This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json) Hash identifier: n59DGIcasR5Gebm4lE21oV1BZz6lEzwcf1sbWYWiBfs= Subject key identifier: 10:D8:A4:72:92:57:17:B0:84:1B:93:75:84:91:5B:5A:41:D5:C7:B4 Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Certificate serial: 019B53AB930AABEF3C94B8242A31B13EBCCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft Manifest number: 0A5B Signing time: Thu 25 Dec 2025 04:01:51 +0000 Manifest this update: Thu 25 Dec 2025 04:01:51 +0000 Manifest next update: Fri 26 Dec 2025 04:01:51 +0000 Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: LCrrCR3D0e+5yQzKz4Ip1cNO8DlJxs6YKvMNaAfeWKc=) 2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:93:0a:ab:ef:3c:94:b8:24:2a:31:b1:3e:bc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Validity Not Before: Dec 25 04:01:51 2025 GMT Not After : Dec 26 04:01:51 2025 GMT Subject: CN=10d8a472925717b0841b937584915b5a41d5c7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:51:ed:a4:70:9b:8a:ab:66:63:7a:cd:78:d2: 0e:1f:21:46:8d:09:28:c9:86:c7:02:34:66:06:ed: ba:08:46:a5:e9:f9:3f:83:0f:3d:ac:ce:b6:61:ea: eb:17:99:a9:4e:a8:eb:48:27:83:c7:64:0d:d7:eb: b2:6f:ba:70:ab:21:25:13:63:d0:61:9e:be:b6:7a: c6:46:ff:0e:41:83:f1:77:49:bd:34:f4:97:f4:63: cf:4a:c8:e1:b9:7f:45:0e:51:61:dd:55:fa:0c:a5: 94:5c:04:61:30:c4:8b:51:82:0e:f2:0b:86:df:f5: 5f:d2:59:1b:00:ac:21:87:fa:e5:d4:39:97:7b:14: 30:ea:45:48:59:bf:d3:85:c7:e2:11:c5:57:55:cb: 01:5c:f7:31:22:7c:da:dc:ba:dd:3b:1d:65:f7:8f: 88:3f:34:fd:eb:a9:aa:50:ae:9b:1e:c5:a8:b3:24: 6b:f6:b9:03:e0:16:5e:6e:a2:96:ac:22:00:1d:6e: cb:bd:ed:1a:84:af:e9:0c:98:83:28:a3:d7:69:9c: 4c:9f:4f:b1:dc:c7:4e:7f:2d:5c:e4:c6:ab:87:31: b2:73:cd:6e:42:68:61:75:29:95:63:c3:40:c7:0a: 53:db:81:c2:33:9d:a2:18:3c:36:32:a8:2e:ea:0c: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D8:A4:72:92:57:17:B0:84:1B:93:75:84:91:5B:5A:41:D5:C7:B4 X509v3 Authority Key Identifier: keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:20:80:1c:48:59:20:2a:b0:fa:ee:78:63:24:ee:03:07:8f: cf:af:b3:3a:ee:9d:1c:42:88:ab:1d:ec:ab:25:fa:d6:fe:2c: 90:44:f8:53:2c:9a:5b:c9:b7:c2:65:ad:15:7f:c5:a8:19:74: 7e:39:0b:f2:b4:75:fc:16:5b:86:97:3a:71:07:a6:0a:54:91: 10:90:6c:a1:06:f1:0e:70:5b:f4:73:ed:b0:af:2e:08:3b:87: dc:a9:0f:3e:ca:75:d0:c5:11:7a:6e:5c:ad:e6:07:82:99:8e: 4f:f2:41:e1:47:38:c0:31:fd:d4:7c:a7:82:bb:14:09:f2:09: 52:97:aa:ea:42:30:11:c0:01:94:36:92:01:12:56:e3:01:e0: ee:5e:92:aa:f9:0b:d1:a0:22:6a:d7:49:b9:43:79:64:c0:db: 80:a2:9c:db:e8:9b:5a:23:8e:c2:0b:3e:b5:20:15:ee:35:6e: f2:fd:12:1d:13:41:04:02:73:ec:cc:71:de:7f:1e:b8:d2:cf: f8:02:16:f6:7d:98:02:a5:50:8c:09:4e:58:4e:82:fb:f1:77: 78:38:3a:cd:31:ab:df:df:31:07:12:b0:55:17:3a:c3:d6:78: 10:fe:39:55:67:52:08:dd:1f:cd:e1:e7:f8:c1:20:3d:d7:27: f2:03:9a:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq5MKq+88lLgkKjGxPrzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjdmMzBhMGQ5MGQyZDE3Mjk5MmU5YWVhNmY3MzlkMDFi Mjg3OTIwHhcNMjUxMjI1MDQwMTUxWhcNMjUxMjI2MDQwMTUxWjAzMTEwLwYDVQQD EygxMGQ4YTQ3MjkyNTcxN2IwODQxYjkzNzU4NDkxNWI1YTQxZDVjN2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lHtpHCbiqtmY3rNeNIOHyFGjQko yYbHAjRmBu26CEal6fk/gw89rM62YerrF5mpTqjrSCeDx2QN1+uyb7pwqyElE2PQ YZ6+tnrGRv8OQYPxd0m9NPSX9GPPSsjhuX9FDlFh3VX6DKWUXARhMMSLUYIO8guG 3/Vf0lkbAKwhh/rl1DmXexQw6kVIWb/ThcfiEcVXVcsBXPcxInza3LrdOx1l94+I PzT966mqUK6bHsWosyRr9rkD4BZebqKWrCIAHW7Lve0ahK/pDJiDKKPXaZxMn0+x 3MdOfy1c5MarhzGyc81uQmhhdSmVY8NAxwpT24HCM52iGDw2Mqgu6gyNcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDYpHKSVxewhBuTdYSRW1pB1ce0MB8GA1UdIwQY MBaAFCBn8woNkNLRcpkumupvc50BsoeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMt YmE0OTI2ZTk2NWU4LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMtYmE0OTI2ZTk2NWU4 LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCCAHEhZ ICqw+u54YyTuAwePz6+zOu6dHEKIqx3sqyX61v4skET4UyyaW8m3wmWtFX/FqBl0 fjkL8rR1/BZbhpc6cQemClSREJBsoQbxDnBb9HPtsK8uCDuH3KkPPsp10MURem5c reYHgpmOT/JB4Uc4wDH91HyngrsUCfIJUpeq6kIwEcABlDaSARJW4wHg7l6SqvkL 0aAiatdJuUN5ZMDbgKKc2+ibWiOOwgs+tSAV7jVu8v0SHRNBBAJz7Mxx3n8euNLP +AIW9n2YAqVQjAlOWE6C+/F3eDg6zTGr398xBxKwVRc6w9Z4EP45VWdSCN0fzeHn +MEgPdcn8gOa0Q== -----END CERTIFICATE-----Generated at Thu Dec 25 09:11:40 2025 by rpki-client