This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft File: InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft (raw, json) Hash identifier: TKUauhp1mTSCRx6XxhZyHb05nGT+WmrKqhPM4JehykQ= Subject key identifier: FF:55:D9:44:69:BB:2D:28:A9:B4:B0:00:B5:36:96:30:41:B6:19:4B Authority key identifier: 22:71:A2:F8:0A:DD:7A:25:83:53:51:1A:E6:71:85:A8:47:58:0B:9A Certificate issuer: /CN=2271a2f80add7a258353511ae67185a847580b9a Certificate serial: 019B3A8F5F5DFA6E1A50D2DEEACB6FEA6A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InGi-ArdeiWDU1Ea5nGFqEdYC5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 07:00:32 +0000 Manifest this update: Sat 20 Dec 2025 07:00:32 +0000 Manifest next update: Sun 21 Dec 2025 07:00:32 +0000 Files and hashes: 1: InGi-ArdeiWDU1Ea5nGFqEdYC5o.crl (hash: sL3qPQuy0cHD6QKZUBBJdwKevnQMSnXZZdlEhVkqhqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft rsync://rpki.ripe.net/repository/DEFAULT/InGi-ArdeiWDU1Ea5nGFqEdYC5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:5f:5d:fa:6e:1a:50:d2:de:ea:cb:6f:ea:6a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2271a2f80add7a258353511ae67185a847580b9a Validity Not Before: Dec 20 07:00:32 2025 GMT Not After : Dec 21 07:00:32 2025 GMT Subject: CN=ff55d94469bb2d28a9b4b000b536963041b6194b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:65:ad:6e:fe:e8:db:44:36:3d:98:5c:ae: 36:c3:b2:ac:15:ad:ef:95:13:a8:ae:9f:06:e0:d2: 27:bc:ce:22:64:d5:c0:f6:b5:ca:01:aa:da:14:e7: 73:cd:64:a4:f9:79:cf:67:f2:a7:39:fc:74:05:15: 2b:db:61:35:ba:ed:fb:84:6f:86:a7:1b:d1:2b:fe: be:fc:21:a7:0b:25:59:a3:60:49:70:48:0f:70:d5: af:f5:c9:cc:5f:9b:02:19:49:9b:13:b5:1b:48:94: 33:2a:a9:5b:fe:23:0c:63:3e:a2:e2:3a:65:33:e7: 0e:db:a4:56:86:db:6d:a2:6b:cd:a1:48:6a:3d:b4: af:c7:4a:32:52:c6:0d:1b:39:f0:96:3a:c3:dc:11: 36:89:a0:16:27:ca:2f:a5:e2:dc:c6:40:78:a6:04: 43:e4:18:b4:84:0f:fb:18:2b:8f:04:2b:c0:50:9b: 14:48:1c:eb:08:0c:aa:46:be:b4:5e:85:05:dd:5a: 00:35:43:dc:9b:0b:f2:97:f1:be:6e:3b:32:64:2a: 11:2c:e0:55:25:48:4f:46:5b:c6:ef:a9:10:7b:eb: b2:a7:76:64:af:17:69:f6:f6:64:83:73:35:28:e8: 10:1c:fb:e4:48:86:49:36:93:c7:c2:7a:72:c7:15: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:D9:44:69:BB:2D:28:A9:B4:B0:00:B5:36:96:30:41:B6:19:4B X509v3 Authority Key Identifier: keyid:22:71:A2:F8:0A:DD:7A:25:83:53:51:1A:E6:71:85:A8:47:58:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InGi-ArdeiWDU1Ea5nGFqEdYC5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:93:7c:a9:66:b3:b2:b4:d5:ed:b8:47:78:a1:be:be:56:8f: 