This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json) Hash identifier: otwPlYxFHgDe5mKXHfdq1Mfm3KN+BDc1MXOAP8z7x98= Subject key identifier: B2:B7:F5:62:98:09:B2:4C:97:33:96:01:AC:EC:B0:74:31:6E:4E:E5 Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019B6C8E6D6F705E4020D75A75601B07D1A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft Manifest number: 0EF2 Signing time: Tue 30 Dec 2025 00:00:31 +0000 Manifest this update: Tue 30 Dec 2025 00:00:31 +0000 Manifest next update: Wed 31 Dec 2025 00:00:31 +0000 Files and hashes: 1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=) 2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: n97k2oK6/4jPfsBRbkkyjCusYq2vhQSsMHdJ2SxmfEU=) 3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=) 4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=) 5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=) 6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=) 7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:8e:6d:6f:70:5e:40:20:d7:5a:75:60:1b:07:d1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Dec 30 00:00:31 2025 GMT Not After : Dec 31 00:00:31 2025 GMT Subject: CN=b2b7f5629809b24c97339601acecb074316e4ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:cc:56:f8:e6:92:5b:94:da:ef:33:cb:02: ab:ec:0f:e1:40:94:e1:f7:c0:dc:fe:e9:e2:30:3c: 4e:ad:83:a0:21:9e:a3:6a:ee:42:0f:81:da:32:23: 93:3a:8b:fc:aa:2f:c2:e1:e1:a9:1f:7f:a9:0a:35: 33:6b:ce:ac:c1:ab:00:ad:1b:7a:8a:08:6a:20:2a: e8:33:dd:09:27:73:e7:8a:43:f3:0a:42:91:07:c0: c2:bd:0c:67:9d:a8:9f:be:9b:c0:16:d9:8e:b9:19: 96:56:09:0e:a5:a0:03:68:0e:8e:98:51:97:b5:1c: b7:6a:df:35:7b:33:02:98:73:04:d6:ac:42:85:aa: 64:29:48:34:53:22:c1:e8:6f:71:31:58:4a:80:34: c9:80:f2:70:79:10:ae:44:4e:6f:65:77:f1:bd:36: 65:b8:ea:2b:b3:5d:eb:da:b6:65:b1:5f:25:38:54: 44:1f:aa:a3:e2:81:68:e4:5d:a7:04:bc:a0:70:07: c9:db:a4:51:1d:a9:aa:35:72:a5:fd:ec:8a:82:bc: 6c:30:e0:0a:1b:b1:fd:4c:53:b7:d4:c3:7d:52:40: 50:1c:c3:6f:57:0d:01:9e:f7:dd:ab:97:82:1d:2b: ec:c9:b2:a2:7c:fc:4d:c8:c1:eb:ef:ac:bc:c3:3e: 94:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B7:F5:62:98:09:B2:4C:97:33:96:01:AC:EC:B0:74:31:6E:4E:E5 X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f3:18:4f:6d:10:a3:eb:53:6d:5a:d7:33:cc:3e:7e:f5:e4: 56:87:43:2f:13:c9:a5:23:7e:0e:c2:87:91:9d:75:41:ab:3b: e2:5a:59:1f:59:cb:a9:71:ec:81:72:3a:0e:a9:42:79:2a:f3: dd:df:bd:56:0d:87:58:8f:81:40:2b:6c:ce:05:94:a9:af:d3: 9b:81:fb:ef:5f:09:9d:93:95:e4:08:b2:f9:9e:a3:18:b7:19: 6c:7c:89:72:eb:43:6a:99:8b:eb:c3:1d:bc:0c:35:8e:80:2d: fc:e3:52:e6:50:38:80:f6:99:5b:fa:94:54:bb:d4:80:08:d5: 93:6e:8c:46:e3:ba:26:f4:81:2c:c6:e2:95:6a:b4:14:6b:fb: 33:b1:98:f6:e3:d8:2a:b1:6b:dd:1d:da:8a:7b:90:ad:71:2b: dc:6f:6a:35:01:48:91:79:6b:35:7b:d0:e9:a9:05:8f:cd:c2: 91:65:bb:73:ed:1a:54:af:1b:43:1b:02:e2:0b:12:21:32:cc: 21:73:22:7c:46:bb:09:1b:ee:0f:f9:c4:67:f8:fe:73:f4:72: f4:00:b9:eb:38:ca:76:bb:6f:20:a9:2f:f8:f9:34:dc:5d:cb: 09:f1:57:38:e8:c5:7a:87:7f:12:99:c6:7d:d4:b4:16:69:7b: 4f:42:b4:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsjm1vcF5AINdadWAbB9GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjUxMjMwMDAwMDMxWhcNMjUxMjMxMDAwMDMxWjAzMTEwLwYDVQQD EyhiMmI3ZjU2Mjk4MDliMjRjOTczMzk2MDFhY2VjYjA3NDMxNmU0ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wfMVvjmkluU2u8zywKr7A/hQJTh 98Dc/uniMDxOrYOgIZ6jau5CD4HaMiOTOov8qi/C4eGpH3+pCjUza86swasArRt6 ighqICroM90JJ3PnikPzCkKRB8DCvQxnnaifvpvAFtmOuRmWVgkOpaADaA6OmFGX tRy3at81ezMCmHME1qxChapkKUg0UyLB6G9xMVhKgDTJgPJweRCuRE5vZXfxvTZl uOors13r2rZlsV8lOFREH6qj4oFo5F2nBLygcAfJ26RRHamqNXKl/eyKgrxsMOAK G7H9TFO31MN9UkBQHMNvVw0Bnvfdq5eCHSvsybKifPxNyMHr76y8wz6U4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK39WKYCbJMlzOWAazssHQxbk7lMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfMYT20Q o+tTbVrXM8w+fvXkVodDLxPJpSN+DsKHkZ11Qas74lpZH1nLqXHsgXI6DqlCeSrz 3d+9Vg2HWI+BQCtszgWUqa/Tm4H7718JnZOV5Aiy+Z6jGLcZbHyJcutDapmL68Md vAw1joAt/ONS5lA4gPaZW/qUVLvUgAjVk26MRuO6JvSBLMbilWq0FGv7M7GY9uPY KrFr3R3ainuQrXEr3G9qNQFIkXlrNXvQ6akFj83CkWW7c+0aVK8bQxsC4gsSITLM IXMifEa7CRvuD/nEZ/j+c/Ry9AC56zjKdrtvIKkv+Pk03F3LCfFXOOjFeod/EpnG fdS0Fml7T0K00g== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:16 2025 by rpki-client