This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json) Hash identifier: +dFFXS5w5IsaL3TGdaPfNJiCxPGKre+Bqob5a1TzK2w= Subject key identifier: 97:0E:DF:72:C5:E0:36:CE:00:F5:7F:F9:2A:95:34:32:FA:B6:19:FD Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Certificate serial: 019B3E6C68F211E73526F4563DCDFA6E1869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 01:00:50 +0000 Manifest this update: Sun 21 Dec 2025 01:00:50 +0000 Manifest next update: Mon 22 Dec 2025 01:00:50 +0000 Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=) 2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=) 3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: znSxQUL2krp1hGafBSWd89Z8ahIEGVEd5di5prmCJLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:68:f2:11:e7:35:26:f4:56:3d:cd:fa:6e:18:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Validity Not Before: Dec 21 01:00:50 2025 GMT Not After : Dec 22 01:00:50 2025 GMT Subject: CN=970edf72c5e036ce00f57ff92a953432fab619fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7c:cc:06:f2:27:fa:63:df:99:58:73:57:47: 67:af:fc:6b:43:b4:c2:4e:27:f1:4b:96:0e:95:6b: 33:bc:40:e6:0a:e0:8c:c2:64:41:06:d3:5c:a9:0a: d7:bf:5a:aa:93:f9:74:89:9d:61:35:f1:af:01:4f: 86:97:7f:7c:85:27:20:54:d2:9b:f3:78:68:b0:80: 52:c4:1c:7c:45:82:5b:15:8d:27:cf:79:78:1a:94: 03:ca:0a:da:cb:ce:f8:59:75:ff:f8:18:ce:77:65: 64:dc:de:3e:73:1b:7a:d6:3f:06:35:ad:19:8e:57: ba:1f:cd:a8:a1:6b:48:bc:cb:6e:3a:0e:a5:e2:aa: 9a:ab:d4:b2:c0:2c:25:35:86:03:d9:fa:9e:45:ce: fb:dd:d3:e1:26:23:6a:d2:2e:33:db:56:9a:f1:79: ba:a4:65:3d:19:55:8d:79:14:4f:89:8d:df:04:e5: 03:6c:13:fd:c0:90:26:6a:92:98:de:3d:6a:07:3c: c6:5f:d1:21:79:c5:eb:17:89:00:71:81:62:f9:04: e8:17:9e:3d:c6:ae:b3:93:a2:5b:a6:e4:34:55:2a: 5d:94:11:7b:70:d8:64:d5:92:79:f3:ee:d7:cb:20: 68:0e:a7:24:5d:d9:16:39:ad:da:a2:57:76:4c:bb: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0E:DF:72:C5:E0:36:CE:00:F5:7F:F9:2A:95:34:32:FA:B6:19:FD X509v3 Authority Key Identifier: keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:c4:cd:c2:19:51:6c:fb:a6:d4:1b:2b:9e:1c:ca:df:68:eb: 36:a8:b2:88:5a:99:d9:17:04:91:c7:7e:f8:16:15:6c:bf:bc: 39:81:40:f2:90:f1:5e:3f:b5:b1:3c:cc:72:bb:ec:a2:b0:7b: 0c:cb:06:c6:8c:6d:bd:e1:6e:10:d6:00:2c:c4:af:85:4c:f7: b4:6a:74:c4:ab:19:5e:d0:9a:3f:53:45:01:2f:18:7a:f0:d6: ae:ef:ad:b9:77:0e:4c:d8:c3:0b:1e:00:62:e5:a2:27:ca:ad: ad:fb:36:fb:9c:03:2c:6e:ec:02:99:7e:e0:d0:9a:c9:e5:55: b1:f9:81:6e:86:2e:0b:ee:f7:ef:c4:ea:3f:63:56:f2:bc:bc: 1a:5d:8b:be:c7:b5:b2:da:fb:17:62:df:a1:0a:65:82:aa:39: d6:8a:64:e7:57:c2:36:77:64:26:c5:33:90:b3:2d:05:de:2a: db:a5:dd:db:0e:2b:06:41:15:a3:0b:f5:fb:75:bf:5e:ca:c6: 24:e6:33:6f:cc:79:ee:f8:d9:46:e6:91:a8:79:46:c2:77:e5: 71:6e:ee:56:36:6f:5a:8e:1e:15:34:51:da:9b:bb:13:a1:af: bb:72:89:80:9a:71:35:de:1e:1a:e0:0f:e4:8d:d1:ff:c3:f7: 79:f1:02:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bGjyEec1JvRWPc36bhhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4 MGZmYjQwHhcNMjUxMjIxMDEwMDUwWhcNMjUxMjIyMDEwMDUwWjAzMTEwLwYDVQQD Eyg5NzBlZGY3MmM1ZTAzNmNlMDBmNTdmZjkyYTk1MzQzMmZhYjYxOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3zMBvIn+mPfmVhzV0dnr/xrQ7TC TifxS5YOlWszvEDmCuCMwmRBBtNcqQrXv1qqk/l0iZ1hNfGvAU+Gl398hScgVNKb 83hosIBSxBx8RYJbFY0nz3l4GpQDygray874WXX/+BjOd2Vk3N4+cxt61j8GNa0Z jle6H82ooWtIvMtuOg6l4qqaq9SywCwlNYYD2fqeRc773dPhJiNq0i4z21aa8Xm6 pGU9GVWNeRRPiY3fBOUDbBP9wJAmapKY3j1qBzzGX9EhecXrF4kAcYFi+QToF549 xq6zk6JbpuQ0VSpdlBF7cNhk1ZJ58+7XyyBoDqckXdkWOa3aold2TLu6dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcO33LF4DbOAPV/+SqVNDL6thn9MB8GA1UdIwQY MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt MDYxOGM5YThjYWM0LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0 LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzMTNwhlR bPum1BsrnhzK32jrNqiyiFqZ2RcEkcd++BYVbL+8OYFA8pDxXj+1sTzMcrvsorB7 DMsGxoxtveFuENYALMSvhUz3tGp0xKsZXtCaP1NFAS8YevDWru+tuXcOTNjDCx4A YuWiJ8qtrfs2+5wDLG7sApl+4NCayeVVsfmBboYuC+7378TqP2NW8ry8Gl2Lvse1 str7F2LfoQplgqo51opk51fCNndkJsUzkLMtBd4q26Xd2w4rBkEVowv1+3W/XsrG JOYzb8x57vjZRuaRqHlGwnflcW7uVjZvWo4eFTRR2pu7E6Gvu3KJgJpxNd4eGuAP 5I3R/8P3efECXg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:24 2025 by rpki-client