This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft File: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json) Hash identifier: jtrtYHo2l88nMT3R6tCrRksrjIuWHy5EwvQ9Rv+GxwI= Subject key identifier: 53:B7:6A:78:E3:7D:99:FB:BC:07:B5:EE:66:2F:DD:2F:AE:26:B5:65 Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Certificate serial: 019B507331C409466663A74E81E3B7B2AC96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 13:01:25 +0000 Manifest this update: Wed 24 Dec 2025 13:01:25 +0000 Manifest next update: Thu 25 Dec 2025 13:01:25 +0000 Files and hashes: 1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=) 2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: 5w7c5E4ILRPpLIfRx3/TQNTcX86a0lfXHTAiY+8a3uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:31:c4:09:46:66:63:a7:4e:81:e3:b7:b2:ac:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Validity Not Before: Dec 24 13:01:25 2025 GMT Not After : Dec 25 13:01:25 2025 GMT Subject: CN=53b76a78e37d99fbbc07b5ee662fdd2fae26b565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:3e:1a:b6:28:f6:a1:34:1e:81:d1:7c:ef: e6:e8:87:ab:68:f2:e1:00:0a:ca:6e:8b:75:6e:eb: 5a:2b:5b:aa:8f:cc:71:4c:83:de:5b:8a:6d:84:22: 56:9e:7c:1f:08:41:1a:f5:7c:c1:89:bc:1c:8e:7c: d9:06:27:85:05:ec:10:34:53:b2:ae:0c:58:73:24: bf:23:12:73:1e:66:49:0e:f7:21:ec:93:db:53:b5: 4f:b5:53:b8:91:64:48:b2:64:ed:3a:7e:a8:2b:f2: e0:c1:6b:f7:12:1e:e2:f4:39:c1:5b:26:26:2d:bc: 67:c0:78:dc:b2:84:3e:da:ed:a9:8e:df:e9:63:45: c6:42:60:29:10:4e:0b:2d:3d:33:3f:58:d0:cb:2d: 3c:b2:b1:0e:6e:f0:af:f8:90:ec:4d:52:d1:0e:b9: 9d:3d:8e:c5:39:0f:85:60:2f:cb:65:34:5a:b3:25: d4:d4:c1:1b:a7:d6:3c:ac:5b:c8:88:51:06:2a:fe: d9:2f:3c:69:fe:41:7b:82:eb:d7:3f:89:26:1a:b7: d8:4f:20:31:99:e1:e0:29:d0:c2:07:82:61:b2:56: ff:4f:c1:b4:d9:52:51:7f:fd:e4:6e:13:89:b8:84: 4b:9b:09:9f:4c:34:5f:ed:c5:be:67:17:ef:fd:b3: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B7:6A:78:E3:7D:99:FB:BC:07:B5:EE:66:2F:DD:2F:AE:26:B5:65 X509v3 Authority Key Identifier: keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0c:53:16:aa:11:57:2c:d6:d6:2a:b5:cf:2b:9b:ec:ae:ce: 44:55:eb:12:81:33:4c:76:0a:77:a3:0e:a5:88:da:72:a0:bf: d2:60:ce:15:45:89:9d:83:35:2d:2e:68:69:0e:6e:c0:2e:8e: 17:4f:45:b1:85:56:00:69:d3:ac:38:a7:7e:51:3a:3a:a5:57: f0:5b:ea:77:ab:26:22:ba:db:63:7b:dd:90:81:2a:bc:67:f2: 74:cf:7c:5d:70:43:e6:1b:72:04:d7:f5:47:e2:11:ed:54:de: 48:6f:09:d5:1f:69:5a:07:e6:61:8e:ca:c5:ce:f5:ce:2a:38: 5d:95:50:7c:24:02:49:72:63:a6:f9:9f:a7:ea:52:12:c4:38: 34:84:fc:e1:33:4d:01:00:1a:88:ca:cc:85:81:d7:bf:8e:fc: 74:33:67:49:80:07:f8:08:d3:5d:86:5d:f3:ad:80:a9:cb:f1: 36:39:84:69:c7:9a:05:45:23:1c:82:53:51:e2:54:f4:1b:b3: 36:65:25:f8:67:a1:fb:82:a2:5b:76:ec:2b:11:42:5a:75:51: f5:22:9c:51:16:bc:87:47:c0:c8:5e:15:ac:b6:07:fe:d8:e6: 89:9d:2c:35:aa:1d:bd:1b:a8:21:d7:cb:4a:61:dc:3e:d0:a7: f6:2b:0f:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQczHECUZmY6dOgeO3sqyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzhkMTE5MWY2NmYxZjAzMTVkZTVmNDVjYzE5NGQxY2Qx OWQxZmIwHhcNMjUxMjI0MTMwMTI1WhcNMjUxMjI1MTMwMTI1WjAzMTEwLwYDVQQD Eyg1M2I3NmE3OGUzN2Q5OWZiYmMwN2I1ZWU2NjJmZGQyZmFlMjZiNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgo+GrYo9qE0HoHRfO/m6IeraPLh AArKbot1butaK1uqj8xxTIPeW4pthCJWnnwfCEEa9XzBibwcjnzZBieFBewQNFOy rgxYcyS/IxJzHmZJDvch7JPbU7VPtVO4kWRIsmTtOn6oK/LgwWv3Eh7i9DnBWyYm LbxnwHjcsoQ+2u2pjt/pY0XGQmApEE4LLT0zP1jQyy08srEObvCv+JDsTVLRDrmd PY7FOQ+FYC/LZTRasyXU1MEbp9Y8rFvIiFEGKv7ZLzxp/kF7guvXP4kmGrfYTyAx meHgKdDCB4Jhslb/T8G02VJRf/3kbhOJuIRLmwmfTDRf7cW+Zxfv/bOwvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO3anjjfZn7vAe17mYv3S+uJrVlMB8GA1UdIwQY MBaAFIo40RkfZvHwMV3l9FzBlNHNGdH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEt ODRmOGZkYzBjNjk4LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEtODRmOGZkYzBjNjk4 LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgxTFqoR VyzW1iq1zyub7K7ORFXrEoEzTHYKd6MOpYjacqC/0mDOFUWJnYM1LS5oaQ5uwC6O F09FsYVWAGnTrDinflE6OqVX8Fvqd6smIrrbY3vdkIEqvGfydM98XXBD5htyBNf1 R+IR7VTeSG8J1R9pWgfmYY7Kxc71zio4XZVQfCQCSXJjpvmfp+pSEsQ4NIT84TNN AQAaiMrMhYHXv478dDNnSYAH+AjTXYZd862AqcvxNjmEaceaBUUjHIJTUeJU9Buz NmUl+Geh+4KiW3bsKxFCWnVR9SKcURa8h0fAyF4VrLYH/tjmiZ0sNaodvRuoIdfL SmHcPtCn9isPGQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:27:04 2025 by rpki-client