This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json) Hash identifier: BfqWfqOBhTEh0u+7GxKc1y86zHRFKeroj5cw5yKwqLc= Subject key identifier: 6D:BB:C8:0B:0F:B7:63:D5:8E:27:08:2F:B7:51:DC:D1:C0:CA:D9:23 Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00 Certificate serial: 019B3C7DE2EAC38849E6A6EA82435C25AB6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:00:41 +0000 Manifest this update: Sat 20 Dec 2025 16:00:41 +0000 Manifest next update: Sun 21 Dec 2025 16:00:41 +0000 Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: SuN0/g1Nk8YAzEgtOxRIgYhZBOK0rLweKNpHLSCKx0I=) 2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=) 3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e2:ea:c3:88:49:e6:a6:ea:82:43:5c:25:ab:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239c45e43625522080aec53952989a13a28abd00 Validity Not Before: Dec 20 16:00:41 2025 GMT Not After : Dec 21 16:00:41 2025 GMT Subject: CN=6dbbc80b0fb763d58e27082fb751dcd1c0cad923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:ee:1b:41:3a:59:37:c2:1d:f9:27:58:34: e9:a1:e9:10:69:25:4c:ef:70:ae:9d:10:c8:e1:08: c4:7c:e7:2d:e6:00:fc:a4:2e:9e:67:25:8f:af:f8: b1:46:43:57:af:c8:b4:75:96:ca:57:b5:2c:88:1d: 82:f2:21:45:77:5a:b2:84:52:1d:5f:b5:75:22:14: f1:69:4f:84:1e:2a:ee:e4:cf:ce:1b:b2:6f:ad:e6: 8d:5c:68:65:7a:01:0e:cb:5f:a1:05:40:65:9f:63: 9d:df:5b:5a:9e:86:02:c6:bf:bc:7e:1c:14:97:2a: e9:92:95:a6:ec:99:d0:49:f4:6e:08:da:d8:4e:97: 1b:07:12:ad:66:ff:c8:23:5c:de:2e:62:d4:29:2c: 91:0e:33:9d:53:ac:fb:3b:12:ab:22:e3:e9:2c:58: fa:7f:40:05:1d:66:99:f7:54:50:a7:02:e5:8f:59: ce:1c:e6:a3:fa:fa:dc:f0:14:52:10:cb:45:61:80: 2d:54:0c:4c:8b:48:5a:36:4a:01:4a:19:0f:8b:62: 02:e7:33:e1:10:6d:d2:24:8e:d3:f9:9f:3b:81:3d: 31:93:10:b1:50:65:d6:e2:98:b7:bb:a3:3a:5e:8a: ba:b4:a0:7b:b9:f7:36:77:5a:a7:22:d7:f4:72:43: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BB:C8:0B:0F:B7:63:D5:8E:27:08:2F:B7:51:DC:D1:C0:CA:D9:23 X509v3 Authority Key Identifier: keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:31:25:b4:42:1b:66:07:2d:0d:9f:f3:1b:c0:a1:7c:a6:fe: ed:e7:ed:1f:83:23:54:44:14:cb:48:db:a4:f9:e2:8e:65:96: 80:82:4f:cb:a4:63:a6:9b:16:24:ec:ca:4d:bd:4d:de:b3:94: 2f:3f:59:66:64:94:54:d8:c2:80:5f:18:d3:b6:91:03:f9:14: 64:fd:61:30:9d:65:bb:32:1e:cc:9a:b3:68:df:6f:41:93:cf: de:84:f4:51:f7:4f:a4:29:cb:7f:1b:0f:bf:9d:2c:92:70:72: be:b6:07:e6:68:40:1f:e1:ec:1a:15:93:93:82:9b:6d:33:b6: 3d:3a:d7:b1:f9:70:82:54:51:3e:1a:f6:5b:0a:d4:0e:34:5d: 40:27:c2:33:76:f3:72:fb:ad:f6:c7:5b:e1:73:80:bb:c8:3b: 11:7f:c6:53:11:58:84:70:83:06:9f:a2:a1:41:1a:03:2e:d2: 91:47:e8:9e:27:4a:b1:ea:b9:4a:d5:19:a7:3b:7e:13:b9:92: 42:98:c1:94:ba:c0:1e:73:d9:0c:15:3a:36:99:c5:83:41:57: 85:41:2a:76:30:f4:71:12:a8:82:8d:ff:49:e0:22:f0:cc:7e: eb:68:4f:5e:65:21:80:85:f1:d9:d0:28:b1:2e:31:7e:15:1a: cc:54:da:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feLqw4hJ5qbqgkNcJatsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4 YWJkMDAwHhcNMjUxMjIwMTYwMDQxWhcNMjUxMjIxMTYwMDQxWjAzMTEwLwYDVQQD Eyg2ZGJiYzgwYjBmYjc2M2Q1OGUyNzA4MmZiNzUxZGNkMWMwY2FkOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs37uG0E6WTfCHfknWDTpoekQaSVM 73CunRDI4QjEfOct5gD8pC6eZyWPr/ixRkNXr8i0dZbKV7UsiB2C8iFFd1qyhFId X7V1IhTxaU+EHiru5M/OG7JvreaNXGhlegEOy1+hBUBln2Od31tanoYCxr+8fhwU lyrpkpWm7JnQSfRuCNrYTpcbBxKtZv/II1zeLmLUKSyRDjOdU6z7OxKrIuPpLFj6 f0AFHWaZ91RQpwLlj1nOHOaj+vrc8BRSEMtFYYAtVAxMi0haNkoBShkPi2IC5zPh EG3SJI7T+Z87gT0xkxCxUGXW4pi3u6M6Xoq6tKB7ufc2d1qnItf0ckMlQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG27yAsPt2PVjicIL7dR3NHAytkjMB8GA1UdIwQY MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt OTc1YTIzN2VjZDA2LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2 LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTEltEIb ZgctDZ/zG8ChfKb+7eftH4MjVEQUy0jbpPnijmWWgIJPy6RjppsWJOzKTb1N3rOU Lz9ZZmSUVNjCgF8Y07aRA/kUZP1hMJ1luzIezJqzaN9vQZPP3oT0UfdPpCnLfxsP v50sknByvrYH5mhAH+HsGhWTk4KbbTO2PTrXsflwglRRPhr2WwrUDjRdQCfCM3bz cvut9sdb4XOAu8g7EX/GUxFYhHCDBp+ioUEaAy7SkUfonidKseq5StUZpzt+E7mS QpjBlLrAHnPZDBU6NpnFg0FXhUEqdjD0cRKogo3/SeAi8Mx+62hPXmUhgIXx2dAo sS4xfhUazFTaoQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:59 2025 by rpki-client