This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft File: I08I-kIiU1wK8moNc0fb8XJUcZY.mft (raw, json) Hash identifier: 9rVkCKsRCaTC+vxQ1VU+Tfn6vAhJ6uyJj1YdIs7SWeA= Subject key identifier: D5:D8:7B:8E:3C:31:19:66:AA:01:00:18:D0:24:1E:3B:D9:66:48:E6 Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96 Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196 Certificate serial: 019B3CEC779CA235D72BE97BD315DE4B2814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft Manifest number: 0276 Signing time: Sat 20 Dec 2025 18:01:28 +0000 Manifest this update: Sat 20 Dec 2025 18:01:28 +0000 Manifest next update: Sun 21 Dec 2025 18:01:28 +0000 Files and hashes: 1: I08I-kIiU1wK8moNc0fb8XJUcZY.crl (hash: Y43OGYYJ6Asqvt8YeIaVQ9LAKO8Wxk/zfhaNgbyOsC0=) 2: PMihf48EDZLf86f7BmXfYmZbV4M.roa (hash: kAi2yEZhpDZ5dFlA+0hzmB2XiAS3L8tb6zCyB/FGwDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:77:9c:a2:35:d7:2b:e9:7b:d3:15:de:4b:28:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196 Validity Not Before: Dec 20 18:01:28 2025 GMT Not After : Dec 21 18:01:28 2025 GMT Subject: CN=d5d87b8e3c311966aa010018d0241e3bd96648e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:81:e1:d3:3e:e4:4d:e6:f3:dd:dd:9d:cf: f7:a4:c3:f2:19:18:8f:7b:77:ca:41:63:93:93:dd: 59:d6:b5:18:d3:a3:a0:9c:d7:07:dd:d0:08:9a:7f: 5e:c3:29:04:42:e4:da:a5:fb:67:e7:b8:6d:5b:45: d2:7e:99:33:d8:13:d9:dc:b0:ca:4d:0d:45:60:53: 92:33:d0:1d:3a:ba:1c:70:bd:56:ea:1a:ad:bd:99: 12:a5:fd:90:2b:2d:9d:fd:67:69:3b:cc:90:ec:03: 0d:24:09:8e:d4:9a:87:d3:89:60:3b:5f:1c:18:d1: f2:3a:d0:b7:01:97:eb:97:d6:74:78:8f:e5:b3:0d: 24:46:68:de:8d:19:b3:cf:98:54:da:35:ee:db:40: 14:54:66:4e:7d:5d:4f:e4:8d:60:e8:2c:09:68:44: 96:7c:68:c1:de:f7:dc:f2:a5:d7:33:69:0a:cf:cb: 9b:fe:63:58:62:49:c9:97:0b:3a:f6:74:70:f2:d8: 41:bf:c4:ff:07:ad:d2:b6:ad:2e:ac:2b:b2:60:6b: 9a:16:b4:d3:97:b4:0d:a2:58:72:8e:4d:62:8a:4d: a2:dd:f0:75:12:3e:56:ba:f1:b9:3b:92:70:fa:7c: 4d:ca:f2:d2:b8:c3:b3:00:7a:a3:e5:e4:e4:e1:bf: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:7B:8E:3C:31:19:66:AA:01:00:18:D0:24:1E:3B:D9:66:48:E6 X509v3 Authority Key Identifier: keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:32:a6:74:ef:94:38:20:a2:76:21:6d:a5:f8:66:51:2a:64: 1c:c4:a3:44:fb:0b:7d:35:d6:af:7a:c7:4c:dd:53:dd:d0:6a: b8:d0:5b:88:51:c8:17:a3:0e:d7:31:75:e8:38:e7:03:05:c8: 63:5a:3c:b6:a5:51:02:34:f9:70:1f:60:dc:ba:4e:e9:df:12: d4:a1:f9:63:c8:1f:dc:30:c6:8e:70:5a:86:e8:4a:05:80:de: a3:00:9d:40:fc:f3:01:30:31:5d:ae:de:9b:72:80:96:1e:6b: 18:c6:f7:2d:56:af:9d:cb:2b:1e:e2:15:f4:7c:65:7c:6d:c4: 11:9e:3f:52:09:c1:8a:64:5f:57:0a:81:90:63:f9:38:e2:a7: 77:20:92:dc:b0:2c:84:27:ed:8a:17:1b:ea:55:04:6c:f1:3a: 5a:ba:d5:2e:17:65:df:95:c3:82:f4:5c:cf:74:94:96:9f:be: e8:39:ad:43:99:ea:0c:8c:18:12:38:f0:23:a4:07:8f:6f:f6: 4d:35:5d:c7:a7:b9:ea:58:94:0b:49:75:11:b8:a8:a0:b1:b8: ab:77:32:df:8c:31:2a:16:df:9d:f4:82:fc:fb:27:b5:a1:fb: 88:2f:7a:45:ef:0f:ce:a8:6f:29:9d:02:66:2b:41:a0:b8:04: c9:a4:d8:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HecojXXK+l70xXeSygUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGYwOGZhNDIyMjUzNWMwYWYyNmEwZDczNDdkYmYxNzI1 NDcxOTYwHhcNMjUxMjIwMTgwMTI4WhcNMjUxMjIxMTgwMTI4WjAzMTEwLwYDVQQD EyhkNWQ4N2I4ZTNjMzExOTY2YWEwMTAwMThkMDI0MWUzYmQ5NjY0OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0OB4dM+5E3m893dnc/3pMPyGRiP e3fKQWOTk91Z1rUY06OgnNcH3dAImn9ewykEQuTapftn57htW0XSfpkz2BPZ3LDK TQ1FYFOSM9AdOroccL1W6hqtvZkSpf2QKy2d/WdpO8yQ7AMNJAmO1JqH04lgO18c GNHyOtC3AZfrl9Z0eI/lsw0kRmjejRmzz5hU2jXu20AUVGZOfV1P5I1g6CwJaESW fGjB3vfc8qXXM2kKz8ub/mNYYknJlws69nRw8thBv8T/B63Stq0urCuyYGuaFrTT l7QNolhyjk1iik2i3fB1Ej5WuvG5O5Jw+nxNyvLSuMOzAHqj5eTk4b+2RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXYe448MRlmqgEAGNAkHjvZZkjmMB8GA1UdIwQY MBaAFCNPCPpCIlNcCvJqDXNH2/FyVHGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUt MmJlN2VkYzc5MzJkLzEvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUtMmJlN2VkYzc5MzJk LzEvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDKmdO+U OCCidiFtpfhmUSpkHMSjRPsLfTXWr3rHTN1T3dBquNBbiFHIF6MO1zF16DjnAwXI Y1o8tqVRAjT5cB9g3LpO6d8S1KH5Y8gf3DDGjnBahuhKBYDeowCdQPzzATAxXa7e m3KAlh5rGMb3LVavncsrHuIV9HxlfG3EEZ4/UgnBimRfVwqBkGP5OOKndyCS3LAs hCftihcb6lUEbPE6WrrVLhdl35XDgvRcz3SUlp++6DmtQ5nqDIwYEjjwI6QHj2/2 TTVdx6e56liUC0l1EbiooLG4q3cy34wxKhbfnfSC/PsntaH7iC96Re8PzqhvKZ0C ZitBoLgEyaTYyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:50:16 2025 by rpki-client