This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json) Hash identifier: ocyR5bRoyRs9IefQ53q1p3sW/dFfgrflBZY5351UIvU= Subject key identifier: 9A:94:95:4C:31:52:23:39:E0:D6:1D:4C:60:F2:58:DE:83:72:45:21 Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4 Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4 Certificate serial: 019B53AAFAFE0C0957D60EDDAF2042670AFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft Manifest number: 03D8 Signing time: Thu 25 Dec 2025 04:01:12 +0000 Manifest this update: Thu 25 Dec 2025 04:01:12 +0000 Manifest next update: Fri 26 Dec 2025 04:01:12 +0000 Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: VkIwwVVKLRuxe0zsPBixXOTSn2igOhYTJzHop51s7ws=) 2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:fa:fe:0c:09:57:d6:0e:dd:af:20:42:67:0a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4 Validity Not Before: Dec 25 04:01:12 2025 GMT Not After : Dec 26 04:01:12 2025 GMT Subject: CN=9a94954c31522339e0d61d4c60f258de83724521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:75:16:1e:ed:2c:db:03:50:61:9b:7c:4f: e4:4a:5a:73:a9:01:a3:b1:94:07:0e:e3:f0:c8:97: fe:bf:04:69:b7:c3:2c:bd:3a:20:fd:05:0b:f2:f0: 22:87:91:f6:26:fc:c7:f7:0c:7e:bb:bc:0b:cc:a8: b4:dd:bb:3e:09:5d:69:0e:48:85:f0:d9:d7:e1:83: c5:2e:e1:ca:c6:32:6d:89:f5:a9:3d:f7:89:21:f5: c8:c3:4d:aa:5e:65:d6:28:40:31:0b:41:e1:24:6b: e1:8c:8d:f8:88:9a:9f:6d:ff:fb:7e:9b:06:c9:c5: 67:71:25:07:c4:b6:13:1f:af:36:15:52:46:0a:1e: d0:68:51:33:62:52:1e:72:c1:04:77:39:9e:5d:f6: 96:9b:85:54:cc:bd:e0:e7:0c:27:8e:5d:15:05:16: 7f:af:5a:3e:b8:84:3a:06:d9:8e:c6:72:85:9f:48: f0:96:c7:9a:db:19:d6:c5:4c:44:34:2b:38:34:2d: 4c:ca:a9:33:69:ff:e6:f6:b6:19:55:fc:e0:87:ba: 83:e2:b4:03:f8:12:2d:3a:97:6f:32:11:98:bc:90: 52:8f:a7:3c:54:36:e1:07:8e:39:8c:7b:87:55:05: e1:ee:0c:fc:46:18:62:f5:56:a4:88:e8:12:40:04: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:94:95:4C:31:52:23:39:E0:D6:1D:4C:60:F2:58:DE:83:72:45:21 X509v3 Authority Key Identifier: keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d2:14:69:e1:d6:b8:dc:c6:29:f9:54:5d:47:bd:57:a2:a9: c9:60:11:92:78:41:b8:b1:0e:31:e1:21:4c:6c:8d:22:43:a7: a2:d2:03:4f:6e:d8:83:09:fb:0b:22:03:47:2b:08:6b:66:2e: a5:b8:74:0a:7f:35:22:32:42:34:d9:c7:31:ae:76:a8:cb:a3: 43:72:71:8f:53:03:f1:a1:be:4a:82:35:33:3f:b8:f5:2a:5d: 70:3d:9c:a5:8e:b9:70:df:25:11:a8:16:dc:36:30:32:01:49: 0f:63:b4:14:9a:2a:4a:c7:84:ca:d8:64:10:ab:10:23:55:3c: 04:53:9c:ad:ad:a8:b5:fe:39:af:91:c9:aa:f1:f0:36:68:d1: ee:d7:3d:73:c3:e9:bf:ba:38:bf:1d:8e:d3:80:a5:cf:c6:dc: 5a:43:5c:81:4f:62:f2:fd:89:89:46:29:0c:30:6c:46:b3:c0: fb:74:45:2e:89:b9:1a:3b:b7:fb:14:3e:ed:1f:3d:97:21:79: 8f:86:de:5e:86:cf:d1:d5:2e:bd:18:94:86:40:a9:12:d8:bf: 0c:05:b0:46:d5:85:97:44:ed:f2:11:ee:9b:62:6e:d3:5e:b6: af:d2:58:3e:b9:f2:73:ca:0e:0e:98:18:11:94:9a:cb:67:3c: 09:65:25:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqvr+DAlX1g7dryBCZwr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwN2U5MGQ2MmRlMmM3MjdjZDQ1MzlhMmYwNzBjNGU5MWRm MzJiYjQwHhcNMjUxMjI1MDQwMTEyWhcNMjUxMjI2MDQwMTEyWjAzMTEwLwYDVQQD Eyg5YTk0OTU0YzMxNTIyMzM5ZTBkNjFkNGM2MGYyNThkZTgzNzI0NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvud1Fh7tLNsDUGGbfE/kSlpzqQGj sZQHDuPwyJf+vwRpt8MsvTog/QUL8vAih5H2JvzH9wx+u7wLzKi03bs+CV1pDkiF 8NnX4YPFLuHKxjJtifWpPfeJIfXIw02qXmXWKEAxC0HhJGvhjI34iJqfbf/7fpsG ycVncSUHxLYTH682FVJGCh7QaFEzYlIecsEEdzmeXfaWm4VUzL3g5wwnjl0VBRZ/ r1o+uIQ6BtmOxnKFn0jwlsea2xnWxUxENCs4NC1Myqkzaf/m9rYZVfzgh7qD4rQD +BItOpdvMhGYvJBSj6c8VDbhB445jHuHVQXh7gz8Rhhi9VakiOgSQARGfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqUlUwxUiM54NYdTGDyWN6DckUhMB8GA1UdIwQY MBaAFCB+kNYt4scnzUU5ovBwxOkd8yu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYt ZmJlNjhmZjYyN2IyLzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYtZmJlNjhmZjYyN2Iy LzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNIUaeHW uNzGKflUXUe9V6KpyWARknhBuLEOMeEhTGyNIkOnotIDT27Ygwn7CyIDRysIa2Yu pbh0Cn81IjJCNNnHMa52qMujQ3Jxj1MD8aG+SoI1Mz+49SpdcD2cpY65cN8lEagW 3DYwMgFJD2O0FJoqSseEythkEKsQI1U8BFOcra2otf45r5HJqvHwNmjR7tc9c8Pp v7o4vx2O04Clz8bcWkNcgU9i8v2JiUYpDDBsRrPA+3RFLom5Gju3+xQ+7R89lyF5 j4beXobP0dUuvRiUhkCpEti/DAWwRtWFl0Tt8hHum2Ju0162r9JYPrnyc8oODpgY EZSay2c8CWUlBw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:50:27 2025 by rpki-client