This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json) Hash identifier: zJXawUOkO8ChzDuvD4yN4jx7EwemX6vtNpkvxCZGjuU= Subject key identifier: 2C:52:61:51:C5:58:23:4B:0C:CD:A0:EC:A9:B2:F8:24:63:EC:DD:2E Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019B3C46D64691DE3C01B8934BE98577AC07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft Manifest number: 0ED9 Signing time: Sat 20 Dec 2025 15:00:33 +0000 Manifest this update: Sat 20 Dec 2025 15:00:33 +0000 Manifest next update: Sun 21 Dec 2025 15:00:33 +0000 Files and hashes: 1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=) 2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: rqkhT/iH5mA8gSLlDUmXW5g1zRpvKYACQeLcDDKvZrE=) 3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=) 4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=) 5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=) 6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=) 7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d6:46:91:de:3c:01:b8:93:4b:e9:85:77:ac:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Dec 20 15:00:33 2025 GMT Not After : Dec 21 15:00:33 2025 GMT Subject: CN=2c526151c558234b0ccda0eca9b2f82463ecdd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:c9:57:c5:c8:9b:4b:91:a7:18:95:bc:29: 04:06:8f:6d:81:47:b3:e5:ff:ad:52:e4:7b:e4:b4: 93:6a:65:28:4b:38:0b:11:f7:83:e9:0a:5f:92:07: d6:f1:75:9d:d1:3b:1c:95:20:d4:6b:29:ab:c3:07: 98:6a:1d:20:15:61:09:6d:1e:b0:f8:73:06:2b:66: 18:bc:2c:42:0a:ff:3a:7b:11:e4:89:02:89:d3:b2: 9a:6e:ea:bd:22:6f:44:64:32:8c:5e:46:3f:15:72: 2d:ac:a1:bb:b7:5f:c0:12:ee:59:09:25:d8:1c:db: ea:2a:dd:69:af:6b:1b:c2:77:9f:38:60:07:0e:c8: f5:54:38:45:0c:8a:7b:34:01:05:98:ef:33:f3:b6: ca:68:1e:6a:09:86:6e:5b:59:16:e8:af:86:74:d4: 46:f6:6f:14:19:3f:ed:35:3a:ce:4b:4d:fb:af:b7: 30:69:7a:cc:2c:c5:26:99:c0:29:10:c2:cd:d0:51: 04:a3:a7:76:e5:24:3b:60:a7:6f:19:65:71:a4:9f: df:f5:59:66:85:5e:40:ac:72:89:17:1f:ac:0c:c2: 3b:87:17:5e:2b:63:02:79:84:85:d0:37:db:9c:ed: ed:e4:ad:bc:68:a0:15:35:95:cd:58:fd:d2:96:66: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:52:61:51:C5:58:23:4B:0C:CD:A0:EC:A9:B2:F8:24:63:EC:DD:2E X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e8:be:1d:dd:65:35:98:63:ed:b4:be:07:98:1e:87:7b:33: 19:29:06:4f:d7:09:8a:90:09:61:6a:4d:27:9d:86:52:6c:5a: 84:cd:0b:0f:78:5e:91:bf:f7:62:fd:59:e3:d3:33:8f:1b:3b: 6f:8d:75:d2:31:cf:6f:4d:95:d2:32:59:cd:fb:94:d0:dc:41: a4:5f:0d:02:78:ae:b7:83:9d:69:fe:44:20:59:68:ca:42:20: db:9e:14:e6:b0:6d:9c:b5:dc:ee:65:1e:44:db:fb:ae:7c:43: 8e:3d:91:4f:28:f6:cb:d6:80:2f:19:6b:c1:9a:eb:c6:ba:9a: d4:61:6b:99:94:62:45:99:03:65:20:d9:a0:7f:83:48:0a:46: 79:87:eb:da:3f:3a:da:79:cd:a0:22:ff:5b:ff:d1:ae:c3:00: 8b:ce:ec:85:ea:9a:01:33:09:95:d3:b4:e5:95:a0:b5:0f:5d: ed:41:e4:e6:f2:10:cd:c2:6b:61:d8:ec:09:c9:90:17:00:6e: a3:51:3b:58:52:b8:9b:d3:b7:1c:25:d2:f8:06:77:8e:c0:93: 09:36:34:37:80:dd:94:c8:d0:3a:89:2d:d1:43:28:93:c6:71: 78:6e:83:c6:7c:9a:61:d3:bd:96:e3:4e:76:cf:de:df:23:ce: d0:4e:b5:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RtZGkd48AbiTS+mFd6wHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjUxMjIwMTUwMDMzWhcNMjUxMjIxMTUwMDMzWjAzMTEwLwYDVQQD EygyYzUyNjE1MWM1NTgyMzRiMGNjZGEwZWNhOWIyZjgyNDYzZWNkZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3TJV8XIm0uRpxiVvCkEBo9tgUez 5f+tUuR75LSTamUoSzgLEfeD6QpfkgfW8XWd0TsclSDUaymrwweYah0gFWEJbR6w +HMGK2YYvCxCCv86exHkiQKJ07Kabuq9Im9EZDKMXkY/FXItrKG7t1/AEu5ZCSXY HNvqKt1pr2sbwnefOGAHDsj1VDhFDIp7NAEFmO8z87bKaB5qCYZuW1kW6K+GdNRG 9m8UGT/tNTrOS037r7cwaXrMLMUmmcApEMLN0FEEo6d25SQ7YKdvGWVxpJ/f9Vlm hV5ArHKJFx+sDMI7hxdeK2MCeYSF0DfbnO3t5K28aKAVNZXNWP3SlmZ3+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxSYVHFWCNLDM2g7Kmy+CRj7N0uMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+i+Hd1l NZhj7bS+B5geh3szGSkGT9cJipAJYWpNJ52GUmxahM0LD3hekb/3Yv1Z49Mzjxs7 b4110jHPb02V0jJZzfuU0NxBpF8NAniut4Odaf5EIFloykIg254U5rBtnLXc7mUe RNv7rnxDjj2RTyj2y9aALxlrwZrrxrqa1GFrmZRiRZkDZSDZoH+DSApGeYfr2j86 2nnNoCL/W//RrsMAi87sheqaATMJldO05ZWgtQ9d7UHk5vIQzcJrYdjsCcmQFwBu o1E7WFK4m9O3HCXS+AZ3jsCTCTY0N4DdlMjQOokt0UMok8ZxeG6DxnyaYdO9luNO ds/e3yPO0E61QQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:48 2025 by rpki-client