This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json) Hash identifier: g239sd9h4iV3dZQN6GuWfvQISgCQzdCv62Vm892TkpE= Subject key identifier: 0F:CC:04:8E:5A:F2:86:97:7E:C8:A9:04:DB:FD:06:CB:56:18:E6:65 Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Certificate serial: 019B40C93CCC8F9FEA8328006E95EDA26993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft Manifest number: 0483 Signing time: Sun 21 Dec 2025 12:01:28 +0000 Manifest this update: Sun 21 Dec 2025 12:01:28 +0000 Manifest next update: Mon 22 Dec 2025 12:01:28 +0000 Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: kTXv2sUNaPPbclDt5Wlc8gaOMW6atkLvsg24fEftXRg=) 2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:3c:cc:8f:9f:ea:83:28:00:6e:95:ed:a2:69:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Validity Not Before: Dec 21 12:01:28 2025 GMT Not After : Dec 22 12:01:28 2025 GMT Subject: CN=0fcc048e5af286977ec8a904dbfd06cb5618e665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:be:55:59:29:0d:83:62:21:ce:03:71:17: 87:26:01:c1:0f:c4:57:da:19:34:ce:e2:85:7c:dc: 82:05:65:46:86:b4:ec:66:80:53:c0:2a:7b:d7:c3: 1f:a1:58:aa:46:d2:03:b0:e9:75:c3:f7:b0:3e:a6: dd:86:15:c3:9c:77:28:8b:85:77:3d:65:e0:b0:1c: ab:03:70:1b:97:4f:e7:e8:bf:be:86:93:82:62:1e: 80:41:38:75:52:f3:92:b0:ea:12:0a:c1:a8:51:be: ae:ab:c9:37:e3:9c:ea:ba:f1:a2:bf:0b:e0:4f:b4: a6:da:2b:0b:ab:8e:19:ff:d8:66:5e:71:77:3e:97: 36:d7:7d:f2:a4:d0:4d:72:12:b6:80:a9:5f:ed:7c: de:23:89:3b:c4:ef:e4:88:b4:1f:cd:6c:af:07:4a: d6:c9:ef:1d:81:49:b6:dd:84:3b:5d:cf:93:5e:4f: 80:80:24:8c:6a:7d:90:ef:46:93:b4:67:9c:57:80: 04:d8:60:c1:0f:78:98:a3:03:2f:9f:cf:c9:c4:90: 01:b3:73:86:c5:b5:32:f2:1a:8b:c3:14:79:29:2e: 7a:34:7f:41:6c:38:4a:8c:f0:ec:a5:ea:1b:06:f3: ba:09:b0:72:7b:76:39:13:e9:74:0d:c1:62:b7:9c: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CC:04:8E:5A:F2:86:97:7E:C8:A9:04:DB:FD:06:CB:56:18:E6:65 X509v3 Authority Key Identifier: keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3e:21:96:2e:9e:71:93:ef:91:00:8f:62:e4:36:bb:f9:bf: 3e:31:74:e7:d9:c8:6f:ab:fb:cb:0a:54:92:3b:8e:88:36:43: ec:a3:fb:3c:87:ca:b3:06:41:ee:7d:7e:12:c6:cc:8a:be:49: 50:2b:63:f4:8e:d8:86:b7:6d:3a:86:b9:b4:c9:17:59:7f:95: aa:28:eb:bf:43:89:f4:83:8e:d5:ca:36:97:af:47:f6:c0:59: ad:ef:2a:6f:36:de:14:56:3c:b7:48:f9:72:5f:21:b9:f9:4c: 67:bd:59:c3:89:9f:b2:33:67:d0:4c:e8:35:ed:be:ae:e8:55: 35:19:0c:6d:b4:42:4d:12:b8:86:03:df:76:55:30:1f:82:0e: eb:f9:8f:3c:61:ea:b2:6f:75:0b:d6:de:60:ad:a5:c1:36:62: 32:e4:45:17:a2:86:3b:c3:77:ba:24:46:57:60:4d:da:35:0a: 6c:15:22:21:8f:bb:4d:24:d2:2a:73:7b:5f:e1:a7:80:9a:29: 26:90:65:fe:40:59:57:ec:8a:77:d1:47:07:a9:ff:e8:be:d0: e4:c8:ca:9e:4f:08:bd:cc:36:3a:50:0e:dd:12:be:ce:8b:de: 37:71:e5:8c:fd:39:35:c3:35:c4:cf:77:0c:52:68:38:29:64: a5:f4:af:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyTzMj5/qgygAbpXtommTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz YmYzNmEwHhcNMjUxMjIxMTIwMTI4WhcNMjUxMjIyMTIwMTI4WjAzMTEwLwYDVQQD EygwZmNjMDQ4ZTVhZjI4Njk3N2VjOGE5MDRkYmZkMDZjYjU2MThlNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4S+VVkpDYNiIc4DcReHJgHBD8RX 2hk0zuKFfNyCBWVGhrTsZoBTwCp718MfoViqRtIDsOl1w/ewPqbdhhXDnHcoi4V3 PWXgsByrA3Abl0/n6L++hpOCYh6AQTh1UvOSsOoSCsGoUb6uq8k345zquvGivwvg T7Sm2isLq44Z/9hmXnF3Ppc2133ypNBNchK2gKlf7XzeI4k7xO/kiLQfzWyvB0rW ye8dgUm23YQ7Xc+TXk+AgCSMan2Q70aTtGecV4AE2GDBD3iYowMvn8/JxJABs3OG xbUy8hqLwxR5KS56NH9BbDhKjPDspeobBvO6CbBye3Y5E+l0DcFit5xmGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/MBI5a8oaXfsipBNv9BstWGOZlMB8GA1UdIwQY MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt NTk0YTI3ZGIxNDZiLzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALT4hli6e cZPvkQCPYuQ2u/m/PjF059nIb6v7ywpUkjuOiDZD7KP7PIfKswZB7n1+EsbMir5J UCtj9I7YhrdtOoa5tMkXWX+Vqijrv0OJ9IOO1co2l69H9sBZre8qbzbeFFY8t0j5 cl8huflMZ71Zw4mfsjNn0EzoNe2+ruhVNRkMbbRCTRK4hgPfdlUwH4IO6/mPPGHq sm91C9beYK2lwTZiMuRFF6KGO8N3uiRGV2BN2jUKbBUiIY+7TSTSKnN7X+GngJop JpBl/kBZV+yKd9FHB6n/6L7Q5MjKnk8Ivcw2OlAO3RK+zoveN3HljP05NcM1xM93 DFJoOClkpfSvDg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:57:33 2025 by rpki-client