This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json) Hash identifier: pntwolNqpEIhAyM8L9xEWfvKuRerGOlI3e0MyyMhDZ4= Subject key identifier: 9F:0F:54:3D:E3:08:6D:48:45:E8:F8:FF:FB:3E:88:55:6C:DB:55:84 Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Certificate serial: 019B3C7E7DD301436575A75ED44349D6ED28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:01:21 +0000 Manifest this update: Sat 20 Dec 2025 16:01:21 +0000 Manifest next update: Sun 21 Dec 2025 16:01:21 +0000 Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: lgMkDb/uTrAraDKYxuPhS1TQi8BXYPi/ZQ57u+PocYY=) 2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=) 3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=) 4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=) 5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=) 6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=) 7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=) 8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=) 9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:7d:d3:01:43:65:75:a7:5e:d4:43:49:d6:ed:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Validity Not Before: Dec 20 16:01:21 2025 GMT Not After : Dec 21 16:01:21 2025 GMT Subject: CN=9f0f543de3086d4845e8f8fffb3e88556cdb5584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:6f:94:91:b3:5a:56:d9:02:b1:7a:28:1b: 3c:3c:64:27:0c:56:93:bc:60:0e:b8:e0:52:c3:7e: 7e:cb:82:55:bf:1d:c7:0f:dc:81:8f:ba:23:51:c3: c3:19:f2:85:ee:7c:e8:6f:a1:c1:c6:e6:06:6c:5c: ce:95:42:69:93:6b:48:a6:02:a2:62:40:e3:9c:7a: 31:e0:1f:99:14:a9:cb:e6:34:e7:e2:c9:ca:d9:cd: 0a:06:f5:ef:29:05:35:3d:8e:d5:f0:c6:f4:fd:50: d9:23:a6:bd:dc:dc:31:00:4d:52:9f:7d:54:00:92: 87:53:0b:27:6b:17:7e:c5:11:07:a4:70:6a:ce:0e: ae:07:8c:43:29:c3:98:94:ae:1a:63:da:01:80:5c: 39:07:cf:35:71:89:84:34:70:52:c8:76:7b:b8:37: 6a:98:0a:c6:44:04:73:ab:2a:1c:e2:e1:bb:08:0d: 0b:c1:ad:ec:f9:81:4c:f5:7c:42:3b:1d:7d:b4:34: 37:91:c2:d9:90:d5:b4:ba:b8:28:58:b7:28:ee:e7: 72:b9:5a:4e:7d:c5:58:e5:24:dc:e5:92:d1:37:b3: ec:24:c1:fb:d3:f3:94:d3:98:ba:ef:06:d4:ba:dc: 62:af:33:3b:54:70:87:0e:7c:a8:bd:71:4c:35:23: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0F:54:3D:E3:08:6D:48:45:E8:F8:FF:FB:3E:88:55:6C:DB:55:84 X509v3 Authority Key Identifier: keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e8:25:5c:85:e4:3b:c8:60:ba:25:8b:47:d3:12:f6:ce:53: b3:07:45:3d:23:89:31:2d:28:77:61:2a:97:fa:87:af:ef:09: 01:37:c7:10:63:5c:94:7a:1b:a7:a5:55:a6:9a:a8:2b:d6:65: b8:56:27:ea:40:90:b3:d6:78:14:01:31:1b:f9:19:a3:c3:12: 94:7d:62:c3:94:8b:25:13:64:d5:1e:80:86:67:eb:7c:4f:bd: 41:cd:11:59:72:42:d1:2f:07:51:f3:f8:3a:d1:3c:3c:4e:6f: 39:7e:24:20:ac:93:5d:e7:b0:22:38:9a:49:ea:47:bf:db:f1: e3:a9:79:7b:60:77:3e:2e:f0:88:15:22:b4:f9:8e:e2:b3:83: 76:07:bb:3b:15:cd:92:b9:43:27:7c:5c:48:6d:d5:04:4e:f6: ba:b9:44:ca:91:f4:7e:0b:99:10:ed:4f:62:ed:63:6e:48:f8: 95:42:48:72:35:f6:81:15:bb:a9:eb:f9:46:d1:fe:bd:10:99: 21:39:dc:60:36:7b:39:ca:b3:c6:51:80:a6:d8:42:bf:50:6d: e8:1a:8a:1b:9c:ba:b2:a9:64:05:1b:2d:b9:44:b1:b4:bb:da: ce:31:a6:9b:e5:63:e1:cf:4d:48:ab:f8:6b:7d:01:2c:f2:a5: ed:34:b1:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fn3TAUNldade1ENJ1u0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj ZDVhYWUwHhcNMjUxMjIwMTYwMTIxWhcNMjUxMjIxMTYwMTIxWjAzMTEwLwYDVQQD Eyg5ZjBmNTQzZGUzMDg2ZDQ4NDVlOGY4ZmZmYjNlODg1NTZjZGI1NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+dvlJGzWlbZArF6KBs8PGQnDFaT vGAOuOBSw35+y4JVvx3HD9yBj7ojUcPDGfKF7nzob6HBxuYGbFzOlUJpk2tIpgKi YkDjnHox4B+ZFKnL5jTn4snK2c0KBvXvKQU1PY7V8Mb0/VDZI6a93NwxAE1Sn31U AJKHUwsnaxd+xREHpHBqzg6uB4xDKcOYlK4aY9oBgFw5B881cYmENHBSyHZ7uDdq mArGRARzqyoc4uG7CA0Lwa3s+YFM9XxCOx19tDQ3kcLZkNW0urgoWLco7udyuVpO fcVY5STc5ZLRN7PsJMH70/OU05i67wbUutxirzM7VHCHDnyovXFMNSPgaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8PVD3jCG1IRej4//s+iFVs21WEMB8GA1UdIwQY MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuglXIXk O8hguiWLR9MS9s5TswdFPSOJMS0od2Eql/qHr+8JATfHEGNclHobp6VVppqoK9Zl uFYn6kCQs9Z4FAExG/kZo8MSlH1iw5SLJRNk1R6AhmfrfE+9Qc0RWXJC0S8HUfP4 OtE8PE5vOX4kIKyTXeewIjiaSepHv9vx46l5e2B3Pi7wiBUitPmO4rODdge7OxXN krlDJ3xcSG3VBE72urlEypH0fguZEO1PYu1jbkj4lUJIcjX2gRW7qev5RtH+vRCZ ITncYDZ7OcqzxlGApthCv1Bt6BqKG5y6sqlkBRstuUSxtLvazjGmm+Vj4c9NSKv4 a30BLPKl7TSx6w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:53 2025 by rpki-client