This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json) Hash identifier: KS0cgy9TxkcOOpG7/vscwdS8m9CeFd4kEMcVHcKHrkk= Subject key identifier: 1E:8E:D6:CE:DF:69:85:78:5B:8A:6B:50:5D:D6:93:6F:1C:EE:DF:EB Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Certificate serial: 019B54183F1470310B736960DFFA158B7E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft Manifest number: 153F Signing time: Thu 25 Dec 2025 06:00:33 +0000 Manifest this update: Thu 25 Dec 2025 06:00:33 +0000 Manifest next update: Fri 26 Dec 2025 06:00:33 +0000 Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=) 2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: fW1aFex6YGj6hl04hB9RNzSUC0Jz6zRejbir0O3TUQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:3f:14:70:31:0b:73:69:60:df:fa:15:8b:7e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Validity Not Before: Dec 25 06:00:33 2025 GMT Not After : Dec 26 06:00:33 2025 GMT Subject: CN=1e8ed6cedf6985785b8a6b505dd6936f1ceedfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:dd:a6:e1:7f:d4:6c:34:d7:b9:de:6d:ab: e7:eb:1d:3c:08:53:0b:1e:3e:17:8d:ac:ce:71:a6: 80:8a:f6:07:bb:7c:70:f0:26:1a:48:ab:8a:e7:5b: 34:a8:40:8b:7c:22:5f:a7:92:ba:e9:a5:a4:50:8f: 0b:31:c9:50:d0:6f:35:03:1b:34:06:cf:7c:10:a9: 15:5f:f9:44:75:ab:8a:f6:a6:75:ed:96:55:f9:12: 09:23:81:bd:e9:1f:83:f5:54:43:ea:28:5c:20:cd: 92:1f:95:e3:e3:df:58:43:19:c5:75:f0:1e:b0:25: 03:13:ab:f3:2a:a8:55:34:ac:0e:8f:08:4c:99:a7: 0b:d5:10:14:a5:8c:2a:2b:4c:1b:a2:7f:aa:66:e7: 33:e2:06:15:27:9c:17:26:60:1b:35:75:a1:bd:b1: 29:70:75:7a:d4:1b:99:01:8d:b2:99:ea:89:b9:ea: d9:23:20:57:e2:ab:0c:9b:39:a0:41:f1:9b:c3:df: c0:6a:53:93:f3:05:23:8b:cb:51:1d:92:f2:0d:4a: 6e:a6:95:07:c0:0e:ca:6b:65:a1:be:ef:e3:fa:a1: 41:da:f4:61:a1:62:88:82:fe:79:ec:9d:26:68:cc: 03:95:d3:05:83:81:c4:34:e0:e2:ba:c9:c3:f4:3f: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8E:D6:CE:DF:69:85:78:5B:8A:6B:50:5D:D6:93:6F:1C:EE:DF:EB X509v3 Authority Key Identifier: keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a4:2a:73:80:67:f2:bc:77:d6:19:96:8d:79:6d:32:40:9d: 84:e0:15:b7:5e:4e:00:36:7d:91:74:53:8d:48:92:20:50:03: fe:f6:39:b5:ae:5f:33:3f:78:aa:3a:8c:f6:0b:8f:f2:da:2e: 3e:bc:30:41:d6:11:6c:e4:d8:f3:35:f4:a0:cd:f3:b9:a3:36: 1b:54:bc:c4:45:dc:7f:c2:54:78:bb:b2:2a:55:84:74:30:ec: 6a:6c:66:fd:18:42:77:2f:a9:33:07:41:c1:c0:d8:1e:01:46: 37:c1:de:48:47:8b:ff:3a:52:fb:ba:79:62:16:66:7d:94:99: 83:e5:55:7b:0b:ae:20:33:fa:9c:8a:bd:ae:aa:21:f9:0f:e5: 7d:b3:6b:8c:bb:b8:4d:c8:95:c2:3f:17:18:8a:99:75:ae:fc: f0:3d:84:fa:a9:c7:41:50:d1:03:74:b5:17:26:b4:c8:e1:92: b6:8f:4f:8b:e3:af:03:5f:81:de:b6:20:cc:08:78:5e:57:49: ca:22:d3:71:43:b1:2a:ce:9d:d2:e2:1e:61:f3:e8:95:1c:7b: ba:4a:f7:57:ef:e4:5e:d6:34:07:65:2d:24:3b:fb:a0:22:6e: c1:8d:9e:f8:b0:46:b1:55:f3:75:91:a7:0b:17:83:fe:c0:77: c1:c2:e0:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGD8UcDELc2lg3/oVi35WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw OTY2MDIwHhcNMjUxMjI1MDYwMDMzWhcNMjUxMjI2MDYwMDMzWjAzMTEwLwYDVQQD EygxZThlZDZjZWRmNjk4NTc4NWI4YTZiNTA1ZGQ2OTM2ZjFjZWVkZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1XdpuF/1Gw017nebavn6x08CFML Hj4XjazOcaaAivYHu3xw8CYaSKuK51s0qECLfCJfp5K66aWkUI8LMclQ0G81Axs0 Bs98EKkVX/lEdauK9qZ17ZZV+RIJI4G96R+D9VRD6ihcIM2SH5Xj499YQxnFdfAe sCUDE6vzKqhVNKwOjwhMmacL1RAUpYwqK0wbon+qZucz4gYVJ5wXJmAbNXWhvbEp cHV61BuZAY2ymeqJuerZIyBX4qsMmzmgQfGbw9/AalOT8wUji8tRHZLyDUpuppUH wA7Ka2Whvu/j+qFB2vRhoWKIgv557J0maMwDldMFg4HENODiusnD9D9FBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6O1s7faYV4W4prUF3Wk28c7t/rMB8GA1UdIwQY MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct MmU3MjEzNzY3NjI4LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4 LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaQqc4Bn 8rx31hmWjXltMkCdhOAVt15OADZ9kXRTjUiSIFAD/vY5ta5fMz94qjqM9guP8tou PrwwQdYRbOTY8zX0oM3zuaM2G1S8xEXcf8JUeLuyKlWEdDDsamxm/RhCdy+pMwdB wcDYHgFGN8HeSEeL/zpS+7p5YhZmfZSZg+VVewuuIDP6nIq9rqoh+Q/lfbNrjLu4 TciVwj8XGIqZda788D2E+qnHQVDRA3S1Fya0yOGSto9Pi+OvA1+B3rYgzAh4XldJ yiLTcUOxKs6d0uIeYfPolRx7ukr3V+/kXtY0B2UtJDv7oCJuwY2e+LBGsVXzdZGn CxeD/sB3wcLgFg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:09 2025 by rpki-client