This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json) Hash identifier: TJK7PRWdMWCUAP8IIb8VJuy4UMbrVfS8JvfId3APcvo= Subject key identifier: 73:EB:46:C6:75:39:FE:97:8F:15:DE:1A:D7:46:0A:97:32:5C:1E:06 Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1 Certificate serial: 019B43252DAE3F19A9660AFDF2F8C148D3E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft Manifest number: 11D4 Signing time: Sun 21 Dec 2025 23:01:08 +0000 Manifest this update: Sun 21 Dec 2025 23:01:08 +0000 Manifest next update: Mon 22 Dec 2025 23:01:08 +0000 Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=) 2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: gltfGlsy8RlqC5tYgVbxmwYojl5QAp6pdI8ksiiFOW4=) 3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:2d:ae:3f:19:a9:66:0a:fd:f2:f8:c1:48:d3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1 Validity Not Before: Dec 21 23:01:08 2025 GMT Not After : Dec 22 23:01:08 2025 GMT Subject: CN=73eb46c67539fe978f15de1ad7460a97325c1e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:06:ba:c6:d2:fe:74:47:2b:49:55:9c:30: e6:89:4b:9b:91:e0:4d:79:6e:89:08:e3:49:3b:db: 42:cc:43:e3:e4:ad:d5:f8:2e:34:e7:7a:c5:88:dd: 7b:13:ef:41:fc:c8:86:f9:24:1f:c3:0a:13:d1:92: 48:a8:3f:d5:84:19:50:41:54:de:22:28:f8:93:a8: ae:5d:90:69:db:ad:5e:63:4d:d4:08:81:8d:e2:0c: 9a:f6:d1:be:40:a2:64:b5:8b:97:da:2f:d5:93:14: 0a:ef:11:ae:86:68:e4:7d:bb:4c:5e:95:30:08:92: 7d:8a:5a:2a:7b:2b:ef:cc:0e:b7:b0:b9:d2:70:92: c0:31:07:7d:6c:b6:6f:c2:d9:f9:c4:ce:f4:d4:24: ea:37:62:d5:13:28:95:55:5c:6c:51:c2:c8:30:39: 1b:de:01:08:25:63:e2:0b:30:86:c5:f9:03:08:86: a2:15:7e:9d:12:93:06:b2:98:19:10:f4:05:f3:65: 9f:e7:a2:98:7c:e7:57:78:6f:87:5b:2e:e0:9e:e1: b8:fd:66:e1:4c:b8:6e:39:56:12:2e:d6:41:c0:00: a9:8d:85:c9:25:d3:44:f9:a5:09:45:3a:28:fd:26: 2c:d6:83:c5:ae:ae:25:69:14:81:37:cd:c4:ca:83: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EB:46:C6:75:39:FE:97:8F:15:DE:1A:D7:46:0A:97:32:5C:1E:06 X509v3 Authority Key Identifier: keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6e:88:39:40:93:b8:10:50:c1:8b:97:e1:bf:d0:73:3d:7b: a3:cc:0f:e9:75:e8:24:94:36:9a:9d:d3:a5:a1:a1:36:0f:10: 21:a2:ff:ae:2e:b8:28:3b:84:75:19:bc:96:98:74:83:89:15: 4c:3d:f7:6d:02:42:ed:67:30:16:3d:2a:7d:2d:ed:4f:4a:7e: 76:b2:37:6f:b2:f0:67:c0:5a:a7:08:cf:04:1d:3c:9a:6e:06: 91:0e:78:3d:ba:e3:90:c2:93:9d:f6:c4:4c:7a:c5:54:1d:68: 0b:47:40:ab:cd:12:8e:0b:21:19:1e:ce:c3:4c:81:43:dd:4e: 47:97:c2:34:01:5d:91:9e:82:61:42:57:7a:15:2f:b9:36:42: 6f:57:5d:61:aa:04:a5:04:90:e1:e0:41:37:79:a3:0b:4c:22: 37:0e:89:75:91:e7:9e:86:93:15:8f:21:c7:0d:ff:46:f8:a0: f8:a4:b4:b3:20:f1:ab:96:7b:69:a6:f7:93:84:53:3c:7f:b2: 3e:d0:bc:18:e8:c3:3f:99:05:6f:ee:6e:18:51:4b:91:76:7b: f1:7e:3e:a5:d7:5c:9d:a3:b4:86:8a:4f:55:40:ba:71:26:7d: e4:78:2c:9d:67:9f:2b:9f:dd:49:74:45:59:42:37:26:29:ef: e2:1f:da:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJS2uPxmpZgr98vjBSNPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5 NjcyZDEwHhcNMjUxMjIxMjMwMTA4WhcNMjUxMjIyMjMwMTA4WjAzMTEwLwYDVQQD Eyg3M2ViNDZjNjc1MzlmZTk3OGYxNWRlMWFkNzQ2MGE5NzMyNWMxZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR0GusbS/nRHK0lVnDDmiUubkeBN eW6JCONJO9tCzEPj5K3V+C4053rFiN17E+9B/MiG+SQfwwoT0ZJIqD/VhBlQQVTe Iij4k6iuXZBp261eY03UCIGN4gya9tG+QKJktYuX2i/VkxQK7xGuhmjkfbtMXpUw CJJ9iloqeyvvzA63sLnScJLAMQd9bLZvwtn5xM701CTqN2LVEyiVVVxsUcLIMDkb 3gEIJWPiCzCGxfkDCIaiFX6dEpMGspgZEPQF82Wf56KYfOdXeG+HWy7gnuG4/Wbh TLhuOVYSLtZBwACpjYXJJdNE+aUJRToo/SYs1oPFrq4laRSBN83EyoM8QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPrRsZ1Of6XjxXeGtdGCpcyXB4GMB8GA1UdIwQY MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0 LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG6IOUCT uBBQwYuX4b/Qcz17o8wP6XXoJJQ2mp3TpaGhNg8QIaL/ri64KDuEdRm8lph0g4kV TD33bQJC7WcwFj0qfS3tT0p+drI3b7LwZ8BapwjPBB08mm4GkQ54PbrjkMKTnfbE THrFVB1oC0dAq80SjgshGR7Ow0yBQ91OR5fCNAFdkZ6CYUJXehUvuTZCb1ddYaoE pQSQ4eBBN3mjC0wiNw6JdZHnnoaTFY8hxw3/Rvig+KS0syDxq5Z7aab3k4RTPH+y PtC8GOjDP5kFb+5uGFFLkXZ78X4+pddcnaO0hopPVUC6cSZ95HgsnWefK5/dSXRF WUI3Jinv4h/aYg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:21 2025 by rpki-client