This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json) Hash identifier: xqPlzdL4V3wi2bnRP/pjyTwk1EBYf72/bP0tIvxZ2XE= Subject key identifier: 37:A9:76:FE:3E:35:8D:74:29:BF:43:06:D6:FC:4A:E8:76:F8:95:17 Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52 Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852 Certificate serial: 019B341F766F19F8EA4C9700A4E549BF5FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft Manifest number: 0281 Signing time: Fri 19 Dec 2025 01:00:35 +0000 Manifest this update: Fri 19 Dec 2025 01:00:35 +0000 Manifest next update: Sat 20 Dec 2025 01:00:35 +0000 Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: OKwB+SBVTJtX6gGQ9hzJET6TRn3k4krCB4JIXMgNucE=) 2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:76:6f:19:f8:ea:4c:97:00:a4:e5:49:bf:5f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852 Validity Not Before: Dec 19 01:00:35 2025 GMT Not After : Dec 20 01:00:35 2025 GMT Subject: CN=37a976fe3e358d7429bf4306d6fc4ae876f89517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:aa:f1:06:a4:26:35:e0:30:ae:61:fa:68: 49:89:d9:4d:5f:af:cc:02:c8:1b:9f:88:bb:6d:8a: 86:6d:8e:eb:0e:01:7b:33:f2:fd:8c:84:e2:f3:23: 0e:96:44:08:08:df:57:d6:9c:08:1c:fd:91:55:45: 9e:35:96:96:59:68:1d:74:fe:44:2e:2c:c2:9e:06: 16:25:75:de:bd:cd:9b:4e:40:95:b8:1e:30:8d:4a: 01:ab:47:19:fc:e2:71:63:9d:0f:46:33:50:bf:89: 2a:03:10:89:0b:20:2c:eb:fa:58:55:c0:eb:0d:53: e0:09:4a:34:1e:9a:9a:c4:c9:8c:ea:e1:b7:f4:92: 78:fa:94:1b:76:c7:98:75:31:85:ff:15:f6:57:d1: 22:cf:8b:e1:f5:54:bf:bf:b2:f6:b6:e9:e3:3a:ae: ab:64:37:89:53:73:62:6d:3e:25:ce:9c:47:62:18: 74:84:8b:c9:f5:0b:f5:a7:c3:2a:7c:ec:70:10:7d: 37:d0:59:5e:08:20:59:9c:ce:d1:57:9d:1e:38:85: 4c:03:90:65:8e:fb:ea:2d:81:1e:be:10:9c:17:f2: c0:df:16:88:01:90:46:7a:f8:9b:1e:7f:71:98:86: a7:cf:34:77:d6:46:69:9d:6f:66:d6:a0:cc:68:4c: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A9:76:FE:3E:35:8D:74:29:BF:43:06:D6:FC:4A:E8:76:F8:95:17 X509v3 Authority Key Identifier: keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ed:0a:a9:7f:05:93:68:04:67:6c:f0:d7:67:69:79:84:7f: 9a:eb:df:b8:b1:ad:bf:a9:2e:24:a0:fd:d9:9b:8a:dd:5a:9e: 2c:53:89:08:c7:26:dc:d0:b9:91:15:77:46:c3:fd:85:60:b4: 4a:eb:fd:94:00:57:ca:9d:12:46:35:94:cb:30:39:8a:9f:45: 05:08:ab:a9:07:7f:0f:d3:00:23:3e:6f:7a:ff:ad:0d:39:d3: fc:3c:a7:04:27:fe:30:fb:2a:9f:e4:35:88:9c:08:b8:7b:6a: d4:c4:10:0f:95:11:b6:05:35:8e:e8:85:04:0d:c9:f1:c1:9a: 56:14:ed:7d:59:43:99:12:f9:87:47:86:ee:4d:23:dc:4e:cd: 3e:22:16:7e:60:20:f5:4b:fb:f6:a1:43:cc:b4:45:2d:4a:de: 07:2e:19:e0:f5:cd:ed:03:e5:e0:77:06:27:5f:88:2e:a4:cc: 5d:32:ff:aa:77:66:a0:67:d0:43:5d:a6:83:82:4a:2a:88:25: 06:75:c4:52:a5:8c:46:08:d6:c8:2c:ae:b6:62:44:85:ab:93: f9:7e:d7:6e:e2:5c:f2:fe:66:e7:c4:81:d7:17:e3:52:04:3e: d4:49:36:19:97:69:84:57:2d:58:74:6f:a9:ac:5a:28:c8:23: cb:18:61:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H3ZvGfjqTJcApOVJv1+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTFiYTJkYjg2MDE5ODI2YWIxMDJlMTlmMmNhOGEyMDkz MTY4NTIwHhcNMjUxMjE5MDEwMDM1WhcNMjUxMjIwMDEwMDM1WjAzMTEwLwYDVQQD EygzN2E5NzZmZTNlMzU4ZDc0MjliZjQzMDZkNmZjNGFlODc2Zjg5NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWOq8QakJjXgMK5h+mhJidlNX6/M Asgbn4i7bYqGbY7rDgF7M/L9jITi8yMOlkQICN9X1pwIHP2RVUWeNZaWWWgddP5E LizCngYWJXXevc2bTkCVuB4wjUoBq0cZ/OJxY50PRjNQv4kqAxCJCyAs6/pYVcDr DVPgCUo0HpqaxMmM6uG39JJ4+pQbdseYdTGF/xX2V9Eiz4vh9VS/v7L2tunjOq6r ZDeJU3NibT4lzpxHYhh0hIvJ9Qv1p8MqfOxwEH030FleCCBZnM7RV50eOIVMA5Bl jvvqLYEevhCcF/LA3xaIAZBGevibHn9xmIanzzR31kZpnW9m1qDMaEy3qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDepdv4+NY10Kb9DBtb8Suh2+JUXMB8GA1UdIwQY MBaAFCMRui24YBmCarEC4Z8sqKIJMWhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0Njgt MmYxNzg3YmJmMTE2LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0NjgtMmYxNzg3YmJmMTE2 LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO0KqX8F k2gEZ2zw12dpeYR/muvfuLGtv6kuJKD92ZuK3VqeLFOJCMcm3NC5kRV3RsP9hWC0 Suv9lABXyp0SRjWUyzA5ip9FBQirqQd/D9MAIz5vev+tDTnT/DynBCf+MPsqn+Q1 iJwIuHtq1MQQD5URtgU1juiFBA3J8cGaVhTtfVlDmRL5h0eG7k0j3E7NPiIWfmAg 9Uv79qFDzLRFLUreBy4Z4PXN7QPl4HcGJ1+ILqTMXTL/qndmoGfQQ12mg4JKKogl BnXEUqWMRgjWyCyutmJEhauT+X7XbuJc8v5m58SB1xfjUgQ+1Ek2GZdphFctWHRv qaxaKMgjyxhhXg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:32:49 2025 by rpki-client