This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json) Hash identifier: i3o1vsrzPVVZj0p+G+46zduYlCPLzQDCQv+eRodgv8E= Subject key identifier: CA:57:87:16:5F:A3:EF:D8:2B:DF:71:0E:63:45:6D:35:AC:E1:40:E7 Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6 Certificate serial: 019B397D48CA313BC7E24101F22F0D3E9FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft Manifest number: 0B3D Signing time: Sat 20 Dec 2025 02:01:10 +0000 Manifest this update: Sat 20 Dec 2025 02:01:10 +0000 Manifest next update: Sun 21 Dec 2025 02:01:10 +0000 Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=) 2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: wysjgOJfJoYWDpFyfOkNUPs5gp7b+Xv3krPTj4LeIME=) 3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:48:ca:31:3b:c7:e2:41:01:f2:2f:0d:3e:9f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6 Validity Not Before: Dec 20 02:01:10 2025 GMT Not After : Dec 21 02:01:10 2025 GMT Subject: CN=ca5787165fa3efd82bdf710e63456d35ace140e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:e2:30:87:89:69:2e:ce:22:ff:d0:bc:aa: b4:2d:a7:fd:8f:55:e1:66:ab:1b:a4:bd:98:64:ef: 92:22:2f:4e:8c:b7:ff:1a:da:35:61:10:bb:1e:42: ce:e2:32:39:2e:ce:3a:b0:40:51:44:ed:a5:aa:10: b4:ae:30:9b:85:90:d1:d8:36:b0:25:21:ce:f9:bb: e6:dc:06:55:b4:9f:8b:fe:b5:2e:96:9d:e5:43:11: 55:30:7c:87:92:c0:17:0a:77:20:aa:04:3c:1f:92: 08:1c:6d:4b:23:f4:7d:60:7f:ab:64:80:f1:24:62: bc:da:8c:48:01:35:4e:21:29:37:2e:d8:20:be:4c: 46:3b:ac:01:78:d0:1f:5d:7b:76:0f:d8:ec:2e:64: a0:93:3a:af:ea:e8:32:bd:d8:7f:1d:0b:b0:04:7a: 14:4e:7c:57:b1:b9:33:41:ac:58:8a:db:79:b8:e5: ee:14:f8:d6:da:d1:63:08:65:e2:8c:f7:d3:3b:e6: e3:82:f6:ea:f6:02:e8:9d:68:ea:b9:79:b6:2a:78: 78:32:22:93:24:75:a9:cb:f6:9c:7a:e0:29:3e:fa: 4e:69:16:05:7f:06:2f:d5:a1:02:eb:24:88:65:7f: ab:e3:df:2e:a0:1a:2e:3d:fc:9d:2a:bc:1a:46:1b: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:57:87:16:5F:A3:EF:D8:2B:DF:71:0E:63:45:6D:35:AC:E1:40:E7 X509v3 Authority Key Identifier: keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:73:de:4a:1f:3a:43:89:70:ab:5f:5d:f1:c4:60:e4:40:df: 0d:d0:4a:67:c8:d0:7d:c6:02:26:8c:f8:60:3c:bf:33:53:8d: e8:d1:a3:d0:ba:62:d1:1d:d4:2d:3e:14:67:26:ee:25:4c:56: 3d:bf:dd:bb:bd:78:26:68:5f:0d:c9:bf:17:e2:f9:52:b2:69: ef:69:0d:ec:3e:5e:0c:b7:44:5f:cd:db:42:69:2a:63:1c:ec: fc:98:2c:09:33:5f:c1:a5:06:65:ca:b3:b6:ec:36:40:26:3f: 3b:f0:87:85:43:dd:1c:18:99:e5:6e:bf:29:b0:65:49:97:f4: 4d:6f:63:dc:d4:23:8b:e0:d6:32:f0:1d:87:85:6d:5b:90:03: a8:9e:2b:79:7d:32:00:54:7b:57:a1:bf:76:02:00:25:c3:19: ae:fa:79:b4:6c:19:e7:69:a7:56:c4:f4:ca:54:00:d9:72:03: 03:a6:dc:a8:4c:ae:2f:e8:d7:5d:48:cb:1d:b6:1e:c4:c9:a6: 2e:58:ea:13:f9:5a:10:09:5a:e0:0b:de:1e:fd:94:d3:d3:64: b6:e7:3a:b3:52:7b:f3:6b:bf:bc:1c:8c:31:22:2c:1b:50:76: 95:bb:7d:8c:07:39:ed:62:b6:7e:ae:7c:02:e1:4e:80:a2:83: e6:ce:c7:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fUjKMTvH4kEB8i8NPp/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi OWQ2ZDYwHhcNMjUxMjIwMDIwMTEwWhcNMjUxMjIxMDIwMTEwWjAzMTEwLwYDVQQD EyhjYTU3ODcxNjVmYTNlZmQ4MmJkZjcxMGU2MzQ1NmQzNWFjZTE0MGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaXiMIeJaS7OIv/QvKq0Laf9j1Xh ZqsbpL2YZO+SIi9OjLf/Gto1YRC7HkLO4jI5Ls46sEBRRO2lqhC0rjCbhZDR2Daw JSHO+bvm3AZVtJ+L/rUulp3lQxFVMHyHksAXCncgqgQ8H5IIHG1LI/R9YH+rZIDx JGK82oxIATVOISk3LtggvkxGO6wBeNAfXXt2D9jsLmSgkzqv6ugyvdh/HQuwBHoU TnxXsbkzQaxYitt5uOXuFPjW2tFjCGXijPfTO+bjgvbq9gLonWjquXm2Knh4MiKT JHWpy/aceuApPvpOaRYFfwYv1aEC6ySIZX+r498uoBouPfydKrwaRhsMiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpXhxZfo+/YK99xDmNFbTWs4UDnMB8GA1UdIwQY MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHPeSh86 Q4lwq19d8cRg5EDfDdBKZ8jQfcYCJoz4YDy/M1ON6NGj0Lpi0R3ULT4UZybuJUxW Pb/du714JmhfDcm/F+L5UrJp72kN7D5eDLdEX83bQmkqYxzs/JgsCTNfwaUGZcqz tuw2QCY/O/CHhUPdHBiZ5W6/KbBlSZf0TW9j3NQji+DWMvAdh4VtW5ADqJ4reX0y AFR7V6G/dgIAJcMZrvp5tGwZ52mnVsT0ylQA2XIDA6bcqEyuL+jXXUjLHbYexMmm LljqE/laEAla4AveHv2U09Nktuc6s1J782u/vByMMSIsG1B2lbt9jAc57WK2fq58 AuFOgKKD5s7HBA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:34:51 2025 by rpki-client