This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json) Hash identifier: yvGg8ZLDd6HwHWj/omWwqE5W+5zpepYwNT7azFuyUsY= Subject key identifier: 31:41:C8:2A:D5:44:7E:AF:7C:81:49:42:7D:16:B8:5C:BB:81:E0:21 Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a Certificate serial: 019B3F7F4B8041B8EADC7ED6F87CDABE1280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft Manifest number: 1185 Signing time: Sun 21 Dec 2025 06:01:05 +0000 Manifest this update: Sun 21 Dec 2025 06:01:05 +0000 Manifest next update: Mon 22 Dec 2025 06:01:05 +0000 Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=) 2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: u5qe2zkw4szOQgVCKBm0UOnZlXeAUia+YXENo1SHUvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4b:80:41:b8:ea:dc:7e:d6:f8:7c:da:be:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a Validity Not Before: Dec 21 06:01:05 2025 GMT Not After : Dec 22 06:01:05 2025 GMT Subject: CN=3141c82ad5447eaf7c8149427d16b85cbb81e021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:da:e6:28:ab:4b:f1:e4:44:e9:6c:65:97: a8:7c:68:76:3f:05:d6:98:d8:4e:97:98:9e:d6:5a: 9d:2e:a0:84:2e:14:46:5e:16:13:e0:df:8d:13:fc: 7f:7b:b2:fa:09:03:45:19:a0:e1:61:35:d3:65:c8: 40:5c:8a:a6:32:07:8b:5f:8d:b9:d9:f5:0f:97:8f: 27:c9:1b:dd:af:0f:13:99:a0:75:86:64:74:eb:7b: a8:20:b7:06:db:1e:6a:4a:dc:9a:83:68:7b:9a:57: 48:8b:c8:20:f2:5e:dc:d6:a5:43:24:3c:f5:91:76: 41:ef:af:35:01:2f:c2:34:50:13:91:77:9c:b2:ad: eb:06:13:ce:a6:10:ae:33:f2:0c:b0:dc:4f:73:bd: 38:2f:2b:73:ae:38:78:23:ea:cc:fe:50:da:e1:5e: ac:02:ff:85:b8:0d:c8:5a:19:bd:29:ee:e3:b3:ee: b4:bd:e5:d9:83:56:74:70:a0:90:d4:73:7e:b7:bb: 2a:22:3e:4c:69:0a:43:73:06:7b:85:9a:84:c2:8b: 92:c5:fd:c0:da:a2:41:7f:48:97:5c:b7:fa:32:c9: 78:d3:7f:22:4d:88:10:c6:ec:76:c2:eb:36:eb:37: 96:1d:db:e3:b4:4e:61:44:fa:07:dd:1e:36:40:f6: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:41:C8:2A:D5:44:7E:AF:7C:81:49:42:7D:16:B8:5C:BB:81:E0:21 X509v3 Authority Key Identifier: keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:08:c8:a3:cc:c1:5e:29:61:3f:6f:8d:1c:c2:29:88:94:9d: cb:e4:2d:54:b8:3a:d8:34:af:9b:53:ef:83:9c:07:b3:f1:11: 13:68:09:40:84:e3:37:74:48:f8:51:af:8f:73:89:d9:b7:6a: 71:75:b2:a2:2f:2a:33:d9:f0:42:95:f9:d4:e3:8b:c8:d5:ba: 3c:bf:c9:2c:60:db:9e:8a:56:a4:9d:60:9b:4f:db:a2:52:a9: 8e:d1:75:b7:00:9c:7c:04:79:fb:9c:62:4b:dc:46:f6:f1:df: 89:1f:f5:ee:4d:9d:3e:a5:1e:1b:57:57:d4:46:db:d3:9e:60: 66:46:3f:2c:e6:be:1f:44:cb:3f:65:8a:b5:4d:5a:54:d5:5c: ac:4d:36:95:c9:d3:15:f8:42:72:63:aa:69:46:83:a7:37:ab: 69:9d:d1:f5:6b:7b:27:c5:fb:f3:ac:3a:15:e7:d4:c9:80:c7: fa:83:67:af:9c:41:09:dc:7c:56:7e:26:3d:ff:29:b7:75:82: 32:c9:87:bb:cc:35:43:70:00:98:94:b6:b7:00:3c:c3:50:c9: e9:8a:84:3d:c5:89:a6:ee:60:b5:d7:8b:9d:af:48:5f:90:34: a6:a2:0b:e5:27:6c:b8:17:c9:f4:6f:22:07:a4:ef:4c:47:bd: 44:45:70:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0uAQbjq3H7W+HzavhKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MmY3MzIyZmJlOTc0M2ViNDcxMzgzYTA5MGIzNWI1Mjk2 YTJhOGEwHhcNMjUxMjIxMDYwMTA1WhcNMjUxMjIyMDYwMTA1WjAzMTEwLwYDVQQD EygzMTQxYzgyYWQ1NDQ3ZWFmN2M4MTQ5NDI3ZDE2Yjg1Y2JiODFlMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+za5iirS/HkROlsZZeofGh2PwXW mNhOl5ie1lqdLqCELhRGXhYT4N+NE/x/e7L6CQNFGaDhYTXTZchAXIqmMgeLX425 2fUPl48nyRvdrw8TmaB1hmR063uoILcG2x5qStyag2h7mldIi8gg8l7c1qVDJDz1 kXZB7681AS/CNFATkXecsq3rBhPOphCuM/IMsNxPc704Lytzrjh4I+rM/lDa4V6s Av+FuA3IWhm9Ke7js+60veXZg1Z0cKCQ1HN+t7sqIj5MaQpDcwZ7hZqEwouSxf3A 2qJBf0iXXLf6Msl4038iTYgQxux2wus26zeWHdvjtE5hRPoH3R42QPaXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFByCrVRH6vfIFJQn0WuFy7geAhMB8GA1UdIwQY MBaAFCYvcyL76XQ+tHE4OgkLNbUpaiqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDdiMTUtMjg1NS00Mzg4LWJjYjMt NTBlMTI5YzhhMzZjLzEvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMDdiMTUtMjg1NS00Mzg4LWJjYjMtNTBlMTI5YzhhMzZj LzEvSmk5ekl2dnBkRDYwY1RnNkNRczF0U2xxS29vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQjIo8zB XilhP2+NHMIpiJSdy+QtVLg62DSvm1Pvg5wHs/ERE2gJQITjN3RI+FGvj3OJ2bdq cXWyoi8qM9nwQpX51OOLyNW6PL/JLGDbnopWpJ1gm0/bolKpjtF1twCcfAR5+5xi S9xG9vHfiR/17k2dPqUeG1dX1Ebb055gZkY/LOa+H0TLP2WKtU1aVNVcrE02lcnT FfhCcmOqaUaDpzeraZ3R9Wt7J8X786w6FefUyYDH+oNnr5xBCdx8Vn4mPf8pt3WC MsmHu8w1Q3AAmJS2twA8w1DJ6YqEPcWJpu5gtdeLna9IX5A0pqIL5SdsuBfJ9G8i B6TvTEe9REVwTA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:35:32 2025 by rpki-client