This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json) Hash identifier: sFFpXs+Gvl4awHki6enb7oRH2Ocesnp1Ua/i8+UdNT0= Subject key identifier: CD:45:47:D0:B1:B5:A7:55:4E:A1:A1:22:AB:82:91:41:CF:4C:25:C7 Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2 Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2 Certificate serial: 019B3B3484462012D26AF6C294037080E6D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft Manifest number: 0135 Signing time: Sat 20 Dec 2025 10:00:55 +0000 Manifest this update: Sat 20 Dec 2025 10:00:55 +0000 Manifest next update: Sun 21 Dec 2025 10:00:55 +0000 Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: RjJq13MW7dGnccxmzzmzFuZe7+J1wQAMF4oJu5vEPtY=) 2: PwxQMG9ujj6pfZhzC7G_kz3NsYA.roa (hash: 09V39ykqveB1AyZv1j7X/quqHqzhf0uH/toO7YLzAy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:84:46:20:12:d2:6a:f6:c2:94:03:70:80:e6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2 Validity Not Before: Dec 20 10:00:55 2025 GMT Not After : Dec 21 10:00:55 2025 GMT Subject: CN=cd4547d0b1b5a7554ea1a122ab829141cf4c25c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:09:d5:58:d8:98:01:81:28:33:bf:4e:dc: 93:16:4e:fc:6f:3e:01:b5:b2:cd:f4:46:80:c5:1d: cb:96:05:60:ae:b3:52:5a:b8:c4:f7:5d:2e:56:b2: 59:cc:ff:f0:40:08:1c:cc:6c:46:a5:03:6a:14:0b: aa:c1:7b:6c:13:ea:81:95:1f:70:da:a9:30:86:c1: f8:a9:8f:f3:82:95:8c:ed:30:52:f8:5b:70:93:9a: e8:1b:b6:31:af:4a:99:20:6f:f9:db:69:bd:70:42: d3:0d:42:50:b9:24:52:dc:0c:1d:1e:69:78:91:ab: 8c:0e:ba:90:bd:45:0b:76:ed:58:3c:8d:fa:af:7e: ad:9e:3f:1f:8c:9e:e3:3e:86:4a:b0:c6:1b:63:39: 37:69:db:82:df:d7:cc:9a:a3:bb:3a:88:3a:78:be: e6:eb:a4:9b:3e:dd:ab:e3:dc:1d:64:04:c7:bc:22: ff:45:f4:ef:ea:5b:08:c4:f0:d4:2c:b1:9e:8a:21: ce:2d:f9:db:f8:c0:89:29:50:f1:9b:2b:c5:71:dc: 6e:64:d7:0d:d7:96:a1:28:32:0c:7c:98:c6:59:e4: a6:6f:1d:84:4a:da:6e:f2:9d:ff:d2:34:d9:84:8f: 80:58:32:a6:5c:85:fb:db:f5:1a:fe:c2:f9:1a:be: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:45:47:D0:B1:B5:A7:55:4E:A1:A1:22:AB:82:91:41:CF:4C:25:C7 X509v3 Authority Key Identifier: keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:18:76:52:ed:3e:32:81:12:f1:08:dd:af:36:d4:a8:67:98: ef:b0:fa:4c:c4:a3:04:d5:9f:8b:9f:55:57:5b:4b:51:71:ed: f6:65:4d:4f:6c:83:49:85:39:25:97:85:50:2c:23:f4:d1:ad: eb:a5:85:e5:f4:e5:ef:c9:f8:32:19:13:df:82:db:54:13:1b: b2:a8:6d:84:91:47:0f:07:bb:28:dc:8d:90:d6:f3:e3:24:1a: 53:07:62:71:de:95:b0:81:4d:05:df:80:a2:9d:d0:d7:3e:70: 2b:2a:af:21:d6:26:0d:a3:b1:82:3a:60:88:e3:6d:15:7b:ef: ec:c6:19:ea:98:67:4a:e5:34:a1:a5:18:2b:18:48:ee:16:5e: 86:17:c9:03:15:39:4b:18:f3:0e:ca:1d:d8:51:a4:01:1c:e9: d9:97:b4:4c:35:3c:f7:83:0d:6e:54:88:c3:70:16:9b:2b:28: da:49:c1:6a:ce:6a:f6:9a:62:b7:4a:a9:48:9b:79:48:d0:cb: a1:c8:ae:51:9d:5b:99:a9:b2:71:c7:32:8a:95:85:e3:25:be: dc:f2:3f:af:96:95:85:bc:97:25:4b:75:d3:98:c0:5a:2e:53: f4:ef:ea:92:88:61:7e:7b:25:33:ca:41:30:47:7e:18:1f:73: 8a:9e:be:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NIRGIBLSavbClANwgObXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjVjMjU4NTM4MjA4NDc5MmYxM2FkMTk3MjA1ZWZkZDI3 NTJkZjIwHhcNMjUxMjIwMTAwMDU1WhcNMjUxMjIxMTAwMDU1WjAzMTEwLwYDVQQD EyhjZDQ1NDdkMGIxYjVhNzU1NGVhMWExMjJhYjgyOTE0MWNmNGMyNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2wJ1VjYmAGBKDO/TtyTFk78bz4B tbLN9EaAxR3LlgVgrrNSWrjE910uVrJZzP/wQAgczGxGpQNqFAuqwXtsE+qBlR9w 2qkwhsH4qY/zgpWM7TBS+Ftwk5roG7Yxr0qZIG/522m9cELTDUJQuSRS3AwdHml4 kauMDrqQvUULdu1YPI36r36tnj8fjJ7jPoZKsMYbYzk3aduC39fMmqO7Oog6eL7m 66SbPt2r49wdZATHvCL/RfTv6lsIxPDULLGeiiHOLfnb+MCJKVDxmyvFcdxuZNcN 15ahKDIMfJjGWeSmbx2EStpu8p3/0jTZhI+AWDKmXIX72/Ua/sL5Gr5fmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1FR9CxtadVTqGhIquCkUHPTCXHMB8GA1UdIwQY MBaAFCP1wlhTgghHkvE60ZcgXv3SdS3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2Ut OGZiNTI0NGJjMjU2LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2UtOGZiNTI0NGJjMjU2 LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBh2Uu0+ MoES8QjdrzbUqGeY77D6TMSjBNWfi59VV1tLUXHt9mVNT2yDSYU5JZeFUCwj9NGt 66WF5fTl78n4MhkT34LbVBMbsqhthJFHDwe7KNyNkNbz4yQaUwdicd6VsIFNBd+A op3Q1z5wKyqvIdYmDaOxgjpgiONtFXvv7MYZ6phnSuU0oaUYKxhI7hZehhfJAxU5 SxjzDsod2FGkARzp2Ze0TDU894MNblSIw3AWmyso2knBas5q9ppit0qpSJt5SNDL ociuUZ1bmamycccyipWF4yW+3PI/r5aVhbyXJUt105jAWi5T9O/qkohhfnslM8pB MEd+GB9zip6+ow== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:26 2025 by rpki-client