This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json) Hash identifier: FXwWJv0G/4cqvvbOtJyxPJ2hu0eYUmsZ/RbvpbALsyA= Subject key identifier: B9:7F:B6:8E:DC:47:94:EC:E6:13:B9:15:9D:93:E5:46:52:A6:3C:66 Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Certificate serial: 019B2DB092AF5246A09C7D43A798607F03AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft Manifest number: 11B6 Signing time: Wed 17 Dec 2025 19:01:45 +0000 Manifest this update: Wed 17 Dec 2025 19:01:45 +0000 Manifest next update: Thu 18 Dec 2025 19:01:45 +0000 Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=) 2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: 2qwRj55lfXyAmXgr/laTAY3BxGdkSObXoIxkD8WTrSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:92:af:52:46:a0:9c:7d:43:a7:98:60:7f:03:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1 Validity Not Before: Dec 17 19:01:45 2025 GMT Not After : Dec 18 19:01:45 2025 GMT Subject: CN=b97fb68edc4794ece613b9159d93e54652a63c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:33:b6:6e:7c:bd:47:60:ce:85:a4:2a:da: 9d:60:b7:3e:43:9b:35:ee:96:2b:31:ce:17:43:7c: 6b:78:bc:47:49:ce:02:fc:f8:ba:f5:df:fd:87:74: fc:82:0c:fe:98:04:9d:ff:5b:78:f9:7e:ef:0b:a8: 64:99:49:4b:16:70:98:41:c0:52:09:2d:20:00:5f: 9d:a2:50:34:fc:c9:8a:08:ec:09:e8:f7:d7:2b:81: 4d:25:d7:3c:ea:44:3e:77:e1:c3:8b:5e:3b:3a:c6: 8b:27:d8:76:25:cf:29:f0:43:0c:82:89:b7:a6:d0: c0:d0:8f:a9:1e:93:9f:0d:7f:a1:51:88:f5:6b:fc: fc:3b:0b:97:1e:58:ce:01:1e:42:26:ba:ab:d7:3a: 4b:f6:b1:fa:13:55:b1:04:70:7e:46:93:96:1b:38: 78:b5:7c:d2:23:91:3a:99:a8:22:04:66:1c:2f:ee: 8a:24:8c:7a:75:bb:56:8a:c6:2f:de:78:10:a9:e9: fe:46:31:63:ae:d4:b9:da:1c:24:96:0e:45:6e:01: f6:05:ae:20:cc:98:ce:79:78:0e:0e:06:7d:ba:b0: 6c:b9:33:cb:ea:ca:85:b0:da:55:7d:9c:64:76:56: e6:f4:23:5d:28:7a:cc:88:89:fe:6b:7b:06:1a:ce: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7F:B6:8E:DC:47:94:EC:E6:13:B9:15:9D:93:E5:46:52:A6:3C:66 X509v3 Authority Key Identifier: keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ad:9a:8b:f5:32:78:5f:73:97:fe:46:29:63:2e:fe:74:ba: 45:92:da:fa:66:f1:0e:7e:09:66:df:50:b6:6b:60:4b:2d:dc: 99:84:12:9e:70:85:1d:09:ff:55:40:a0:d3:31:ae:ce:d6:e7: 1a:8d:4b:34:9a:9f:60:6b:05:60:73:af:37:56:44:54:63:9b: 5b:fc:2e:3e:cc:59:9c:52:36:50:22:ad:ee:09:f6:47:4a:16: 49:ff:45:9f:9d:91:71:f9:92:09:c4:d3:21:88:6b:30:f7:3c: 5a:e7:44:c7:4d:d5:0c:4e:69:a8:61:7c:0b:6e:0d:9b:fa:f7: 76:83:a0:92:d0:db:f4:2b:05:6f:4b:5f:f3:57:d2:c6:41:f8: 3f:ea:ea:e2:65:82:ba:20:6a:11:33:54:fd:b2:5d:c5:98:cb: 0b:d8:35:e9:19:84:2a:f7:59:2b:70:12:a0:f2:85:4a:90:4c: 83:c7:6c:3f:95:c8:b2:2b:d0:a7:3c:5d:93:23:ad:d4:22:3a: 79:dd:c1:80:fa:d8:ba:58:69:cc:57:f3:0e:37:fe:de:3f:a4: a1:d3:7a:f2:f9:1d:7f:c4:80:ce:99:3f:13:42:78:0b:43:0d: fb:10:40:68:12:1b:1e:6e:c8:17:cc:88:0d:3a:4d:0f:56:11: 49:da:93:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsJKvUkagnH1Dp5hgfwOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzI0ZTRjZTc2OTM5YjRkYjU3ZDVkMzUwYzJhZDAwN2I1 OTgwZTEwHhcNMjUxMjE3MTkwMTQ1WhcNMjUxMjE4MTkwMTQ1WjAzMTEwLwYDVQQD EyhiOTdmYjY4ZWRjNDc5NGVjZTYxM2I5MTU5ZDkzZTU0NjUyYTYzYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzQztm58vUdgzoWkKtqdYLc+Q5s1 7pYrMc4XQ3xreLxHSc4C/Pi69d/9h3T8ggz+mASd/1t4+X7vC6hkmUlLFnCYQcBS CS0gAF+dolA0/MmKCOwJ6PfXK4FNJdc86kQ+d+HDi147OsaLJ9h2Jc8p8EMMgom3 ptDA0I+pHpOfDX+hUYj1a/z8OwuXHljOAR5CJrqr1zpL9rH6E1WxBHB+RpOWGzh4 tXzSI5E6magiBGYcL+6KJIx6dbtWisYv3ngQqen+RjFjrtS52hwklg5FbgH2Ba4g zJjOeXgODgZ9urBsuTPL6sqFsNpVfZxkdlbm9CNdKHrMiIn+a3sGGs7MfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl/to7cR5Ts5hO5FZ2T5UZSpjxmMB8GA1UdIwQY MBaAFIoyTkznaTm021fV01DCrQB7WYDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzIt NjJiYzhmYzc1NWRkLzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzItNjJiYzhmYzc1NWRk LzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkq2ai/Uy eF9zl/5GKWMu/nS6RZLa+mbxDn4JZt9QtmtgSy3cmYQSnnCFHQn/VUCg0zGuztbn Go1LNJqfYGsFYHOvN1ZEVGObW/wuPsxZnFI2UCKt7gn2R0oWSf9Fn52RcfmSCcTT IYhrMPc8WudEx03VDE5pqGF8C24Nm/r3doOgktDb9CsFb0tf81fSxkH4P+rq4mWC uiBqETNU/bJdxZjLC9g16RmEKvdZK3ASoPKFSpBMg8dsP5XIsivQpzxdkyOt1CI6 ed3BgPrYulhpzFfzDjf+3j+kodN68vkdf8SAzpk/E0J4C0MN+xBAaBIbHm7IF8yI DTpND1YRSdqTzg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:11 2025 by rpki-client