This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json) Hash identifier: 2GExniZWreGMNi/SDOihz+Gn5BrUiUJ2IE7wGcsp4qo= Subject key identifier: 63:4A:5C:0A:E8:37:F0:DD:BA:FA:DE:E9:7B:6C:7C:E6:ED:1C:ED:4B Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Certificate serial: 019B51BD40CDE412FF33B56347CA6CC6746F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft Manifest number: 0A5A Signing time: Wed 24 Dec 2025 19:01:55 +0000 Manifest this update: Wed 24 Dec 2025 19:01:55 +0000 Manifest next update: Thu 25 Dec 2025 19:01:55 +0000 Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: umVsTE4bsY7YP7EzF/ffJCCGrLBMCFjD6W8+9p3IEN8=) 2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:40:cd:e4:12:ff:33:b5:63:47:ca:6c:c6:74:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Validity Not Before: Dec 24 19:01:55 2025 GMT Not After : Dec 25 19:01:55 2025 GMT Subject: CN=634a5c0ae837f0ddbafadee97b6c7ce6ed1ced4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:c2:bc:b7:b2:e3:de:99:4f:fa:40:5b:7c: b6:cb:08:73:02:4b:c2:2b:2a:2c:69:a6:37:51:47: a8:d2:f8:e8:f2:55:10:dc:97:2c:37:bf:48:a7:93: 26:1a:42:a8:c4:06:1d:12:b3:60:37:86:a1:5d:08: 50:0e:97:be:35:f3:31:46:64:55:e1:28:79:c3:9f: 8b:66:86:c8:79:e4:2d:45:a5:e6:a8:a7:df:80:cf: 0c:a6:5c:7c:96:51:60:e4:1e:88:9f:ec:43:95:46: 50:02:76:9c:f0:8f:80:7b:7f:48:10:3f:0e:d5:db: fd:61:77:62:ca:83:45:9b:14:70:f3:0e:8b:32:cf: c7:d8:2d:7b:3c:89:d8:58:ff:75:fb:f8:d0:a3:55: 02:32:90:5c:92:b4:21:9d:97:ab:a9:bf:dc:18:68: 47:9e:c9:43:61:98:fe:77:01:5a:e0:92:4c:1e:a5: a0:5a:3d:0d:f2:46:e2:d8:23:33:c6:f9:8e:95:c7: 9c:c7:06:c4:e4:ff:8d:a1:0e:a7:24:2f:42:e1:00: 5d:34:80:81:cd:bc:8b:11:31:a1:d8:f4:1a:a3:c9: 8f:bb:1b:17:c8:4d:bc:13:3b:a0:a6:7f:5f:43:e3: 60:9d:13:69:e4:59:cd:07:e0:08:40:1b:2d:22:78: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4A:5C:0A:E8:37:F0:DD:BA:FA:DE:E9:7B:6C:7C:E6:ED:1C:ED:4B X509v3 Authority Key Identifier: keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ce:5d:7b:88:3e:08:c6:cc:c1:7f:cf:be:b3:44:9e:d1:92: 35:73:5b:43:f4:e1:73:f6:3f:a3:a0:b1:bd:41:b9:ff:bb:90: b4:1a:69:41:d2:53:95:32:f8:02:b8:f8:72:22:42:65:db:6e: 1b:b0:39:fa:f7:26:a7:18:60:4e:fd:8b:82:e6:59:3d:5f:aa: 8a:f6:90:ac:31:9e:46:17:40:82:66:14:df:a9:cf:b2:d3:06: f4:e1:87:1e:68:27:1f:33:95:4a:00:29:17:ac:e7:c2:62:26: 31:56:8d:78:a6:75:5b:1b:40:ca:14:a5:b0:0e:f9:4b:72:b7: 06:35:12:f5:aa:7d:08:58:88:1d:3e:a5:75:f4:0c:10:79:fc: 7d:9a:25:80:b4:6e:58:f7:c1:08:ba:db:bd:6e:a5:27:6f:4b: 9f:77:52:33:76:71:54:6d:0e:47:96:f8:5f:bf:36:62:f1:7b: 80:f9:d9:b2:d9:8e:3e:54:aa:df:4f:de:84:ad:75:4f:f8:d8: 23:1d:08:eb:1e:37:b1:a8:3f:9b:71:13:6a:9c:6e:8a:79:b3: c8:4f:c6:48:0b:cd:b5:a0:84:59:ff:01:7d:5f:2e:23:95:ac: 0f:99:ad:d3:d5:d5:42:0c:25:8e:3c:31:ef:1a:05:95:e9:60: 51:e6:76:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvUDN5BL/M7VjR8psxnRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjdmMzBhMGQ5MGQyZDE3Mjk5MmU5YWVhNmY3MzlkMDFi Mjg3OTIwHhcNMjUxMjI0MTkwMTU1WhcNMjUxMjI1MTkwMTU1WjAzMTEwLwYDVQQD Eyg2MzRhNWMwYWU4MzdmMGRkYmFmYWRlZTk3YjZjN2NlNmVkMWNlZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLDCvLey496ZT/pAW3y2ywhzAkvC KyosaaY3UUeo0vjo8lUQ3JcsN79Ip5MmGkKoxAYdErNgN4ahXQhQDpe+NfMxRmRV 4Sh5w5+LZobIeeQtRaXmqKffgM8Mplx8llFg5B6In+xDlUZQAnac8I+Ae39IED8O 1dv9YXdiyoNFmxRw8w6LMs/H2C17PInYWP91+/jQo1UCMpBckrQhnZerqb/cGGhH nslDYZj+dwFa4JJMHqWgWj0N8kbi2CMzxvmOlcecxwbE5P+NoQ6nJC9C4QBdNICB zbyLETGh2PQao8mPuxsXyE28Ezugpn9fQ+NgnRNp5FnNB+AIQBstInhxiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNKXAroN/Dduvre6XtsfObtHO1LMB8GA1UdIwQY MBaAFCBn8woNkNLRcpkumupvc50BsoeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMt YmE0OTI2ZTk2NWU4LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMtYmE0OTI2ZTk2NWU4 LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM5de4g+ CMbMwX/PvrNEntGSNXNbQ/Thc/Y/o6CxvUG5/7uQtBppQdJTlTL4Arj4ciJCZdtu G7A5+vcmpxhgTv2LguZZPV+qivaQrDGeRhdAgmYU36nPstMG9OGHHmgnHzOVSgAp F6znwmImMVaNeKZ1WxtAyhSlsA75S3K3BjUS9ap9CFiIHT6ldfQMEHn8fZolgLRu WPfBCLrbvW6lJ29Ln3dSM3ZxVG0OR5b4X782YvF7gPnZstmOPlSq30/ehK11T/jY Ix0I6x43sag/m3ETapxuinmzyE/GSAvNtaCEWf8BfV8uI5WsD5mt09XVQgwljjwx 7xoFlelgUeZ2bg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:26:06 2025 by rpki-client