This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json) Hash identifier: Ch028kqfvOR2qUF/fQBrNyXuUVHEEhSMcmdXvnKisTI= Subject key identifier: 23:16:3F:F4:04:B3:15:DC:79:4B:BA:7F:10:FB:40:04:CB:FE:EF:D0 Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832 Certificate serial: 019B4E4E01344E21A8E2BEA50D4A9DAAC186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft Manifest number: 0394 Signing time: Wed 24 Dec 2025 03:01:33 +0000 Manifest this update: Wed 24 Dec 2025 03:01:33 +0000 Manifest next update: Thu 25 Dec 2025 03:01:33 +0000 Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: wxI1xZrO71D/5WGMhV0YGJQRmalkAlUayxKZDOGJ1YM=) 2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=) 3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:01:34:4e:21:a8:e2:be:a5:0d:4a:9d:aa:c1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23607105955c764a813fd9524a7e41b940c56832 Validity Not Before: Dec 24 03:01:33 2025 GMT Not After : Dec 25 03:01:33 2025 GMT Subject: CN=23163ff404b315dc794bba7f10fb4004cbfeefd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:b0:7a:d5:03:75:a4:c8:11:8b:23:93:e4: 2f:86:9e:c0:e8:70:ea:88:aa:41:cc:c5:49:3e:8a: 6c:59:19:5f:52:7b:4d:09:95:0a:7f:14:ea:03:6f: b9:89:2e:41:b1:8c:dd:7d:6d:9c:c1:49:4a:a0:bd: 70:84:40:ae:92:e3:57:b0:eb:2a:bc:38:a0:09:0d: 57:85:25:d2:14:71:60:56:b1:15:d8:70:4f:5e:b5: 0a:2d:d9:a3:64:af:95:50:70:8a:ba:16:53:66:e2: d3:d0:be:a2:b0:80:f9:1e:c9:39:4c:64:ca:9b:9a: af:ff:b5:98:e7:fa:e9:a8:c7:0c:f3:3e:4e:09:b7: 66:3f:93:7c:39:66:0b:b8:18:6e:e3:ed:84:1e:8e: 03:e6:6f:c0:50:8b:11:c5:24:06:0a:0d:f1:d7:0e: 20:ee:80:e8:f9:9c:ea:0c:4c:fa:07:b0:15:ee:af: cf:3f:a2:55:84:d8:b4:b1:17:c0:91:a7:a6:f7:68: 79:e3:15:ac:1a:bf:cb:7b:07:0b:27:8b:65:c3:35: fd:80:fc:62:8b:69:c0:ba:0d:d3:a5:b3:53:79:19: e9:9f:ee:9f:48:c8:ce:79:26:1b:53:3c:af:e6:1b: cc:8d:86:c2:58:98:bb:e9:27:1f:d5:4c:bf:86:cb: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:3F:F4:04:B3:15:DC:79:4B:BA:7F:10:FB:40:04:CB:FE:EF:D0 X509v3 Authority Key Identifier: keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:61:df:f4:dc:9a:63:77:0c:9e:f3:8c:44:04:77:40:11:9a: 8f:0b:79:d4:4c:ec:f0:75:11:69:16:a1:72:3b:60:96:bf:4c: 80:c9:f9:fb:e3:af:38:8f:4c:f4:49:9a:9a:60:51:a7:fa:7e: c5:5f:d0:00:0b:b1:cd:31:9d:c4:22:e6:14:80:44:6d:cf:8a: de:14:d6:11:fe:1f:f7:9d:41:00:ab:7e:84:98:4d:58:42:8d: fb:9d:b6:3b:e0:d3:ac:1e:98:2d:fe:80:35:12:16:a8:f3:58: ab:39:91:05:54:a2:b2:48:b4:b4:a9:0a:e7:42:a9:f1:66:d4: 85:36:ba:e3:15:cb:65:fb:f3:5e:8e:0c:4b:58:d2:4f:5d:35: 2b:c7:bc:70:a4:5e:fd:42:8f:5e:12:91:fa:13:8d:15:d8:e6: 55:03:cf:9b:28:09:71:9d:b2:01:23:ca:3b:f9:a9:b7:f2:75: 75:5c:22:b9:09:96:dd:72:e0:b8:45:ec:65:5b:70:a7:e8:8c: c5:c5:5d:d6:48:e6:d5:7b:1c:17:a9:af:f9:4a:f2:0e:55:7f: 48:6f:f3:61:b1:83:5a:73:c0:0e:0b:19:7a:96:f4:ce:82:88: c0:6e:4f:8e:a1:2d:69:3a:53:a8:cc:79:01:c4:cf:2a:6c:1a: ad:97:63:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTgE0TiGo4r6lDUqdqsGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjA3MTA1OTU1Yzc2NGE4MTNmZDk1MjRhN2U0MWI5NDBj NTY4MzIwHhcNMjUxMjI0MDMwMTMzWhcNMjUxMjI1MDMwMTMzWjAzMTEwLwYDVQQD EygyMzE2M2ZmNDA0YjMxNWRjNzk0YmJhN2YxMGZiNDAwNGNiZmVlZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwuwetUDdaTIEYsjk+Qvhp7A6HDq iKpBzMVJPopsWRlfUntNCZUKfxTqA2+5iS5BsYzdfW2cwUlKoL1whECukuNXsOsq vDigCQ1XhSXSFHFgVrEV2HBPXrUKLdmjZK+VUHCKuhZTZuLT0L6isID5Hsk5TGTK m5qv/7WY5/rpqMcM8z5OCbdmP5N8OWYLuBhu4+2EHo4D5m/AUIsRxSQGCg3x1w4g 7oDo+ZzqDEz6B7AV7q/PP6JVhNi0sRfAkaem92h54xWsGr/LewcLJ4tlwzX9gPxi i2nAug3TpbNTeRnpn+6fSMjOeSYbUzyv5hvMjYbCWJi76Scf1Uy/hsuCHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMWP/QEsxXceUu6fxD7QATL/u/QMB8GA1UdIwQY MBaAFCNgcQWVXHZKgT/ZUkp+QblAxWgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTkt NDg0NzBmNjlkNzlkLzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTktNDg0NzBmNjlkNzlk LzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGHf9Nya Y3cMnvOMRAR3QBGajwt51Ezs8HURaRahcjtglr9MgMn5++OvOI9M9EmammBRp/p+ xV/QAAuxzTGdxCLmFIBEbc+K3hTWEf4f951BAKt+hJhNWEKN+522O+DTrB6YLf6A NRIWqPNYqzmRBVSiski0tKkK50Kp8WbUhTa64xXLZfvzXo4MS1jST101K8e8cKRe /UKPXhKR+hONFdjmVQPPmygJcZ2yASPKO/mpt/J1dVwiuQmW3XLguEXsZVtwp+iM xcVd1kjm1XscF6mv+UryDlV/SG/zYbGDWnPADgsZepb0zoKIwG5PjqEtaTpTqMx5 AcTPKmwarZdj1A== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:12 2025 by rpki-client