This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json) Hash identifier: tQdZCXqlAU8wC+pOPot0jPNtXTMBlw3W/fXKaLaD1j0= Subject key identifier: D8:E4:EC:D1:0D:E3:B5:3E:E8:E6:5F:A5:FB:FD:38:AA:8C:EA:6F:39 Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4 Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4 Certificate serial: 019B4438E9048AD5E970700E8AF9CD6AA267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft Manifest number: 03D0 Signing time: Mon 22 Dec 2025 04:02:18 +0000 Manifest this update: Mon 22 Dec 2025 04:02:18 +0000 Manifest next update: Tue 23 Dec 2025 04:02:18 +0000 Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: /ES3Z+h/BD0fznUD9iDpZs5VBjegZJXGCN8swwR6CVI=) 2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:e9:04:8a:d5:e9:70:70:0e:8a:f9:cd:6a:a2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4 Validity Not Before: Dec 22 04:02:18 2025 GMT Not After : Dec 23 04:02:18 2025 GMT Subject: CN=d8e4ecd10de3b53ee8e65fa5fbfd38aa8cea6f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:dd:6c:ac:36:22:ad:59:94:14:48:2b:f3: f2:aa:4a:09:2d:f3:c6:e2:77:dd:33:55:1b:30:b1: 0c:ee:c6:0e:15:bd:8d:e6:88:9a:e7:17:88:f5:69: 9e:0e:57:4c:2e:3f:bc:72:9d:f1:07:ed:24:f5:17: a9:a3:ff:6c:c7:64:e1:5b:e5:16:ba:3f:1a:6c:6c: 54:61:8f:ac:3e:0e:a3:fc:c0:d5:34:52:7a:8f:05: 57:7c:cf:65:fb:42:f1:a6:92:de:25:21:0a:f5:d3: dd:5b:c5:8d:e1:b2:db:61:88:b0:3d:b0:86:38:5f: 32:b3:2e:49:0d:39:e6:f1:e2:d7:da:23:b4:6a:59: ce:e6:85:5f:45:b6:ee:16:b4:31:32:15:cb:3e:a2: 1a:70:c0:dd:14:f3:b0:83:42:67:39:d7:e3:d7:8d: 65:4e:ca:2a:70:6d:d8:ff:fc:1f:40:ae:01:f0:26: 0a:cd:98:ea:b9:72:84:cb:83:05:5c:7e:61:e6:e6: f1:92:16:a8:52:7f:42:17:09:b2:8d:ae:e5:47:c6: 91:c5:da:11:28:57:f2:25:76:8f:9e:91:4d:ff:ea: e6:8b:c8:9c:af:50:ce:9b:bc:cf:5e:4c:4a:37:6b: 59:a1:64:16:03:4f:fb:e0:bf:02:32:90:4e:ad:2d: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:EC:D1:0D:E3:B5:3E:E8:E6:5F:A5:FB:FD:38:AA:8C:EA:6F:39 X509v3 Authority Key Identifier: keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:28:2f:e7:0c:9e:3a:bf:3b:a5:93:36:11:a3:b0:65:e6:ce: 42:87:85:9d:38:16:44:39:24:1b:fa:f0:53:10:bc:c4:4f:18: 15:43:89:3e:d5:3a:77:2a:2f:f0:3d:88:42:52:1f:c1:32:d5: 58:1a:c9:41:99:a4:d3:21:b8:fa:e6:da:c1:09:ea:98:4b:b8: b4:34:2f:9a:8e:9d:d6:db:5c:7b:1f:8c:6f:f8:43:b8:ae:c4: 2a:ff:a4:df:b9:41:59:9f:fa:92:37:c4:0b:76:b0:1d:e2:f7: 2c:b9:08:14:2a:c3:5f:7c:e3:6f:07:d3:80:1f:85:f1:25:9d: c3:6c:b2:06:80:c8:a9:d1:be:64:2e:69:67:4f:a9:b7:f2:79: 64:eb:7d:6d:e6:73:81:f6:06:20:f2:77:85:9a:51:ae:60:08: 7a:0e:d7:6f:2d:88:a0:5c:25:f3:7c:f9:5f:8f:0f:a4:9d:a3: 1d:30:e8:b0:5a:82:ff:29:06:21:54:83:cc:77:7e:48:3c:c6: 90:12:dd:17:4a:0f:0e:44:14:55:0b:a3:e3:01:9a:27:2e:6d: 11:75:4e:e5:1f:5d:d2:41:df:82:84:57:d2:04:d7:51:7d:d6: d6:3f:23:ba:5d:71:1d:cd:40:55:ed:6e:2d:ba:d8:04:2d:e6: c7:48:e9:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOOkEitXpcHAOivnNaqJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwN2U5MGQ2MmRlMmM3MjdjZDQ1MzlhMmYwNzBjNGU5MWRm MzJiYjQwHhcNMjUxMjIyMDQwMjE4WhcNMjUxMjIzMDQwMjE4WjAzMTEwLwYDVQQD EyhkOGU0ZWNkMTBkZTNiNTNlZThlNjVmYTVmYmZkMzhhYThjZWE2ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvzdbKw2Iq1ZlBRIK/PyqkoJLfPG 4nfdM1UbMLEM7sYOFb2N5oia5xeI9WmeDldMLj+8cp3xB+0k9Repo/9sx2ThW+UW uj8abGxUYY+sPg6j/MDVNFJ6jwVXfM9l+0LxppLeJSEK9dPdW8WN4bLbYYiwPbCG OF8ysy5JDTnm8eLX2iO0alnO5oVfRbbuFrQxMhXLPqIacMDdFPOwg0JnOdfj141l TsoqcG3Y//wfQK4B8CYKzZjquXKEy4MFXH5h5ubxkhaoUn9CFwmyja7lR8aRxdoR KFfyJXaPnpFN/+rmi8icr1DOm7zPXkxKN2tZoWQWA0/74L8CMpBOrS1T2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjk7NEN47U+6OZfpfv9OKqM6m85MB8GA1UdIwQY MBaAFCB+kNYt4scnzUU5ovBwxOkd8yu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYt ZmJlNjhmZjYyN2IyLzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yNGUzZDAtYjU1Ni00ODg4LTlmNmYtZmJlNjhmZjYyN2Iy LzEvSUg2UTFpM2l4eWZOUlRtaThIREU2UjN6SzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwygv5wye Or87pZM2EaOwZebOQoeFnTgWRDkkG/rwUxC8xE8YFUOJPtU6dyov8D2IQlIfwTLV WBrJQZmk0yG4+ubawQnqmEu4tDQvmo6d1ttcex+Mb/hDuK7EKv+k37lBWZ/6kjfE C3awHeL3LLkIFCrDX3zjbwfTgB+F8SWdw2yyBoDIqdG+ZC5pZ0+pt/J5ZOt9beZz gfYGIPJ3hZpRrmAIeg7Xby2IoFwl83z5X48PpJ2jHTDosFqC/ykGIVSDzHd+SDzG kBLdF0oPDkQUVQuj4wGaJy5tEXVO5R9d0kHfgoRX0gTXUX3W1j8jul1xHc1AVe1u LbrYBC3mx0jpKg== -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:14 2025 by rpki-client