96:b6:b0:16:a7:5f:f1:bc:a4:0c:c9:6f:13:e2:34:98:87:84: 6a:d9:db:24:5d:81:40:29:50:48:46:67:ee:8d:ed:26:83:93: 3d:bb:10:a7:26:ce:fc:c7:a1:50:23:5e:5a:85:52:1f:32:94: 32:a3:1c:40:c7:b8:8f:52:38:66:b3:8c:82:75:42:d7:11:57: a7:5e:c1:2f:54:d8:d9:89:a4:0c:0b:71:05:aa:af:6b:94:14: 2a:18:95:44:e4:3f:99:30:68:83:7a:65:d6:fe:9f:59:df:4c: 79:aa:2a:06:9a:34:a5:61:47:ef:8a:a0:f1:b0:cb:fb:03:3c: 57:74:a8:4f:95:66:25:cb:4a:b7:18:79:d3:2a:dd:09:a5:1f: 6f:6d:59:bc:b2:46:1b:49:0c:54:0a:88:1b:02:61:51:ea:06: b1:11:c1:a3:9d:55:9c:7e:81:5f:a1:5a:c8:6b:a5:d8:c4:c0: bc:4f:df:5c:c6:d2:52:b7:95:4d:c1:72:fa:6c:77:a5:7a:f4: 41:9e:bd:77:08:5f:9e:e1:ab:af:8b:82:aa:5e:f5:40:04:0b: 2c:54:59:03:6c:f4:f7:4a:00:e6:7d:ca:c2:89:f9:28:ec:f7: 48:68:40:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j19d+m4aUNLe6stv6mpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNzFhMmY4MGFkZDdhMjU4MzUzNTExYWU2NzE4NWE4NDc1 ODBiOWEwHhcNMjUxMjIwMDcwMDMyWhcNMjUxMjIxMDcwMDMyWjAzMTEwLwYDVQQD EyhmZjU1ZDk0NDY5YmIyZDI4YTliNGIwMDBiNTM2OTYzMDQxYjYxOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKllrW7+6NtENj2YXK42w7KsFa3v lROorp8G4NInvM4iZNXA9rXKAaraFOdzzWSk+XnPZ/KnOfx0BRUr22E1uu37hG+G pxvRK/6+/CGnCyVZo2BJcEgPcNWv9cnMX5sCGUmbE7UbSJQzKqlb/iMMYz6i4jpl M+cO26RWhtttomvNoUhqPbSvx0oyUsYNGznwljrD3BE2iaAWJ8ovpeLcxkB4pgRD 5Bi0hA/7GCuPBCvAUJsUSBzrCAyqRr60XoUF3VoANUPcmwvyl/G+bjsyZCoRLOBV JUhPRlvG76kQe+uyp3Zkrxdp9vZkg3M1KOgQHPvkSIZJNpPHwnpyxxVJLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9V2URpuy0oqbSwALU2ljBBthlLMB8GA1UdIwQY MBaAFCJxovgK3Xolg1NRGuZxhahHWAuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW5HaS1BcmRlaVdEVTFFYTVuR0ZxRWRZQzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85MjU3MTAtZjk0Zi00M2FmLTkyYTAt OTY2MDNmM2VlZGI1LzEvSW5HaS1BcmRlaVdEVTFFYTVuR0ZxRWRZQzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85MjU3MTAtZjk0Zi00M2FmLTkyYTAtOTY2MDNmM2VlZGI1 LzEvSW5HaS1BcmRlaVdEVTFFYTVuR0ZxRWRZQzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpN8qWaz srTV7bhHeKG+vlaPlrawFqdf8bykDMlvE+I0mIeEatnbJF2BQClQSEZn7o3tJoOT PbsQpybO/MehUCNeWoVSHzKUMqMcQMe4j1I4ZrOMgnVC1xFXp17BL1TY2YmkDAtx Baqva5QUKhiVROQ/mTBog3pl1v6fWd9MeaoqBpo0pWFH74qg8bDL+wM8V3SoT5Vm JctKtxh50yrdCaUfb21ZvLJGG0kMVAqIGwJhUeoGsRHBo51VnH6BX6FayGul2MTA vE/fXMbSUreVTcFy+mx3pXr0QZ69dwhfnuGrr4uCql71QAQLLFRZA2z090oA5n3K won5KOz3SGhA0w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:33:37 2025 by rpki-client