This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json) Hash identifier: S5fZ0UB6rNbPl3K83ez8NVQZfLh/vhkroMsjbytYP7U= Subject key identifier: 4A:9A:6F:DA:58:53:E4:EA:0F:15:FF:04:06:AA:EA:5C:C5:CC:00:97 Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d Certificate serial: 019B410026EE5889F0CAC3BAAA1A93A8AC53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft Manifest number: 16EC Signing time: Sun 21 Dec 2025 13:01:27 +0000 Manifest this update: Sun 21 Dec 2025 13:01:27 +0000 Manifest next update: Mon 22 Dec 2025 13:01:27 +0000 Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: 9Ir3qPl7h6KJA821bRMW9I3o12ARIBx4WThey1FkvyE=) 2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:26:ee:58:89:f0:ca:c3:ba:aa:1a:93:a8:ac:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d Validity Not Before: Dec 21 13:01:27 2025 GMT Not After : Dec 22 13:01:27 2025 GMT Subject: CN=4a9a6fda5853e4ea0f15ff0406aaea5cc5cc0097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:c9:c9:ad:8a:41:2e:ca:c2:c2:68:12:a3: fd:07:e7:2c:3c:e8:58:03:45:75:d7:b9:c1:34:b8: 0d:d4:a6:c4:80:89:fe:d5:51:82:b2:96:59:d1:ca: a8:e9:de:f6:14:49:03:bd:d4:f3:38:dc:32:bb:61: f8:ff:1f:f9:ce:9e:cb:19:cc:67:ad:fa:3a:a4:c8: 53:b2:ff:74:40:1a:d1:4a:b5:f7:49:da:1b:3c:50: 3a:74:38:8b:bf:fd:71:7d:9d:b2:e4:56:32:e1:6f: 04:e1:18:2f:5b:88:98:07:9c:8c:0a:41:b8:98:81: c8:00:ab:58:ca:2e:86:28:2b:ef:e9:82:78:64:e4: 4d:f2:e9:52:c8:c5:ee:6d:3d:7f:42:be:0e:70:7f: 7b:f8:26:1f:35:b8:4c:19:48:64:52:a2:53:fb:c1: 88:91:84:2e:b1:e1:36:3f:25:91:63:32:fb:e5:b8: e6:a9:e0:0e:08:f8:53:a8:24:50:b1:aa:e0:f1:75: d6:cc:be:3c:28:46:a1:ba:a1:fa:d4:31:81:91:36: db:fe:46:ce:f5:a8:42:6f:42:f4:44:fe:ab:b5:8e: e3:3c:b7:44:62:0d:b9:6a:1c:3e:48:75:05:5a:bc: 0f:8a:00:52:b0:10:64:41:4b:2d:c2:68:98:07:16: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:6F:DA:58:53:E4:EA:0F:15:FF:04:06:AA:EA:5C:C5:CC:00:97 X509v3 Authority Key Identifier: keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2a:c1:0d:96:97:09:ef:2d:80:cf:71:a0:30:f7:70:da:af: f3:04:b7:fa:78:c1:9f:9e:09:00:93:74:87:f6:48:3e:75:11: f5:d8:ce:e9:52:80:21:24:28:93:b4:a3:0c:09:d7:2a:7b:24: 2f:f3:c9:01:6d:4e:3c:4f:2a:48:6b:f3:b8:59:ae:fc:4a:82: 89:73:a7:5f:1b:13:b7:48:e2:fd:d9:7a:b8:d3:0c:2e:d7:3a: c2:46:34:35:60:e8:3b:14:3e:83:71:bd:11:17:ab:f7:ee:18: 20:61:05:2a:0f:82:c0:74:26:aa:c6:38:77:ce:3c:ff:47:e7: f7:ee:15:8c:10:98:a8:7c:76:a3:55:a0:ba:ee:20:a7:56:82: 5e:9c:b5:93:d0:98:c8:12:ef:2f:15:a9:42:c5:d9:1b:d5:2e: 46:14:4b:32:ad:b7:6f:d2:ff:6b:71:64:8d:28:f7:c7:f0:a1: a6:c2:75:37:94:ed:7e:35:8f:0e:90:db:69:44:fc:2a:41:70: ac:74:ab:f6:f4:eb:5b:d1:09:f1:5a:b5:c0:c7:7a:42:e2:da: 00:01:fd:38:b6:a3:b7:d0:87:b4:53:dc:e0:cc:0e:30:09:db: 0f:a2:4a:90:9f:3e:1c:e9:16:d2:e0:b8:52:dc:4b:50:59:eb: 8c:6c:ab:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBACbuWInwysO6qhqTqKxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh YmZiOGQwHhcNMjUxMjIxMTMwMTI3WhcNMjUxMjIyMTMwMTI3WjAzMTEwLwYDVQQD Eyg0YTlhNmZkYTU4NTNlNGVhMGYxNWZmMDQwNmFhZWE1Y2M1Y2MwMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqprJya2KQS7KwsJoEqP9B+csPOhY A0V117nBNLgN1KbEgIn+1VGCspZZ0cqo6d72FEkDvdTzONwyu2H4/x/5zp7LGcxn rfo6pMhTsv90QBrRSrX3SdobPFA6dDiLv/1xfZ2y5FYy4W8E4RgvW4iYB5yMCkG4 mIHIAKtYyi6GKCvv6YJ4ZORN8ulSyMXubT1/Qr4OcH97+CYfNbhMGUhkUqJT+8GI kYQuseE2PyWRYzL75bjmqeAOCPhTqCRQsarg8XXWzL48KEahuqH61DGBkTbb/kbO 9ahCb0L0RP6rtY7jPLdEYg25ahw+SHUFWrwPigBSsBBkQUstwmiYBxaQSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqab9pYU+TqDxX/BAaq6lzFzACXMB8GA1UdIwQY MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt NjYwNzc4MDk5YjNkLzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASirBDZaX Ce8tgM9xoDD3cNqv8wS3+njBn54JAJN0h/ZIPnUR9djO6VKAISQok7SjDAnXKnsk L/PJAW1OPE8qSGvzuFmu/EqCiXOnXxsTt0ji/dl6uNMMLtc6wkY0NWDoOxQ+g3G9 ERer9+4YIGEFKg+CwHQmqsY4d848/0fn9+4VjBCYqHx2o1Wguu4gp1aCXpy1k9CY yBLvLxWpQsXZG9UuRhRLMq23b9L/a3FkjSj3x/ChpsJ1N5TtfjWPDpDbaUT8KkFw rHSr9vTrW9EJ8Vq1wMd6QuLaAAH9OLajt9CHtFPc4MwOMAnbD6JKkJ8+HOkW0uC4 UtxLUFnrjGyr2g== -----END CERTIFICATE-----Generated at Sun Dec 21 18:38:41 2025 by rpki-client