This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json) Hash identifier: Xbo1/SDVhUUcnupzYqFb8akNx4IQFWOP5xNqJYFyUR4= Subject key identifier: 1A:83:EA:C5:83:6E:F5:4B:52:7A:0E:90:43:9B:22:D9:37:42:A5:AF Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Certificate serial: 019B27E4B6832D662E6F41BCDD6CE2A1023B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft Manifest number: 1481 Signing time: Tue 16 Dec 2025 16:00:58 +0000 Manifest this update: Tue 16 Dec 2025 16:00:58 +0000 Manifest next update: Wed 17 Dec 2025 16:00:58 +0000 Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: WLDRPZ+EMa/31Hk5WPEYrVAWIdZNTYSfJxsEzjB816g=) 2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=) 3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:b6:83:2d:66:2e:6f:41:bc:dd:6c:e2:a1:02:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Validity Not Before: Dec 16 16:00:58 2025 GMT Not After : Dec 17 16:00:58 2025 GMT Subject: CN=1a83eac5836ef54b527a0e90439b22d93742a5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:80:43:80:46:a5:fc:44:d7:a9:c4:b4:86: 1a:1b:2a:38:dc:37:72:d6:05:f7:29:22:0d:81:94: 64:59:48:2c:ba:9f:4d:48:6e:d6:4a:88:cd:dd:d6: ca:bb:af:d9:a2:e4:14:2b:3f:b9:05:5e:74:f5:da: 40:45:c1:f8:06:10:ae:d1:d5:c6:cd:13:86:47:fa: 98:26:64:13:f7:bb:0c:00:a7:47:22:fd:8d:2f:1b: 56:5c:b1:5f:ec:da:49:89:be:82:f6:65:e8:25:3e: cd:d4:47:ea:bf:0e:0c:49:83:27:92:ee:09:c4:3c: 30:c8:19:35:2a:2d:a9:5b:75:9d:6d:a1:c0:5b:20: a9:ae:b2:75:63:61:00:2c:b6:6e:42:32:52:9f:ab: 9c:8b:2a:f4:b3:81:19:63:70:82:2c:37:46:2a:d3: 6f:53:49:77:86:a6:27:a2:e7:1e:d4:bd:03:ba:91: b9:81:da:13:9e:b3:6a:54:79:a6:99:a8:45:81:01: 56:74:2d:ef:97:c7:58:e6:c1:d6:64:8b:33:62:c9: 89:b1:92:92:05:bc:1d:49:df:a5:07:8c:eb:65:fc: ca:f3:97:83:79:b5:72:5b:92:ca:00:52:02:69:9f: 4d:e1:19:eb:3d:b5:e1:09:c3:ab:82:dc:63:b9:4f: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:83:EA:C5:83:6E:F5:4B:52:7A:0E:90:43:9B:22:D9:37:42:A5:AF X509v3 Authority Key Identifier: keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f9:da:37:69:82:b1:7f:84:78:43:55:82:3d:0b:d4:0a:34: 45:05:ee:9a:cc:56:65:c6:d5:80:7a:3a:9c:23:e9:08:7a:79: e6:f1:82:a2:d0:74:11:a8:d1:d1:fc:ce:7d:74:c2:9e:32:24: a5:d8:03:03:26:15:52:69:5e:99:59:f7:73:d5:60:63:5c:50: e3:af:1e:5d:09:bb:e4:55:18:32:7d:02:af:d1:9c:c7:b8:9e: 63:4b:39:11:df:06:cb:0b:85:3e:5d:d9:03:5c:f8:d8:5f:25: 9f:2a:6c:a8:0a:76:9d:a8:a2:7f:82:29:46:d1:16:f0:9f:c6: e2:ba:43:2d:58:34:d9:43:d6:60:ec:f9:8a:d1:9a:3d:5e:cb: c9:79:53:00:27:7d:c8:5a:c7:fb:3b:0a:90:8a:5a:d2:d1:c1: 1d:dd:34:ff:8c:9a:a0:a4:bb:f9:e7:68:f6:da:cc:be:e2:a1: 60:87:72:d8:37:8a:ca:68:67:7d:7a:5d:58:e4:6e:b1:91:ba: 3c:64:70:b9:83:83:fa:cf:ae:bc:a0:44:7a:f5:db:e2:a8:b0: 2b:51:fb:0a:b2:ab:87:10:34:04:7d:28:89:64:ca:d7:d1:4f: 27:1f:71:b5:69:f1:6b:80:a4:e9:82:7b:75:d4:f7:7c:4e:24: 2a:3b:9a:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5LaDLWYub0G83WzioQI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl NzVhMGIwHhcNMjUxMjE2MTYwMDU4WhcNMjUxMjE3MTYwMDU4WjAzMTEwLwYDVQQD EygxYTgzZWFjNTgzNmVmNTRiNTI3YTBlOTA0MzliMjJkOTM3NDJhNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAuAQ4BGpfxE16nEtIYaGyo43Ddy 1gX3KSINgZRkWUgsup9NSG7WSojN3dbKu6/ZouQUKz+5BV509dpARcH4BhCu0dXG zROGR/qYJmQT97sMAKdHIv2NLxtWXLFf7NpJib6C9mXoJT7N1Efqvw4MSYMnku4J xDwwyBk1Ki2pW3WdbaHAWyCprrJ1Y2EALLZuQjJSn6uciyr0s4EZY3CCLDdGKtNv U0l3hqYnouce1L0DupG5gdoTnrNqVHmmmahFgQFWdC3vl8dY5sHWZIszYsmJsZKS BbwdSd+lB4zrZfzK85eDebVyW5LKAFICaZ9N4RnrPbXhCcOrgtxjuU8ehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqD6sWDbvVLUnoOkEObItk3QqWvMB8GA1UdIwQY MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/naN2mC sX+EeENVgj0L1Ao0RQXumsxWZcbVgHo6nCPpCHp55vGCotB0EajR0fzOfXTCnjIk pdgDAyYVUmlemVn3c9VgY1xQ468eXQm75FUYMn0Cr9Gcx7ieY0s5Ed8GywuFPl3Z A1z42F8lnypsqAp2naiif4IpRtEW8J/G4rpDLVg02UPWYOz5itGaPV7LyXlTACd9 yFrH+zsKkIpa0tHBHd00/4yaoKS7+edo9trMvuKhYIdy2DeKymhnfXpdWORusZG6 PGRwuYOD+s+uvKBEevXb4qiwK1H7CrKrhxA0BH0oiWTK19FPJx9xtWnxa4Ck6YJ7 ddT3fE4kKjuaxw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:35:32 2025 by rpki-client