This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json) Hash identifier: QwwdJn/SmM9VSrhVF7Miegdnx0WejXUAK2S5mjcdiBM= Subject key identifier: 29:A9:82:7B:A7:4F:C2:9D:7D:DB:5E:A5:C8:71:84:58:DE:AB:ED:CB Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Certificate serial: 019B3C7EE0345F57C16297142BEDEA476309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:01:46 +0000 Manifest this update: Sat 20 Dec 2025 16:01:46 +0000 Manifest next update: Sun 21 Dec 2025 16:01:46 +0000 Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: 8KC3uoua8avlDoMbnnOfdRZhYUCmjAddMuuhHBAwg8o=) 2: X26sGkQxHUd6ANya0fQeGbUaN2o.roa (hash: 72k/JceoXf+vjqY9cY+dmTPspA3n9C9nG7V6AU5QpNs=) 3: ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa (hash: 2iTmqWC/xN+Zadr2KJDlI5cxPwSqu9GxPi/bRx/hmlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e0:34:5f:57:c1:62:97:14:2b:ed:ea:47:63:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019 Validity Not Before: Dec 20 16:01:46 2025 GMT Not After : Dec 21 16:01:46 2025 GMT Subject: CN=29a9827ba74fc29d7ddb5ea5c8718458deabedcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:5b:26:4f:1a:c1:fd:71:8e:7e:94:96:4a: 0e:90:dc:54:88:34:cc:27:e9:d8:38:25:3d:1c:c2: ba:d6:47:6d:e6:a4:f3:6e:42:95:7d:3d:b7:cd:d9: 55:cf:09:cb:a8:c4:86:5f:2d:10:cd:94:a9:b1:0a: d4:41:cf:ad:a0:4d:2d:bc:82:03:1d:e2:13:4a:76: 3b:ec:bd:5c:7c:c5:66:b6:43:03:89:8b:c7:b9:89: 42:07:e4:50:c0:b5:d2:22:cb:1a:b7:1f:7d:3c:67: 41:0a:d2:71:ee:e6:10:23:4c:8f:89:ad:84:05:9e: 04:9b:b3:f4:35:37:10:cb:a4:d2:c8:20:e8:33:50: 59:8b:c2:ee:f4:56:16:76:5b:1b:41:7d:c8:7f:2f: 3b:1d:25:7e:af:0e:85:0c:4c:ca:45:c8:df:3e:fa: 12:58:44:7c:52:4c:4c:95:c7:8d:e4:c6:90:68:ed: fa:1d:37:2b:a9:b4:89:95:47:84:57:2c:45:36:1d: fa:aa:4c:16:e3:ef:33:81:3e:8a:55:49:bd:16:d2: b9:15:d9:dc:a9:84:f1:d5:d7:1a:f4:0f:68:bc:c3: 2c:3d:31:4f:e4:cc:1b:38:f0:0b:3f:ad:dd:ed:c9: d1:3c:93:f5:2e:07:41:f5:93:d3:3e:05:f6:66:fc: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A9:82:7B:A7:4F:C2:9D:7D:DB:5E:A5:C8:71:84:58:DE:AB:ED:CB X509v3 Authority Key Identifier: keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a6:e2:b0:e7:8e:55:f5:6f:1a:dc:ee:6e:bf:64:23:3f:5f: eb:c2:5b:21:2e:e0:bc:56:d3:2d:8e:75:82:3f:63:07:f9:90: f4:d5:3c:c0:46:15:9c:e3:15:a5:a0:2a:fa:b2:5a:32:9e:ad: 78:01:83:a3:25:f4:46:82:ab:e4:81:84:c1:92:f2:59:93:2e: aa:de:20:2c:f8:40:03:4a:4a:b1:ab:e1:31:a1:ef:77:66:cf: 58:c6:f1:e5:cb:52:e5:b8:85:0a:dd:aa:d4:b4:f5:a9:c9:ca: 1e:ba:f5:45:4a:ad:27:cd:b8:3b:20:35:fc:ff:1f:cd:55:0c: 6e:fe:24:4e:15:05:9e:31:e5:ff:3f:7a:33:f7:52:f8:cf:12: b1:1b:68:03:fa:f1:a3:28:00:f9:25:c4:d1:5a:9b:a3:08:53: f2:a9:3e:0b:b2:2b:ee:82:88:c0:33:4b:4f:be:7a:14:f8:c4: 2a:09:87:70:cd:01:bb:97:64:16:43:22:e9:f8:dd:43:e2:0b: f2:05:48:e6:9f:d7:74:7f:7b:97:60:ab:58:ea:2f:4d:6e:d9: c7:cd:44:19:4e:01:8e:2e:ec:37:3d:b8:73:b6:4a:c2:fa:e8: 93:08:8d:a0:23:56:e0:2d:de:87:ab:d8:52:26:48:20:e3:b8: 15:93:58:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuA0X1fBYpcUK+3qR2MJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4 ZTkwMTkwHhcNMjUxMjIwMTYwMTQ2WhcNMjUxMjIxMTYwMTQ2WjAzMTEwLwYDVQQD EygyOWE5ODI3YmE3NGZjMjlkN2RkYjVlYTVjODcxODQ1OGRlYWJlZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAlbJk8awf1xjn6UlkoOkNxUiDTM J+nYOCU9HMK61kdt5qTzbkKVfT23zdlVzwnLqMSGXy0QzZSpsQrUQc+toE0tvIID HeITSnY77L1cfMVmtkMDiYvHuYlCB+RQwLXSIssatx99PGdBCtJx7uYQI0yPia2E BZ4Em7P0NTcQy6TSyCDoM1BZi8Lu9FYWdlsbQX3Ify87HSV+rw6FDEzKRcjfPvoS WER8UkxMlceN5MaQaO36HTcrqbSJlUeEVyxFNh36qkwW4+8zgT6KVUm9FtK5Fdnc qYTx1dca9A9ovMMsPTFP5MwbOPALP63d7cnRPJP1LgdB9ZPTPgX2Zvy2oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmpgnunT8KdfdtepchxhFjeq+3LMB8GA1UdIwQY MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqbisOeO VfVvGtzubr9kIz9f68JbIS7gvFbTLY51gj9jB/mQ9NU8wEYVnOMVpaAq+rJaMp6t eAGDoyX0RoKr5IGEwZLyWZMuqt4gLPhAA0pKsavhMaHvd2bPWMbx5ctS5biFCt2q 1LT1qcnKHrr1RUqtJ824OyA1/P8fzVUMbv4kThUFnjHl/z96M/dS+M8SsRtoA/rx oygA+SXE0VqbowhT8qk+C7Ir7oKIwDNLT756FPjEKgmHcM0Bu5dkFkMi6fjdQ+IL 8gVI5p/XdH97l2CrWOovTW7Zx81EGU4Bji7sNz24c7ZKwvrokwiNoCNW4C3eh6vY UiZIIOO4FZNYpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:48:17 2025 by rpki-client