This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json) Hash identifier: r3PtPNfEBOaXebStmieGhDoEt/shhJboLW8DJXjNAuY= Subject key identifier: F8:C7:5A:CA:E1:9A:3D:73:09:D1:4B:CF:FF:F3:59:A1:91:FE:07:B9 Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Certificate serial: 019B5598F3CED06938BBCC8239F4A14F6EA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 13:00:45 +0000 Manifest this update: Thu 25 Dec 2025 13:00:45 +0000 Manifest next update: Fri 26 Dec 2025 13:00:45 +0000 Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: HTrQdKfiKGTwIyfj/16y5RIQuNi+3JiAfOCHbwnq9v4=) 2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=) 3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=) 4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=) 5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=) 6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=) 7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=) 8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=) 9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:98:f3:ce:d0:69:38:bb:cc:82:39:f4:a1:4f:6e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Validity Not Before: Dec 25 13:00:45 2025 GMT Not After : Dec 26 13:00:45 2025 GMT Subject: CN=f8c75acae19a3d7309d14bcffff359a191fe07b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:40:b6:a7:fa:54:12:ae:39:e1:ac:0e:62: c5:b2:56:49:9a:63:f5:31:a5:dd:b1:8d:2e:d7:88: 9f:e2:db:dc:28:83:da:72:bd:84:7b:3e:0a:56:16: 52:44:14:4c:1a:bd:7c:56:0f:75:9c:2e:0b:ee:f7: cd:ec:1b:53:90:66:b3:89:f9:7c:1b:59:33:66:2c: 80:01:c9:b5:e3:ba:f5:ce:a7:34:94:99:22:91:8e: 0a:f5:18:51:b7:71:4f:4d:e7:10:a7:de:f1:24:7b: b9:67:fe:23:6c:47:16:c7:75:64:17:a5:72:e7:4b: 0b:81:94:6f:94:d8:41:f1:d7:b0:6f:b0:dc:07:d6: a5:5a:ac:56:c5:22:e5:37:22:60:ff:db:b6:aa:15: dc:a8:0a:2b:8d:22:6f:f4:0e:95:5d:90:05:c1:9d: f5:cf:02:e1:f0:08:7f:62:11:5b:60:4b:59:d2:17: b6:5c:5b:7b:31:68:61:25:2f:e1:03:0a:9e:bd:77: cd:95:71:7d:a0:b8:aa:2f:46:ee:84:b7:92:f9:41: ae:71:a0:20:93:e1:74:1d:59:f4:8e:21:7c:5c:1f: 58:4f:75:a0:9d:8f:bd:aa:ac:e6:53:8c:f3:15:48: 3e:3d:cd:ed:a9:58:14:68:6c:6d:21:4f:6b:0b:de: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:5A:CA:E1:9A:3D:73:09:D1:4B:CF:FF:F3:59:A1:91:FE:07:B9 X509v3 Authority Key Identifier: keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:42:11:77:46:66:74:90:de:22:8f:64:a2:aa:87:12:56:a7: 7d:fb:20:8d:2e:d1:0d:0e:c2:ce:15:29:e7:27:2c:04:c1:65: d5:da:d4:2a:fd:d0:59:e2:e7:e0:47:2a:90:88:e2:37:dd:36: 66:16:89:fe:12:e3:f5:5f:26:39:b6:dc:2a:95:42:2e:c3:af: 90:3f:d0:62:7e:95:49:61:25:6b:7c:85:27:43:18:90:66:41: e6:21:d1:e2:57:20:c1:ac:eb:ff:a4:34:64:cc:ac:23:b8:d8: 12:26:fe:ab:24:81:07:cf:01:62:c9:ad:26:0c:e4:90:55:fd: 92:94:23:4d:47:87:8b:ce:b3:eb:c6:e7:80:0f:ee:08:5c:c0: 94:f8:c6:57:89:c5:94:1e:f2:ff:92:db:bb:ad:0b:eb:9e:a1: da:30:f4:d3:5f:15:2e:d7:37:91:c3:0d:90:07:c5:9d:95:93: 2f:8c:30:5b:f3:20:0c:4f:1b:c3:8d:ee:1d:e2:b5:8f:86:9d: 7c:8f:de:13:32:c3:ae:31:a0:b6:ee:5f:db:dc:d3:ac:fc:00: 15:0c:b7:18:ee:7c:55:2c:ca:c7:5a:be:8d:f0:ca:ba:cf:09: 90:e4:ef:b3:a5:76:a0:62:be:63:d9:15:95:e7:95:b9:8f:a3: 0d:41:ee:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmPPO0Gk4u8yCOfShT26jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj ZDVhYWUwHhcNMjUxMjI1MTMwMDQ1WhcNMjUxMjI2MTMwMDQ1WjAzMTEwLwYDVQQD EyhmOGM3NWFjYWUxOWEzZDczMDlkMTRiY2ZmZmYzNTlhMTkxZmUwN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SdAtqf6VBKuOeGsDmLFslZJmmP1 MaXdsY0u14if4tvcKIPacr2Eez4KVhZSRBRMGr18Vg91nC4L7vfN7BtTkGazifl8 G1kzZiyAAcm147r1zqc0lJkikY4K9RhRt3FPTecQp97xJHu5Z/4jbEcWx3VkF6Vy 50sLgZRvlNhB8dewb7DcB9alWqxWxSLlNyJg/9u2qhXcqAorjSJv9A6VXZAFwZ31 zwLh8Ah/YhFbYEtZ0he2XFt7MWhhJS/hAwqevXfNlXF9oLiqL0buhLeS+UGucaAg k+F0HVn0jiF8XB9YT3WgnY+9qqzmU4zzFUg+Pc3tqVgUaGxtIU9rC97v5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjHWsrhmj1zCdFLz//zWaGR/ge5MB8GA1UdIwQY MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0IRd0Zm dJDeIo9koqqHElanffsgjS7RDQ7CzhUp5ycsBMFl1drUKv3QWeLn4EcqkIjiN902 ZhaJ/hLj9V8mObbcKpVCLsOvkD/QYn6VSWEla3yFJ0MYkGZB5iHR4lcgwazr/6Q0 ZMysI7jYEib+qySBB88BYsmtJgzkkFX9kpQjTUeHi86z68bngA/uCFzAlPjGV4nF lB7y/5Lbu60L656h2jD0018VLtc3kcMNkAfFnZWTL4wwW/MgDE8bw43uHeK1j4ad fI/eEzLDrjGgtu5f29zTrPwAFQy3GO58VSzKx1q+jfDKus8JkOTvs6V2oGK+Y9kV leeVuY+jDUHu+w== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:56 2025 by rpki-client