This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json) Hash identifier: rFwyL6g+M5geUmLnhW/9OPiFhe45kRuVgWCh95tgkLg= Subject key identifier: 1A:5B:69:7D:8A:50:03:EC:99:81:04:81:4A:90:F7:E0:94:74:B5:A8 Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Certificate serial: 019B5F417001DFEDA1018FDD509E96A9E6CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft Manifest number: 086D Signing time: Sat 27 Dec 2025 10:01:22 +0000 Manifest this update: Sat 27 Dec 2025 10:01:22 +0000 Manifest next update: Sun 28 Dec 2025 10:01:22 +0000 Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=) 2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: ssiimrEJdfOwsZtgyuYyoQqKUmdDcFscS8JH7ygKp44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:70:01:df:ed:a1:01:8f:dd:50:9e:96:a9:e6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Validity Not Before: Dec 27 10:01:22 2025 GMT Not After : Dec 28 10:01:22 2025 GMT Subject: CN=1a5b697d8a5003ec998104814a90f7e09474b5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:dc:33:8c:d9:77:40:26:e1:be:3b:83:c9: 20:f0:e6:a8:73:37:67:c0:70:b9:6e:7e:20:f0:47: 79:d8:f0:f8:df:32:9b:1d:84:e5:16:01:52:03:97: 73:c7:c9:f1:93:52:2c:3d:de:2d:be:c3:20:ae:e0: 5f:0d:d3:a3:63:49:98:3c:c7:5c:dc:8c:9e:69:64: 39:f0:f9:b1:d1:82:59:03:19:85:aa:88:72:0f:65: 14:9e:e4:e0:94:97:a8:70:ee:8a:e6:83:de:e6:7a: 57:de:31:82:c3:88:e9:57:f4:e2:c7:e2:4e:74:a9: 2b:9d:ae:c5:92:56:0d:e9:ce:be:0c:27:a7:bb:c7: 03:dc:56:6c:73:58:04:ba:59:04:6d:ef:5b:dc:85: bb:cb:0b:06:83:fe:e8:9e:fb:2e:55:b4:29:0f:7e: d4:05:70:41:d1:a4:98:3b:7d:61:21:98:3d:96:8d: 28:50:e6:16:3b:5f:e0:53:f0:6b:1d:d7:05:1c:f2: 89:ac:ea:ae:99:3c:a2:59:6d:0b:05:d8:eb:97:a5: 3a:39:4a:63:58:4a:1e:2c:5a:24:e0:cf:66:f4:a0: 82:66:c4:e0:a1:05:fb:ee:15:c1:59:26:2c:35:08: b5:4a:d6:6d:d0:88:99:2a:f1:51:a0:82:54:39:eb: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5B:69:7D:8A:50:03:EC:99:81:04:81:4A:90:F7:E0:94:74:B5:A8 X509v3 Authority Key Identifier: keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:69:06:00:d2:76:2d:f8:d8:59:a4:10:4b:4a:71:f8:e6:3a: a4:d0:01:fd:99:bf:af:1f:24:58:6f:c6:0c:65:9f:be:10:2c: 67:72:f5:97:61:d0:9b:7e:95:08:6a:fa:18:63:1e:e3:b2:93: 70:6b:84:5c:cc:a5:1c:40:b0:c7:b1:70:c1:99:77:a4:0c:2e: b0:4a:c2:15:c3:91:40:60:68:02:80:1d:6a:31:c1:12:79:67: ff:ac:4a:40:40:6c:19:e9:78:06:4f:29:32:5e:d0:7e:f4:2e: ce:15:85:0f:3f:ab:0a:65:18:3b:2c:88:0f:1d:86:ad:41:14: d0:a4:04:34:18:6d:e2:65:9b:c7:79:c7:47:ad:f2:d1:f2:27: eb:44:e8:3f:28:79:e9:8d:51:be:48:09:f5:3e:9e:cb:e4:41: c0:94:f7:d7:9a:85:1d:40:3d:58:39:e1:1a:c1:8f:52:a1:aa: f2:08:24:e2:43:e1:73:9a:65:d9:ba:00:f2:ac:5f:9c:19:98: dc:7b:da:ab:d5:5a:19:97:fa:1f:40:bc:76:0d:c6:c3:48:a2: c3:4a:55:0d:c9:92:8b:fa:6e:d2:c9:01:76:6b:b8:17:7d:5d: 36:33:05:26:78:66:60:0c:b5:14:c5:d0:d2:e5:f3:86:5a:10: 99:8c:73:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQXAB3+2hAY/dUJ6WqebLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl NmRhNDEwHhcNMjUxMjI3MTAwMTIyWhcNMjUxMjI4MTAwMTIyWjAzMTEwLwYDVQQD EygxYTViNjk3ZDhhNTAwM2VjOTk4MTA0ODE0YTkwZjdlMDk0NzRiNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UTcM4zZd0Am4b47g8kg8Oaoczdn wHC5bn4g8Ed52PD43zKbHYTlFgFSA5dzx8nxk1IsPd4tvsMgruBfDdOjY0mYPMdc 3IyeaWQ58Pmx0YJZAxmFqohyD2UUnuTglJeocO6K5oPe5npX3jGCw4jpV/Tix+JO dKkrna7FklYN6c6+DCenu8cD3FZsc1gEulkEbe9b3IW7ywsGg/7onvsuVbQpD37U BXBB0aSYO31hIZg9lo0oUOYWO1/gU/BrHdcFHPKJrOqumTyiWW0LBdjrl6U6OUpj WEoeLFok4M9m9KCCZsTgoQX77hXBWSYsNQi1StZt0IiZKvFRoIJUOevTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpbaX2KUAPsmYEEgUqQ9+CUdLWoMB8GA1UdIwQY MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2kGANJ2 LfjYWaQQS0px+OY6pNAB/Zm/rx8kWG/GDGWfvhAsZ3L1l2HQm36VCGr6GGMe47KT cGuEXMylHECwx7FwwZl3pAwusErCFcORQGBoAoAdajHBEnln/6xKQEBsGel4Bk8p Ml7QfvQuzhWFDz+rCmUYOyyIDx2GrUEU0KQENBht4mWbx3nHR63y0fIn60ToPyh5 6Y1RvkgJ9T6ey+RBwJT315qFHUA9WDnhGsGPUqGq8ggk4kPhc5pl2boA8qxfnBmY 3Hvaq9VaGZf6H0C8dg3Gw0iiw0pVDcmSi/pu0skBdmu4F31dNjMFJnhmYAy1FMXQ 0uXzhloQmYxzMQ== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:17 2025 by rpki-client