This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json) Hash identifier: nltgw7gPg42wHlKk6KlEfn54iWB/OMPOT8rj02fB83M= Subject key identifier: 1F:02:E0:59:E2:26:65:97:88:84:E9:07:52:71:F6:92:0F:E4:B1:AB Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a Certificate serial: 019B3D9097C1AC379AB90B408F8905AB743C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft Manifest number: 1184 Signing time: Sat 20 Dec 2025 21:00:44 +0000 Manifest this update: Sat 20 Dec 2025 21:00:44 +0000 Manifest next update: Sun 21 Dec 2025 21:00:44 +0000 Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=) 2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: tzmTmQYXfxxDjGASKHAjSfsYI/2kWdMV3b7BbeY2o/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:97:c1:ac:37:9a:b9:0b:40:8f:89:05:ab:74:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a Validity Not Before: Dec 20 21:00:44 2025 GMT Not After : Dec 21 21:00:44 2025 GMT Subject: CN=1f02e059e22665978884e9075271f6920fe4b1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:67:20:19:ac:b6:c0:0e:c6:04:12:c8:0d:a8: 9e:8f:03:3d:1b:38:ae:20:7c:23:ff:85:6b:22:21: 26:b7:a8:d4:f3:4e:e0:a2:a6:2f:6a:cf:a2:d4:76: d3:72:c2:63:7d:41:e8:4b:c2:16:ad:e4:ae:78:32: 17:9d:a9:10:8a:45:de:ab:2f:48:d6:09:ad:ac:d0: d9:ea:ea:3c:5e:49:63:c6:72:1c:a3:c6:f4:c5:2c: e4:3d:68:df:f5:be:b8:8e:70:75:78:b4:2d:12:ec: 6b:55:37:ae:87:e4:2b:68:8d:ba:79:a1:9d:a9:70: a8:ec:1d:37:6c:56:24:ee:43:32:23:19:f3:f6:21: ef:94:96:d5:f7:96:72:0a:f7:43:30:1b:a9:76:35: 8b:97:a1:ed:e0:1f:a1:16:a6:e0:37:91:e9:7f:75: af:d2:ce:57:3d:fd:e1:89:f0:f2:d4:33:e0:3a:43: 48:4a:e5:57:d3:5e:51:4f:20:5b:76:d8:12:fe:3c: 8b:13:84:58:a3:87:6c:bd:46:df:d4:d6:09:50:fa: d7:95:a2:13:55:eb:63:dd:7f:a7:84:9b:70:39:e2: d3:41:64:20:e5:56:4f:23:ab:36:e6:74:24:a4:ae: bb:19:49:5a:c2:8e:46:91:27:e6:eb:35:d2:91:0e: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:02:E0:59:E2:26:65:97:88:84:E9:07:52:71:F6:92:0F:E4:B1:AB X509v3 Authority Key Identifier: keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d8:a8:71:70:c1:5d:5f:df:a0:b6:ba:ba:7d:83:f5:96:3f: 13:97:3c:f2:a7:b0:a7:38:57:59:77:d9:3d:ee:1f:68:fe:ba: 20:ef:51:54:c4:9d:f5:9d:85:63:34:f4:11:c6:61:49:e1:e6: b7:0a:8f:84:3c:e7:eb:55:2f:46:b3:4d:c5:5c:dc:3c:4a:bb: 6f:75:16:01:aa:b2:98:44:b2:9e:61:73:0f:f2:5c:ba:fd:f9: 4c:a4:bd:c4:57:d8:72:bd:86:b6:83:2c:e0:21:e9:4f:b3:10: e0:e3:ad:52:36:48:17:7c:0d:61:01:8d:a4:24:7a:23:09:ee: 1a:5e:00:a2:75:fc:d1:3d:9d:43:85:57:cd:1a:4b:79:ca:9c: 38:41:c5:c1:69:2d:9d:75:d0:4a:c9:83:50:e6:7d:6b:25:0a: 77:f9:1b:66:eb:2f:4f:6c:1f:d7:cf:3c:18:bf:eb:f4:96:b8: 32:60:26:02:2f:2a:41:fc:7f:92:22:f7:3f:48:c5:eb:33:23: d4:5a:22:53:fe:21:5e:14:39:8d:c6:26:40:c0:68:2f:ff:9d: e8:91:5e:99:26:bd:12:f4:0e:f1:1a:9a:f8:c8:c1:f7:34:a0: c7:f2:c2:8a:42:86:d0:93:fa:b9:bb:3f:45:d7:b6:85:d3:79: f1:17:fd:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJfBrDeauQtAj4kFq3Q8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MmY3MzIyZmJlOTc0M2ViNDcxMzgzYTA5MGIzNWI1Mjk2 YTJhOGEwHhcNMjUxMjIwMjEwMDQ0WhcNMjUxMjIxMjEwMDQ0WjAzMTEwLwYDVQQD EygxZjAyZTA1OWUyMjY2NTk3ODg4NGU5MDc1MjcxZjY5MjBmZTRiMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62cgGay2wA7GBBLIDaiejwM9Gziu IHwj/4VrIiEmt6jU807goqYvas+i1HbTcsJjfUHoS8IWreSueDIXnakQikXeqy9I 1gmtrNDZ6uo8XkljxnIco8b0xSzkPWjf9b64jnB1eLQtEuxrVTeuh+QraI26eaGd qXCo7B03bFYk7kMyIxnz9iHvlJbV95ZyCvdDMBupdjWLl6Ht4B+hFqbgN5Hpf3Wv 0s5XPf3hifDy1DPgOkNISuVX015RTyBbdtgS/jyLE4RYo4dsvUbf1NYJUPrXlaIT Vetj3X+nhJtwOeLTQWQg5VZPI6s25nQkpK67GUlawo5GkSfm6zXSkQ6I2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8C4FniJmWXiITpB1Jx9pIP5LGrMB8GA1UdIwQY MBaAFCYvcyL76XQ+tHE4OgkLNbUpaiqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDdiMTUtMjg1NS00Mzg4LWJjYjMt NTBlMTI5YzhhMzZjLzEvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMDdiMTUtMjg1NS00Mzg4LWJjYjMtNTBlMTI5YzhhMzZj LzEvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNiocXDB XV/foLa6un2D9ZY/E5c88qewpzhXWXfZPe4faP66IO9RVMSd9Z2FYzT0EcZhSeHm twqPhDzn61UvRrNNxVzcPEq7b3UWAaqymESynmFzD/Jcuv35TKS9xFfYcr2GtoMs 4CHpT7MQ4OOtUjZIF3wNYQGNpCR6IwnuGl4AonX80T2dQ4VXzRpLecqcOEHFwWkt nXXQSsmDUOZ9ayUKd/kbZusvT2wf1888GL/r9Ja4MmAmAi8qQfx/kiL3P0jF6zMj 1FoiU/4hXhQ5jcYmQMBoL/+d6JFemSa9EvQO8Rqa+MjB9zSgx/LCikKG0JP6ubs/ Rde2hdN58Rf98Q== -----END CERTIFICATE-----Generated at Sun Dec 21 07:03:58 2025 by rpki-client