This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json) Hash identifier: 4zZqWVg1F3drwAgrowcKcA5ZaXHTN4u4A1sbhWt4fB0= Subject key identifier: 98:41:15:73:27:6B:DE:2A:24:3A:D5:AF:B5:FE:78:A2:B8:34:D1:98 Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Certificate serial: 019B3BD9117050E06B631E0B328D704840C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft Manifest number: 0102 Signing time: Sat 20 Dec 2025 13:00:40 +0000 Manifest this update: Sat 20 Dec 2025 13:00:40 +0000 Manifest next update: Sun 21 Dec 2025 13:00:40 +0000 Files and hashes: 1: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: gIkpyTI1FQuF8WCYIsoL0BqcYlbPbA8Len0wFdVQwrI=) 2: Y_oYNTABqXVE9GTLe20SGiBKmm8.roa (hash: oNuhka5sSAjP9HueZy64ACfp5Ut+NkJyfMXj1b7/13Y=) 3: efy5oJUo9vlNOp71j63zeVEmmxU.roa (hash: CC82OGeCqrXuJ1H3eqUShF4IKs0H5muAyFZDrElp2iw=) 4: gfJqz6llA6HPBbhUclOoBOQtzwA.roa (hash: RevaPA0FwqLm6G8w6EGXV/kc0l56ywZoZvqxJEm3YF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:11:70:50:e0:6b:63:1e:0b:32:8d:70:48:40:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Validity Not Before: Dec 20 13:00:40 2025 GMT Not After : Dec 21 13:00:40 2025 GMT Subject: CN=98411573276bde2a243ad5afb5fe78a2b834d198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:cb:05:1b:99:4b:26:8f:9b:78:8e:5f:11: 50:85:a4:7c:d7:00:59:59:19:6f:8c:da:28:f3:79: 4c:a5:b5:02:3d:72:f2:55:63:b0:8f:6f:26:57:4b: 8c:f1:c5:b2:3e:87:cb:02:ef:7c:51:79:6d:d8:c7: 88:a6:8f:5a:ca:e1:29:a5:da:6d:70:58:6c:79:8b: cd:d9:80:1c:96:9e:3e:9a:17:e4:3d:29:3d:b4:12: 11:f2:2e:3a:c1:19:2d:14:e3:37:c9:40:ee:39:25: 95:58:71:f1:5d:4c:09:47:12:e2:32:77:f0:55:35: ff:73:09:fd:ec:d3:5a:fd:a9:c9:11:6f:27:68:d2: 0b:5e:17:da:2f:f9:67:6d:d1:47:b1:67:18:0a:b1: c7:72:42:6c:15:d9:d1:ed:f4:95:ad:1c:7e:d9:10: a5:ae:7e:54:17:88:00:72:6a:2e:ba:ad:33:a9:d8: 28:09:1e:ea:ad:67:ac:57:11:3f:06:23:a2:aa:9f: 2d:83:35:26:6b:19:f9:cd:71:e9:b4:c3:15:a8:35: 62:7c:38:78:ce:f4:b8:46:1b:58:1b:9b:a3:3b:8b: 9f:07:87:d8:58:c1:91:56:8a:96:b0:96:8b:59:21: da:74:dd:de:16:9d:2a:be:2c:6f:24:62:30:0a:09: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:41:15:73:27:6B:DE:2A:24:3A:D5:AF:B5:FE:78:A2:B8:34:D1:98 X509v3 Authority Key Identifier: keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:23:bf:63:36:9a:ed:80:00:ca:72:0e:80:53:05:fe:5e:d1: db:9e:1c:7e:66:90:a0:6e:28:bc:4a:04:32:78:1d:8f:52:1e: ff:81:d9:9a:b5:13:75:b6:56:84:48:aa:63:51:4d:52:8e:bc: 81:71:01:dd:b3:27:c5:7f:b2:51:ae:80:f2:03:50:65:c7:5b: 73:e5:92:3e:49:cf:68:b8:9e:b3:04:71:97:bf:9f:c6:64:88: 0c:6f:ca:d0:34:f2:86:c3:5f:14:40:74:92:35:b7:29:63:ee: a9:68:95:27:7c:3a:6e:e4:cd:33:c9:b2:8f:1a:be:5a:1d:09: c6:f2:f9:35:c6:bb:0f:fb:6d:30:b5:ec:fe:c5:0b:95:ab:26: ac:06:91:6c:5d:0b:f6:d1:9d:f1:18:94:bb:a9:12:6b:eb:17: c0:89:c9:10:9a:0c:20:20:43:fd:98:40:b0:53:0a:15:a4:18: eb:1e:ac:49:c0:60:28:f5:b3:18:a0:89:f3:ec:6b:be:8c:f1: 3f:54:62:40:9e:c5:4e:fd:10:90:ba:1f:f1:88:97:0f:42:c9: e0:76:b9:90:df:27:67:ec:f0:a1:59:3a:7f:d5:eb:fb:31:c6: 2f:9f:9d:9e:9b:ff:c8:30:85:24:dc:7b:32:1a:43:51:7a:c8: f5:a7:f2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72RFwUOBrYx4LMo1wSEDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh NjU4MjkwHhcNMjUxMjIwMTMwMDQwWhcNMjUxMjIxMTMwMDQwWjAzMTEwLwYDVQQD Eyg5ODQxMTU3MzI3NmJkZTJhMjQzYWQ1YWZiNWZlNzhhMmI4MzRkMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOXLBRuZSyaPm3iOXxFQhaR81wBZ WRlvjNoo83lMpbUCPXLyVWOwj28mV0uM8cWyPofLAu98UXlt2MeIpo9ayuEppdpt cFhseYvN2YAclp4+mhfkPSk9tBIR8i46wRktFOM3yUDuOSWVWHHxXUwJRxLiMnfw VTX/cwn97NNa/anJEW8naNILXhfaL/lnbdFHsWcYCrHHckJsFdnR7fSVrRx+2RCl rn5UF4gAcmouuq0zqdgoCR7qrWesVxE/BiOiqp8tgzUmaxn5zXHptMMVqDVifDh4 zvS4RhtYG5ujO4ufB4fYWMGRVoqWsJaLWSHadN3eFp0qvixvJGIwCgmZeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhBFXMna94qJDrVr7X+eKK4NNGYMB8GA1UdIwQY MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3 LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiO/Yzaa 7YAAynIOgFMF/l7R254cfmaQoG4ovEoEMngdj1Ie/4HZmrUTdbZWhEiqY1FNUo68 gXEB3bMnxX+yUa6A8gNQZcdbc+WSPknPaLieswRxl7+fxmSIDG/K0DTyhsNfFEB0 kjW3KWPuqWiVJ3w6buTNM8myjxq+Wh0JxvL5Nca7D/ttMLXs/sULlasmrAaRbF0L 9tGd8RiUu6kSa+sXwInJEJoMICBD/ZhAsFMKFaQY6x6sScBgKPWzGKCJ8+xrvozx P1RiQJ7FTv0QkLof8YiXD0LJ4Ha5kN8nZ+zwoVk6f9Xr+zHGL5+dnpv/yDCFJNx7 MhpDUXrI9afyKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:48:53 2025 by rpki-client