This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json) Hash identifier: SYEu0rSV/ASCZ4iU+1HfFK/x2KbrncOGz6u/KhzOA3c= Subject key identifier: 1F:1C:13:49:B7:83:D3:8F:9A:78:DB:7F:B4:DB:D8:56:2E:5E:E7:4B Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e Certificate serial: 019B2DB0BA78BC6C19826771467505B195B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft Manifest number: 0302 Signing time: Wed 17 Dec 2025 19:01:55 +0000 Manifest this update: Wed 17 Dec 2025 19:01:55 +0000 Manifest next update: Thu 18 Dec 2025 19:01:55 +0000 Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: HLzu0FRO/tRy32u8nyQnAoGRLscpsnDB/ZdZ5Vgw20M=) 2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:ba:78:bc:6c:19:82:67:71:46:75:05:b1:95:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e Validity Not Before: Dec 17 19:01:55 2025 GMT Not After : Dec 18 19:01:55 2025 GMT Subject: CN=1f1c1349b783d38f9a78db7fb4dbd8562e5ee74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:e8:39:fa:17:67:a1:e4:33:36:22:9f:a0: 3a:68:13:1c:2a:50:1c:a1:36:52:c6:31:29:2c:cd: eb:c7:f7:c7:37:25:d5:e6:74:46:cb:f9:41:00:2a: 97:a0:02:9d:3d:8f:d8:f9:34:0a:49:23:25:27:81: 46:4d:27:c0:f9:64:31:92:e6:56:91:02:34:48:c9: 80:6e:ec:f9:76:26:77:d8:19:97:5a:d2:0e:38:d5: 98:ba:41:9e:55:fb:76:1c:19:88:1c:93:f4:f3:b9: aa:12:74:04:10:67:3c:e9:22:7f:4b:0d:18:c0:80: 58:e4:2d:23:4e:f5:1a:1f:f9:c8:74:e3:64:2c:04: 15:90:74:c2:ce:ef:8a:74:e0:c8:f6:e5:3f:5a:5b: 12:d2:01:e4:3c:fe:5c:28:3b:38:55:ea:9c:ac:7d: 80:da:ad:a0:c7:13:f8:1d:dd:ff:0f:1b:e3:f9:95: 1d:a8:ed:be:88:14:d1:b1:ae:3b:c2:d6:10:e9:eb: c8:be:f5:4a:4c:da:b5:39:29:95:8e:2c:5e:57:77: 7c:69:63:a7:00:52:cc:cd:a5:81:e9:82:9a:3d:cf: 77:53:46:5b:7a:0c:21:a2:82:cc:3f:df:93:8f:b2: 3b:68:e1:26:cd:2c:1a:a2:c5:b7:00:16:c4:67:5f: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1C:13:49:B7:83:D3:8F:9A:78:DB:7F:B4:DB:D8:56:2E:5E:E7:4B X509v3 Authority Key Identifier: keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:80:6b:ef:12:dd:36:62:99:6f:4f:0a:f6:1d:81:59:16:35: cd:eb:34:da:ff:eb:5b:4b:b4:8c:d3:ae:a8:77:c0:8b:5e:ff: 87:4e:98:71:16:70:4e:c3:19:64:11:be:50:9c:59:1e:13:ae: 5a:15:45:b8:c9:1f:16:62:12:57:0f:4f:78:6e:63:3a:e7:1a: e3:d3:b7:53:24:be:44:0b:30:1c:11:5c:e1:24:f0:ea:14:4e: 7f:4c:ea:3c:f3:7c:1b:f9:69:3a:6e:73:41:34:b3:08:7d:e9: 5b:d0:e6:64:8a:66:a3:4f:c5:56:33:d8:8d:aa:a0:f6:d2:38: 94:2e:89:f1:61:46:69:49:1a:9a:0c:80:a1:51:87:a3:76:25: 27:af:1a:8a:aa:a9:98:e0:cd:aa:c8:4f:e2:c6:af:ec:36:17: e4:45:e7:c2:41:bd:c1:d0:7b:9c:ac:5e:50:40:c5:98:1a:83: 6a:4f:89:d3:dc:00:ad:8c:a8:61:d8:fc:81:be:fb:06:b1:04: 12:07:7d:42:c9:30:bf:df:a5:cf:e0:29:ad:b4:f2:20:d8:d9: 7a:6f:59:a7:de:85:af:32:ca:6b:fa:3c:96:54:45:ea:31:87: f6:f0:be:18:05:25:51:2b:88:f2:25:f8:bb:9b:c1:58:2b:ab: a0:b4:df:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsLp4vGwZgmdxRnUFsZW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NmZhZjE4MjAwNzRiNzliNjAyNWRkZmZhYjI1Y2IzZjc3 NDQyNGUwHhcNMjUxMjE3MTkwMTU1WhcNMjUxMjE4MTkwMTU1WjAzMTEwLwYDVQQD EygxZjFjMTM0OWI3ODNkMzhmOWE3OGRiN2ZiNGRiZDg1NjJlNWVlNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEroOfoXZ6HkMzYin6A6aBMcKlAc oTZSxjEpLM3rx/fHNyXV5nRGy/lBACqXoAKdPY/Y+TQKSSMlJ4FGTSfA+WQxkuZW kQI0SMmAbuz5diZ32BmXWtIOONWYukGeVft2HBmIHJP087mqEnQEEGc86SJ/Sw0Y wIBY5C0jTvUaH/nIdONkLAQVkHTCzu+KdODI9uU/WlsS0gHkPP5cKDs4VeqcrH2A 2q2gxxP4Hd3/Dxvj+ZUdqO2+iBTRsa47wtYQ6evIvvVKTNq1OSmVjixeV3d8aWOn AFLMzaWB6YKaPc93U0ZbegwhooLMP9+Tj7I7aOEmzSwaosW3ABbEZ1+A/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8cE0m3g9OPmnjbf7Tb2FYuXudLMB8GA1UdIwQY MBaAFIhvrxggB0t5tgJd3/qyXLP3dEJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUctdkdDQUhTM20yQWwzZi1ySmNzX2QwUWs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wNmQwZWEtMTk2Ny00Y2ZmLTkzYjct YTU4ZjhjZWM0YjUxLzEvaUctdkdDQUhTM20yQWwzZi1ySmNzX2QwUWs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wNmQwZWEtMTk2Ny00Y2ZmLTkzYjctYTU4ZjhjZWM0YjUx LzEvaUctdkdDQUhTM20yQWwzZi1ySmNzX2QwUWs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIBr7xLd NmKZb08K9h2BWRY1zes02v/rW0u0jNOuqHfAi17/h06YcRZwTsMZZBG+UJxZHhOu WhVFuMkfFmISVw9PeG5jOuca49O3UyS+RAswHBFc4STw6hROf0zqPPN8G/lpOm5z QTSzCH3pW9DmZIpmo0/FVjPYjaqg9tI4lC6J8WFGaUkamgyAoVGHo3YlJ68aiqqp mODNqshP4sav7DYX5EXnwkG9wdB7nKxeUEDFmBqDak+J09wArYyoYdj8gb77BrEE Egd9Qskwv9+lz+AprbTyINjZem9Zp96FrzLKa/o8llRF6jGH9vC+GAUlUSuI8iX4 u5vBWCuroLTfRw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:39:27 2025 by rpki-client