This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json) Hash identifier: 2usMeT+uAL9p0dK7Toa8fhoGVzVHhhme5kHPI2i2lkw= Subject key identifier: 9B:C8:FC:97:96:F1:75:04:48:46:6B:C8:64:6E:B1:14:8F:14:B5:2F Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08 Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108 Certificate serial: 019B3C7E11FC36039866C1E14E666C2286C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft Manifest number: 057E Signing time: Sat 20 Dec 2025 16:00:53 +0000 Manifest this update: Sat 20 Dec 2025 16:00:53 +0000 Manifest next update: Sun 21 Dec 2025 16:00:53 +0000 Files and hashes: 1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=) 2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: MHexXX+j9Ps3bE3T6a3OKTJFDuXCe2PvEK5IKweRGMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:11:fc:36:03:98:66:c1:e1:4e:66:6c:22:86:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108 Validity Not Before: Dec 20 16:00:53 2025 GMT Not After : Dec 21 16:00:53 2025 GMT Subject: CN=9bc8fc9796f1750448466bc8646eb1148f14b52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:91:37:a0:e4:00:1a:64:d5:b3:69:99:78: 60:89:82:2e:d1:1c:eb:45:56:84:8f:1d:2a:80:a4: 35:32:b1:4f:2a:f7:21:3c:6b:2a:c3:a7:aa:bb:b7: a0:ab:71:a9:de:b9:fd:d5:97:d1:53:fe:ed:c8:72: 23:62:a6:69:6e:02:5f:60:03:3c:da:42:d9:59:bf: b6:65:15:a7:78:99:9e:c0:2e:4e:70:56:f5:f9:04: a2:db:3e:44:8b:28:de:ab:61:2f:6c:b5:e1:65:ac: 28:4d:32:4a:f1:1e:1a:11:d6:52:a0:92:37:94:3b: dc:94:61:bb:61:95:fb:73:66:41:4f:0a:76:08:51: 01:8c:6f:fd:a2:c0:10:c1:73:03:2f:bb:98:46:9e: 6b:25:64:e8:8f:5e:08:0f:21:61:2f:96:ca:7c:ea: 10:41:3e:a7:39:2f:bc:f6:09:41:00:d0:cb:22:79: 17:72:c0:54:e4:f6:bc:24:86:89:b3:74:0c:52:72: 7d:e2:63:c0:5f:18:6e:72:bc:34:c2:96:0c:cc:78: 1f:20:87:b7:ad:ce:fb:3c:19:76:33:13:fb:39:dc: 32:a2:92:d6:62:82:4f:4e:26:09:28:4c:6d:51:d8: 1a:e0:3a:46:59:af:ae:48:f8:df:eb:01:42:92:2c: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:FC:97:96:F1:75:04:48:46:6B:C8:64:6E:B1:14:8F:14:B5:2F X509v3 Authority Key Identifier: keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:62:ab:10:41:0f:09:5a:c3:c7:b9:86:a2:fb:4c:96:08:29: 63:c3:6f:da:4e:7f:d5:eb:66:b8:bd:cf:88:d2:4a:7a:11:56: 03:b8:5f:8c:eb:d5:59:e6:b9:3b:27:59:bf:d3:5f:07:7d:7c: b9:92:5f:f5:e5:2f:1e:9b:9f:1d:52:29:3b:d4:ad:9c:59:be: a2:8e:16:0d:65:f1:65:69:40:7a:42:ab:28:48:5e:70:7e:e3: aa:7d:65:95:cd:59:c3:1d:f3:8a:59:6b:1b:10:5b:5b:b1:91: 2c:ee:35:83:86:82:82:b1:8f:98:e8:f9:56:1f:af:b3:71:78: 05:7e:db:90:30:bc:d8:53:4a:55:26:e0:cb:f2:2f:b4:1c:10: 94:2c:b6:b0:34:98:9e:9f:d5:92:85:6b:9e:7c:d6:b6:30:e9: fe:fd:09:c0:91:f1:0b:f4:34:c8:49:bb:ad:f8:16:26:2e:6d: 0e:00:b5:4b:fb:44:45:fd:dd:a9:99:13:1d:11:03:a0:ed:19: 51:17:f7:1a:71:ea:50:6e:d3:dc:d2:5f:98:60:09:2a:c5:f7: 02:ba:33:58:7d:6a:c1:c4:b2:09:3c:83:3c:6e:d9:16:37:2d: 3d:b2:31:64:e8:ba:51:f4:7e:f5:fe:eb:a5:87:66:09:ff:f3: 95:a1:d4:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhH8NgOYZsHhTmZsIobIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhM2YyN2M5M2VmYjdiYmMwYjBhZmU4ZWNjMjRmNzAzOWQy NzUxMDgwHhcNMjUxMjIwMTYwMDUzWhcNMjUxMjIxMTYwMDUzWjAzMTEwLwYDVQQD Eyg5YmM4ZmM5Nzk2ZjE3NTA0NDg0NjZiYzg2NDZlYjExNDhmMTRiNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+CRN6DkABpk1bNpmXhgiYIu0Rzr RVaEjx0qgKQ1MrFPKvchPGsqw6equ7egq3Gp3rn91ZfRU/7tyHIjYqZpbgJfYAM8 2kLZWb+2ZRWneJmewC5OcFb1+QSi2z5Eiyjeq2EvbLXhZawoTTJK8R4aEdZSoJI3 lDvclGG7YZX7c2ZBTwp2CFEBjG/9osAQwXMDL7uYRp5rJWToj14IDyFhL5bKfOoQ QT6nOS+89glBANDLInkXcsBU5Pa8JIaJs3QMUnJ94mPAXxhucrw0wpYMzHgfIIe3 rc77PBl2MxP7OdwyopLWYoJPTiYJKExtUdga4DpGWa+uSPjf6wFCkiwr6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvI/JeW8XUESEZryGRusRSPFLUvMB8GA1UdIwQY MBaAFIo/J8k++3u8Cwr+jswk9wOdJ1EIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzct ZWJmODM0ZmU5YTE1LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzctZWJmODM0ZmU5YTE1 LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGKrEEEP CVrDx7mGovtMlggpY8Nv2k5/1etmuL3PiNJKehFWA7hfjOvVWea5OydZv9NfB318 uZJf9eUvHpufHVIpO9StnFm+oo4WDWXxZWlAekKrKEhecH7jqn1llc1Zwx3zillr GxBbW7GRLO41g4aCgrGPmOj5Vh+vs3F4BX7bkDC82FNKVSbgy/IvtBwQlCy2sDSY np/VkoVrnnzWtjDp/v0JwJHxC/Q0yEm7rfgWJi5tDgC1S/tERf3dqZkTHREDoO0Z URf3GnHqUG7T3NJfmGAJKsX3ArozWH1qwcSyCTyDPG7ZFjctPbIxZOi6UfR+9f7r pYdmCf/zlaHUgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:44:04 2025 by rpki-client