This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: NtSemI5ohWT7DN1lY5rCGAg/jH0k5v7evK6a1VRg/wU= Subject key identifier: 5A:65:FC:86:C5:81:2F:00:F1:02:51:1C:85:E2:44:49:BF:FB:82:05 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B4280549F223E7D9375AE6211BCB34ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 179C Signing time: Sun 21 Dec 2025 20:01:04 +0000 Manifest this update: Sun 21 Dec 2025 20:01:04 +0000 Manifest next update: Mon 22 Dec 2025 20:01:04 +0000 Files and hashes: 1: 2gcY3ooMDtENNPRWePtszkCDkgs.roa (hash: PLRCudoMhsoW+Bz0W12dYcuTY5aB41TFPhykgGGz39I=) 2: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 3: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: ynBtJfVoYWTlflpw8X/pqAiLo7KWRCzOeis6NsD1Ag0=) 4: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 5: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 6: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 7: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 8: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 9: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 10: XfeVybS-JJmUst6aHDqcoct7XK0.roa (hash: nYNNvQT6vs/H7ho6wlD5EX5eXnEUV3YAmuK8qzDOCmA=) 11: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=) 12: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 13: gmw7pLwjm6vuBLTk-rK2D36QKkA.roa (hash: COLQkZAyHhSJJDAy86nI3z09V/OufPhY+8kBah7bzeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:54:9f:22:3e:7d:93:75:ae:62:11:bc:b3:4e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Dec 21 20:01:04 2025 GMT Not After : Dec 22 20:01:04 2025 GMT Subject: CN=5a65fc86c5812f00f102511c85e24449bffb8205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:ad:6c:51:aa:c9:53:27:f7:29:cc:b7:6e: 5c:97:d2:23:3d:12:af:3a:d8:06:e8:78:09:07:77: 1a:97:02:dc:cf:d2:cc:59:14:25:93:ad:f5:6d:f9: 2c:32:04:af:c7:56:20:9f:24:6d:4b:5f:92:9b:3f: fe:cd:10:44:bf:3f:82:b2:39:19:9c:15:e9:70:97: 88:6a:05:26:b6:f6:f0:82:c6:e1:1d:75:6a:a1:77: 84:f4:c0:2c:f0:30:5b:74:1d:9d:36:cd:66:ad:6d: ea:2d:9c:3f:3d:da:ab:1e:48:7c:5b:3f:99:49:6d: e4:3c:3c:4e:92:95:6c:41:4c:4d:8b:b1:fd:ba:77: df:8d:ce:71:3a:07:60:5f:32:2b:4a:47:5c:39:06: cb:6a:cb:52:d9:52:c1:3e:6f:63:0b:b8:c5:5e:b1: a3:9b:96:34:1b:ad:79:18:0a:d6:1c:b6:43:42:d6: 0a:d2:6f:97:07:0b:6b:b6:56:1e:26:39:2e:5b:08: 3d:4b:91:75:63:b8:12:6e:c1:6d:03:6e:80:cd:8d: 41:eb:c8:67:de:e5:29:bf:e3:8e:9c:11:07:e1:dc: 06:d8:9e:dc:d9:3b:d8:cc:9b:c2:4c:01:50:54:26: 68:42:c1:36:11:fa:8e:42:af:85:39:61:03:0a:a9: ec:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:65:FC:86:C5:81:2F:00:F1:02:51:1C:85:E2:44:49:BF:FB:82:05 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6e:4e:1b:d1:fe:e6:7e:1d:a5:bf:0e:58:52:12:a5:31:b6: ed:85:f0:60:35:4e:d8:51:7c:67:79:5c:54:c7:09:c2:77:de: 74:fa:eb:58:b0:ef:ce:e4:0d:74:e6:be:2c:93:44:e4:ca:2e: 2f:05:58:23:12:38:b1:19:e4:78:e9:64:98:6a:c7:33:32:d2: 6a:f2:89:08:69:fa:e6:90:0b:46:ec:ff:02:a1:9e:ef:54:3d: 84:16:28:5f:65:71:6e:1c:0a:c1:af:91:8c:15:cc:65:32:e9: a9:07:37:4a:57:49:61:59:83:e8:1c:58:0d:6e:2b:d8:01:48: aa:a3:df:c9:8c:6b:81:ca:4d:cc:f4:52:4a:9d:5e:bf:c4:f5: 1b:7a:50:a4:0e:65:57:63:4a:6f:9f:0f:60:2b:fe:34:f7:a0: 4c:e6:6d:50:e1:cf:92:8e:30:c4:47:36:33:93:c4:16:cc:ea: 18:ca:ea:95:17:e2:56:ea:19:c5:05:df:81:7f:ca:30:af:f5: 12:39:83:92:83:5a:e2:f3:ea:56:d0:82:8d:e2:40:6a:9e:6d: e3:a6:70:35:eb:d0:97:cf:4a:47:b9:d1:e4:84:a6:31:f4:3c: 75:40:a8:58:f4:03:52:3f:76:73:8d:6f:a4:eb:d6:da:97:2a: 3d:cb:24:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgFSfIj59k3WuYhG8s07OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUxMjIxMjAwMTA0WhcNMjUxMjIyMjAwMTA0WjAzMTEwLwYDVQQD Eyg1YTY1ZmM4NmM1ODEyZjAwZjEwMjUxMWM4NWUyNDQ0OWJmZmI4MjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU6tbFGqyVMn9ynMt25cl9IjPRKv OtgG6HgJB3calwLcz9LMWRQlk631bfksMgSvx1YgnyRtS1+Smz/+zRBEvz+CsjkZ nBXpcJeIagUmtvbwgsbhHXVqoXeE9MAs8DBbdB2dNs1mrW3qLZw/PdqrHkh8Wz+Z SW3kPDxOkpVsQUxNi7H9unffjc5xOgdgXzIrSkdcOQbLastS2VLBPm9jC7jFXrGj m5Y0G615GArWHLZDQtYK0m+XBwtrtlYeJjkuWwg9S5F1Y7gSbsFtA26AzY1B68hn 3uUpv+OOnBEH4dwG2J7c2TvYzJvCTAFQVCZoQsE2EfqOQq+FOWEDCqnsUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpl/IbFgS8A8QJRHIXiREm/+4IFMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADW5OG9H+ 5n4dpb8OWFISpTG27YXwYDVO2FF8Z3lcVMcJwnfedPrrWLDvzuQNdOa+LJNE5Mou LwVYIxI4sRnkeOlkmGrHMzLSavKJCGn65pALRuz/AqGe71Q9hBYoX2VxbhwKwa+R jBXMZTLpqQc3SldJYVmD6BxYDW4r2AFIqqPfyYxrgcpNzPRSSp1ev8T1G3pQpA5l V2NKb58PYCv+NPegTOZtUOHPko4wxEc2M5PEFszqGMrqlRfiVuoZxQXfgX/KMK/1 EjmDkoNa4vPqVtCCjeJAap5t46ZwNevQl89KR7nR5ISmMfQ8dUCoWPQDUj92c41v pOvW2pcqPcskmA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:47 2025 by rpki-client