This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json) Hash identifier: 7n6wNd4vHM/Jl8B04tMx4ZYsDCd6DCciXI0X8+sspSY= Subject key identifier: 0C:47:74:AD:01:6B:BD:4A:FF:B8:E0:1E:58:CB:38:A1:7A:37:DF:14 Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03 Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603 Certificate serial: 019B3D235367016B1BAF79BC7E16D20586F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 19:01:23 +0000 Manifest this update: Sat 20 Dec 2025 19:01:23 +0000 Manifest next update: Sun 21 Dec 2025 19:01:23 +0000 Files and hashes: 1: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: s3EMhYR18uQZ1ofi2P+mbXyEfq83jDL5GmSZqhDib48=) 2: VjhlG8a2ZawkNaB1appig3Nz2is.roa (hash: gke6BC6KbRZ7BZ8YEtQe4nlgcZZfU/kgtOMqrBXfKKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:53:67:01:6b:1b:af:79:bc:7e:16:d2:05:86:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603 Validity Not Before: Dec 20 19:01:23 2025 GMT Not After : Dec 21 19:01:23 2025 GMT Subject: CN=0c4774ad016bbd4affb8e01e58cb38a17a37df14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:9e:64:c8:0d:f1:2d:95:a3:18:e3:67:61: 2b:ec:f3:9b:70:df:ef:78:23:c3:b6:d0:10:a0:0b: e7:54:5f:29:a8:41:f4:72:cb:ba:2e:1e:fe:e0:c7: 12:be:9c:cb:f9:71:a2:a4:b5:f0:d3:b4:d7:60:49: 2e:61:1c:1b:e0:a6:c6:b1:8c:94:59:6f:2c:e5:08: 98:85:8a:3a:66:de:66:bc:22:22:c3:e6:57:cc:af: 39:ea:c1:24:89:aa:2a:a5:5d:e0:67:95:b9:fc:d0: c1:17:ae:d6:43:b2:86:cd:90:03:13:10:59:11:f5: 01:c3:ac:0b:90:86:d4:86:35:1b:e2:2c:88:0d:6f: a2:23:b4:d2:b8:31:fe:af:8d:6b:b2:de:e6:ad:c9: b9:be:e3:62:6b:5a:60:ff:86:c8:61:5c:13:c3:a6: dc:34:19:ab:07:a2:5a:12:1d:af:b4:9c:45:63:40: 71:7c:bd:23:33:09:d2:0e:92:f8:db:21:6e:3c:4b: 31:38:22:f6:03:35:c3:b5:34:d1:6c:e1:8c:a7:fa: 61:d8:0e:0f:e3:14:b5:a0:84:f9:1b:c0:4e:09:1e: 41:36:6c:b0:2d:a4:77:f6:b6:1b:6d:a3:ea:ed:3e: f7:ef:3e:9c:ec:e2:8a:8b:6f:7d:ed:2b:da:87:be: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:47:74:AD:01:6B:BD:4A:FF:B8:E0:1E:58:CB:38:A1:7A:37:DF:14 X509v3 Authority Key Identifier: keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9b:2d:48:0d:66:7f:07:82:e1:ca:c6:44:c2:98:ad:02:cf: ee:27:3e:d4:39:da:07:9a:60:51:1c:b9:de:b1:ff:c5:8a:14: a6:11:91:b7:24:23:2b:ca:7e:49:cc:30:6b:d0:f6:5b:c8:d2: d2:15:7d:e7:de:b2:46:50:15:ad:58:15:16:e8:9e:75:81:51: 72:81:8a:4d:68:d0:e2:dc:b2:b7:cf:cf:c0:42:ac:a1:70:ff: a0:d1:1c:49:a9:4d:8f:0a:63:7e:76:12:66:37:15:34:08:e8: a6:a0:52:c9:76:ab:c4:3d:50:48:cb:57:3e:4d:67:48:ce:6b: 5a:67:17:60:6d:6e:55:e9:75:6e:68:56:f6:f7:cd:f9:14:06: ae:0c:10:ff:a1:83:6b:d2:12:86:02:4b:a6:69:21:d9:dc:94: b1:49:41:3c:d2:bd:e5:ca:b6:41:81:df:87:97:75:82:99:ca: 40:36:f0:87:7a:7f:65:41:8d:38:92:01:65:d0:1d:97:2e:bb: 04:93:ad:7f:d4:de:5d:ce:6e:4a:c7:8e:27:bb:18:9c:49:0d: ab:78:f1:8d:22:0b:69:3d:65:6b:75:78:09:bb:c8:f6:ee:b5: ff:c6:27:fd:38:2c:3e:7c:ca:f6:fb:40:b8:d9:36:55:10:bb: 8a:a7:52:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1NnAWsbr3m8fhbSBYbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNzA4NDcxMmZkZWJiMWJmYzVhOGMwMjYyZDkxOWE4YWE0 NDA2MDMwHhcNMjUxMjIwMTkwMTIzWhcNMjUxMjIxMTkwMTIzWjAzMTEwLwYDVQQD EygwYzQ3NzRhZDAxNmJiZDRhZmZiOGUwMWU1OGNiMzhhMTdhMzdkZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUieZMgN8S2VoxjjZ2Er7PObcN/v eCPDttAQoAvnVF8pqEH0csu6Lh7+4McSvpzL+XGipLXw07TXYEkuYRwb4KbGsYyU WW8s5QiYhYo6Zt5mvCIiw+ZXzK856sEkiaoqpV3gZ5W5/NDBF67WQ7KGzZADExBZ EfUBw6wLkIbUhjUb4iyIDW+iI7TSuDH+r41rst7mrcm5vuNia1pg/4bIYVwTw6bc NBmrB6JaEh2vtJxFY0BxfL0jMwnSDpL42yFuPEsxOCL2AzXDtTTRbOGMp/ph2A4P 4xS1oIT5G8BOCR5BNmywLaR39rYbbaPq7T737z6c7OKKi2997Svah76w2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxHdK0Ba71K/7jgHljLOKF6N98UMB8GA1UdIwQY MBaAFCNwhHEv3rsb/FqMAmLZGaiqRAYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgt N2UxMzI5ZTA1ZmY0LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgtN2UxMzI5ZTA1ZmY0 LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpstSA1m fweC4crGRMKYrQLP7ic+1DnaB5pgURy53rH/xYoUphGRtyQjK8p+Scwwa9D2W8jS 0hV9596yRlAVrVgVFuiedYFRcoGKTWjQ4tyyt8/PwEKsoXD/oNEcSalNjwpjfnYS ZjcVNAjopqBSyXarxD1QSMtXPk1nSM5rWmcXYG1uVel1bmhW9vfN+RQGrgwQ/6GD a9IShgJLpmkh2dyUsUlBPNK95cq2QYHfh5d1gpnKQDbwh3p/ZUGNOJIBZdAdly67 BJOtf9TeXc5uSseOJ7sYnEkNq3jxjSILaT1la3V4CbvI9u61/8Yn/TgsPnzK9vtA uNk2VRC7iqdSQw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:14:06 2025 by rpki-client