This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json) Hash identifier: MRuNtGLkTm1ZlZROmCD6mIzNNLA/9rjkgCBIZIOMfy4= Subject key identifier: B9:0E:66:AB:0A:A6:3B:CB:A6:8C:E8:49:B7:F3:01:B1:F0:EF:42:98 Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449 Certificate serial: 019B375824E26D90795FA6F8F2567DB9DCDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft Manifest number: 17B4 Signing time: Fri 19 Dec 2025 16:01:22 +0000 Manifest this update: Fri 19 Dec 2025 16:01:22 +0000 Manifest next update: Sat 20 Dec 2025 16:01:22 +0000 Files and hashes: 1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=) 2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=) 3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=) 4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=) 5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=) 6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: +fkaVc3GPh2LB2J6JeHsF3s9FCgnjhlzFvEXubfgfh4=) 7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:24:e2:6d:90:79:5f:a6:f8:f2:56:7d:b9:dc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449 Validity Not Before: Dec 19 16:01:22 2025 GMT Not After : Dec 20 16:01:22 2025 GMT Subject: CN=b90e66ab0aa63bcba68ce849b7f301b1f0ef4298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:aa:8d:75:b2:bd:42:e2:82:ac:c6:e4:53: f8:04:f6:98:dc:9b:dc:32:ce:d8:13:74:bc:03:3a: df:f7:ed:dd:3c:e5:33:e4:87:a4:eb:9d:0d:24:53: 45:12:70:3b:a7:56:b8:8a:84:a2:7e:3f:93:62:eb: f8:c7:ea:0e:e6:1a:8e:e0:6b:02:37:90:be:5f:98: 8f:91:53:58:9f:a6:14:b8:f4:d0:d7:35:21:a1:73: 9e:11:ea:44:8b:39:e3:ea:cc:b0:8e:dc:cb:97:76: b0:2a:84:60:49:6d:99:49:34:a9:42:5e:89:98:f7: 33:4b:f1:15:c9:1d:9e:b6:0a:b4:c6:ed:c0:c9:a0: b5:d0:c4:bb:4c:60:96:01:0e:32:b1:36:29:e7:42: d7:04:46:48:dd:29:2f:b8:6b:f2:0e:52:aa:66:b0: 23:1e:ef:fb:dc:3d:09:ac:b8:67:ca:5c:c0:e7:9f: d2:ed:60:ea:d8:98:96:01:ac:5c:cf:c3:73:fb:84: 26:9f:6d:ea:c1:28:fa:c4:2e:3a:3c:50:ee:7d:46: b3:0f:9a:df:21:d2:29:a2:37:36:6a:88:24:59:19: bd:67:8c:c0:cb:fe:64:c7:88:9b:03:ce:c0:39:f2: 0e:5a:6f:1f:fd:b1:ec:6d:96:96:14:88:01:60:f4: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:66:AB:0A:A6:3B:CB:A6:8C:E8:49:B7:F3:01:B1:F0:EF:42:98 X509v3 Authority Key Identifier: keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c1:6e:22:59:cf:7e:9c:2e:55:e8:6c:cf:d6:58:1b:e6:fa: 8f:38:01:df:54:34:8d:16:9f:4a:ec:bb:60:b2:8b:2f:95:88: 19:5a:65:f4:7b:6b:8f:4e:b4:e5:f8:d0:0c:5c:e3:c8:91:09: 33:f6:b8:f7:a1:7e:90:e6:75:f9:f1:1c:e4:ff:87:97:a8:c5: d7:15:1f:31:f9:36:b5:d0:74:49:3c:32:fa:27:0b:9d:b6:70: 6f:41:8b:f4:ea:e3:05:24:55:42:7e:5a:4c:9c:5e:57:e5:45: 38:e3:fb:17:fe:14:4f:f8:52:7b:cd:76:19:45:fe:91:7d:a8: 8a:6d:ee:21:87:7c:77:64:75:01:24:bf:9b:ad:28:b9:95:6a: ff:63:34:47:15:d9:d9:b3:16:71:38:e5:ef:1a:44:a5:45:f1: bc:d6:f6:36:a4:61:e0:45:ed:ad:0d:87:3c:45:62:02:65:ce: 4b:2b:2f:96:26:ce:23:80:53:ce:72:ed:61:13:b1:68:8a:02: 8f:7d:26:d5:8f:f9:5e:1e:57:bc:89:6c:a0:be:8b:5e:f4:60: c6:dd:31:95:68:a5:21:e6:8d:a5:f5:f7:ea:f0:c2:aa:73:0a: 7c:ef:1a:44:75:9a:50:44:06:24:f1:0c:3b:8d:b3:63:57:5e: 4f:2a:4e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WCTibZB5X6b48lZ9udzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy NWM0NDkwHhcNMjUxMjE5MTYwMTIyWhcNMjUxMjIwMTYwMTIyWjAzMTEwLwYDVQQD EyhiOTBlNjZhYjBhYTYzYmNiYTY4Y2U4NDliN2YzMDFiMWYwZWY0Mjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21mqjXWyvULigqzG5FP4BPaY3Jvc Ms7YE3S8Azrf9+3dPOUz5Iek650NJFNFEnA7p1a4ioSifj+TYuv4x+oO5hqO4GsC N5C+X5iPkVNYn6YUuPTQ1zUhoXOeEepEiznj6sywjtzLl3awKoRgSW2ZSTSpQl6J mPczS/EVyR2etgq0xu3AyaC10MS7TGCWAQ4ysTYp50LXBEZI3SkvuGvyDlKqZrAj Hu/73D0JrLhnylzA55/S7WDq2JiWAaxcz8Nz+4Qmn23qwSj6xC46PFDufUazD5rf IdIpojc2aogkWRm9Z4zAy/5kx4ibA87AOfIOWm8f/bHsbZaWFIgBYPRU4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkOZqsKpjvLpozoSbfzAbHw70KYMB8GA1UdIwQY MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt Njk4OTBjODI5ZTMzLzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsFuIlnP fpwuVehsz9ZYG+b6jzgB31Q0jRafSuy7YLKLL5WIGVpl9Htrj0605fjQDFzjyJEJ M/a496F+kOZ1+fEc5P+Hl6jF1xUfMfk2tdB0STwy+icLnbZwb0GL9OrjBSRVQn5a TJxeV+VFOOP7F/4UT/hSe812GUX+kX2oim3uIYd8d2R1ASS/m60ouZVq/2M0RxXZ 2bMWcTjl7xpEpUXxvNb2NqRh4EXtrQ2HPEViAmXOSysvlibOI4BTznLtYROxaIoC j30m1Y/5Xh5XvIlsoL6LXvRgxt0xlWilIeaNpfX36vDCqnMKfO8aRHWaUEQGJPEM O42zY1deTypO2Q== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:22 2025 by rpki-client