This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json) Hash identifier: EA/51SdGvNQIxt8wtETMDXjsLNT8KIWVDvIstJnPkIg= Subject key identifier: 1C:47:01:A7:82:2A:DE:8A:42:F5:D6:8B:C6:35:C5:6F:2C:F6:37:41 Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68 Certificate serial: 019B2AAF0E8AD19AC87D4CED252E5F0F7EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft Manifest number: 136B Signing time: Wed 17 Dec 2025 05:01:14 +0000 Manifest this update: Wed 17 Dec 2025 05:01:14 +0000 Manifest next update: Thu 18 Dec 2025 05:01:14 +0000 Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=) 2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: YkXbEufX9xuMssal7ygvn7mlGnEVUeHo1ekb7+6QSwU=) 3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:af:0e:8a:d1:9a:c8:7d:4c:ed:25:2e:5f:0f:7e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68 Validity Not Before: Dec 17 05:01:14 2025 GMT Not After : Dec 18 05:01:14 2025 GMT Subject: CN=1c4701a7822ade8a42f5d68bc635c56f2cf63741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:63:2e:eb:80:9c:58:34:eb:a5:ae:f7:be:5c: b3:89:16:3f:e8:ad:60:02:b1:3a:14:e4:78:74:49: dc:9a:73:06:0b:47:fb:67:19:6a:e1:0c:ba:32:df: 01:65:a9:a5:35:0f:9a:38:31:80:d5:03:bf:6c:2c: 91:e8:b9:02:de:46:b5:ab:74:3c:b4:3b:5b:79:d5: 95:6b:06:ba:c5:b8:7c:73:eb:ea:2a:da:eb:08:e4: 07:54:20:e5:f4:b3:ce:27:bc:a0:57:51:74:47:6c: d6:dd:14:53:2a:d9:5c:51:52:6d:01:c7:dc:91:80: ce:61:69:9d:22:72:24:cd:a7:ef:31:8c:f1:3f:e3: 31:1e:78:df:9a:c1:a9:35:7b:03:3a:6f:55:ce:2e: 48:bc:05:9a:1a:bc:c2:23:b3:90:8b:5c:11:be:65: f8:e1:97:2a:5d:27:22:7a:48:bb:2d:a6:a2:f1:24: 62:7e:e9:06:75:42:f0:f1:9c:b7:7a:35:da:57:24: 84:da:2a:ca:dc:71:2d:86:bb:c6:0b:3e:f2:ad:bb: 6c:a2:5a:4a:6a:b3:75:2f:95:02:49:17:0d:d3:05: d2:0c:0c:d6:1f:7f:9f:a5:de:74:ef:5b:a8:86:9c: 95:13:ab:dd:84:6f:0d:3f:70:87:0d:7c:af:4f:04: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:47:01:A7:82:2A:DE:8A:42:F5:D6:8B:C6:35:C5:6F:2C:F6:37:41 X509v3 Authority Key Identifier: keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:40:43:83:c9:66:16:84:58:42:c2:00:c8:a0:d7:5e:17:4c: 7b:29:a9:21:b6:08:a1:dc:c8:5a:44:89:fa:e4:8c:b9:77:e7: 1b:44:f5:ca:de:19:ae:e9:80:07:4f:07:4a:af:2f:54:ee:49: 24:12:f2:f3:d0:2f:10:c8:80:09:44:94:a0:71:8c:fb:ba:aa: 98:e3:c4:a8:1b:43:b7:a1:0a:80:27:0a:d3:54:ee:f1:85:90: 1a:46:a9:99:28:a8:df:dd:b5:f4:a0:0d:57:f0:be:5f:34:6c: 0e:1d:d6:52:22:3e:82:92:b9:f8:ea:9b:5c:4a:96:a7:a5:45: 0d:93:76:18:72:da:6f:ee:dd:45:30:d4:bb:57:a8:6c:eb:86: 8a:1e:0d:8a:b6:ef:a8:6f:c3:7a:cb:c4:1b:dd:31:81:b1:08: 4d:f9:23:17:d9:60:b6:58:61:de:20:87:0f:34:9f:f4:3e:6c: 32:b8:1c:13:6c:93:80:69:b5:bd:4b:bb:55:3c:af:46:d0:93: 62:2d:bd:09:a9:28:94:ed:2f:15:a7:86:47:36:d1:d9:fa:d0: 75:ba:7b:16:27:3d:e2:e1:01:2d:5c:59:7a:1f:39:44:a3:6a: 09:bf:8d:4f:03:26:b4:fd:48:62:ea:5e:2b:93:57:a9:98:e3: c5:70:db:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrw6K0ZrIfUztJS5fD37IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm MDJkNjgwHhcNMjUxMjE3MDUwMTE0WhcNMjUxMjE4MDUwMTE0WjAzMTEwLwYDVQQD EygxYzQ3MDFhNzgyMmFkZThhNDJmNWQ2OGJjNjM1YzU2ZjJjZjYzNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GMu64CcWDTrpa73vlyziRY/6K1g ArE6FOR4dEncmnMGC0f7Zxlq4Qy6Mt8BZamlNQ+aODGA1QO/bCyR6LkC3ka1q3Q8 tDtbedWVawa6xbh8c+vqKtrrCOQHVCDl9LPOJ7ygV1F0R2zW3RRTKtlcUVJtAcfc kYDOYWmdInIkzafvMYzxP+MxHnjfmsGpNXsDOm9Vzi5IvAWaGrzCI7OQi1wRvmX4 4ZcqXScieki7Laai8SRifukGdULw8Zy3ejXaVySE2irK3HEthrvGCz7yrbtsolpK arN1L5UCSRcN0wXSDAzWH3+fpd5071uohpyVE6vdhG8NP3CHDXyvTwSPgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxHAaeCKt6KQvXWi8Y1xW8s9jdBMB8GA1UdIwQY MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0BDg8lm FoRYQsIAyKDXXhdMeympIbYIodzIWkSJ+uSMuXfnG0T1yt4ZrumAB08HSq8vVO5J JBLy89AvEMiACUSUoHGM+7qqmOPEqBtDt6EKgCcK01Tu8YWQGkapmSio39219KAN V/C+XzRsDh3WUiI+gpK5+OqbXEqWp6VFDZN2GHLab+7dRTDUu1eobOuGih4Nirbv qG/DesvEG90xgbEITfkjF9lgtlhh3iCHDzSf9D5sMrgcE2yTgGm1vUu7VTyvRtCT Yi29CakolO0vFaeGRzbR2frQdbp7Fic94uEBLVxZeh85RKNqCb+NTwMmtP1IYupe K5NXqZjjxXDblg== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:30 2025 by rpki-client