This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json) Hash identifier: qrGBBhrgQj6Y568lKA6y1golNslxReXgcgwP+/7Zot4= Subject key identifier: 60:7E:4D:7A:21:93:C5:15:6A:3F:06:2B:8B:51:7B:60:92:DA:1B:3F Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad Certificate serial: 019B56AC053F6C77F4E4F0AAA27D4CD9877D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 18:01:12 +0000 Manifest this update: Thu 25 Dec 2025 18:01:12 +0000 Manifest next update: Fri 26 Dec 2025 18:01:12 +0000 Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: oGOX+GbYoEm8945UEt/ijJFpCrcYaI5xKMu/ocphjXM=) 2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ac:05:3f:6c:77:f4:e4:f0:aa:a2:7d:4c:d9:87:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad Validity Not Before: Dec 25 18:01:12 2025 GMT Not After : Dec 26 18:01:12 2025 GMT Subject: CN=607e4d7a2193c5156a3f062b8b517b6092da1b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:0c:6c:54:0d:4b:0e:2e:d6:60:ca:dc:63: 00:98:a2:35:28:5d:7b:92:30:0b:86:52:7e:b5:ec: 0f:3a:a4:c6:8c:43:ba:2c:ee:72:f4:50:67:1f:7e: 22:c6:55:8a:85:21:66:67:bf:bc:d7:32:60:46:72: 90:df:6a:ad:6a:06:ad:37:0a:a0:b4:b6:48:83:82: 51:d1:5c:df:04:04:3c:34:57:c3:f1:c9:6f:3d:e1: 84:36:0e:fa:b6:1c:1e:02:64:5b:20:85:75:47:75: e2:75:a4:77:91:28:79:29:0c:53:e1:04:14:39:eb: b8:9e:36:4d:4a:77:68:db:4d:fd:c6:68:08:62:f1: 15:83:cd:ac:69:19:b9:a3:20:f5:cd:34:c7:d3:50: 9a:10:e5:47:7b:69:b5:59:ae:86:d9:99:bf:9f:ef: 9d:2b:37:02:cc:bc:7a:15:3f:2f:ff:bb:c0:b7:14: a7:6f:fc:ef:98:b2:61:59:13:33:f7:ab:5d:01:7e: ac:d7:76:42:0f:af:0f:c7:c2:1d:ce:4c:56:f4:5f: e0:a0:34:7d:4f:d1:a5:d8:e4:d5:4e:f5:43:9a:9b: 32:62:9b:12:24:a9:d0:dd:23:d9:b2:ed:2a:a4:2d: 16:cf:28:6e:00:ce:4b:1e:eb:c2:09:23:4c:65:c6: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7E:4D:7A:21:93:C5:15:6A:3F:06:2B:8B:51:7B:60:92:DA:1B:3F X509v3 Authority Key Identifier: keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7a:14:f1:df:91:3a:14:b3:c3:be:ab:f6:2f:93:9e:4f:5d: 44:89:65:dc:2e:e8:93:66:91:fd:cf:c0:8d:d3:1c:53:c2:ef: 33:f9:62:66:85:1a:71:99:85:7e:1f:f3:0c:2d:c2:ef:a8:0a: 64:81:35:34:d6:f6:f6:54:f6:e1:7a:33:39:f8:b4:32:ca:18: fe:2b:c9:1c:5c:af:6a:ae:3c:13:c9:21:68:7c:c1:d7:e8:45: ae:0a:b4:dc:2f:fa:51:a3:2c:3e:03:08:35:2d:47:b8:79:9f: e3:1d:2f:89:1f:e8:ab:d7:dd:65:f5:c2:a3:75:72:2d:8c:93: 8e:27:f9:bb:ab:65:0b:95:18:6b:4e:ce:4a:2d:bb:49:1e:e6: b5:8e:dc:b7:1d:4c:71:47:9f:a0:bb:33:1d:f5:9a:55:aa:29: 5c:33:d8:70:fb:ec:89:ba:d3:cd:14:e9:00:0a:28:51:ea:49: 77:43:eb:9c:60:21:62:81:f7:81:19:39:6c:bd:c4:fd:e9:df: 7d:64:8b:a2:af:ca:cf:56:63:f3:d9:d8:77:73:b3:03:b6:24: c4:4f:36:67:de:ab:24:d8:c3:0a:77:21:9c:60:d2:34:ac:53: 3d:d6:04:7f:7a:18:66:13:11:4b:e1:57:41:cc:a1:5c:2c:48: fb:e2:b6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWrAU/bHf05PCqon1M2Yd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk OTM2YWQwHhcNMjUxMjI1MTgwMTEyWhcNMjUxMjI2MTgwMTEyWjAzMTEwLwYDVQQD Eyg2MDdlNGQ3YTIxOTNjNTE1NmEzZjA2MmI4YjUxN2I2MDkyZGExYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l8MbFQNSw4u1mDK3GMAmKI1KF17 kjALhlJ+tewPOqTGjEO6LO5y9FBnH34ixlWKhSFmZ7+81zJgRnKQ32qtagatNwqg tLZIg4JR0VzfBAQ8NFfD8clvPeGENg76thweAmRbIIV1R3XidaR3kSh5KQxT4QQU Oeu4njZNSndo2039xmgIYvEVg82saRm5oyD1zTTH01CaEOVHe2m1Wa6G2Zm/n++d KzcCzLx6FT8v/7vAtxSnb/zvmLJhWRMz96tdAX6s13ZCD68Px8IdzkxW9F/goDR9 T9Gl2OTVTvVDmpsyYpsSJKnQ3SPZsu0qpC0WzyhuAM5LHuvCCSNMZcbxwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB+TXohk8UVaj8GK4tRe2CS2hs/MB8GA1UdIwQY MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHoU8d+R OhSzw76r9i+Tnk9dRIll3C7ok2aR/c/AjdMcU8LvM/liZoUacZmFfh/zDC3C76gK ZIE1NNb29lT24XozOfi0MsoY/ivJHFyvaq48E8khaHzB1+hFrgq03C/6UaMsPgMI NS1HuHmf4x0viR/oq9fdZfXCo3VyLYyTjif5u6tlC5UYa07OSi27SR7mtY7ctx1M cUefoLszHfWaVaopXDPYcPvsibrTzRTpAAooUepJd0PrnGAhYoH3gRk5bL3E/enf fWSLoq/Kz1Zj89nYd3OzA7YkxE82Z96rJNjDCnchnGDSNKxTPdYEf3oYZhMRS+FX QcyhXCxI++K2OA== -----END CERTIFICATE-----Generated at Fri Dec 26 02:11:35 2025 by rpki-client