This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json) Hash identifier: L598vkHffPPz3HwRz0YHMAsfYbPtqzpvC3UE8yCd9W4= Subject key identifier: F7:47:84:11:0F:CB:31:C4:BC:94:91:EF:D0:F9:F4:BF:C3:12:D2:DE Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9 Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9 Certificate serial: 019B4B4D09AA9A05F8629B1C38ADF1FB9FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 13:01:38 +0000 Manifest this update: Tue 23 Dec 2025 13:01:38 +0000 Manifest next update: Wed 24 Dec 2025 13:01:38 +0000 Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=) 2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: g0DICO9McG1kenG5jNI4+rfryFOeDFnEtSoyz8QyDNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4d:09:aa:9a:05:f8:62:9b:1c:38:ad:f1:fb:9f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9 Validity Not Before: Dec 23 13:01:38 2025 GMT Not After : Dec 24 13:01:38 2025 GMT Subject: CN=f74784110fcb31c4bc9491efd0f9f4bfc312d2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:f6:f5:56:c9:4f:1d:89:bb:12:3d:c7:4f: 75:5b:87:c7:d8:61:8a:ba:bf:c5:39:02:ca:8c:93: 50:fd:cc:be:c1:de:65:8f:c8:d3:b9:23:9c:39:09: ea:48:df:d1:db:53:d6:30:b1:a2:29:49:4f:d2:b3: 3d:92:da:be:80:d5:97:4f:0c:f0:75:2e:45:60:1e: 9b:e7:44:76:3d:c0:9c:dc:33:bc:e6:fc:95:a7:cb: 8b:08:cd:ac:45:03:40:c9:6b:5c:09:24:02:ec:85: cf:91:a5:bb:6d:ac:3a:4e:cc:7c:cc:9e:01:67:46: 2a:8c:a0:e4:ae:7c:79:8e:52:74:ca:ea:7c:08:b6: 10:d5:e7:22:c7:65:92:60:4f:88:e2:9e:39:7a:4c: 6e:52:8f:e3:eb:99:29:49:04:8f:61:b9:7f:98:51: a4:37:d5:a3:0e:85:66:b9:e9:4a:d4:7e:3e:9a:d3: 34:27:9b:12:40:28:b1:3d:e6:a5:29:7f:00:68:ee: bf:a7:a1:23:c2:62:d8:c0:01:1e:1f:84:fd:f0:c6: cb:42:c4:7f:97:83:7f:24:4b:ee:6c:49:9d:97:48: 22:f0:7a:6b:d8:db:b0:e1:bf:76:bc:f4:5c:d2:7a: 5a:f2:8e:0e:6c:aa:b3:54:98:63:56:45:23:49:2f: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:47:84:11:0F:CB:31:C4:BC:94:91:EF:D0:F9:F4:BF:C3:12:D2:DE X509v3 Authority Key Identifier: keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8a:a0:a3:02:60:4c:24:f8:5d:0c:2c:97:90:50:04:b8:3c: 65:27:50:77:d9:31:82:ad:09:66:54:38:03:ba:31:c7:86:14: 40:56:a5:81:11:78:f1:d9:9b:25:58:4c:94:42:39:8b:8b:22: da:98:ac:27:d8:7a:60:9a:95:12:30:46:77:7e:35:a7:a1:ff: e0:36:eb:e6:8b:c1:38:05:f5:be:18:2e:e5:3e:d4:fc:6c:2c: ab:a2:c7:db:48:57:19:7b:bd:c2:ef:fb:98:52:0e:50:33:f1: 26:26:90:4f:e7:a8:c5:bd:96:ef:a6:ca:0a:74:f0:ae:80:58: 1e:ba:df:e7:81:fb:4e:ee:6a:39:5d:98:ab:9f:2b:5d:58:0d: 8f:a7:71:5a:93:4d:63:1d:d6:35:63:aa:1c:c8:95:04:9f:f8: b8:69:ca:7b:6e:75:25:f1:9d:a7:9d:8c:49:3f:ee:85:14:6b: 39:da:72:82:e3:39:05:9f:3f:36:16:b1:95:bf:c8:b6:28:48: 10:fa:2c:cc:20:33:2d:d3:b3:63:65:9b:4a:e2:e4:36:69:e0: a7:ea:cc:97:c3:7b:7b:65:dc:c4:c4:6a:5c:58:73:c3:83:e2: 7e:15:7e:37:bd:ea:06:40:b1:6a:92:ef:3d:f7:70:af:83:ce: 79:61:9f:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTQmqmgX4YpscOK3x+5/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjVmZjA3NjcwNDUyM2ZmNmJlODgyYjg3ZWVmYTgwN2Ix ODhhYTkwHhcNMjUxMjIzMTMwMTM4WhcNMjUxMjI0MTMwMTM4WjAzMTEwLwYDVQQD EyhmNzQ3ODQxMTBmY2IzMWM0YmM5NDkxZWZkMGY5ZjRiZmMzMTJkMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQz29VbJTx2JuxI9x091W4fH2GGK ur/FOQLKjJNQ/cy+wd5lj8jTuSOcOQnqSN/R21PWMLGiKUlP0rM9ktq+gNWXTwzw dS5FYB6b50R2PcCc3DO85vyVp8uLCM2sRQNAyWtcCSQC7IXPkaW7baw6Tsx8zJ4B Z0YqjKDkrnx5jlJ0yup8CLYQ1ecix2WSYE+I4p45ekxuUo/j65kpSQSPYbl/mFGk N9WjDoVmuelK1H4+mtM0J5sSQCixPealKX8AaO6/p6EjwmLYwAEeH4T98MbLQsR/ l4N/JEvubEmdl0gi8Hpr2Nuw4b92vPRc0npa8o4ObKqzVJhjVkUjSS8dnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdHhBEPyzHEvJSR79D59L/DEtLeMB8GA1UdIwQY MBaAFCD1/wdnBFI/9r6IK4fu+oB7GIqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDct ZjZhN2I0OWY5ODFhLzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDctZjZhN2I0OWY5ODFh LzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIqgowJg TCT4XQwsl5BQBLg8ZSdQd9kxgq0JZlQ4A7oxx4YUQFalgRF48dmbJVhMlEI5i4si 2pisJ9h6YJqVEjBGd341p6H/4Dbr5ovBOAX1vhgu5T7U/Gwsq6LH20hXGXu9wu/7 mFIOUDPxJiaQT+eoxb2W76bKCnTwroBYHrrf54H7Tu5qOV2Yq58rXVgNj6dxWpNN Yx3WNWOqHMiVBJ/4uGnKe251JfGdp52MST/uhRRrOdpyguM5BZ8/Nhaxlb/ItihI EPoszCAzLdOzY2WbSuLkNmngp+rMl8N7e2XcxMRqXFhzw4PifhV+N73qBkCxapLv Pfdwr4POeWGfdg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:31:17 2025 by rpki-client