This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json) Hash identifier: R9ZgCoHvWRmpx54YZUDJOxmIAzhROr7oQWMa3LjMbEc= Subject key identifier: 41:8F:3E:EA:C4:2F:4B:15:AA:CB:66:DF:C3:98:6D:19:BD:FF:7B:2C Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Certificate serial: 019B3DFE3CE4737933FDD5693D1F1E10ABAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft Manifest number: 0F6F Signing time: Sat 20 Dec 2025 23:00:30 +0000 Manifest this update: Sat 20 Dec 2025 23:00:30 +0000 Manifest next update: Sun 21 Dec 2025 23:00:30 +0000 Files and hashes: 1: 2aoaMcLeoHsRYMrDwR7GYBYfV38.roa (hash: jssRFClKzuPy7Bnng6eFWBTeCatBaCf3VHUaJ2d4iI0=) 2: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=) 3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: n9JjNuFbGnUaeWYd0Letbura/tju5nZvL2Hd0ZBXmR0=) 4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:3c:e4:73:79:33:fd:d5:69:3d:1f:1e:10:ab:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Validity Not Before: Dec 20 23:00:30 2025 GMT Not After : Dec 21 23:00:30 2025 GMT Subject: CN=418f3eeac42f4b15aacb66dfc3986d19bdff7b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:d7:34:fa:ed:68:4c:07:53:30:6d:50:aa: 2b:11:45:9b:81:c3:0d:8f:78:24:d4:35:0f:3b:a9: ac:fe:50:61:cf:b7:2a:d3:fc:fd:90:00:90:9c:34: 60:38:05:4a:ca:81:fd:c9:74:f9:19:43:81:13:ff: 2c:69:b8:cb:15:4a:7c:fa:e9:31:35:8e:4f:93:59: 70:fe:e9:3a:ce:d8:7f:66:de:9e:8a:a3:05:97:bc: 76:6f:a6:1f:26:75:ff:72:d0:85:1f:2e:fa:c0:45: 11:38:3e:21:25:d0:12:53:9e:10:6d:2b:f7:a3:cc: bc:c7:e5:19:e8:71:6a:56:6f:cb:6b:66:8f:17:0d: 86:a1:e4:62:e0:6c:8e:34:0e:61:07:0b:37:a4:a2: 99:ac:19:cb:1c:6b:14:ee:e4:c3:5e:73:70:63:f3: 5a:2f:1a:87:f8:cb:48:88:48:cd:f0:e0:07:78:00: e9:9c:e0:65:24:a5:11:14:41:b6:8d:3d:b7:89:44: 4b:5d:37:33:0f:b2:9b:f7:40:67:40:7d:6e:e8:60: 21:4c:51:38:6f:34:50:c1:f6:47:04:a7:67:ec:ed: 7e:fa:59:36:07:a4:2d:84:06:44:3a:08:a4:ae:7e: 54:ce:25:ac:cd:fc:cc:54:ce:c4:6b:27:60:5a:9e: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8F:3E:EA:C4:2F:4B:15:AA:CB:66:DF:C3:98:6D:19:BD:FF:7B:2C X509v3 Authority Key Identifier: keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:67:a8:e6:19:0f:86:0e:91:56:c5:47:2c:52:63:42:3d:e3: ca:dd:60:bc:61:05:4d:4c:28:4e:5f:f6:16:0a:fb:80:2b:90: c9:90:ad:ec:a8:ef:b5:ad:b3:19:cb:53:d1:eb:2f:6d:b2:df: fd:08:2a:54:03:ae:0b:bf:94:94:6f:53:12:f4:0b:f0:29:34: 64:07:d7:9d:22:f1:ba:a6:b3:d9:68:18:d0:7d:19:34:bf:56: 20:11:4b:66:a5:9c:09:b8:24:c6:93:71:df:35:ea:83:8e:1d: 61:fc:72:fa:a2:28:55:5b:32:9d:e4:29:fd:c2:ce:96:ef:81: 68:2d:98:af:f0:ed:d7:46:8d:fd:e8:68:65:5b:7b:26:78:29: db:4f:6f:4b:1b:18:27:d0:23:9c:15:a4:77:f0:f8:f0:d9:ba: 0d:a1:65:37:58:95:fb:7b:6a:67:8e:5f:c5:df:2a:a5:a6:16: e0:8b:88:80:47:8b:dc:16:45:f7:4d:2d:ba:18:f9:d3:6b:e9: 60:34:9b:c0:96:6a:71:4b:f9:06:ea:b2:aa:bd:1b:ad:c7:57: c5:66:a8:aa:a4:96:07:bc:64:32:87:8f:33:e0:d2:54:42:b9: 78:b1:0a:4b:54:ea:61:9f:b0:be:88:46:d4:9b:b8:48:3b:a0: ff:1b:22:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/jzkc3kz/dVpPR8eEKuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1 Y2IxN2UwHhcNMjUxMjIwMjMwMDMwWhcNMjUxMjIxMjMwMDMwWjAzMTEwLwYDVQQD Eyg0MThmM2VlYWM0MmY0YjE1YWFjYjY2ZGZjMzk4NmQxOWJkZmY3YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnbXNPrtaEwHUzBtUKorEUWbgcMN j3gk1DUPO6ms/lBhz7cq0/z9kACQnDRgOAVKyoH9yXT5GUOBE/8sabjLFUp8+ukx NY5Pk1lw/uk6zth/Zt6eiqMFl7x2b6YfJnX/ctCFHy76wEUROD4hJdASU54QbSv3 o8y8x+UZ6HFqVm/La2aPFw2GoeRi4GyONA5hBws3pKKZrBnLHGsU7uTDXnNwY/Na LxqH+MtIiEjN8OAHeADpnOBlJKURFEG2jT23iURLXTczD7Kb90BnQH1u6GAhTFE4 bzRQwfZHBKdn7O1++lk2B6QthAZEOgikrn5UziWszfzMVM7EaydgWp778QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGPPurEL0sVqstm38OYbRm9/3ssMB8GA1UdIwQY MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct NGQxNmJlOWJhMTMyLzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWeo5hkP hg6RVsVHLFJjQj3jyt1gvGEFTUwoTl/2Fgr7gCuQyZCt7Kjvta2zGctT0esvbbLf /QgqVAOuC7+UlG9TEvQL8Ck0ZAfXnSLxuqaz2WgY0H0ZNL9WIBFLZqWcCbgkxpNx 3zXqg44dYfxy+qIoVVsyneQp/cLOlu+BaC2Yr/Dt10aN/ehoZVt7Jngp209vSxsY J9AjnBWkd/D48Nm6DaFlN1iV+3tqZ45fxd8qpaYW4IuIgEeL3BZF900tuhj502vp YDSbwJZqcUv5Buqyqr0brcdXxWaoqqSWB7xkMoePM+DSVEK5eLEKS1TqYZ+wvohG 1Ju4SDug/xsiJw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:40 2025 by rpki-client