This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json) Hash identifier: FHsCf7jw6eYQuaGQsItNG1SZ+rKBcH2LN6IzzoJ80lM= Subject key identifier: C6:3B:83:E5:AD:51:B3:67:0F:9B:B7:D2:3A:FE:D3:34:F4:93:EC:71 Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Certificate serial: 019B5D895D4235FE30BE0515F621EC16A39C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 02:00:41 +0000 Manifest this update: Sat 27 Dec 2025 02:00:41 +0000 Manifest next update: Sun 28 Dec 2025 02:00:41 +0000 Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=) 2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: NXhGqTBeaS6F3vw9FCs9/lA0rspTw0inxyrepj2jha4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:5d:42:35:fe:30:be:05:15:f6:21:ec:16:a3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Validity Not Before: Dec 27 02:00:41 2025 GMT Not After : Dec 28 02:00:41 2025 GMT Subject: CN=c63b83e5ad51b3670f9bb7d23afed334f493ec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:ed:71:cb:11:d1:81:60:9e:b4:9f:78:7c: ad:23:1a:b2:04:9f:25:56:c4:60:a6:cc:d8:49:5d: aa:72:37:4a:50:6d:18:94:d0:06:d3:8d:14:80:fb: cc:c0:43:ab:9d:67:b2:8e:97:60:0a:27:6b:4d:46: 94:94:80:86:20:50:e4:28:36:75:b8:6c:14:62:15: b5:79:a3:ef:80:99:56:b3:d5:39:70:56:49:46:46: 6f:e9:13:4a:c6:e2:06:50:5d:01:6b:d9:c6:91:00: 4e:31:04:d3:2c:9b:3f:88:31:60:d9:8c:88:f2:5e: 41:15:33:15:d6:ba:cf:8d:1c:ee:3f:b7:63:a1:8e: ea:11:92:6e:4f:d6:26:e7:d4:b4:b5:09:1d:fd:5c: 46:f7:4b:e7:83:6b:f4:fd:61:5b:d0:c1:75:da:64: a3:cf:42:d8:74:52:e8:03:55:15:86:d3:b0:d6:0e: 61:3b:55:19:83:8b:28:55:a5:fe:82:a8:94:15:fd: 00:27:58:7d:a9:9a:0b:11:60:b9:d0:0d:92:cc:31: c1:94:81:73:86:97:5b:1d:41:8d:e5:26:be:10:40: f4:33:02:c0:14:53:12:dd:53:c3:38:70:26:b7:b4: c3:2d:4c:7e:48:a2:1d:b7:4d:b8:bc:a3:a4:a7:24: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3B:83:E5:AD:51:B3:67:0F:9B:B7:D2:3A:FE:D3:34:F4:93:EC:71 X509v3 Authority Key Identifier: keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f7:99:68:32:16:ab:cb:0f:ee:b5:a3:42:8a:71:3d:ff:ae: 53:6d:fc:01:88:8b:b0:92:8b:bc:26:0a:6a:de:d7:de:5a:49: 8b:39:d7:d0:b7:57:59:d9:46:cc:4c:f1:48:fe:26:bf:cf:5e: 84:05:24:dc:fd:25:90:63:ea:21:fc:e6:59:e8:49:45:b5:9a: 56:d0:16:34:4e:cc:38:e7:de:7b:90:91:b5:bc:4a:8e:b8:b5: 40:66:cb:7b:8e:c0:59:40:9e:66:27:f4:bd:c8:93:52:93:2a: fa:b2:94:a3:e4:08:91:8a:01:88:7f:da:86:5d:26:93:b1:b3: ab:24:db:95:5f:71:45:4c:7c:70:b3:01:31:91:34:7b:11:2f: 09:35:04:4e:af:4d:79:e2:e1:e3:ca:aa:1c:bb:db:d0:ef:65: d2:a9:69:cd:61:9a:d7:e1:f2:9c:0e:42:b7:8b:23:f1:f5:f3: e5:ba:47:a0:77:b2:17:15:08:ab:a4:49:5e:57:60:be:21:b5: 30:30:ce:10:53:fc:23:cc:86:33:92:a0:9f:c4:3d:d3:7a:07: 58:2c:94:8e:47:b9:17:ef:90:e1:58:f3:77:e7:48:b6:6d:3e: 3a:2b:c4:39:1b:87:d7:d2:37:4c:d0:07:22:80:f9:95:ce:4b: 0d:c9:04:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiV1CNf4wvgUV9iHsFqOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjIxZjczMTZlMWJkNzhmODZlZWE2NDI1ZDVjMjI5Yjk4 MGY5YWMwHhcNMjUxMjI3MDIwMDQxWhcNMjUxMjI4MDIwMDQxWjAzMTEwLwYDVQQD EyhjNjNiODNlNWFkNTFiMzY3MGY5YmI3ZDIzYWZlZDMzNGY0OTNlYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4rtccsR0YFgnrSfeHytIxqyBJ8l VsRgpszYSV2qcjdKUG0YlNAG040UgPvMwEOrnWeyjpdgCidrTUaUlICGIFDkKDZ1 uGwUYhW1eaPvgJlWs9U5cFZJRkZv6RNKxuIGUF0Ba9nGkQBOMQTTLJs/iDFg2YyI 8l5BFTMV1rrPjRzuP7djoY7qEZJuT9Ym59S0tQkd/VxG90vng2v0/WFb0MF12mSj z0LYdFLoA1UVhtOw1g5hO1UZg4soVaX+gqiUFf0AJ1h9qZoLEWC50A2SzDHBlIFz hpdbHUGN5Sa+EED0MwLAFFMS3VPDOHAmt7TDLUx+SKIdt024vKOkpySykwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY7g+WtUbNnD5u30jr+0zT0k+xxMB8GA1UdIwQY MBaAFCPyH3MW4b14+G7qZCXVwim5gPmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2Yt OTc0YzMxZjI2NjBiLzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2YtOTc0YzMxZjI2NjBi LzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPeZaDIW q8sP7rWjQopxPf+uU238AYiLsJKLvCYKat7X3lpJiznX0LdXWdlGzEzxSP4mv89e hAUk3P0lkGPqIfzmWehJRbWaVtAWNE7MOOfee5CRtbxKjri1QGbLe47AWUCeZif0 vciTUpMq+rKUo+QIkYoBiH/ahl0mk7GzqyTblV9xRUx8cLMBMZE0exEvCTUETq9N eeLh48qqHLvb0O9l0qlpzWGa1+HynA5Ct4sj8fXz5bpHoHeyFxUIq6RJXldgviG1 MDDOEFP8I8yGM5Kgn8Q903oHWCyUjke5F++Q4Vjzd+dItm0+OivEORuH19I3TNAH IoD5lc5LDckEDg== -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:30 2025 by rpki-client