This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json) Hash identifier: goYQTCpdGmbuUy0Ha4DAUBTJF+6OQvmXiuQeRHfsxmA= Subject key identifier: 16:73:7E:F0:C0:69:E3:92:9F:8C:34:36:36:6E:80:95:51:96:A2:71 Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79 Certificate serial: 019B5E9C7751E9A8729D45AB8C42782592B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 07:01:10 +0000 Manifest this update: Sat 27 Dec 2025 07:01:10 +0000 Manifest next update: Sun 28 Dec 2025 07:01:10 +0000 Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=) 2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: BSxDyH1ZdmyHXYNYT5lVYG0PR3+0VCtwNMvIRtrr84I=) 3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:77:51:e9:a8:72:9d:45:ab:8c:42:78:25:92:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b613794927050b22525ab70091835408eee4c79 Validity Not Before: Dec 27 07:01:10 2025 GMT Not After : Dec 28 07:01:10 2025 GMT Subject: CN=16737ef0c069e3929f8c3436366e80955196a271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:30:30:b5:e8:2a:9b:0f:42:94:23:68:d8: f1:b7:a9:44:a0:a4:6c:55:4d:02:b3:9e:3e:c1:83: 62:29:08:c7:a5:06:5b:18:b2:5c:dd:ff:73:14:ea: 76:6d:ba:1f:4c:95:42:9a:69:00:c0:f0:13:53:4f: 23:65:27:22:5e:59:9e:34:a7:24:eb:39:94:6f:f9: e8:56:6c:f4:85:bf:ca:78:2c:97:60:9a:8e:72:b4: 7e:fe:7d:fa:a6:cd:3e:a6:52:a3:55:95:b5:2f:10: 8f:44:aa:5b:aa:28:ea:b3:fa:e7:50:88:e3:29:9f: b7:9d:87:a0:86:cd:09:11:cb:bf:65:37:01:2a:33: 2b:48:51:19:62:fb:f3:54:b5:04:43:d7:c4:4f:d5: fc:6b:11:8d:e4:4e:e9:64:98:e2:47:06:0f:f7:fc: c9:42:ee:72:c5:b8:21:4b:4d:6f:8f:f0:08:7f:05: 75:0f:df:87:56:ae:87:8a:9d:c3:a2:9a:bc:2c:85: ee:62:07:bc:fb:e9:2d:ca:15:a0:83:d6:bd:e5:ab: bf:99:60:95:92:0d:57:e1:cf:fd:e8:42:d0:4a:2d: 6a:a3:4b:d4:d1:9f:bb:f3:c0:ca:e0:55:3a:3e:d4: 90:5b:10:2c:61:f2:39:c9:83:0d:44:b0:b2:54:14: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:7E:F0:C0:69:E3:92:9F:8C:34:36:36:6E:80:95:51:96:A2:71 X509v3 Authority Key Identifier: keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:fa:e6:cc:c7:c5:1e:e6:4a:1b:ec:09:0a:51:98:01:60:09: 35:fe:60:16:30:b1:be:7c:4b:ed:58:dd:0d:ea:c1:83:2a:28: bd:6d:6e:89:27:f5:9f:38:13:26:a5:cb:d1:e4:f3:77:ce:93: 4d:4b:06:f5:9f:4d:14:10:40:08:a6:23:26:42:38:a0:6c:35: 0d:e0:3b:ba:03:b9:a4:9d:be:45:6d:5b:af:22:db:7f:56:4f: f9:01:7c:49:96:12:a9:89:d7:67:de:a7:ce:88:2f:32:30:f7: 08:d9:43:3d:6f:5f:4d:b6:80:b6:c8:16:4e:b8:67:57:2c:ff: d2:0d:23:b9:6f:a7:13:d3:f4:6a:ea:2e:1c:89:1f:e3:25:dc: 8c:5e:b4:96:8a:0c:e2:d7:cc:a6:9f:d9:ce:ac:b0:f6:cb:36: 8f:55:89:9c:20:c6:d5:29:49:36:2e:ac:f7:fc:fb:27:f9:8c: 78:e6:34:e8:53:44:55:89:fd:99:ed:b6:9c:d0:c7:03:cd:da: 9b:5d:ea:35:c3:59:2a:fd:c5:b1:69:dc:d6:dd:62:5b:cc:40: eb:06:e6:88:7e:c1:64:88:0e:59:63:98:31:a3:d9:77:ab:62: d1:12:12:06:9d:26:e8:5c:72:f5:7b:7d:e5:21:fd:dd:ec:a1: 26:11:85:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenHdR6ahynUWrjEJ4JZK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjEzNzk0OTI3MDUwYjIyNTI1YWI3MDA5MTgzNTQwOGVl ZTRjNzkwHhcNMjUxMjI3MDcwMTEwWhcNMjUxMjI4MDcwMTEwWjAzMTEwLwYDVQQD EygxNjczN2VmMGMwNjllMzkyOWY4YzM0MzYzNjZlODA5NTUxOTZhMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/4wMLXoKpsPQpQjaNjxt6lEoKRs VU0Cs54+wYNiKQjHpQZbGLJc3f9zFOp2bbofTJVCmmkAwPATU08jZSciXlmeNKck 6zmUb/noVmz0hb/KeCyXYJqOcrR+/n36ps0+plKjVZW1LxCPRKpbqijqs/rnUIjj KZ+3nYeghs0JEcu/ZTcBKjMrSFEZYvvzVLUEQ9fET9X8axGN5E7pZJjiRwYP9/zJ Qu5yxbghS01vj/AIfwV1D9+HVq6Hip3Dopq8LIXuYge8++ktyhWgg9a95au/mWCV kg1X4c/96ELQSi1qo0vU0Z+788DK4FU6PtSQWxAsYfI5yYMNRLCyVBT5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZzfvDAaeOSn4w0NjZugJVRlqJxMB8GA1UdIwQY MBaAFIthN5SScFCyJSWrcAkYNUCO7kx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2Mt ZWMwNWQwMTk1MDM2LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2MtZWMwNWQwMTk1MDM2 LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvrmzMfF HuZKG+wJClGYAWAJNf5gFjCxvnxL7VjdDerBgyoovW1uiSf1nzgTJqXL0eTzd86T TUsG9Z9NFBBACKYjJkI4oGw1DeA7ugO5pJ2+RW1bryLbf1ZP+QF8SZYSqYnXZ96n zogvMjD3CNlDPW9fTbaAtsgWTrhnVyz/0g0juW+nE9P0auouHIkf4yXcjF60looM 4tfMpp/Zzqyw9ss2j1WJnCDG1SlJNi6s9/z7J/mMeOY06FNEVYn9me22nNDHA83a m13qNcNZKv3FsWnc1t1iW8xA6wbmiH7BZIgOWWOYMaPZd6ti0RISBp0m6Fxy9Xt9 5SH93eyhJhGFoA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:51:00 2025 by rpki-client