This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json) Hash identifier: bkMu/9tXXUiVupk2U+82RiXgJJCHos4VLMsXZ4c2g7U= Subject key identifier: 95:6B:DB:29:58:46:9C:D2:5D:C3:9C:4C:55:8E:3D:B2:5E:60:88:D8 Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Certificate serial: 019B54194069921F7E0DB6B1891620A3F4F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft Manifest number: 118F Signing time: Thu 25 Dec 2025 06:01:39 +0000 Manifest this update: Thu 25 Dec 2025 06:01:39 +0000 Manifest next update: Fri 26 Dec 2025 06:01:39 +0000 Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=) 2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: vLjcr8nQ0olcBFU7h4ebRmpBXMZ1Iuw9UptWYS5564g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:40:69:92:1f:7e:0d:b6:b1:89:16:20:a3:f4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640 Validity Not Before: Dec 25 06:01:39 2025 GMT Not After : Dec 26 06:01:39 2025 GMT Subject: CN=956bdb2958469cd25dc39c4c558e3db25e6088d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:24:d3:ca:01:4e:7f:e6:3b:0c:51:7c:55: f6:99:00:52:b1:bf:30:ac:20:1f:fa:4f:c4:0b:19: 65:20:3f:e4:a2:6c:a6:df:62:82:6e:8f:dd:e1:77: 0c:6a:32:f9:b0:81:1e:1a:64:b8:cd:c0:17:6f:bf: f5:88:55:33:25:d5:52:ce:9a:86:a5:9e:5b:79:43: c0:4d:db:b7:66:ff:7c:83:4a:75:46:d9:03:72:55: c9:56:43:b4:66:f3:5a:ab:57:9c:6d:6a:df:1a:e6: 77:2f:f0:49:19:90:74:6a:5b:bd:c1:10:6d:08:57: b7:98:e8:27:4f:1e:cf:86:cc:f1:4d:00:95:a7:a6: 9e:06:df:79:b6:bf:17:2e:29:5a:5c:f5:b0:1f:ed: a4:1a:95:19:3e:ef:b6:7a:b6:38:74:f7:b4:47:c6: 7a:aa:73:fd:80:c0:50:2c:9e:33:29:ab:11:cc:83: 5a:3b:31:39:04:25:5a:ec:c7:94:c7:74:e6:e5:21: 5f:a6:be:b7:5c:5e:21:6b:bf:f7:4b:b1:5a:28:73: 7e:ed:7a:b1:a4:dd:87:d7:37:88:1b:a0:1a:8c:df: e0:43:71:49:1a:cb:b1:a5:0c:f3:04:73:6b:03:1d: ef:3f:42:2d:3f:e0:f0:f7:70:4f:88:14:f9:04:ff: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6B:DB:29:58:46:9C:D2:5D:C3:9C:4C:55:8E:3D:B2:5E:60:88:D8 X509v3 Authority Key Identifier: keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:84:35:fc:00:b8:9f:b0:97:f4:ca:e7:7e:de:05:80:c1:e1: 72:4d:12:e2:3e:89:fe:ae:9b:1a:da:eb:39:a7:42:85:55:c9: 3c:dd:97:1d:84:c0:c3:ce:1c:81:e4:52:aa:d2:6d:88:cc:0c: 8c:fc:46:68:d9:c2:70:5c:1d:aa:ef:46:07:c3:aa:fd:7a:0b: 07:1a:2c:4f:b3:67:58:7c:f5:1e:98:68:72:95:fe:d0:e2:8e: 93:5e:07:28:1c:94:80:ca:8e:9a:2d:ee:af:43:42:1b:e3:83: 4d:d7:95:46:19:7c:c2:66:13:08:dd:40:3e:65:52:fa:29:e9: 10:ad:ee:2d:cb:c9:c9:e5:21:b1:bf:90:0c:04:92:92:6c:cc: b1:b4:c5:5c:05:85:6a:f6:87:17:34:4f:69:32:67:15:12:1e: 23:df:dc:f0:fd:56:2f:db:29:10:6f:c3:27:ea:26:15:34:97: 4f:ae:d9:ea:6d:72:b2:33:34:a0:5d:1d:16:c4:d2:ff:7a:d1: cb:61:d4:96:fc:87:d3:13:92:f6:25:01:c5:8c:7b:db:b8:54: 74:a3:f5:cb:0f:b2:0d:39:f4:a8:ef:30:30:92:77:13:8e:86: 25:b6:ad:b7:78:1e:77:e1:aa:30:81:68:95:37:96:f4:d9:23: c9:e7:d0:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGUBpkh9+DbaxiRYgo/T4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OGM3Yjk0NjQyZDJlNGJiZmI5NTgzYWQ5NDFmNTFlYjhj NDU2NDAwHhcNMjUxMjI1MDYwMTM5WhcNMjUxMjI2MDYwMTM5WjAzMTEwLwYDVQQD Eyg5NTZiZGIyOTU4NDY5Y2QyNWRjMzljNGM1NThlM2RiMjVlNjA4OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM4k08oBTn/mOwxRfFX2mQBSsb8w rCAf+k/ECxllID/komym32KCbo/d4XcMajL5sIEeGmS4zcAXb7/1iFUzJdVSzpqG pZ5beUPATdu3Zv98g0p1RtkDclXJVkO0ZvNaq1ecbWrfGuZ3L/BJGZB0alu9wRBt CFe3mOgnTx7PhszxTQCVp6aeBt95tr8XLilaXPWwH+2kGpUZPu+2erY4dPe0R8Z6 qnP9gMBQLJ4zKasRzINaOzE5BCVa7MeUx3Tm5SFfpr63XF4ha7/3S7FaKHN+7Xqx pN2H1zeIG6AajN/gQ3FJGsuxpQzzBHNrAx3vP0ItP+Dw93BPiBT5BP8EkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVr2ylYRpzSXcOcTFWOPbJeYIjYMB8GA1UdIwQY MBaAFIiMe5RkLS5Lv7lYOtlB9R64xFZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWIt NzE4Nzk3N2UwNTdlLzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWItNzE4Nzk3N2UwNTdl LzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYQ1/AC4 n7CX9Mrnft4FgMHhck0S4j6J/q6bGtrrOadChVXJPN2XHYTAw84cgeRSqtJtiMwM jPxGaNnCcFwdqu9GB8Oq/XoLBxosT7NnWHz1HphocpX+0OKOk14HKByUgMqOmi3u r0NCG+ODTdeVRhl8wmYTCN1APmVS+inpEK3uLcvJyeUhsb+QDASSkmzMsbTFXAWF avaHFzRPaTJnFRIeI9/c8P1WL9spEG/DJ+omFTSXT67Z6m1ysjM0oF0dFsTS/3rR y2HUlvyH0xOS9iUBxYx727hUdKP1yw+yDTn0qO8wMJJ3E46GJbatt3ged+GqMIFo lTeW9NkjyefQmw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:34:42 2025 by rpki-client