This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json) Hash identifier: Z+gL+L6gNdn/rENnzOER7MGeGLrieB5crI1ilIO37AM= Subject key identifier: 12:AA:50:5B:07:49:15:6B:1D:8E:90:A6:8C:59:44:0A:60:EB:CE:6C Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Certificate serial: 019B4023E6A9C6E21F2875D897856B9A6F31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 09:00:53 +0000 Manifest this update: Sun 21 Dec 2025 09:00:53 +0000 Manifest next update: Mon 22 Dec 2025 09:00:53 +0000 Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=) 2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: +XwkE9oNGNEUCS37aWZxSdMxXp6eP+USCtCgF38OCM4=) 3: SVlLEhHqyoa8VmAwyeAz-eO7tmk.roa (hash: 3GqZDoa/8luHJb3c9fM/8sF9/CWphehWtTWgxsoVdy8=) 4: m-Ncfpuw9lyFAGvhN6SO1U82ZPI.roa (hash: /M7ImEM1ZD0v5nu/Nb9bLOvnyebMcwld8IBc6QoNAjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:e6:a9:c6:e2:1f:28:75:d8:97:85:6b:9a:6f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Validity Not Before: Dec 21 09:00:53 2025 GMT Not After : Dec 22 09:00:53 2025 GMT Subject: CN=12aa505b0749156b1d8e90a68c59440a60ebce6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:5a:7e:f4:82:a4:b0:ed:3f:78:76:e9:fd: f2:c8:c0:3f:82:a5:7a:07:2e:bd:e5:32:ad:c3:ba: 7d:91:96:e8:14:4d:e3:7c:da:52:37:e6:8e:6f:e8: d6:9d:b2:9d:b9:d3:40:9f:f6:de:32:50:28:71:9e: a7:2d:0a:42:59:e3:a3:aa:cc:de:7b:ee:6f:bf:bc: ce:99:ba:c4:61:f2:19:e4:91:6a:45:e5:4b:68:d5: 8c:5f:7b:4f:51:21:65:9f:a7:a0:8c:7e:48:89:a0: a0:d2:fa:bb:65:b3:e0:32:03:6b:5d:28:01:22:5f: a7:18:28:5a:b2:23:fc:40:db:ef:d6:33:84:34:6b: c4:61:8d:a2:2e:74:db:cb:c0:0b:05:62:19:9e:a2: e9:cf:0f:3f:8a:6f:d5:9f:9e:52:b6:8a:ff:92:5d: b7:25:7d:bf:3d:58:2e:e1:d2:b2:93:d3:ea:f9:2f: 1d:52:36:fb:d2:ee:1c:3a:64:75:5e:42:1d:8d:a3: cf:44:f1:0e:8e:1f:fb:d4:44:ec:bc:f0:61:fa:39: 9e:88:64:c0:b3:ad:4f:56:55:54:5a:19:a2:89:72: 97:e5:07:87:22:a9:46:d8:a0:79:16:cf:28:81:d8: 00:75:a5:62:1c:fe:6a:d6:56:63:44:46:e6:c7:cb: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:50:5B:07:49:15:6B:1D:8E:90:A6:8C:59:44:0A:60:EB:CE:6C X509v3 Authority Key Identifier: keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c5:3e:9f:99:a4:4d:60:90:3b:44:7c:a5:80:65:88:86:6b: d9:72:fc:e3:c4:c1:e5:69:4b:94:45:79:1c:8c:3b:77:17:30: 0a:97:da:ea:10:e8:16:23:85:f6:de:fe:13:43:5e:00:f5:94: e2:cd:bc:fd:5f:0c:15:02:82:77:db:1c:05:21:2c:30:28:b6: b1:70:39:87:40:0c:94:e3:3f:04:55:e6:87:8b:0b:f7:ca:c5: 75:00:85:a0:09:21:91:f4:25:5b:a2:cb:61:78:89:6e:ce:cf: cc:a1:d4:f4:6c:23:92:ab:e9:9b:ce:00:32:8c:c8:07:ff:dd: 81:6f:bb:74:7f:a8:8c:14:d3:cc:17:c2:57:04:81:b8:04:67: 27:ae:4d:63:a6:e7:b3:b6:4c:18:e4:cb:37:6a:97:58:3d:93: a3:6c:90:77:0a:02:64:d8:4e:16:8d:b7:0b:40:26:67:00:27: d2:5f:32:61:6d:e4:79:c9:f0:a9:ef:40:71:da:aa:bd:6f:d4: e3:99:16:eb:0f:75:b5:42:6a:8e:f4:16:bb:de:af:71:00:e4: 10:e0:15:05:58:5c:43:f5:54:81:e4:3c:7e:3d:ed:b6:09:30: c1:cc:d9:f4:43:3c:2e:a5:57:81:a5:a4:4e:b7:e1:55:a4:2e: 2e:d5:23:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI+apxuIfKHXYl4Vrmm8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk M2UzNWUwHhcNMjUxMjIxMDkwMDUzWhcNMjUxMjIyMDkwMDUzWjAzMTEwLwYDVQQD EygxMmFhNTA1YjA3NDkxNTZiMWQ4ZTkwYTY4YzU5NDQwYTYwZWJjZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDFafvSCpLDtP3h26f3yyMA/gqV6 By695TKtw7p9kZboFE3jfNpSN+aOb+jWnbKdudNAn/beMlAocZ6nLQpCWeOjqsze e+5vv7zOmbrEYfIZ5JFqReVLaNWMX3tPUSFln6egjH5IiaCg0vq7ZbPgMgNrXSgB Il+nGChasiP8QNvv1jOENGvEYY2iLnTby8ALBWIZnqLpzw8/im/Vn55Stor/kl23 JX2/PVgu4dKyk9Pq+S8dUjb70u4cOmR1XkIdjaPPRPEOjh/71ETsvPBh+jmeiGTA s61PVlVUWhmiiXKX5QeHIqlG2KB5Fs8ogdgAdaViHP5q1lZjREbmx8sqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKqUFsHSRVrHY6QpoxZRApg685sMB8GA1UdIwQY MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4 LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8U+n5mk TWCQO0R8pYBliIZr2XL848TB5WlLlEV5HIw7dxcwCpfa6hDoFiOF9t7+E0NeAPWU 4s28/V8MFQKCd9scBSEsMCi2sXA5h0AMlOM/BFXmh4sL98rFdQCFoAkhkfQlW6LL YXiJbs7PzKHU9Gwjkqvpm84AMozIB//dgW+7dH+ojBTTzBfCVwSBuARnJ65NY6bn s7ZMGOTLN2qXWD2To2yQdwoCZNhOFo23C0AmZwAn0l8yYW3kecnwqe9AcdqqvW/U 45kW6w91tUJqjvQWu96vcQDkEOAVBVhcQ/VUgeQ8fj3ttgkwwczZ9EM8LqVXgaWk TrfhVaQuLtUjpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:54:11 2025 by rpki-client