This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json) Hash identifier: NX0xH0M6xVP4wyqSCkEjjA5oMmBlbGzuX6Osd2MTDVs= Subject key identifier: B2:FE:97:68:1D:DE:73:9A:3A:3B:94:5A:8C:EE:44:BE:89:3B:C6:48 Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d Certificate serial: 019B44A5D2B665DDD3570AC9948EC30D6BE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft Manifest number: 07C8 Signing time: Mon 22 Dec 2025 06:01:16 +0000 Manifest this update: Mon 22 Dec 2025 06:01:16 +0000 Manifest next update: Tue 23 Dec 2025 06:01:16 +0000 Files and hashes: 1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=) 2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: UT1aZm//anbu/H9VxGT2swqdOPF/JCj8osAkkTp8zP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:d2:b6:65:dd:d3:57:0a:c9:94:8e:c3:0d:6b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d Validity Not Before: Dec 22 06:01:16 2025 GMT Not After : Dec 23 06:01:16 2025 GMT Subject: CN=b2fe97681dde739a3a3b945a8cee44be893bc648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:8e:24:b5:18:66:31:12:96:e0:a6:64:ae: 41:89:29:bb:ba:f9:78:a2:ca:78:95:ec:fd:cb:a6: dd:af:38:42:cd:01:6d:05:50:31:d0:cf:21:a1:71: 71:6a:10:50:11:e8:83:7e:6d:10:2e:ec:e4:1e:fe: 9a:df:5e:6d:7b:cc:4c:1f:ed:99:d7:d6:2f:78:b8: c2:85:7b:36:2e:9f:c1:76:ac:7d:4c:d1:fb:57:93: ab:b6:34:08:c3:79:15:c5:3f:eb:e3:3b:41:49:2c: c4:36:9c:66:20:4c:4b:3c:d1:ea:25:d6:8f:55:55: 57:7e:c5:8a:57:cb:0a:30:63:3e:99:29:4f:e1:d2: d3:16:e1:f7:41:37:a3:48:4e:2c:de:10:6c:02:9c: 11:4a:d2:3f:6d:00:5a:bc:2b:c9:be:01:d9:31:fd: ed:61:4a:1f:70:c8:84:b9:b1:a6:ad:d1:a4:ad:9e: db:a3:b8:a2:1e:a5:67:e0:76:03:dc:09:b6:37:9c: 81:f4:9b:84:83:45:b6:d3:47:9a:87:2c:e2:e1:5a: b9:51:97:b6:aa:c9:ba:75:b4:d5:09:27:da:76:6f: af:30:e3:db:df:56:d8:f6:be:9a:1a:39:f9:71:93: af:17:6f:3c:88:a9:7f:cf:47:2e:83:82:b3:35:06: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FE:97:68:1D:DE:73:9A:3A:3B:94:5A:8C:EE:44:BE:89:3B:C6:48 X509v3 Authority Key Identifier: keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:00:98:72:e2:84:1d:b7:0b:b6:d7:36:50:d5:85:bd:55:41: 5b:ae:01:7d:93:7f:c9:62:79:c6:26:73:53:e9:0f:6e:6b:ff: 42:00:e3:b5:86:23:43:3f:c7:85:3b:d9:c0:2b:a8:7c:43:b2: 58:b7:b7:ab:2f:6e:12:aa:25:0d:ef:68:8b:91:b1:35:c5:88: 66:57:7e:b6:47:50:ea:b1:9a:a0:a2:1a:0e:46:9c:9c:21:c4: 79:c0:50:92:3f:29:a4:39:4a:96:7e:8e:9b:ec:76:60:3e:ad: 78:86:ee:79:67:0f:23:5a:5f:7d:0d:b8:35:ca:78:16:d1:09: e2:70:5e:56:c2:da:0e:80:c9:11:29:b5:c3:3b:19:f1:c6:b9: 73:7c:64:a1:45:04:96:95:95:60:f9:20:b5:9c:c0:5f:d3:ef: 74:60:07:40:34:88:33:43:df:06:ee:5b:09:9b:74:05:d3:2e: d6:a4:3f:9e:f7:e6:dd:c7:90:9c:ad:96:40:30:d7:ac:3e:f5: 8f:39:f0:a8:c4:bd:65:c0:89:a1:93:9c:8d:1b:3c:55:e1:bc: ef:02:53:41:3b:42:64:2a:3e:2e:5e:4d:85:8f:27:5f:0a:ef: 44:da:12:57:02:08:61:80:07:65:d2:c5:54:db:fa:77:85:0f: 86:45:15:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpdK2Zd3TVwrJlI7DDWvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI0NDk4OTQ1ODlkMTZmNjc2YmZmMjgyYWJlZGFhNTZj YzdiOGQwHhcNMjUxMjIyMDYwMTE2WhcNMjUxMjIzMDYwMTE2WjAzMTEwLwYDVQQD EyhiMmZlOTc2ODFkZGU3MzlhM2EzYjk0NWE4Y2VlNDRiZTg5M2JjNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DSOJLUYZjESluCmZK5BiSm7uvl4 osp4lez9y6bdrzhCzQFtBVAx0M8hoXFxahBQEeiDfm0QLuzkHv6a315te8xMH+2Z 19YveLjChXs2Lp/Bdqx9TNH7V5OrtjQIw3kVxT/r4ztBSSzENpxmIExLPNHqJdaP VVVXfsWKV8sKMGM+mSlP4dLTFuH3QTejSE4s3hBsApwRStI/bQBavCvJvgHZMf3t YUofcMiEubGmrdGkrZ7bo7iiHqVn4HYD3Am2N5yB9JuEg0W200eahyzi4Vq5UZe2 qsm6dbTVCSfadm+vMOPb31bY9r6aGjn5cZOvF288iKl/z0cug4KzNQa6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLL+l2gd3nOaOjuUWozuRL6JO8ZIMB8GA1UdIwQY MBaAFCNLRJiUWJ0W9na/8oKr7apWzHuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMt NzNhNjNiMjU5YmViLzEvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMtNzNhNjNiMjU5YmVi LzEvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggCYcuKE HbcLttc2UNWFvVVBW64BfZN/yWJ5xiZzU+kPbmv/QgDjtYYjQz/HhTvZwCuofEOy WLe3qy9uEqolDe9oi5GxNcWIZld+tkdQ6rGaoKIaDkacnCHEecBQkj8ppDlKln6O m+x2YD6teIbueWcPI1pffQ24Ncp4FtEJ4nBeVsLaDoDJESm1wzsZ8ca5c3xkoUUE lpWVYPkgtZzAX9PvdGAHQDSIM0PfBu5bCZt0BdMu1qQ/nvfm3ceQnK2WQDDXrD71 jznwqMS9ZcCJoZOcjRs8VeG87wJTQTtCZCo+Ll5NhY8nXwrvRNoSVwIIYYAHZdLF VNv6d4UPhkUVCQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:51:41 2025 by rpki-client