This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json) Hash identifier: /eC1//VNZBMNtSytPR8R0f0jI7D16+k8hYch8vp++dI= Subject key identifier: 35:BC:47:B1:FD:83:8B:11:31:A0:78:C6:92:83:40:51:1D:C3:A6:18 Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86 Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386 Certificate serial: 019B67D6742B39E50D1CD719A0161BE8548D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 02:01:06 +0000 Manifest this update: Mon 29 Dec 2025 02:01:06 +0000 Manifest next update: Tue 30 Dec 2025 02:01:06 +0000 Files and hashes: 1: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: nHMgy3e+BGQ8+CQFY7MdGPhwipWDdf4JauUojHQx/x0=) 2: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (hash: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d6:74:2b:39:e5:0d:1c:d7:19:a0:16:1b:e8:54:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386 Validity Not Before: Dec 29 02:01:06 2025 GMT Not After : Dec 30 02:01:06 2025 GMT Subject: CN=35bc47b1fd838b1131a078c6928340511dc3a618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:5d:1f:9a:33:b5:67:f8:b5:71:3f:dd:54: 31:cd:cd:57:27:ad:bd:3e:58:ae:1b:c2:80:d0:d0: b4:8f:ae:e0:b0:df:71:3c:86:bb:1d:33:e6:df:d9: 39:c1:7e:21:e3:a4:e0:9f:8a:05:a6:16:d5:2b:f5: 13:70:cb:a7:20:78:4b:68:84:30:0e:40:c2:c4:26: db:b1:fd:6f:df:3e:ad:7e:df:59:61:39:bb:84:1a: 47:7c:23:a7:85:fd:bd:23:3c:25:61:2f:b2:dd:e1: 6b:57:2d:ef:df:0f:08:1d:13:d9:c7:e0:e9:e2:a5: 79:05:c9:b3:3b:0a:31:be:03:a0:68:fd:18:c4:e9: 80:c9:78:d1:fd:c3:4d:0d:71:38:e8:76:67:95:24: f6:b7:a8:44:58:f4:b2:bb:ee:c6:5e:6e:23:b1:57: e9:e2:9a:e0:2a:fb:d8:04:b1:77:55:e1:9e:47:e8: 2c:11:64:9f:f6:f4:64:4d:5b:a1:f3:9d:74:c3:1a: f8:13:b9:37:e4:ba:55:0f:88:64:1a:19:87:cf:08: 4c:63:ab:90:6a:ce:f0:84:85:5b:01:e0:a1:2e:55: 27:90:db:b6:c4:33:d4:e9:65:a4:cf:b5:72:66:1d: 6b:eb:b2:53:54:ef:5f:2a:d4:e3:ee:8b:d4:5a:32: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:47:B1:FD:83:8B:11:31:A0:78:C6:92:83:40:51:1D:C3:A6:18 X509v3 Authority Key Identifier: keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:55:b2:36:f9:db:f8:55:1b:3f:f2:9c:d9:70:c4:d1:cf:7e: 67:10:b3:06:41:e3:6d:84:42:2b:60:cc:2b:94:1f:33:a4:24: ff:e8:56:12:24:97:a3:3b:b7:f4:25:11:c5:87:03:44:52:db: 45:da:63:16:e0:b8:11:4c:bc:83:5e:62:5b:fd:ac:0f:61:52: dc:85:7b:16:26:de:80:ed:cb:27:d8:fc:0f:0f:05:23:b2:29: f5:ff:83:f1:ab:0d:1e:17:79:3c:6b:38:6d:da:66:99:60:7a: bd:53:9f:91:40:ba:c3:78:17:55:91:27:48:04:88:bd:b2:a9: 7b:4a:40:15:0d:83:58:d0:b8:0d:0a:65:92:48:9d:a3:95:1c: ea:ef:35:10:0a:e7:c8:64:01:41:2d:4b:85:01:f0:7e:77:ac: 8b:25:d9:21:f9:fa:6a:39:45:2c:dd:a6:d0:7a:b4:62:d8:c3: c8:9b:61:00:78:f6:65:8b:01:91:e1:1d:01:d9:fd:10:04:65: 52:cc:b4:c1:63:07:d6:94:dc:70:74:4e:56:8c:59:f2:7a:bb: 8f:12:7c:60:69:b8:09:48:67:83:1e:e4:ee:36:3a:46:5e:76: 4b:c7:cf:be:7b:26:a4:22:1c:a7:4d:c9:2f:9a:95:7a:21:5d: 07:61:55:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1nQrOeUNHNcZoBYb6FSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGM1M2NjMjI2M2Y2ZmRlYTE3MGQzMjgyYTIwYjhlNzE2 MDczODYwHhcNMjUxMjI5MDIwMTA2WhcNMjUxMjMwMDIwMTA2WjAzMTEwLwYDVQQD EygzNWJjNDdiMWZkODM4YjExMzFhMDc4YzY5MjgzNDA1MTFkYzNhNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGNdH5oztWf4tXE/3VQxzc1XJ629 PliuG8KA0NC0j67gsN9xPIa7HTPm39k5wX4h46Tgn4oFphbVK/UTcMunIHhLaIQw DkDCxCbbsf1v3z6tft9ZYTm7hBpHfCOnhf29IzwlYS+y3eFrVy3v3w8IHRPZx+Dp 4qV5BcmzOwoxvgOgaP0YxOmAyXjR/cNNDXE46HZnlST2t6hEWPSyu+7GXm4jsVfp 4prgKvvYBLF3VeGeR+gsEWSf9vRkTVuh8510wxr4E7k35LpVD4hkGhmHzwhMY6uQ as7whIVbAeChLlUnkNu2xDPU6WWkz7VyZh1r67JTVO9fKtTj7ovUWjLh8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW8R7H9g4sRMaB4xpKDQFEdw6YYMB8GA1UdIwQY MBaAFIvcU8wiY/b96hcNMoKiC45xYHOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2Et N2FjYjIxYmE3NzNmLzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2EtN2FjYjIxYmE3NzNm LzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVWyNvnb +FUbP/Kc2XDE0c9+ZxCzBkHjbYRCK2DMK5QfM6Qk/+hWEiSXozu39CURxYcDRFLb RdpjFuC4EUy8g15iW/2sD2FS3IV7FibegO3LJ9j8Dw8FI7Ip9f+D8asNHhd5PGs4 bdpmmWB6vVOfkUC6w3gXVZEnSASIvbKpe0pAFQ2DWNC4DQplkkido5Uc6u81EArn yGQBQS1LhQHwfnesiyXZIfn6ajlFLN2m0Hq0YtjDyJthAHj2ZYsBkeEdAdn9EARl Usy0wWMH1pTccHROVoxZ8nq7jxJ8YGm4CUhngx7k7jY6Rl52S8fPvnsmpCIcp03J L5qVeiFdB2FV6A== -----END CERTIFICATE-----Generated at Mon Dec 29 06:50:48 2025 by rpki-client