This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json) Hash identifier: z1qWRpWOM9krJaTaObNwPTNbeEnDuveTQwarmL4+uZU= Subject key identifier: 91:68:2C:B0:9F:1F:34:FE:E7:F4:5C:5F:41:8D:9E:16:EC:3F:47:C9 Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f Certificate serial: 019B4438995D4819C2CD652F7A1BF77A831C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft Manifest number: 0629 Signing time: Mon 22 Dec 2025 04:01:58 +0000 Manifest this update: Mon 22 Dec 2025 04:01:58 +0000 Manifest next update: Tue 23 Dec 2025 04:01:58 +0000 Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: VoIXjzlK5sqCFjFL41q0hKIWbj4pyXPGGDSh6TFMSWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:99:5d:48:19:c2:cd:65:2f:7a:1b:f7:7a:83:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f Validity Not Before: Dec 22 04:01:58 2025 GMT Not After : Dec 23 04:01:58 2025 GMT Subject: CN=91682cb09f1f34fee7f45c5f418d9e16ec3f47c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c5:17:36:b3:bc:bb:91:00:19:36:47:f2:a8: e4:45:04:a3:c9:0b:59:e7:96:17:0b:f1:ca:17:54: 49:f7:ab:d2:a7:04:02:d1:68:bc:a4:00:8b:c2:57: 54:ce:bb:bf:d1:0e:ad:2f:49:76:7e:5c:85:c3:14: 81:bf:45:2d:6e:a6:88:f2:d3:87:94:ad:37:5f:5d: 4c:78:7f:e3:e8:40:33:b4:8f:f8:c3:78:3b:64:d2: 18:e8:6e:b6:2c:4c:dc:38:ec:91:76:6f:ee:f8:9d: cc:8c:7f:0b:5a:e8:2c:30:4c:38:82:e9:db:b6:ac: 46:63:e8:98:e1:73:5e:48:3d:a0:f8:f7:d7:b3:c4: 35:c7:14:11:48:03:eb:e2:a1:7c:06:11:ac:19:b8: 6b:a5:c9:a1:0a:df:8d:d5:6a:56:42:ef:5c:67:0f: d8:e2:d6:41:27:b3:b0:6a:ad:1d:14:ca:81:a7:06: ee:fa:0a:2f:9f:d0:bc:f3:dc:ca:30:49:cb:93:28: 48:06:1c:4a:95:b0:02:cf:81:e4:cf:78:d7:7a:c9: 5e:7f:93:96:f9:08:e9:b2:b2:9f:d0:2d:c6:9b:88: 62:bb:aa:f6:15:ad:0e:bf:6a:6d:c6:5d:34:aa:43: 1e:bb:e9:e2:ae:64:5b:e3:b8:25:6f:95:3f:49:19: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:68:2C:B0:9F:1F:34:FE:E7:F4:5C:5F:41:8D:9E:16:EC:3F:47:C9 X509v3 Authority Key Identifier: keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d3:78:a1:b0:ea:bf:e7:e0:69:b2:9c:76:a1:c9:ba:73:d1: 9e:6f:7c:eb:57:71:75:84:99:49:fd:04:80:8a:e1:a5:23:3a: 7b:34:ad:d5:6a:60:e1:8f:d7:50:db:2f:2c:81:06:72:ff:62: 60:85:a3:a2:53:7d:70:52:e2:ff:ca:a5:d5:d8:4c:93:e2:51: 90:3a:95:20:52:e1:e8:02:13:3a:e1:07:62:e5:f4:24:53:ce: 89:b3:f5:c4:0c:31:71:f0:d7:99:79:18:62:31:e2:5c:87:1d: a6:04:6a:1d:92:54:63:2c:7f:4f:37:fe:46:6f:26:af:9c:fb: 8b:5d:b3:94:29:ec:ae:01:0c:59:2a:ce:96:95:c0:35:8e:71: 11:9c:dd:ed:29:be:ef:19:ab:f9:8b:9b:5d:64:9f:64:76:ee: 3c:26:75:e8:1f:74:c9:9a:5d:d1:24:f0:72:a0:81:69:ae:ec: 16:25:0e:6f:ea:c5:1c:d0:db:25:95:eb:8c:6e:ea:1b:f6:0c: 64:e3:b8:84:a8:32:e3:6a:bd:9c:de:5d:2b:26:a2:5b:d7:27: 55:69:89:46:d2:d2:fd:80:f8:eb:25:60:cd:8e:ac:e6:82:a2: f7:35:7c:40:f9:c6:07:55:11:ce:c7:2f:3e:7f:1a:2f:0b:7b: 83:bf:12:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOJldSBnCzWUvehv3eoMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTdhOTE1MzYwYTQ4N2Q1Y2Y1ZDVjNjY1ZTViZmUxZmZm NTM2OWYwHhcNMjUxMjIyMDQwMTU4WhcNMjUxMjIzMDQwMTU4WjAzMTEwLwYDVQQD Eyg5MTY4MmNiMDlmMWYzNGZlZTdmNDVjNWY0MThkOWUxNmVjM2Y0N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8UXNrO8u5EAGTZH8qjkRQSjyQtZ 55YXC/HKF1RJ96vSpwQC0Wi8pACLwldUzru/0Q6tL0l2flyFwxSBv0UtbqaI8tOH lK03X11MeH/j6EAztI/4w3g7ZNIY6G62LEzcOOyRdm/u+J3MjH8LWugsMEw4gunb tqxGY+iY4XNeSD2g+PfXs8Q1xxQRSAPr4qF8BhGsGbhrpcmhCt+N1WpWQu9cZw/Y 4tZBJ7Owaq0dFMqBpwbu+govn9C889zKMEnLkyhIBhxKlbACz4Hkz3jXeslef5OW +QjpsrKf0C3Gm4hiu6r2Fa0Ov2ptxl00qkMeu+nirmRb47glb5U/SRk6kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFoLLCfHzT+5/RcX0GNnhbsP0fJMB8GA1UdIwQY MBaAFIuXqRU2Ckh9XPXVxmXlv+H/9TafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjct ZDg3YjM2MWFjZDg5LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83ZDRhMjktMDIzZi00MmQ3LWFhYjctZDg3YjM2MWFjZDg5 LzEvaTVlcEZUWUtTSDFjOWRYR1plV180Zl8xTnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItN4obDq v+fgabKcdqHJunPRnm9861dxdYSZSf0EgIrhpSM6ezSt1Wpg4Y/XUNsvLIEGcv9i YIWjolN9cFLi/8ql1dhMk+JRkDqVIFLh6AITOuEHYuX0JFPOibP1xAwxcfDXmXkY YjHiXIcdpgRqHZJUYyx/Tzf+Rm8mr5z7i12zlCnsrgEMWSrOlpXANY5xEZzd7Sm+ 7xmr+YubXWSfZHbuPCZ16B90yZpd0STwcqCBaa7sFiUOb+rFHNDbJZXrjG7qG/YM ZOO4hKgy42q9nN5dKyaiW9cnVWmJRtLS/YD46yVgzY6s5oKi9zV8QPnGB1URzscv Pn8aLwt7g78S/A== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:21 2025 by rpki-client