This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json) Hash identifier: ker/P/C5ArMFBuF6vEmxuPaxGS0oor6R3f2YK+lfFEY= Subject key identifier: F3:F0:42:81:87:6B:70:CF:03:43:46:7C:68:5F:7B:E3:17:0C:26:DF Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d Certificate serial: 019B3E6D8C45AD547900B37CB45839ADC5F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft Manifest number: 03CA Signing time: Sun 21 Dec 2025 01:02:05 +0000 Manifest this update: Sun 21 Dec 2025 01:02:05 +0000 Manifest next update: Mon 22 Dec 2025 01:02:05 +0000 Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=) 2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: Rz00LE3mBE9FoPYwBbtsIfvULdaXQMtP9o2G27kIU+c=) 3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:8c:45:ad:54:79:00:b3:7c:b4:58:39:ad:c5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d Validity Not Before: Dec 21 01:02:05 2025 GMT Not After : Dec 22 01:02:05 2025 GMT Subject: CN=f3f04281876b70cf0343467c685f7be3170c26df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:b6:b4:9f:8d:08:a1:16:2f:ad:88:ba:74: 87:9e:fc:59:3d:59:6d:07:8a:e6:43:25:e5:a1:76: 2e:a7:ed:28:f1:f6:78:64:b6:1d:44:9a:79:17:ba: ec:ba:a4:df:4f:60:32:bd:99:b5:12:9d:84:64:de: 83:17:8e:b9:57:e9:33:17:36:a5:6e:c4:df:fc:a9: a9:96:d4:c6:08:b6:9d:d5:03:50:7c:c8:a0:72:a6: ff:00:1e:fb:f3:99:db:b3:33:d8:2c:b7:83:34:a6: 8b:0a:ad:ac:5d:99:58:6f:28:f3:f9:1c:19:cf:28: 0a:e4:8a:b6:75:00:84:58:10:ad:3e:63:85:b0:8b: 2b:18:fa:f3:3b:23:96:91:58:4a:a1:78:83:3e:18: 0a:2e:0f:38:a1:0c:a8:20:22:c9:e5:68:c1:11:b7: 6e:ff:b2:02:0f:8b:4d:c5:ea:97:ef:e3:84:82:01: 13:64:7d:50:6b:65:55:cc:a2:d0:4a:d8:4f:33:10: 27:c5:9d:b4:6d:a4:4d:76:00:80:a0:95:23:cf:ee: 6e:af:64:4d:62:2e:17:e5:93:0d:7b:ba:16:ef:ad: 01:29:a8:f6:f7:06:8c:5f:14:58:c6:c0:a8:62:64: 3f:a1:33:1b:b3:b4:1b:0c:e6:38:a6:02:aa:55:6d: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F0:42:81:87:6B:70:CF:03:43:46:7C:68:5F:7B:E3:17:0C:26:DF X509v3 Authority Key Identifier: keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:84:6e:ca:a2:24:af:88:5f:12:b4:f7:84:f8:40:fb:72: 10:d6:10:56:b5:93:1a:a4:c9:06:bd:cc:b3:eb:59:e7:c3:a3: e4:81:3b:71:2f:b5:da:f5:22:6e:c1:8d:b2:5f:d9:e9:78:da: 1c:fd:97:19:bf:ae:8c:6c:f4:01:63:11:5a:81:8e:cf:8d:90: 8c:c2:e7:9b:16:f7:8e:5e:c0:eb:58:fb:ac:15:23:5e:21:2e: 2d:4a:c9:eb:ab:50:2d:95:4f:44:fb:07:a5:ea:95:c2:88:6e: a1:7c:4f:a0:77:de:d9:95:93:a0:f0:c4:5d:2f:a9:28:e9:13: 38:36:c9:3f:ac:32:c0:07:c4:22:1c:35:d9:2e:9f:a7:20:d1: 73:80:73:96:7e:cd:4e:52:f6:c5:39:cb:23:cb:65:2f:07:93: be:2f:90:34:c7:3c:4d:ad:d4:7c:9a:73:b9:46:d9:01:77:c3: 95:00:69:ce:2f:0f:30:dc:50:6e:1c:e9:e7:99:56:06:b6:d4: b3:60:62:f8:ce:63:88:58:bb:3d:34:f6:9c:fe:d6:8b:20:e5: 56:d8:fb:5f:61:59:a2:48:72:af:0f:6a:7b:11:2f:2a:05:77: 2f:45:d9:02:17:c2:fb:3b:4c:f2:a3:9d:17:b2:b0:10:87:99: 66:ad:7a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bYxFrVR5ALN8tFg5rcXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOWRhNzgzY2RmYjNjYjZkOWJjODJjMTkyZDZkNzJhYmI0 YTMzNmQwHhcNMjUxMjIxMDEwMjA1WhcNMjUxMjIyMDEwMjA1WjAzMTEwLwYDVQQD EyhmM2YwNDI4MTg3NmI3MGNmMDM0MzQ2N2M2ODVmN2JlMzE3MGMyNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/K2tJ+NCKEWL62IunSHnvxZPVlt B4rmQyXloXYup+0o8fZ4ZLYdRJp5F7rsuqTfT2AyvZm1Ep2EZN6DF465V+kzFzal bsTf/KmpltTGCLad1QNQfMigcqb/AB7785nbszPYLLeDNKaLCq2sXZlYbyjz+RwZ zygK5Iq2dQCEWBCtPmOFsIsrGPrzOyOWkVhKoXiDPhgKLg84oQyoICLJ5WjBEbdu /7ICD4tNxeqX7+OEggETZH1Qa2VVzKLQSthPMxAnxZ20baRNdgCAoJUjz+5ur2RN Yi4X5ZMNe7oW760BKaj29waMXxRYxsCoYmQ/oTMbs7QbDOY4pgKqVW23EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPwQoGHa3DPA0NGfGhfe+MXDCbfMB8GA1UdIwQY MBaAFCCdp4PN+zy22byCwZLW1yq7SjNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTct Mjg0NjFiZTg5NzQwLzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTctMjg0NjFiZTg5NzQw LzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoGEbsqi JK+IXxK094T4QPtyENYQVrWTGqTJBr3Ms+tZ58Oj5IE7cS+12vUibsGNsl/Z6Xja HP2XGb+ujGz0AWMRWoGOz42QjMLnmxb3jl7A61j7rBUjXiEuLUrJ66tQLZVPRPsH peqVwohuoXxPoHfe2ZWToPDEXS+pKOkTODbJP6wywAfEIhw12S6fpyDRc4Bzln7N TlL2xTnLI8tlLweTvi+QNMc8Ta3UfJpzuUbZAXfDlQBpzi8PMNxQbhzp55lWBrbU s2Bi+M5jiFi7PTT2nP7WiyDlVtj7X2FZokhyrw9qexEvKgV3L0XZAhfC+ztM8qOd F7KwEIeZZq16Ug== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:34 2025 by rpki-client