This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft File: ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json) Hash identifier: OCYF9PohwdvXCU95wQQnaB5XDcvJdBfejXUom7Q3pT0= Subject key identifier: C5:70:9B:B7:A9:50:22:F5:B4:28:49:83:45:CC:E0:4B:C4:91:E0:32 Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be Certificate serial: 019B53AAC733A99F6DE9216940BA45DD07D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft Manifest number: 0806 Signing time: Thu 25 Dec 2025 04:00:59 +0000 Manifest this update: Thu 25 Dec 2025 04:00:59 +0000 Manifest next update: Fri 26 Dec 2025 04:00:59 +0000 Files and hashes: 1: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: Ig4FKSDEbIv5Fp1RCyEriHKhbIZ2DU0anaPkoW/gNH8=) 2: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (hash: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:c7:33:a9:9f:6d:e9:21:69:40:ba:45:dd:07:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be Validity Not Before: Dec 25 04:00:59 2025 GMT Not After : Dec 26 04:00:59 2025 GMT Subject: CN=c5709bb7a95022f5b428498345cce04bc491e032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:38:a8:46:71:b6:fe:cf:ae:75:e0:a8:eb: 98:cf:ce:88:ce:3d:1a:56:6d:f4:db:b8:29:a1:50: 3f:cb:a0:27:76:d1:7d:01:34:bb:34:6b:53:d8:e4: a4:6d:69:3c:a3:cf:75:5e:cd:f4:61:35:74:09:6b: 60:c3:e5:5e:6c:0c:27:63:04:5b:40:05:6d:24:a8: ef:88:e4:a6:ee:84:4f:25:a2:7a:b4:3b:eb:26:f0: 01:92:52:84:08:c7:17:86:3e:71:b8:6e:a1:98:36: e4:bc:b7:34:23:e5:1c:81:0e:31:32:89:4b:fc:f4: 44:ba:e2:6a:0c:ae:88:28:f5:da:87:bd:21:e6:80: c8:5e:03:e6:93:a5:ea:bd:7d:2a:9c:4c:18:0f:2f: fb:79:c5:df:84:59:22:45:c6:ec:b8:ec:01:d6:b0: 61:69:aa:1d:24:c3:d7:ce:ba:c4:b5:72:96:d2:81: 93:47:96:fa:e2:4e:2d:98:f7:f9:50:42:9a:7f:f7: 4e:ea:3e:9e:29:49:bc:e1:59:df:f7:e3:d8:59:dd: d8:bc:ac:af:8e:7e:02:0e:e7:2b:8d:79:06:9c:b1: 1e:98:13:7e:5a:00:dd:0e:d0:cd:47:4f:55:ac:36: 87:d6:ac:03:56:f1:a0:1d:76:e0:32:f8:07:d5:32: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:70:9B:B7:A9:50:22:F5:B4:28:49:83:45:CC:E0:4B:C4:91:E0:32 X509v3 Authority Key Identifier: keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:48:8a:66:30:9c:c7:b2:66:98:65:07:c5:49:5b:fb:5b:e1: 44:4f:1d:54:c2:45:7d:57:fa:0b:0c:64:d6:8d:c6:45:1e:d7: 25:42:7f:dd:ec:6a:f5:7a:72:36:c3:c4:b1:58:58:27:8e:6d: a1:da:15:d6:b9:81:fc:1c:eb:a9:35:e3:71:2a:eb:1f:d2:62: b0:db:a8:55:4c:d6:57:d3:12:52:80:4d:0b:39:1c:6e:02:ee: 31:af:d8:ed:2d:27:e5:2c:64:02:fe:ce:9f:c6:cc:7f:e1:0c: a9:36:66:81:5d:28:9c:20:3b:ca:a8:f6:39:a7:9c:34:b5:da: 84:33:bf:8f:b5:af:2e:0a:31:23:d4:b5:19:93:90:60:0b:0a: fe:e9:1c:f3:5a:e8:2a:bb:4d:4a:f0:8a:b8:45:15:da:84:51: f8:8e:b6:9d:a3:54:11:b1:9c:1e:f6:01:3d:37:27:30:6f:7d: 7b:cc:9a:f9:6d:e8:35:db:0e:13:9f:80:9c:99:ff:da:da:4c: e1:1c:5e:a8:dc:fc:31:23:73:b8:2e:96:68:f7:93:73:41:5f: a7:97:8f:16:e2:87:28:da:cd:db:00:ca:db:97:27:7f:30:c7: 15:1e:cb:d1:ec:04:14:90:df:f3:51:6b:e3:01:4c:06:d5:53: 01:15:b7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqsczqZ9t6SFpQLpF3QfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzRhN2EzZmViYWZiYzg0MDBhYmUxZGMxMmYyMmM2YzFl OGE1YmUwHhcNMjUxMjI1MDQwMDU5WhcNMjUxMjI2MDQwMDU5WjAzMTEwLwYDVQQD EyhjNTcwOWJiN2E5NTAyMmY1YjQyODQ5ODM0NWNjZTA0YmM0OTFlMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mI4qEZxtv7PrnXgqOuYz86Izj0a Vm3027gpoVA/y6AndtF9ATS7NGtT2OSkbWk8o891Xs30YTV0CWtgw+VebAwnYwRb QAVtJKjviOSm7oRPJaJ6tDvrJvABklKECMcXhj5xuG6hmDbkvLc0I+UcgQ4xMolL /PREuuJqDK6IKPXah70h5oDIXgPmk6XqvX0qnEwYDy/7ecXfhFkiRcbsuOwB1rBh aaodJMPXzrrEtXKW0oGTR5b64k4tmPf5UEKaf/dO6j6eKUm84Vnf9+PYWd3YvKyv jn4CDucrjXkGnLEemBN+WgDdDtDNR09VrDaH1qwDVvGgHXbgMvgH1TLkBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVwm7epUCL1tChJg0XM4EvEkeAyMB8GA1UdIwQY MBaAFIo0p6P+uvvIQAq+HcEvIsbB6KW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMt YjYyOWJiNDc2MmYwLzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMtYjYyOWJiNDc2MmYw LzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEiKZjCc x7JmmGUHxUlb+1vhRE8dVMJFfVf6Cwxk1o3GRR7XJUJ/3exq9XpyNsPEsVhYJ45t odoV1rmB/BzrqTXjcSrrH9JisNuoVUzWV9MSUoBNCzkcbgLuMa/Y7S0n5SxkAv7O n8bMf+EMqTZmgV0onCA7yqj2OaecNLXahDO/j7WvLgoxI9S1GZOQYAsK/ukc81ro KrtNSvCKuEUV2oRR+I62naNUEbGcHvYBPTcnMG99e8ya+W3oNdsOE5+AnJn/2tpM 4RxeqNz8MSNzuC6WaPeTc0Ffp5ePFuKHKNrN2wDK25cnfzDHFR7L0ewEFJDf81Fr 4wFMBtVTARW31g== -----END CERTIFICATE-----Generated at Thu Dec 25 07:23:04 2025 by rpki-client