This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json) Hash identifier: rEqVYxPKUL/v3IaWxdaJqa+hE1cYc8eoG4mwDbF0kf0= Subject key identifier: 46:B1:EE:8D:07:94:17:52:13:4A:B0:E8:E6:D4:DE:09:66:47:4B:D8 Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52 Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852 Certificate serial: 019B6278B8F8E76D4FF8B46A0BCF2D450FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft Manifest number: 0299 Signing time: Sun 28 Dec 2025 01:00:37 +0000 Manifest this update: Sun 28 Dec 2025 01:00:37 +0000 Manifest next update: Mon 29 Dec 2025 01:00:37 +0000 Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: B2mQuMmQHGpFy5CbdzJEZYhfQa+y9E8901qpnmGW88U=) 2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:b8:f8:e7:6d:4f:f8:b4:6a:0b:cf:2d:45:0f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852 Validity Not Before: Dec 28 01:00:37 2025 GMT Not After : Dec 29 01:00:37 2025 GMT Subject: CN=46b1ee8d07941752134ab0e8e6d4de0966474bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:f5:ac:83:6e:6d:a3:ee:be:f7:4b:ec:66: 20:46:89:6a:0c:89:d7:47:36:79:86:22:80:11:65: e3:b7:48:be:18:af:d3:59:75:49:5a:93:e3:10:ea: cf:97:b3:bf:ab:ff:66:0b:ca:43:1c:bd:f2:6d:37: 54:36:99:a2:4a:dd:85:69:c2:58:a4:79:83:31:7e: dc:4f:cc:5e:a4:8e:d2:7d:1f:65:bf:0c:4a:b7:80: 95:ca:d2:be:5a:df:8d:64:cb:e8:d9:2b:50:43:68: b1:40:b0:d0:2a:4b:86:e7:82:5e:6a:4f:b6:08:cd: ba:1b:01:d7:b5:a4:1a:58:ae:0c:77:49:49:8c:4d: 64:f4:f2:c9:4c:35:98:46:7c:34:38:86:f3:dd:85: 99:f5:1d:a6:41:00:10:bf:bc:3b:b2:04:8b:ea:75: 30:90:56:87:4e:0c:d3:c4:ca:ef:0c:1d:21:70:a6: e0:c8:9d:c3:67:fd:1f:88:4e:5d:18:cd:04:a0:c5: 41:d2:32:a2:d1:fb:f9:0e:9e:c9:09:e8:88:ab:80: 11:63:36:9b:53:82:47:f8:db:2a:52:41:ea:c1:ef: f9:04:2c:07:7c:96:2d:18:e4:a6:0b:76:10:d3:78: e9:6d:d0:9e:bc:5b:64:38:81:b9:d1:b2:be:bc:20: 96:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B1:EE:8D:07:94:17:52:13:4A:B0:E8:E6:D4:DE:09:66:47:4B:D8 X509v3 Authority Key Identifier: keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:9f:e7:d7:5d:90:7b:3b:1f:df:5b:34:da:e3:76:cc:b8:cc: 76:b2:0d:f1:66:a3:91:af:17:93:59:2c:24:dc:b9:fb:5c:ad: ed:b3:06:64:05:bc:1e:dc:72:7d:65:34:0c:89:99:1f:00:64: 65:ad:63:74:90:91:ae:42:45:9f:9b:15:7f:a5:a1:d5:a6:4d: a2:b4:c0:ee:23:53:e1:3c:0b:c5:5a:18:95:20:ac:67:dd:63: d6:65:05:8b:ba:0d:62:9d:fd:cc:d3:11:f6:c3:b3:8d:54:62: c1:48:a4:aa:0b:1c:b8:ba:ba:2c:83:d6:b8:b7:3e:4f:07:14: b7:97:c7:c8:93:a2:8b:e7:37:d7:7e:e8:9d:eb:b2:2a:ef:71: f7:47:8a:42:60:2e:f7:2e:fc:5e:e4:84:69:72:21:f1:18:6d: 92:53:00:dd:4c:61:35:e2:ae:a6:9d:81:36:20:b6:16:25:1e: d4:79:90:08:7a:95:89:7a:56:0d:54:2b:a4:2e:49:c0:a4:c7: 7a:b9:0f:9d:6c:a7:6c:67:c0:72:ef:97:7e:a9:5e:2d:80:8d: b1:7f:14:25:e0:19:87:63:20:28:78:c6:f4:f8:9f:28:1f:fe: bc:38:80:ce:6f:aa:c8:36:c6:04:7b:47:54:32:78:18:5f:30: c6:00:fc:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieLj4521P+LRqC88tRQ/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTFiYTJkYjg2MDE5ODI2YWIxMDJlMTlmMmNhOGEyMDkz MTY4NTIwHhcNMjUxMjI4MDEwMDM3WhcNMjUxMjI5MDEwMDM3WjAzMTEwLwYDVQQD Eyg0NmIxZWU4ZDA3OTQxNzUyMTM0YWIwZThlNmQ0ZGUwOTY2NDc0YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr/1rINubaPuvvdL7GYgRolqDInX RzZ5hiKAEWXjt0i+GK/TWXVJWpPjEOrPl7O/q/9mC8pDHL3ybTdUNpmiSt2FacJY pHmDMX7cT8xepI7SfR9lvwxKt4CVytK+Wt+NZMvo2StQQ2ixQLDQKkuG54Jeak+2 CM26GwHXtaQaWK4Md0lJjE1k9PLJTDWYRnw0OIbz3YWZ9R2mQQAQv7w7sgSL6nUw kFaHTgzTxMrvDB0hcKbgyJ3DZ/0fiE5dGM0EoMVB0jKi0fv5Dp7JCeiIq4ARYzab U4JH+NsqUkHqwe/5BCwHfJYtGOSmC3YQ03jpbdCevFtkOIG50bK+vCCWnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEax7o0HlBdSE0qw6ObU3glmR0vYMB8GA1UdIwQY MBaAFCMRui24YBmCarEC4Z8sqKIJMWhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0Njgt MmYxNzg3YmJmMTE2LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0NjgtMmYxNzg3YmJmMTE2 LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Z/n112Q ezsf31s02uN2zLjMdrIN8Wajka8Xk1ksJNy5+1yt7bMGZAW8HtxyfWU0DImZHwBk Za1jdJCRrkJFn5sVf6Wh1aZNorTA7iNT4TwLxVoYlSCsZ91j1mUFi7oNYp39zNMR 9sOzjVRiwUikqgscuLq6LIPWuLc+TwcUt5fHyJOii+c3137oneuyKu9x90eKQmAu 9y78XuSEaXIh8RhtklMA3UxhNeKupp2BNiC2FiUe1HmQCHqViXpWDVQrpC5JwKTH erkPnWynbGfAcu+XfqleLYCNsX8UJeAZh2MgKHjG9PifKB/+vDiAzm+qyDbGBHtH VDJ4GF8wxgD8EQ== -----END CERTIFICATE-----Generated at Sun Dec 28 07:30:12 2025 by rpki-client