This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json) Hash identifier: v6CtUbpifdlgBLpKZGCvWzN8MFFlfgAxDWge9wO45bY= Subject key identifier: 8F:1D:0E:8E:C3:53:BE:CC:C8:48:FD:FB:98:98:93:82:3A:F5:1D:76 Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7 Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7 Certificate serial: 019B61D485E979219ADFDBF379125DAF8F67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft Manifest number: 075E Signing time: Sat 27 Dec 2025 22:01:16 +0000 Manifest this update: Sat 27 Dec 2025 22:01:16 +0000 Manifest next update: Sun 28 Dec 2025 22:01:16 +0000 Files and hashes: 1: BkDrM4-atcp10Br--qbvg_yK1zg.roa (hash: OQTXLqdYWvwdj8zXSXiFu8x5dJlCSPxgy4/Qhi1Yohc=) 2: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: pFcRj/qHdsAWzplAK9M77HHGQWh5UqNILXC8HDRwyeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:85:e9:79:21:9a:df:db:f3:79:12:5d:af:8f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7 Validity Not Before: Dec 27 22:01:16 2025 GMT Not After : Dec 28 22:01:16 2025 GMT Subject: CN=8f1d0e8ec353beccc848fdfb989893823af51d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:89:94:08:3f:d9:19:0c:6e:eb:dd:fb:01: 79:58:fa:f0:a2:7b:92:35:bc:6e:77:07:e4:b8:84: 19:d5:ae:e3:4a:58:be:d4:ba:e7:56:f8:73:bb:4b: 62:93:b4:c6:7f:9a:c8:d4:f4:a1:7e:29:bd:a5:83: 06:f7:3b:05:ac:72:80:4c:f3:91:0f:c3:e3:29:9d: 22:b2:c9:47:78:56:c2:5e:b7:9c:15:9f:2f:44:47: cb:d0:e6:a5:ac:10:ad:da:c4:81:ba:5d:35:f9:4d: 15:64:08:30:66:91:7a:ef:e3:0d:ea:bd:44:41:d1: 88:53:b6:52:f7:e7:ea:5d:51:7f:9c:6f:29:7f:47: d8:7c:cb:e3:7e:77:62:50:6b:9d:5b:eb:0c:52:83: 30:51:29:88:b3:83:a8:6a:de:d3:d0:80:64:df:12: 94:1b:c4:d6:9f:9c:4e:60:5f:13:17:c3:5a:99:38: bc:d6:b0:96:24:f6:e8:3f:0e:4e:52:49:00:74:87: 9b:cf:09:fc:9d:25:1d:c8:7c:cd:48:63:dd:10:e1: e0:4b:bc:3e:50:ee:15:eb:51:f8:4a:4b:71:f4:a2: 4c:b8:ae:9c:a4:bf:94:89:18:00:7b:ef:65:eb:ae: 8b:96:da:6e:99:13:14:d6:8f:cf:72:9d:b3:06:a8: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:0E:8E:C3:53:BE:CC:C8:48:FD:FB:98:98:93:82:3A:F5:1D:76 X509v3 Authority Key Identifier: keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:44:1c:b7:09:10:ba:86:ab:21:51:8a:aa:00:8c:3c:83:31: ba:9c:8c:15:43:d1:16:60:a0:6c:ea:59:62:07:36:36:4c:35: 17:16:97:2b:bc:cf:f8:3d:6f:67:16:75:78:67:3d:10:23:67: c2:92:35:02:e2:5f:bc:1f:02:47:b6:df:63:d6:1d:f5:ae:9c: 0a:b0:23:bd:59:34:55:90:2c:a1:c7:2d:cc:a2:10:e9:4a:03: a0:16:54:bb:12:07:7d:89:0e:eb:4b:33:42:c0:34:a2:03:de: 9d:7c:a3:3d:b7:92:f6:de:4b:88:e0:e7:4b:d1:bf:3e:d5:dc: b3:71:7c:0b:0e:4f:fe:90:cf:ca:34:9a:12:3c:31:c8:a1:68: 96:6e:ba:4b:1c:4e:c2:ff:a3:e0:fd:7c:0e:28:c5:c0:92:70: 40:c1:0a:98:6b:57:19:6f:01:9c:79:fe:f5:7c:b9:8d:25:ee: 6f:1e:f8:6b:3e:42:0c:c4:d7:87:19:85:0c:20:43:05:bf:c7: 0d:aa:77:a7:f4:0b:71:3b:a6:91:b9:ea:22:54:9e:29:81:81: b6:1f:5a:a1:5f:59:9d:9a:d0:20:68:0b:03:2d:1b:90:64:3a: 59:aa:cb:91:64:20:d9:a4:39:3a:9b:c5:7e:84:d9:5f:cc:d4: be:5a:39:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1IXpeSGa39vzeRJdr49nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2Y1MzQ4MWQxMzNiYWNmNTI3ODY4ZGJhMWIzNzYzZTNk NmRkYTcwHhcNMjUxMjI3MjIwMTE2WhcNMjUxMjI4MjIwMTE2WjAzMTEwLwYDVQQD Eyg4ZjFkMGU4ZWMzNTNiZWNjYzg0OGZkZmI5ODk4OTM4MjNhZjUxZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx6JlAg/2RkMbuvd+wF5WPrwonuS NbxudwfkuIQZ1a7jSli+1LrnVvhzu0tik7TGf5rI1PShfim9pYMG9zsFrHKATPOR D8PjKZ0isslHeFbCXrecFZ8vREfL0OalrBCt2sSBul01+U0VZAgwZpF67+MN6r1E QdGIU7ZS9+fqXVF/nG8pf0fYfMvjfndiUGudW+sMUoMwUSmIs4Ooat7T0IBk3xKU G8TWn5xOYF8TF8NamTi81rCWJPboPw5OUkkAdIebzwn8nSUdyHzNSGPdEOHgS7w+ UO4V61H4Sktx9KJMuK6cpL+UiRgAe+9l666LltpumRMU1o/Pcp2zBqi2GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8dDo7DU77MyEj9+5iYk4I69R12MB8GA1UdIwQY MBaAFCHPU0gdEzus9SeGjbobN2Pj1t2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWM5VFNCMFRPNnoxSjRhTnVoczNZLVBXM2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS83MjViODgtYzUyMy00MzEzLTllMzAt MDJjMWUxOWE3MWQ1LzEvSWM5VFNCMFRPNnoxSjRhTnVoczNZLVBXM2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS83MjViODgtYzUyMy00MzEzLTllMzAtMDJjMWUxOWE3MWQ1 LzEvSWM5VFNCMFRPNnoxSjRhTnVoczNZLVBXM2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEQctwkQ uoarIVGKqgCMPIMxupyMFUPRFmCgbOpZYgc2Nkw1FxaXK7zP+D1vZxZ1eGc9ECNn wpI1AuJfvB8CR7bfY9Yd9a6cCrAjvVk0VZAsocctzKIQ6UoDoBZUuxIHfYkO60sz QsA0ogPenXyjPbeS9t5LiODnS9G/PtXcs3F8Cw5P/pDPyjSaEjwxyKFolm66SxxO wv+j4P18DijFwJJwQMEKmGtXGW8BnHn+9Xy5jSXubx74az5CDMTXhxmFDCBDBb/H Dap3p/QLcTumkbnqIlSeKYGBth9aoV9ZnZrQIGgLAy0bkGQ6WarLkWQg2aQ5OpvF foTZX8zUvlo5sQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:45 2025 by rpki-client