This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json) Hash identifier: 8fYKJvr9NRQ2Jp20UTmERQelr6ZY9gBqlo192UJGNOs= Subject key identifier: FF:95:F5:4D:F7:00:1E:44:F2:E1:67:EA:AC:69:39:38:63:66:0A:A1 Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7 Certificate serial: 019B3D9129828A416A480A33A8B9C7870119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft Manifest number: 12DC Signing time: Sat 20 Dec 2025 21:01:22 +0000 Manifest this update: Sat 20 Dec 2025 21:01:22 +0000 Manifest next update: Sun 21 Dec 2025 21:01:22 +0000 Files and hashes: 1: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (hash: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=) 2: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: /dSha15c0A3oFbvq70EKJ2Gs9vTX+ML8yb41XfauQB0=) 3: nrEMql0zV0P3dpHmZH6RSxKuJFg.roa (hash: 1gVFTzoG8NuAbMx8im63wNse5kBK1gIOddqrPu/oX6A=) 4: oCdnapI8_jAqvSx-q8QqfeZBfpI.roa (hash: 4dP+f2erpGi6jIqWI+u+ltnYaQjR1Rx/ox+mHYa6aIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:29:82:8a:41:6a:48:0a:33:a8:b9:c7:87:01:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7 Validity Not Before: Dec 20 21:01:22 2025 GMT Not After : Dec 21 21:01:22 2025 GMT Subject: CN=ff95f54df7001e44f2e167eaac69393863660aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:e6:02:96:3f:e0:35:78:2a:29:fd:40:1d: 5d:d3:9a:75:c8:81:7f:57:19:09:45:de:a4:60:e4: cc:8d:0c:27:1a:ea:6a:c9:63:51:2b:8f:70:35:09: 96:6e:21:ae:c7:4b:b2:17:65:0b:be:fe:76:9f:a9: 23:03:29:db:aa:a9:2e:9f:72:90:84:cc:a4:87:2b: d2:86:ab:ca:04:12:6b:84:86:5a:0a:50:62:c8:e7: 48:0e:99:3a:e1:ed:a9:77:5c:a9:05:ea:da:bc:7b: c2:b4:6b:b1:19:7f:c8:17:2a:af:df:d3:c6:cb:8d: a7:61:53:b5:c8:bf:68:39:5f:fb:61:3d:47:3e:82: 21:25:3a:eb:17:aa:03:7a:ef:ca:74:d0:a2:c8:7b: 17:ee:6b:c5:52:9d:23:2f:af:d5:8b:c8:3f:82:29: 70:70:51:9d:58:71:78:1a:7a:67:af:c2:ba:54:1b: a9:72:f2:72:39:a1:50:3b:e1:f5:bc:9b:4b:5f:09: cf:94:72:6e:57:73:47:c4:3f:78:51:d2:dc:2c:76: 73:0e:de:cf:3e:94:dd:2a:20:ed:38:b3:9f:88:18: 84:42:70:58:a9:44:33:ff:d5:75:0d:a8:b7:77:40: e0:bf:05:26:77:fc:e8:fc:1e:99:ee:1a:92:0b:1b: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:F5:4D:F7:00:1E:44:F2:E1:67:EA:AC:69:39:38:63:66:0A:A1 X509v3 Authority Key Identifier: keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f8:77:44:3e:40:9f:58:cb:f5:77:97:a8:55:d0:cd:0a:40: 53:ed:66:a4:2d:1f:9a:5f:54:0e:44:c0:a6:a3:e3:f8:4b:7c: 4c:f8:64:23:f6:b1:0d:a0:f6:2c:6f:e5:bf:81:b7:f4:4c:fc: 0c:c6:58:9b:b5:65:c2:2d:cd:fb:72:a1:2b:ab:97:16:1b:53: 88:34:b2:cf:36:af:b7:98:16:b4:a3:ce:49:ac:c8:b4:9b:be: e0:77:a8:f7:29:b8:c8:95:fc:e2:66:08:da:75:9a:ac:6f:05: ef:fa:a9:29:22:c5:6d:b1:fc:60:af:53:6c:94:be:9e:f7:e8: 47:70:68:fc:9e:e5:3e:2a:50:0e:6f:f7:49:4b:42:86:26:c8: 91:d2:c2:d1:97:df:e4:29:e2:66:24:72:d1:82:b8:52:1e:fa: 5b:29:b3:37:60:43:a5:b2:27:b5:d4:c4:54:99:be:c6:fa:f1: 22:ca:ca:29:ab:08:52:51:61:40:dc:e5:e8:b0:5b:c7:2c:86: d0:97:85:83:a5:62:cd:f0:69:15:00:40:2e:2a:92:39:fc:e0: e1:a8:cf:db:69:64:0f:14:07:68:ed:80:05:fa:c3:f7:e5:0e: 53:e5:81:55:60:4a:72:0d:7b:7c:f2:a4:60:c4:f0:e5:37:39: 84:5b:ce:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kSmCikFqSAozqLnHhwEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm ZmQ4ZDcwHhcNMjUxMjIwMjEwMTIyWhcNMjUxMjIxMjEwMTIyWjAzMTEwLwYDVQQD EyhmZjk1ZjU0ZGY3MDAxZTQ0ZjJlMTY3ZWFhYzY5MzkzODYzNjYwYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU3mApY/4DV4Kin9QB1d05p1yIF/ VxkJRd6kYOTMjQwnGupqyWNRK49wNQmWbiGux0uyF2ULvv52n6kjAynbqqkun3KQ hMykhyvShqvKBBJrhIZaClBiyOdIDpk64e2pd1ypBeravHvCtGuxGX/IFyqv39PG y42nYVO1yL9oOV/7YT1HPoIhJTrrF6oDeu/KdNCiyHsX7mvFUp0jL6/Vi8g/gilw cFGdWHF4Gnpnr8K6VBupcvJyOaFQO+H1vJtLXwnPlHJuV3NHxD94UdLcLHZzDt7P PpTdKiDtOLOfiBiEQnBYqUQz/9V1Dai3d0DgvwUmd/zo/B6Z7hqSCxvlLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+V9U33AB5E8uFn6qxpOThjZgqhMB8GA1UdIwQY MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt NmRlMDVhMzE2MjM5LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5 LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivh3RD5A n1jL9XeXqFXQzQpAU+1mpC0fml9UDkTApqPj+Et8TPhkI/axDaD2LG/lv4G39Ez8 DMZYm7Vlwi3N+3KhK6uXFhtTiDSyzzavt5gWtKPOSazItJu+4Heo9ym4yJX84mYI 2nWarG8F7/qpKSLFbbH8YK9TbJS+nvfoR3Bo/J7lPipQDm/3SUtChibIkdLC0Zff 5CniZiRy0YK4Uh76WymzN2BDpbIntdTEVJm+xvrxIsrKKasIUlFhQNzl6LBbxyyG 0JeFg6VizfBpFQBALiqSOfzg4ajP22lkDxQHaO2ABfrD9+UOU+WBVWBKcg17fPKk YMTw5Tc5hFvOkg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:12:22 2025 by rpki-client