This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json) Hash identifier: FEW2cyjoUrKEeV04brnV54j8cpt2ea1ApHa/evDJxlk= Subject key identifier: 51:07:34:DD:A1:C3:F2:8B:F4:95:1A:C2:34:F4:A9:A0:3A:A3:BD:F9 Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Certificate serial: 019B5F410AEA37C5985EE23CD52590203DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft Manifest number: 172D Signing time: Sat 27 Dec 2025 10:00:56 +0000 Manifest this update: Sat 27 Dec 2025 10:00:56 +0000 Manifest next update: Sun 28 Dec 2025 10:00:56 +0000 Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=) 2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=) 3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: /O2azo0Gy1Dx4BGzByHHrR0vHuHVSyhePENLRj12irs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:0a:ea:37:c5:98:5e:e2:3c:d5:25:90:20:3d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Validity Not Before: Dec 27 10:00:56 2025 GMT Not After : Dec 28 10:00:56 2025 GMT Subject: CN=510734dda1c3f28bf4951ac234f4a9a03aa3bdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:a3:06:41:7e:ed:78:9b:71:ff:be:df:ab: 0c:7e:0d:98:3e:1c:1a:1c:4d:44:17:3b:60:f4:25: a0:b4:44:3c:17:d0:f0:3c:41:68:e0:8d:c6:73:a2: ea:79:12:e9:10:f0:64:71:19:a1:8c:77:29:26:4b: 68:b9:18:5c:30:92:52:c2:3d:86:48:5c:dd:48:d9: 2d:6b:62:03:32:4d:d9:78:89:a6:32:8b:c7:96:6c: 44:22:31:e8:3a:1a:27:f7:52:c0:9a:fa:e3:02:9f: 0b:e8:2f:3f:b4:94:59:44:bc:ae:14:a8:ce:cc:e5: 1a:c6:c9:fa:82:e9:dd:e2:86:4a:bc:15:f0:b7:5a: d9:a7:2c:35:2a:fa:40:cf:ad:af:39:3a:43:24:c4: 81:06:2f:eb:f0:1f:78:a2:85:fd:85:a6:61:33:45: ae:9d:9e:ce:7d:d9:bd:78:74:d4:77:ec:f3:6c:78: 56:1a:b1:11:61:52:45:ea:f0:d8:a1:27:65:83:e5: 3a:69:b0:f3:28:ba:9e:a4:98:32:4e:1d:f1:08:dd: 65:22:20:3a:eb:0d:6e:4e:38:5f:6e:1b:fd:e9:e9: 0f:77:28:9e:44:a5:d5:7b:52:ce:d9:c0:06:be:ff: 23:99:e3:6e:1f:d4:05:6c:ef:e4:32:e2:e6:41:1a: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:07:34:DD:A1:C3:F2:8B:F4:95:1A:C2:34:F4:A9:A0:3A:A3:BD:F9 X509v3 Authority Key Identifier: keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f7:54:73:10:45:ee:94:bc:4b:2d:e4:13:af:d9:1f:52:f6: 96:da:e4:18:dd:9a:6e:23:36:e5:c0:a9:cd:9c:d8:0c:4f:9b: e5:c1:59:52:c6:7d:4b:59:08:e1:5f:be:f8:fd:2f:83:b6:94: 23:b7:2b:41:4f:6e:45:7d:58:68:b5:7f:18:b5:25:30:a0:00: 49:90:1d:cd:04:07:ac:4c:9b:55:02:99:07:9a:4b:17:51:8e: a0:fa:41:ac:59:34:1a:ef:d2:c3:5d:07:6f:01:27:d3:01:ea: f8:e2:f5:93:bb:c7:db:57:a9:15:ab:05:e8:a5:0f:1c:17:d1: 33:45:ba:f6:f5:7a:0b:f2:c6:2c:83:7b:e6:3b:41:7b:95:3d: 30:e7:a8:f3:80:14:33:27:b0:a0:85:77:a8:67:b6:e0:a8:19: 6d:5c:97:ef:e8:f7:f1:87:21:a0:e5:94:04:b0:20:37:5f:7e: f8:d2:fa:5b:a5:6b:0f:a8:aa:52:cd:df:12:a2:5c:bb:26:45: 76:e5:4c:9b:dd:e0:da:63:55:7f:56:b5:17:24:1b:e3:4a:96: 1e:43:50:ae:7c:57:3f:c6:b6:7e:3e:78:a7:a3:9f:57:ab:a0: be:be:a6:43:d1:19:a6:89:29:80:45:96:32:e3:72:4d:6b:9f: b7:e4:ce:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQQrqN8WYXuI81SWQID2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4 MGZmYjQwHhcNMjUxMjI3MTAwMDU2WhcNMjUxMjI4MTAwMDU2WjAzMTEwLwYDVQQD Eyg1MTA3MzRkZGExYzNmMjhiZjQ5NTFhYzIzNGY0YTlhMDNhYTNiZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTujBkF+7Xibcf++36sMfg2YPhwa HE1EFztg9CWgtEQ8F9DwPEFo4I3Gc6LqeRLpEPBkcRmhjHcpJktouRhcMJJSwj2G SFzdSNkta2IDMk3ZeImmMovHlmxEIjHoOhon91LAmvrjAp8L6C8/tJRZRLyuFKjO zOUaxsn6gund4oZKvBXwt1rZpyw1KvpAz62vOTpDJMSBBi/r8B94ooX9haZhM0Wu nZ7Ofdm9eHTUd+zzbHhWGrERYVJF6vDYoSdlg+U6abDzKLqepJgyTh3xCN1lIiA6 6w1uTjhfbhv96ekPdyieRKXVe1LO2cAGvv8jmeNuH9QFbO/kMuLmQRq+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEHNN2hw/KL9JUawjT0qaA6o735MB8GA1UdIwQY MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt MDYxOGM5YThjYWM0LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0 LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvdUcxBF 7pS8Sy3kE6/ZH1L2ltrkGN2abiM25cCpzZzYDE+b5cFZUsZ9S1kI4V+++P0vg7aU I7crQU9uRX1YaLV/GLUlMKAASZAdzQQHrEybVQKZB5pLF1GOoPpBrFk0Gu/Sw10H bwEn0wHq+OL1k7vH21epFasF6KUPHBfRM0W69vV6C/LGLIN75jtBe5U9MOeo84AU MyewoIV3qGe24KgZbVyX7+j38YchoOWUBLAgN19++NL6W6VrD6iqUs3fEqJcuyZF duVMm93g2mNVf1a1FyQb40qWHkNQrnxXP8a2fj54p6OfV6ugvr6mQ9EZpokpgEWW MuNyTWuft+TOOg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:38:24 2025 by rpki-client