b7:43:a2:ea:58:c7:32:22:ec:b3:de:10:9e:70: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4D:09:B6:03:1E:CA:4E:92:18:5E:80:18:0B:94:A0:B9:16:24:8F X509v3 Authority Key Identifier: keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a1:e4:a1:72:be:5a:9f:a5:1c:1e:1f:73:34:56:0f:83:de: 5e:02:8f:4b:e3:77:7c:ff:aa:00:9c:7c:4f:d5:3e:f0:93:2a: 8a:b1:ea:7b:b2:7b:ce:55:10:05:cd:17:c3:51:62:bc:77:e9: 2b:e7:9c:ad:64:8a:f8:fc:8b:ec:28:8e:dc:15:4a:c2:c9:fb: 78:54:8c:b4:53:fe:fb:ea:94:c7:c4:7a:f3:77:95:4f:46:80: 50:90:4b:9e:02:70:e7:e9:a1:96:f0:79:9c:66:df:75:7a:43: 05:63:c7:ef:a8:4a:b9:3d:99:d6:00:ca:df:27:ea:e4:e6:d2: a2:7d:79:8d:52:37:3d:3a:af:23:35:04:00:ce:1e:dd:8f:fa: 7b:4a:93:d9:a7:80:51:c1:6c:3c:fe:5c:c9:7a:5b:fa:40:e5: 3c:d9:5f:99:f3:67:c7:95:c9:0b:cf:9c:aa:fb:0d:f2:81:d8: 14:8a:6e:09:ba:10:87:a3:b7:8d:aa:20:10:48:f3:de:c4:40: d9:3f:b9:40:7e:f3:90:cf:28:11:6f:58:02:0e:ae:87:b2:41: 0a:a9:22:7b:27:fd:95:27:39:7c:2e:b0:96:6a:7c:94:a1:0c: cf:30:82:46:86:c3:3e:17:82:48:f4:18:42:36:c9:e2:8a:25: a3:ab:59:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKTa4dLtrO31fRNiNjk0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTNlMzgzYjJjYzUyZDVlY2EzMGZlYjEyNjk3NTkzYzlj Nzg4YTAwHhcNMjUxMjE0MDAwMTA3WhcNMjUxMjE1MDAwMTA3WjAzMTEwLwYDVQQD Eyg2NjRkMDliNjAzMWVjYTRlOTIxODVlODAxODBiOTRhMGI5MTYyNDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gfd/tEW5kdbLt9NPb1CQaatRgGK lsByzPP+Oy98U+b1MrwIUOfcd7QHZ3cWQCS7Ovw7zaj3Zpj20YtyCVxegQbZTk+r H4hb4F33QTsIY5MJ23boQoSVcpnkzbn6M8YH3lN1UQPcr5lNf+J1IZkL+tpADX94 I7E1DITdIAmUtSM7lECIoKZanwngF2EFptD3+cab3IRkLdo/S2/5UVGnfI15dsYz Etd2KEKevjmQxj1VwCNdHLVd2ZkzrQw4kTkd54hqERDwoQZO1t/G+PsQy/zHDXO4 WftODvG1LxGOiS1DTyIkD3aLfoZlL3/688R+t0Oi6ljHMiLss94QnnCfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZNCbYDHspOkhhegBgLlKC5FiSPMB8GA1UdIwQY MBaAFCCT44OyzFLV7KMP6xJpdZPJx4igMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2Mt MDQ1MzRlYmNlMzVlLzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2MtMDQ1MzRlYmNlMzVl LzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqHkoXK+ Wp+lHB4fczRWD4PeXgKPS+N3fP+qAJx8T9U+8JMqirHqe7J7zlUQBc0Xw1FivHfp K+ecrWSK+PyL7CiO3BVKwsn7eFSMtFP+++qUx8R683eVT0aAUJBLngJw5+mhlvB5 nGbfdXpDBWPH76hKuT2Z1gDK3yfq5ObSon15jVI3PTqvIzUEAM4e3Y/6e0qT2aeA UcFsPP5cyXpb+kDlPNlfmfNnx5XJC8+cqvsN8oHYFIpuCboQh6O3jaogEEjz3sRA 2T+5QH7zkM8oEW9YAg6uh7JBCqkieyf9lSc5fC6wlmp8lKEMzzCCRobDPheCSPQY QjbJ4oolo6tZ9Q== -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:18 2025 by rpki-client