This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json) Hash identifier: BzzdtZQv7YkdN7PhqOlIcMLxMwoppdzwKNSFY+A60Fs= Subject key identifier: 6E:3B:5A:13:90:4A:48:6F:80:4A:3D:DD:CA:85:7D:56:2E:76:B3:A0 Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07 Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607 Certificate serial: 019B3C107E9962D7D3948E935910A62A5946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 14:01:12 +0000 Manifest this update: Sat 20 Dec 2025 14:01:12 +0000 Manifest next update: Sun 21 Dec 2025 14:01:12 +0000 Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=) 2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: m+ndxQtrGTRyz1VcS9uKZPb1AaQvNQx5EubYE0BW9QY=) 3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:7e:99:62:d7:d3:94:8e:93:59:10:a6:2a:59:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607 Validity Not Before: Dec 20 14:01:12 2025 GMT Not After : Dec 21 14:01:12 2025 GMT Subject: CN=6e3b5a13904a486f804a3dddca857d562e76b3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:f5:48:fe:3c:ef:92:a3:7a:a4:52:df:ac: 3d:3c:54:46:0b:a9:75:f6:dd:c9:1c:2d:d8:db:3b: 3b:03:12:9d:94:81:21:07:a1:01:ef:7b:d7:ab:00: 3e:40:bf:cc:d1:69:4c:43:c5:e0:cf:b4:fb:51:48: 12:00:43:de:77:a0:6a:c9:bf:af:6d:46:0c:0a:3b: 6b:4d:57:9e:68:99:54:c0:06:66:3d:8f:7c:70:2f: 16:d9:58:77:d6:d5:9d:92:c5:06:f1:de:45:6f:5d: 12:18:17:92:b1:5f:c9:de:e7:dd:10:8e:e1:51:cf: 07:e1:63:75:63:3b:81:c8:3d:aa:b2:fd:da:fe:4b: fc:bd:99:7d:18:6b:7a:4a:65:87:e1:cc:1f:45:5c: d8:88:de:c9:d8:21:7e:3e:37:fd:e7:12:88:94:d3: 7d:ce:c5:1c:c5:75:aa:4c:b7:da:bc:90:02:44:2e: 48:08:30:9d:b0:b6:59:c0:3b:52:0b:ee:9d:f1:ac: ed:99:12:32:b7:a0:98:b3:4b:24:6e:a5:6f:e6:c3: 72:cc:ef:51:7e:78:c2:2b:36:3f:ef:75:5d:00:42: 70:17:d8:f3:fa:79:4d:58:2e:18:7c:0b:a5:10:c3: 49:13:3e:b3:f0:52:63:9f:0e:d1:24:72:f0:d8:82: 9e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3B:5A:13:90:4A:48:6F:80:4A:3D:DD:CA:85:7D:56:2E:76:B3:A0 X509v3 Authority Key Identifier: keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:81:1e:cc:5c:f8:12:d7:77:92:6f:59:3a:f4:f3:ee:68:b1: 37:a7:f7:a1:97:95:ad:b3:c2:f9:65:ee:63:3f:3f:70:be:33: 3b:d8:9b:8c:21:4a:4a:42:5e:11:31:ef:a3:08:f4:96:27:bf: 5e:59:42:a8:35:58:3b:a1:cc:d5:e9:57:37:02:9d:1e:63:43: dd:83:8e:4a:0e:80:d1:20:6d:d8:b2:64:dc:33:5a:65:43:33: b6:fb:de:45:47:1e:67:bc:65:56:d3:fa:e0:35:92:e4:a7:78: cc:f8:50:e9:a8:d8:6e:05:13:39:bf:ad:cb:b6:91:8b:79:c9: f3:ab:62:52:aa:f7:98:59:b6:c8:43:19:ed:09:d2:4a:db:48: 5a:7a:c1:37:e5:78:7e:49:8e:8f:1c:3f:05:fe:65:72:63:b5: 71:0c:f8:fe:a7:b6:b0:c2:fe:47:6f:48:87:e0:19:52:58:24: fe:1b:86:d9:0b:7b:33:27:91:ec:7a:44:2b:75:5a:e1:80:5a: 0f:b7:9f:59:17:53:b3:55:2b:ac:7d:85:5f:e7:4a:be:27:73: dc:c8:a7:26:90:f8:c8:b6:bd:13:7d:b9:d2:d6:59:c2:d4:a7: 22:04:07:e7:9d:32:80:d8:b4:5f:62:c2:f1:e2:62:a4:4a:64: 19:97:d0:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EH6ZYtfTlI6TWRCmKllGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl Zjg2MDcwHhcNMjUxMjIwMTQwMTEyWhcNMjUxMjIxMTQwMTEyWjAzMTEwLwYDVQQD Eyg2ZTNiNWExMzkwNGE0ODZmODA0YTNkZGRjYTg1N2Q1NjJlNzZiM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61/1SP4875KjeqRS36w9PFRGC6l1 9t3JHC3Y2zs7AxKdlIEhB6EB73vXqwA+QL/M0WlMQ8Xgz7T7UUgSAEPed6Bqyb+v bUYMCjtrTVeeaJlUwAZmPY98cC8W2Vh31tWdksUG8d5Fb10SGBeSsV/J3ufdEI7h Uc8H4WN1YzuByD2qsv3a/kv8vZl9GGt6SmWH4cwfRVzYiN7J2CF+Pjf95xKIlNN9 zsUcxXWqTLfavJACRC5ICDCdsLZZwDtSC+6d8aztmRIyt6CYs0skbqVv5sNyzO9R fnjCKzY/73VdAEJwF9jz+nlNWC4YfAulEMNJEz6z8FJjnw7RJHLw2IKeZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG47WhOQSkhvgEo93cqFfVYudrOgMB8GA1UdIwQY MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt ZTRiNzAyZjE2MTE2LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2 LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIEezFz4 Etd3km9ZOvTz7mixN6f3oZeVrbPC+WXuYz8/cL4zO9ibjCFKSkJeETHvowj0lie/ XllCqDVYO6HM1elXNwKdHmND3YOOSg6A0SBt2LJk3DNaZUMztvveRUceZ7xlVtP6 4DWS5Kd4zPhQ6ajYbgUTOb+ty7aRi3nJ86tiUqr3mFm2yEMZ7QnSSttIWnrBN+V4 fkmOjxw/Bf5lcmO1cQz4/qe2sML+R29Ih+AZUlgk/huG2Qt7MyeR7HpEK3Va4YBa D7efWRdTs1UrrH2FX+dKvidz3MinJpD4yLa9E3250tZZwtSnIgQH550ygNi0X2LC 8eJipEpkGZfQJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:24 2025 by rpki-client