This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json) Hash identifier: IAXNTMtGxFaRJkdLIY+pQ9f7HVOHn4vpa3rzhGhCjwY= Subject key identifier: 23:F3:5F:75:99:D2:1C:67:39:FB:D0:D9:FD:1D:42:CD:76:09:34:AE Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed Certificate serial: 019B3B3475EEB245E9C79E7A95A8C68C74F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft Manifest number: 0B1F Signing time: Sat 20 Dec 2025 10:00:52 +0000 Manifest this update: Sat 20 Dec 2025 10:00:52 +0000 Manifest next update: Sun 21 Dec 2025 10:00:52 +0000 Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: CibkJXImVg8Hra7aLMr+MetN73htWU1hiPtpDrgh6W8=) 2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:75:ee:b2:45:e9:c7:9e:7a:95:a8:c6:8c:74:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed Validity Not Before: Dec 20 10:00:52 2025 GMT Not After : Dec 21 10:00:52 2025 GMT Subject: CN=23f35f7599d21c6739fbd0d9fd1d42cd760934ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:6b:9d:56:a4:a3:8b:19:f5:12:98:7d:04: f0:6b:43:1a:72:69:a6:94:d2:4f:fd:0a:3f:70:1e: e1:7e:81:a5:ec:07:6c:58:e3:06:42:63:7a:b0:76: 6e:b6:f7:2e:57:23:4d:88:94:80:e2:ac:74:1b:b1: 4a:6c:95:cc:cd:39:ef:8c:26:71:9a:2c:ff:e4:69: d0:b9:39:2f:0c:04:bd:8c:11:a6:8c:0e:5a:34:a2: 40:08:b3:e9:1a:d0:2c:af:d4:7c:ae:47:3d:11:e6: 1b:6f:bb:cc:49:bc:25:3b:00:cf:fc:a1:b6:1c:bf: 1f:9c:56:04:ca:2b:f5:0f:2d:cd:ac:e0:4b:23:75: 98:0e:d5:f5:34:bb:15:e7:20:ad:13:7f:15:c2:54: e1:8d:37:20:30:cf:0e:37:2d:40:60:d3:96:bf:1d: 6f:43:ba:4e:6d:20:5e:79:41:22:b5:6f:e8:f6:c0: 57:ef:a3:cd:fd:53:fb:70:cd:15:36:17:bb:15:d4: 63:43:4d:17:e0:7e:66:7a:b5:db:87:ab:53:9a:50: 37:9a:58:6b:7e:e4:65:8e:38:49:8a:e8:78:c2:3d: bd:21:0b:79:ff:90:ff:2a:e6:e9:5f:d3:46:81:91: 07:64:47:cf:35:f0:00:15:36:34:60:af:8d:30:ba: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F3:5F:75:99:D2:1C:67:39:FB:D0:D9:FD:1D:42:CD:76:09:34:AE X509v3 Authority Key Identifier: keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:e0:06:ca:17:c7:98:20:8f:3e:f1:54:91:92:58:46:4f:86: 73:97:1d:f0:cc:9d:d6:57:db:28:7a:4e:78:da:ab:2f:ea:08: 92:bc:72:04:ee:d6:3b:6b:02:a6:95:86:dc:da:b9:f4:6f:64: fc:33:81:c9:6d:a0:42:29:e6:56:1e:ce:a6:ed:ea:37:ad:0c: 0f:4c:eb:17:e8:67:83:90:9c:1c:67:58:04:1b:89:00:ca:2c: c6:fd:dc:11:41:e2:3e:53:2b:f7:6f:0e:ff:56:b5:03:76:1d: 3d:d9:13:b6:97:f8:12:36:ee:57:fc:21:de:ae:c8:98:64:5e: cd:11:f7:4d:fa:ff:94:6a:6a:f9:0b:b0:d2:7a:2e:b8:0a:c0: 4f:3b:c5:fe:9e:d9:0e:11:6e:fc:2d:89:db:92:d7:65:92:6b: f1:54:83:dc:b9:3f:4d:19:2a:91:c9:f2:68:89:eb:65:48:f9: 32:17:ea:bb:99:e5:59:99:a5:a8:1a:fa:6c:f1:fb:3b:b6:58: 17:60:3d:d6:04:d9:03:97:3f:92:f4:ca:4e:0a:30:ec:52:46: 92:ca:85:69:29:a2:ed:13:d1:5e:f3:fc:69:2a:a4:44:50:a3: fd:fa:75:7a:ae:39:28:1b:54:d8:9a:95:cd:e0:1d:54:95:63: 8d:84:cf:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NHXuskXpx556lajGjHTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDc0Y2M3YmY1MjRhYjkzYmQwZjBlNDFiYjU3OWU5MThi YjEzZWQwHhcNMjUxMjIwMTAwMDUyWhcNMjUxMjIxMTAwMDUyWjAzMTEwLwYDVQQD EygyM2YzNWY3NTk5ZDIxYzY3MzlmYmQwZDlmZDFkNDJjZDc2MDkzNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOlrnVako4sZ9RKYfQTwa0Macmmm lNJP/Qo/cB7hfoGl7AdsWOMGQmN6sHZutvcuVyNNiJSA4qx0G7FKbJXMzTnvjCZx miz/5GnQuTkvDAS9jBGmjA5aNKJACLPpGtAsr9R8rkc9EeYbb7vMSbwlOwDP/KG2 HL8fnFYEyiv1Dy3NrOBLI3WYDtX1NLsV5yCtE38VwlThjTcgMM8ONy1AYNOWvx1v Q7pObSBeeUEitW/o9sBX76PN/VP7cM0VNhe7FdRjQ00X4H5merXbh6tTmlA3mlhr fuRljjhJiuh4wj29IQt5/5D/KubpX9NGgZEHZEfPNfAAFTY0YK+NMLqyKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPzX3WZ0hxnOfvQ2f0dQs12CTSuMB8GA1UdIwQY MBaAFIoHTMe/Ukq5O9Dw5Bu1eekYuxPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYt OWVkN2UzNjMyYmQwLzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wMjJhZmMtMjVkOS00ZGJjLTliZjYtOWVkN2UzNjMyYmQw LzEvaWdkTXg3OVNTcms3MFBEa0c3VjU2Umk3RS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvuAGyhfH mCCPPvFUkZJYRk+Gc5cd8Myd1lfbKHpOeNqrL+oIkrxyBO7WO2sCppWG3Nq59G9k /DOByW2gQinmVh7Opu3qN60MD0zrF+hng5CcHGdYBBuJAMosxv3cEUHiPlMr928O /1a1A3YdPdkTtpf4EjbuV/wh3q7ImGRezRH3Tfr/lGpq+Quw0nouuArATzvF/p7Z DhFu/C2J25LXZZJr8VSD3Lk/TRkqkcnyaInrZUj5Mhfqu5nlWZmlqBr6bPH7O7ZY F2A91gTZA5c/kvTKTgow7FJGksqFaSmi7RPRXvP8aSqkRFCj/fp1eq45KBtU2JqV zeAdVJVjjYTPFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:32:17 2025 by rpki-client