This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json) Hash identifier: wTkDffCRXfKBA5TFGeFXWsSgHpcpkbj3FlVtfsP1zSQ= Subject key identifier: 17:A1:F6:95:7F:91:C3:D0:DF:06:CE:18:A0:84:43:68:8A:A8:8A:AF Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79 Certificate serial: 019B3BD9846DA249DD79BD3225180035D62A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:01:09 +0000 Manifest this update: Sat 20 Dec 2025 13:01:09 +0000 Manifest next update: Sun 21 Dec 2025 13:01:09 +0000 Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=) 2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: eXdxjCf+XHkXrJ40xE4cUveeng6sCVzV3lKho5pnVAs=) 3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:84:6d:a2:49:dd:79:bd:32:25:18:00:35:d6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b613794927050b22525ab70091835408eee4c79 Validity Not Before: Dec 20 13:01:09 2025 GMT Not After : Dec 21 13:01:09 2025 GMT Subject: CN=17a1f6957f91c3d0df06ce18a08443688aa88aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fc:fa:8c:d6:fb:68:3f:19:e4:57:4e:70:55: 4e:4e:b2:89:52:e6:3a:16:ec:b5:0b:ae:34:d2:08: 68:94:ce:f8:07:26:d9:7b:56:cd:8e:06:b2:ba:84: 46:07:01:f2:cd:58:a4:f6:51:cf:ab:5b:86:9d:e4: 70:04:d3:08:71:09:a9:51:86:71:b1:67:a1:2a:87: be:3a:40:ca:e3:06:3e:e8:82:94:7b:0f:e4:17:59: d6:c3:b9:8b:23:e1:3d:13:38:b8:20:b7:f2:1c:b3: 0d:e7:77:8e:c1:7a:9a:77:f6:ac:c5:ee:6a:3f:95: 1f:26:79:65:da:4d:ba:c4:aa:fa:8d:b6:77:7d:63: 98:f9:eb:3b:47:d9:8b:92:f4:b4:e2:89:56:06:85: f8:ae:22:19:9a:a2:aa:70:6d:40:68:73:ff:55:63: e4:d6:fc:75:50:a5:04:06:69:ac:72:83:bd:71:9d: e5:f2:c4:1a:9e:eb:8b:68:67:fb:e6:ec:4b:bc:79: 75:e0:41:ef:72:ab:3e:63:66:6e:c0:d5:6b:37:72: 45:39:05:38:1b:c8:18:2f:80:eb:a9:08:8e:3a:64: 92:15:31:d9:a6:3e:75:5b:88:71:de:7b:9e:17:2b: 88:26:6b:ef:77:af:09:45:31:8d:b9:83:39:f7:e9: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A1:F6:95:7F:91:C3:D0:DF:06:CE:18:A0:84:43:68:8A:A8:8A:AF X509v3 Authority Key Identifier: keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:70:ce:f0:a8:53:c0:69:82:33:00:45:3f:43:4f:e1:c9:6a: 50:3d:3d:21:93:89:3c:f5:77:22:00:dc:62:66:21:bf:ec:70: ce:3a:dd:cf:34:1b:32:6d:4b:9b:ae:61:5e:51:fa:0e:38:8c: 4b:a0:16:f6:c1:18:c0:92:9c:b1:f5:50:73:29:82:a3:55:c4: ad:a4:77:a2:47:16:6e:8d:ce:21:4b:91:af:65:dc:af:c2:99: e2:6e:56:81:ad:a4:a4:0d:f7:bc:f3:76:77:db:62:3f:31:1c: a3:0a:6b:06:d6:65:19:50:a0:4f:80:83:e6:26:fb:91:cc:d2: 9d:60:7e:3f:ac:fb:de:1c:c3:d7:87:9b:f9:b9:a0:89:ed:85: c4:1b:00:9d:af:70:94:a4:8f:e9:31:ad:c5:70:63:43:96:65: 05:0b:b1:fb:c8:ed:35:c1:6c:82:12:e2:27:97:41:02:7d:64: 0b:a7:aa:26:f6:07:73:22:cc:f0:16:2a:51:c1:ad:9b:d0:79: f4:d4:cf:8c:17:56:77:1e:fd:af:66:e8:a0:35:40:5e:bf:07: 60:40:37:3f:e5:c0:dc:8a:37:05:1d:11:8e:84:f7:f0:43:4d: 6c:d4:aa:8a:fa:eb:bc:42:68:38:3b:20:d5:52:46:e0:83:af: 46:6c:1f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72YRtokndeb0yJRgANdYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjEzNzk0OTI3MDUwYjIyNTI1YWI3MDA5MTgzNTQwOGVl ZTRjNzkwHhcNMjUxMjIwMTMwMTA5WhcNMjUxMjIxMTMwMTA5WjAzMTEwLwYDVQQD EygxN2ExZjY5NTdmOTFjM2QwZGYwNmNlMThhMDg0NDM2ODhhYTg4YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/z6jNb7aD8Z5FdOcFVOTrKJUuY6 Fuy1C6400gholM74BybZe1bNjgayuoRGBwHyzVik9lHPq1uGneRwBNMIcQmpUYZx sWehKoe+OkDK4wY+6IKUew/kF1nWw7mLI+E9Ezi4ILfyHLMN53eOwXqad/asxe5q P5UfJnll2k26xKr6jbZ3fWOY+es7R9mLkvS04olWBoX4riIZmqKqcG1AaHP/VWPk 1vx1UKUEBmmscoO9cZ3l8sQanuuLaGf75uxLvHl14EHvcqs+Y2ZuwNVrN3JFOQU4 G8gYL4DrqQiOOmSSFTHZpj51W4hx3nueFyuIJmvvd68JRTGNuYM59+l6dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeh9pV/kcPQ3wbOGKCEQ2iKqIqvMB8GA1UdIwQY MBaAFIthN5SScFCyJSWrcAkYNUCO7kx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2Mt ZWMwNWQwMTk1MDM2LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2MtZWMwNWQwMTk1MDM2 LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3DO8KhT wGmCMwBFP0NP4clqUD09IZOJPPV3IgDcYmYhv+xwzjrdzzQbMm1Lm65hXlH6DjiM S6AW9sEYwJKcsfVQcymCo1XEraR3okcWbo3OIUuRr2Xcr8KZ4m5Wga2kpA33vPN2 d9tiPzEcowprBtZlGVCgT4CD5ib7kczSnWB+P6z73hzD14eb+bmgie2FxBsAna9w lKSP6TGtxXBjQ5ZlBQux+8jtNcFsghLiJ5dBAn1kC6eqJvYHcyLM8BYqUcGtm9B5 9NTPjBdWdx79r2booDVAXr8HYEA3P+XA3Io3BR0RjoT38ENNbNSqivrrvEJoODsg 1VJG4IOvRmwfcA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:39:28 2025 by rpki-client