This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: a96efp/BsfbQH/XBEbNtcaQZWYog86emMfAB1VMjczw= Subject key identifier: 05:C9:31:57:41:E8:EA:6F:4F:95:76:8A:CF:CC:14:5B:2F:87:B7:1F Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B401C37FE7AB72E6CC775A7EA9031B393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 14D1 Signing time: Sun 21 Dec 2025 08:52:29 +0000 Manifest this update: Sun 21 Dec 2025 08:52:29 +0000 Manifest next update: Mon 22 Dec 2025 08:52:29 +0000 Files and hashes: 1: 1UHsPnht93cnjqacHzDZGozstlU.roa (hash: sn6UImS2sxFUQqqQ+ntyQ/sKctqCKvWxNyVg5LKfCSk=) 2: 9fBlTpzE1JBsgOrrxy7zfs5HX8k.roa (hash: pZfUWEYp7quP4c2uEiu9XQOEIJS1Fn2BIiWse8+7UWw=) 3: eNE1gKczXhaDFK6XnoGtDfRLu3c.roa (hash: cmDBhWAdX5HMQq+uTsDFnU6N/qjuh4ugnNLxR0oQNAg=) 4: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 2oq78Wy56mBDOGm/gwMznlo6IbGr6kUnnwFHH376T8w=) 5: m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa (hash: L1ifCZ/lpcCqhfhywoza60yVvKF8HYMbgjCFz4+qb5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:1c:37:fe:7a:b7:2e:6c:c7:75:a7:ea:90:31:b3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 21 08:52:29 2025 GMT Not After : Dec 22 08:52:29 2025 GMT Subject: CN=05c9315741e8ea6f4f95768acfcc145b2f87b71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:ed:eb:4e:67:97:7f:14:b0:6b:b0:ea:5d: 92:fd:59:ce:2c:2e:d2:2c:96:05:bd:ea:67:26:90: 52:6f:f1:00:b6:09:0f:a3:9d:72:5a:cc:75:df:fa: 45:70:f0:b6:e3:fd:a9:7e:f1:3e:9d:0e:6f:f9:da: 43:d6:4c:cb:5b:0b:d4:d1:7b:10:da:fd:0c:41:34: 5f:6f:11:9b:be:c2:b1:b9:56:fd:88:65:f1:48:90: f1:45:12:8e:f2:fe:29:a8:28:bc:c3:54:43:ed:14: 17:09:fe:b4:25:1e:b0:09:1f:42:da:5e:df:3c:7c: a2:52:8e:19:8d:1d:0e:e6:1e:b4:70:cf:e8:c6:5e: bf:7f:1a:27:47:e8:8a:38:ac:96:3a:8b:05:67:3a: 03:66:2f:6e:41:46:c4:c4:54:f1:78:02:e0:b7:57: 87:76:ac:97:81:80:f7:71:94:f8:72:ba:7a:5b:e4: 0c:e0:20:d7:0f:99:c1:be:7f:c9:c3:c2:80:89:4a: 64:15:50:74:f1:02:1a:7d:6c:1a:43:26:c9:ae:cc: 94:a6:26:16:90:44:ad:91:1d:10:42:d1:84:f8:6e: 4a:ea:bb:d3:e7:a8:d5:a6:4f:4f:bd:38:09:ef:d4: 78:e6:9a:43:b5:e0:bb:07:97:ce:23:e1:88:86:52: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C9:31:57:41:E8:EA:6F:4F:95:76:8A:CF:CC:14:5B:2F:87:B7:1F X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1b:bf:2a:56:0f:95:ba:5e:f0:99:a8:24:63:85:a4:7c:3c: b5:88:70:95:b3:c6:fe:02:23:40:6f:03:82:bc:25:f0:8e:0f: d6:27:9a:1e:93:e8:ca:9d:b2:d0:0b:11:55:7d:5e:98:3f:80: 7e:1b:72:d3:38:0d:d4:cc:bd:73:1e:d7:6e:62:5c:64:d3:96: 08:ae:ca:af:4e:f2:c5:4b:ab:47:bd:ad:b8:1f:58:48:ca:6e: 65:d8:33:1c:64:a4:a4:28:22:b9:3a:2c:88:47:2b:f5:06:c4: 9b:48:35:63:d3:31:23:c4:6b:cf:b5:36:27:26:23:32:54:5a: 50:20:f5:6c:7a:c0:46:81:6b:aa:f0:f6:a9:ad:0b:24:6c:f5: f1:ba:1f:d7:38:8f:7c:01:dc:14:19:c1:4f:a8:8c:c8:d3:22: 08:2e:62:70:32:54:90:0f:b3:11:13:1e:45:68:f3:be:f2:86: 91:6c:81:8b:bb:d2:d8:9c:41:87:ba:44:08:28:b8:f2:b5:72: d4:c3:ba:07:73:cf:5c:91:b8:73:8b:1c:f7:be:04:c6:a8:1c: 58:bd:78:db:ee:64:63:07:73:6d:f7:69:23:f1:5c:8d:19:c9: bd:69:24:9c:60:9c:c4:50:d7:a1:29:94:ef:e6:07:07:f6:dd: 80:dc:3b:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAHDf+ercubMd1p+qQMbOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIxMDg1MjI5WhcNMjUxMjIyMDg1MjI5WjAzMTEwLwYDVQQD EygwNWM5MzE1NzQxZThlYTZmNGY5NTc2OGFjZmNjMTQ1YjJmODdiNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjLt605nl38UsGuw6l2S/VnOLC7S LJYFvepnJpBSb/EAtgkPo51yWsx13/pFcPC24/2pfvE+nQ5v+dpD1kzLWwvU0XsQ 2v0MQTRfbxGbvsKxuVb9iGXxSJDxRRKO8v4pqCi8w1RD7RQXCf60JR6wCR9C2l7f PHyiUo4ZjR0O5h60cM/oxl6/fxonR+iKOKyWOosFZzoDZi9uQUbExFTxeALgt1eH dqyXgYD3cZT4crp6W+QM4CDXD5nBvn/Jw8KAiUpkFVB08QIafWwaQybJrsyUpiYW kEStkR0QQtGE+G5K6rvT56jVpk9PvTgJ79R45ppDteC7B5fOI+GIhlIPlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXJMVdB6OpvT5V2is/MFFsvh7cfMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBu/KlYP lbpe8JmoJGOFpHw8tYhwlbPG/gIjQG8Dgrwl8I4P1ieaHpPoyp2y0AsRVX1emD+A fhty0zgN1My9cx7XbmJcZNOWCK7Kr07yxUurR72tuB9YSMpuZdgzHGSkpCgiuTos iEcr9QbEm0g1Y9MxI8Rrz7U2JyYjMlRaUCD1bHrARoFrqvD2qa0LJGz18bof1ziP fAHcFBnBT6iMyNMiCC5icDJUkA+zERMeRWjzvvKGkWyBi7vS2JxBh7pECCi48rVy 1MO6B3PPXJG4c4sc974ExqgcWL142+5kYwdzbfdpI/FcjRnJvWkknGCcxFDXoSmU 7+YHB/bdgNw7Rw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:48:05 2025 by rpki-client