This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json) Hash identifier: URk6UpO2JItcqRClmB2HZogsq9fQWZh17miDXRX7TcU= Subject key identifier: 85:95:48:48:F1:14:DB:95:DB:08:C2:E3:A5:70:AB:64:85:0D:D0:6E Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3 Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3 Certificate serial: 019B3757E800BE8864DC6BF3354F626E0008 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft Manifest number: 0B93 Signing time: Fri 19 Dec 2025 16:01:06 +0000 Manifest this update: Fri 19 Dec 2025 16:01:06 +0000 Manifest next update: Sat 20 Dec 2025 16:01:06 +0000 Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=) 2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: T6W1ejX7PRtiOraICy8AxVfrdWWy+zPd6Uj44gUIis8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:e8:00:be:88:64:dc:6b:f3:35:4f:62:6e:00:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3 Validity Not Before: Dec 19 16:01:06 2025 GMT Not After : Dec 20 16:01:06 2025 GMT Subject: CN=85954848f114db95db08c2e3a570ab64850dd06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:45:e3:3e:96:b8:7b:16:66:b6:fe:aa:a4:86: 43:f1:39:72:31:7d:06:3f:29:2e:5b:f3:f0:65:81: 88:20:44:03:4b:e5:03:9c:08:3c:c7:30:c1:58:c9: b7:c9:7d:9a:1b:d6:f9:c0:0a:f8:71:e0:43:38:27: e1:ad:31:22:76:5b:87:0e:83:9b:e8:33:7b:77:dd: 1d:96:bc:5f:de:69:c8:81:3d:81:39:ec:9d:49:53: f5:1c:08:0f:f0:3b:52:35:74:e7:71:a8:34:36:76: 7c:73:0d:9f:07:1e:0b:fc:e4:4b:5c:4a:7a:c3:01: 16:34:3a:75:9b:73:4b:50:81:36:eb:e9:3d:50:63: dc:f4:4d:f0:e1:b9:4b:28:5c:ff:b8:94:a1:ad:7e: 09:ec:14:a2:8f:3f:71:76:a5:a8:36:81:7d:99:c1: c8:6b:b0:43:0c:32:88:cf:59:75:a3:2d:ce:54:59: fb:b8:69:b4:b2:9e:de:55:e8:f8:43:75:1c:8f:f4: 60:e9:67:d9:79:4d:9a:f0:03:7a:d7:c8:97:68:c0: 63:a8:77:e8:04:d9:70:b1:6b:10:59:c9:5d:cc:40: 88:b7:aa:f2:31:e6:10:f8:32:1c:37:dc:19:4d:c1: 49:3a:cc:50:a8:0c:95:1e:be:eb:81:bd:38:75:01: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:95:48:48:F1:14:DB:95:DB:08:C2:E3:A5:70:AB:64:85:0D:D0:6E X509v3 Authority Key Identifier: keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:37:79:45:bf:d2:ca:e4:59:84:18:d9:75:f7:26:92:b0: b9:66:4e:48:48:fe:68:a6:e7:63:24:9e:bc:e3:5a:be:70:13: f1:b7:c2:1b:3c:a0:5c:85:a9:96:d3:48:0e:f8:b7:b1:e4:37: ae:be:85:56:55:66:ac:7b:53:80:33:cf:03:09:fe:47:6e:58: 64:97:11:d0:5f:d2:5e:a1:94:fc:6f:1f:f6:53:9a:c2:e2:0d: de:bf:a4:c8:32:f0:b0:20:92:44:e4:ad:80:2f:08:9b:74:ef: a5:bd:b0:7b:3d:bc:93:75:12:1e:ac:6e:be:32:fc:22:b6:23: 05:88:6a:45:2f:7c:f5:44:f1:ea:85:e1:8a:4f:c3:50:8b:e9: 25:d6:fd:b8:37:4b:72:84:c0:b4:28:df:67:e9:83:c2:e0:81: 0c:5b:b6:33:52:86:6f:e5:bb:15:ae:74:0e:58:97:81:cd:48: 7a:03:0c:41:1a:41:2d:42:1f:d5:c6:86:18:9f:22:bd:28:35: 77:84:c4:93:3f:78:66:6a:0d:93:c9:0e:6c:27:18:e1:02:3b: 89:a9:a8:4b:fc:37:04:fe:b7:ec:eb:2c:61:25:8a:f3:c8:f3: e1:87:5a:88:87:a5:e6:85:44:e7:f1:fa:34:2d:3a:cd:84:4e: 8e:4c:07:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V+gAvohk3GvzNU9ibgAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNWZlNTBmMjkwZGQ5ZTQxZTVmNGE2NWRhYmIyMzk3MmE4 MmNhZDMwHhcNMjUxMjE5MTYwMTA2WhcNMjUxMjIwMTYwMTA2WjAzMTEwLwYDVQQD Eyg4NTk1NDg0OGYxMTRkYjk1ZGIwOGMyZTNhNTcwYWI2NDg1MGRkMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEXjPpa4exZmtv6qpIZD8TlyMX0G PykuW/PwZYGIIEQDS+UDnAg8xzDBWMm3yX2aG9b5wAr4ceBDOCfhrTEidluHDoOb 6DN7d90dlrxf3mnIgT2BOeydSVP1HAgP8DtSNXTncag0NnZ8cw2fBx4L/ORLXEp6 wwEWNDp1m3NLUIE26+k9UGPc9E3w4blLKFz/uJShrX4J7BSijz9xdqWoNoF9mcHI a7BDDDKIz1l1oy3OVFn7uGm0sp7eVej4Q3Ucj/Rg6WfZeU2a8AN618iXaMBjqHfo BNlwsWsQWcldzECIt6ryMeYQ+DIcN9wZTcFJOsxQqAyVHr7rgb04dQHwEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWVSEjxFNuV2wjC46Vwq2SFDdBuMB8GA1UdIwQY MBaAFItf5Q8pDdnkHl9KZdq7I5cqgsrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2It OTEwYWUzYmVjNjMxLzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2ItOTEwYWUzYmVjNjMx LzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvo3eUW/ 0srkWYQY2XX3JpKwuWZOSEj+aKbnYySevONavnAT8bfCGzygXIWpltNIDvi3seQ3 rr6FVlVmrHtTgDPPAwn+R25YZJcR0F/SXqGU/G8f9lOawuIN3r+kyDLwsCCSROSt gC8Im3Tvpb2wez28k3USHqxuvjL8IrYjBYhqRS989UTx6oXhik/DUIvpJdb9uDdL coTAtCjfZ+mDwuCBDFu2M1KGb+W7Fa50DliXgc1IegMMQRpBLUIf1caGGJ8ivSg1 d4TEkz94ZmoNk8kObCcY4QI7iamoS/w3BP637OssYSWK88jz4YdaiIel5oVE5/H6 NC06zYROjkwHuw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:57:59 2025 by rpki-client