This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json) Hash identifier: HgF0EfmVeolKZqeS1jFaK2chlZqGRAl5dteNKUTb94s= Subject key identifier: DA:ED:33:10:88:54:39:B8:22:84:E0:5F:6D:2A:D7:5C:D4:81:E3:C5 Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Certificate serial: 019B3042D6F1E44977A22041A5E2EDEA228E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft Manifest number: 16C0 Signing time: Thu 18 Dec 2025 07:00:45 +0000 Manifest this update: Thu 18 Dec 2025 07:00:45 +0000 Manifest next update: Fri 19 Dec 2025 07:00:45 +0000 Files and hashes: 1: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: QnGb1ORx1Otjq3pR0aeIRNoMmoRSi/QC56FCubhE8Ts=) 2: IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa (hash: BCjdpahib4P29wEhEZ+5HfDxKnWj0l2OSsP7lZ3IOHg=) 3: fngY7vAjtnIa6khyzBr6ohfARXc.roa (hash: 8j7K0AdGmWd/+RMVsdDrX0khITQq1MTMhTuPXkbPnqc=) 4: xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa (hash: CfOyHBtQR8zjYYv9qA3Dd8n5he3YeIT+MsIzoT30dKc=) 5: z5Ucz1kkGg56QZyAblN2WefSoGM.roa (hash: 5hK/qHn0csimMvRktmqCqsq2To8mi7zen0Vo1KFJGyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:d6:f1:e4:49:77:a2:20:41:a5:e2:ed:ea:22:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Validity Not Before: Dec 18 07:00:45 2025 GMT Not After : Dec 19 07:00:45 2025 GMT Subject: CN=daed3310885439b82284e05f6d2ad75cd481e3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:b8:b7:88:4d:b2:c5:ad:4b:2e:6a:b7:cb: 11:cb:e0:b4:31:b6:e0:36:f2:bc:b8:48:f1:d2:14: b4:6c:f6:28:83:a2:7c:45:4d:7f:3e:ad:25:ec:17: 9c:89:ed:2d:17:f7:55:85:09:fd:1a:5b:01:7b:82: e1:3f:6e:e3:c7:a0:7f:58:e8:b0:2c:c2:52:5e:b6: 88:98:11:d5:fe:06:92:71:b0:c8:c1:1f:ff:22:98: 9e:d1:e5:28:dd:f0:25:26:50:08:5b:0d:1e:06:58: c8:6b:b2:4c:76:73:c4:78:21:49:4a:03:d8:07:94: 04:c5:23:6c:f8:61:1d:1b:92:ea:48:7e:80:29:f7: 46:1c:ea:dc:07:4c:db:25:22:dc:91:03:42:ca:52: 02:b3:62:69:f6:cd:c5:f1:5e:c1:a9:3c:f8:11:c0: d9:20:32:de:91:d7:2b:c8:80:71:36:1c:3b:6e:2a: b4:52:6b:8e:3b:36:c6:dc:44:b2:ad:1c:d3:94:db: 7e:48:21:91:eb:41:5e:b2:7b:34:f7:f3:a7:15:2d: 7d:d9:0e:d6:f2:4e:93:8c:5f:c3:4a:91:76:85:e1: ff:cb:71:7a:48:1f:74:2d:85:79:bd:df:85:39:d3: 3f:f2:08:a3:ae:a1:98:eb:14:91:51:74:fb:d2:4e: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:ED:33:10:88:54:39:B8:22:84:E0:5F:6D:2A:D7:5C:D4:81:E3:C5 X509v3 Authority Key Identifier: keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6c:df:10:9f:41:5c:2b:6b:5d:c5:ad:f8:f1:f3:5a:86:88: 8d:fb:a6:68:1f:bf:01:61:bf:3a:24:f0:66:7e:f7:2c:e4:66: dc:9b:2b:be:b0:c3:5b:ab:1a:32:55:56:4f:73:41:6d:a4:41: 4f:21:06:ed:d0:09:b9:c8:ae:3b:7f:5d:8e:55:ca:f4:a0:6c: 01:70:ec:55:93:77:b5:f1:94:94:1e:2f:58:80:41:d1:e3:68: 36:93:ae:ce:e8:30:70:8d:41:36:01:33:19:23:dd:1b:ee:5c: c5:fe:a4:4d:2c:cf:70:7e:3f:14:a5:10:ff:81:84:85:c9:17: 5f:d9:fc:47:89:e8:52:b4:ad:c2:59:6f:ff:b2:6d:66:d1:7c: a7:8b:b4:20:27:f7:6b:58:22:f0:c8:3e:9a:d2:41:15:f2:33: c5:5e:7f:db:78:9a:bc:d8:f9:de:9f:89:fb:8c:73:2c:39:2d: ab:09:5f:ca:7f:cc:18:f4:80:22:d8:92:be:9d:2a:9e:70:63: 06:e9:50:fc:e1:43:d2:e9:c6:10:41:51:45:f5:93:7b:59:8c: a8:0d:7b:54:51:94:c8:e7:ad:55:e9:7b:90:0d:d1:10:8b:88: af:d6:48:70:f3:49:41:30:68:fe:ec:7f:02:93:0c:40:92:1d: 31:dc:b0:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQtbx5El3oiBBpeLt6iKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0 YmExYzkwHhcNMjUxMjE4MDcwMDQ1WhcNMjUxMjE5MDcwMDQ1WjAzMTEwLwYDVQQD EyhkYWVkMzMxMDg4NTQzOWI4MjI4NGUwNWY2ZDJhZDc1Y2Q0ODFlM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn24t4hNssWtSy5qt8sRy+C0Mbbg NvK8uEjx0hS0bPYog6J8RU1/Pq0l7Becie0tF/dVhQn9GlsBe4LhP27jx6B/WOiw LMJSXraImBHV/gaScbDIwR//Ipie0eUo3fAlJlAIWw0eBljIa7JMdnPEeCFJSgPY B5QExSNs+GEdG5LqSH6AKfdGHOrcB0zbJSLckQNCylICs2Jp9s3F8V7BqTz4EcDZ IDLekdcryIBxNhw7biq0UmuOOzbG3ESyrRzTlNt+SCGR60Fesns09/OnFS192Q7W 8k6TjF/DSpF2heH/y3F6SB90LYV5vd+FOdM/8gijrqGY6xSRUXT70k5ySQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrtMxCIVDm4IoTgX20q11zUgePFMB8GA1UdIwQY MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt Zjc0MmYzOTVhYWY5LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5 LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmzfEJ9B XCtrXcWt+PHzWoaIjfumaB+/AWG/OiTwZn73LORm3JsrvrDDW6saMlVWT3NBbaRB TyEG7dAJuciuO39djlXK9KBsAXDsVZN3tfGUlB4vWIBB0eNoNpOuzugwcI1BNgEz GSPdG+5cxf6kTSzPcH4/FKUQ/4GEhckXX9n8R4noUrStwllv/7JtZtF8p4u0ICf3 a1gi8Mg+mtJBFfIzxV5/23iavNj53p+J+4xzLDktqwlfyn/MGPSAItiSvp0qnnBj BulQ/OFD0unGEEFRRfWTe1mMqA17VFGUyOetVel7kA3REIuIr9ZIcPNJQTBo/ux/ ApMMQJIdMdywmw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:54:15 2025 by rpki-client