This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json) Hash identifier: 6FL89+oiv/GGR9NYeufyQl/fESQ+da9+zs7E7dP1mA8= Subject key identifier: 27:7F:5F:DD:77:D0:9D:1F:E5:5F:4F:FE:5E:3D:CA:54:CE:1F:DC:2C Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd Certificate serial: 019B3EA36C94F927A7779C0A329BFB131E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:00:56 +0000 Manifest this update: Sun 21 Dec 2025 02:00:56 +0000 Manifest next update: Mon 22 Dec 2025 02:00:56 +0000 Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: KDP+PtCOPZNUhEuujuDOqlEuWgA+nwB/hrmvMv1DQXE=) 2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=) 3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:6c:94:f9:27:a7:77:9c:0a:32:9b:fb:13:1e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd Validity Not Before: Dec 21 02:00:56 2025 GMT Not After : Dec 22 02:00:56 2025 GMT Subject: CN=277f5fdd77d09d1fe55f4ffe5e3dca54ce1fdc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:b4:c5:2a:b4:d1:1a:41:eb:90:c2:32:94: fe:6f:d7:25:19:f0:d9:98:a1:6c:53:05:df:49:0c: 9e:ed:bb:a5:17:4c:f4:9b:e5:43:d5:99:2b:8c:fa: 21:d3:7b:a8:8c:01:27:19:b8:ab:74:75:d2:9e:97: 79:16:32:6f:24:87:1c:01:76:57:27:2c:cf:55:3e: 2e:5e:18:be:a8:c0:7f:a6:b6:6a:d0:87:8a:4c:89: 13:66:1c:f2:73:96:82:6b:9d:a6:ca:07:51:75:30: e5:61:3d:15:49:10:5f:58:8c:2c:7f:1b:d4:c4:24: 12:0c:23:2d:b9:28:b5:91:56:b5:46:0a:4e:e1:32: 51:11:cf:6a:1b:00:df:f9:c5:1b:6c:70:82:b2:ab: f1:08:13:37:36:23:3a:76:c1:50:9e:76:23:22:b8: dd:78:08:d8:cd:ee:a4:b2:ca:eb:0c:dd:5d:a9:fa: a6:1c:45:88:cc:eb:6f:83:93:93:f1:17:30:4f:9d: db:00:d6:d8:de:35:65:8d:9d:84:fa:75:6d:4f:32: e0:10:a7:a3:d7:4e:56:25:4b:be:f2:17:8c:d8:3b: 1f:e9:98:1a:a6:c9:08:2b:e1:e3:8d:6d:1a:44:b2: 5b:f1:5b:38:4d:8f:e8:43:f8:07:e5:2c:60:01:07: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7F:5F:DD:77:D0:9D:1F:E5:5F:4F:FE:5E:3D:CA:54:CE:1F:DC:2C X509v3 Authority Key Identifier: keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:33:02:6f:1d:d0:9a:de:e1:0b:ee:c3:cf:01:b8:60:81:c9: 6b:47:29:75:7f:ef:eb:e8:74:7a:e0:df:29:90:d1:b9:43:7c: 54:24:15:17:1d:0b:80:82:74:69:2f:6d:15:5d:a7:2f:49:11: 84:45:5d:b5:ff:b5:a6:d7:54:c4:25:e2:1d:1b:24:a7:d2:1a: 96:7c:54:ac:b1:11:11:d0:55:47:83:8c:e1:22:47:85:3c:36: 01:cc:96:4f:53:ec:ff:27:98:f8:bf:10:bc:2a:b2:30:92:bd: 22:62:a8:86:da:95:b0:92:a5:84:bc:52:5a:16:7e:04:f1:0c: 9c:14:f2:34:ef:f4:e7:65:e4:75:de:a4:ff:29:de:97:28:bd: fe:1b:c9:c9:88:d0:dd:e1:f8:7f:13:ff:03:6b:26:34:8d:6d: a8:07:00:2f:36:e1:b5:19:68:70:22:3a:cb:94:bd:9c:69:e8: 33:14:6c:ba:95:ed:93:75:33:c6:57:aa:21:8e:7b:77:ea:70: 93:72:98:10:aa:bb:e9:d1:99:0c:a6:35:58:37:0d:5b:8e:8b: a5:33:d1:99:6b:87:be:8c:89:72:31:63:2c:db:09:ab:6a:7e: 16:ae:d3:26:8e:00:03:8e:4d:dc:18:90:fa:d4:b5:f4:ed:3e: 6d:48:93:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2yU+Send5wKMpv7Ex5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5 OGVjZGQwHhcNMjUxMjIxMDIwMDU2WhcNMjUxMjIyMDIwMDU2WjAzMTEwLwYDVQQD EygyNzdmNWZkZDc3ZDA5ZDFmZTU1ZjRmZmU1ZTNkY2E1NGNlMWZkYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cy0xSq00RpB65DCMpT+b9clGfDZ mKFsUwXfSQye7bulF0z0m+VD1ZkrjPoh03uojAEnGbirdHXSnpd5FjJvJIccAXZX JyzPVT4uXhi+qMB/prZq0IeKTIkTZhzyc5aCa52mygdRdTDlYT0VSRBfWIwsfxvU xCQSDCMtuSi1kVa1RgpO4TJREc9qGwDf+cUbbHCCsqvxCBM3NiM6dsFQnnYjIrjd eAjYze6kssrrDN1dqfqmHEWIzOtvg5OT8RcwT53bANbY3jVljZ2E+nVtTzLgEKej 105WJUu+8heM2Dsf6ZgapskIK+HjjW0aRLJb8Vs4TY/oQ/gH5SxgAQdx0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd/X9130J0f5V9P/l49ylTOH9wsMB8GA1UdIwQY MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5 LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTMCbx3Q mt7hC+7DzwG4YIHJa0cpdX/v6+h0euDfKZDRuUN8VCQVFx0LgIJ0aS9tFV2nL0kR hEVdtf+1ptdUxCXiHRskp9IalnxUrLEREdBVR4OM4SJHhTw2AcyWT1Ps/yeY+L8Q vCqyMJK9ImKohtqVsJKlhLxSWhZ+BPEMnBTyNO/052Xkdd6k/ynelyi9/hvJyYjQ 3eH4fxP/A2smNI1tqAcALzbhtRlocCI6y5S9nGnoMxRsupXtk3UzxleqIY57d+pw k3KYEKq76dGZDKY1WDcNW46LpTPRmWuHvoyJcjFjLNsJq2p+Fq7TJo4AA45N3BiQ +tS19O0+bUiTtw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:33 2025 by rpki-client