This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json) Hash identifier: 3FkdooViNIsKoR/TN7ENy5IF3v+BZuD7mGFE75BPAzc= Subject key identifier: 50:2F:BB:0C:91:7E:48:43:D1:54:32:58:33:11:3B:D4:60:0B:64:F3 Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Certificate serial: 019B2AAE94A65360165D38B57B6133902DA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft Manifest number: 02C9 Signing time: Wed 17 Dec 2025 05:00:42 +0000 Manifest this update: Wed 17 Dec 2025 05:00:42 +0000 Manifest next update: Thu 18 Dec 2025 05:00:42 +0000 Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: V1UVf4Q0etaj39tfeB6Wrh+B+cpuZmR1qECQZHBtXNw=) 2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:94:a6:53:60:16:5d:38:b5:7b:61:33:90:2d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Validity Not Before: Dec 17 05:00:42 2025 GMT Not After : Dec 18 05:00:42 2025 GMT Subject: CN=502fbb0c917e4843d154325833113bd4600b64f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:fe:58:28:94:2f:68:b5:ba:e6:85:b4:a5: 63:87:6c:6e:00:b1:3e:c9:ba:b8:55:33:c0:b1:94: 02:1f:ba:93:55:68:11:25:f2:fb:68:ff:3d:6c:95: da:1c:df:7a:e5:3e:89:8d:5e:d4:db:44:9d:f9:bd: 6f:02:4c:30:fd:6c:6a:5e:6d:62:8d:9a:5e:a7:34: c3:0c:5a:f5:c4:0f:aa:88:8d:ae:e1:5b:05:64:28: 0e:69:54:b4:f3:d4:46:25:0e:78:df:10:03:a1:79: 5f:8e:d5:94:44:2a:1e:11:93:22:9b:d8:36:95:8d: 7e:58:70:c7:e8:13:4b:16:6a:a4:d6:a0:5a:cf:19: fe:43:c3:39:90:9a:b8:62:fe:56:e2:1f:53:83:e1: 07:0d:cf:98:03:0c:55:b0:47:9b:30:69:8b:ab:92: ea:71:fa:4f:18:8e:39:d5:ff:05:03:aa:e2:15:d5: b0:4c:e0:93:8d:9b:19:2c:b0:da:f1:48:f8:bb:20: 35:6e:70:c2:7d:d8:f2:5f:c6:c4:74:08:d6:cc:c7: 39:f4:29:bc:2a:a8:c0:99:16:28:f7:66:eb:62:4f: ca:c6:91:5c:68:ce:07:ba:b0:0c:16:30:e2:c8:2f: 55:1f:1c:f1:d1:9a:20:f4:c3:20:f7:ea:d5:f4:6d: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:BB:0C:91:7E:48:43:D1:54:32:58:33:11:3B:D4:60:0B:64:F3 X509v3 Authority Key Identifier: keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:6f:ef:e8:e1:9e:a7:af:85:27:32:d7:8b:d9:c9:a8:33:79: 6b:7b:e1:49:ca:e2:76:88:62:f5:cd:9d:f2:40:2a:06:a5:3e: 81:71:44:2e:09:e8:24:28:f5:f0:6e:46:87:8c:b2:2c:a8:f8: ff:23:fb:13:d3:e5:6a:e8:76:5d:55:1d:62:68:f4:1a:94:2a: 3d:9b:0d:27:b4:ed:94:08:f9:ae:2e:d0:a8:83:38:51:6b:b9: d4:62:50:4f:8e:c6:cd:67:dc:70:c2:90:0f:1b:c0:ad:5a:ce: 6e:26:e7:16:9c:95:d7:16:ef:c5:a6:fb:82:35:8d:3c:d9:8c: 60:c7:0f:9d:47:08:7c:95:89:ca:95:cc:ab:0e:a8:fe:a9:24: 0a:ab:0e:05:d5:9e:a2:ed:13:58:0f:18:d0:e5:db:3c:0f:95: 08:e6:bc:e1:c6:72:d5:0b:c0:97:a0:3f:88:b2:c5:68:9b:9c: e1:28:88:43:83:21:59:72:08:f0:39:8b:18:96:cb:21:3a:fa: 65:d2:a6:1b:61:f3:e7:cd:9f:f7:59:4e:d0:55:1c:0e:a4:43: de:37:39:79:6e:38:d6:43:97:81:2a:61:4b:39:b2:21:77:f0: 94:8f:79:9a:04:a4:2c:12:f1:a4:f4:65:f0:b7:94:8b:c2:2c: 4b:55:81:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrpSmU2AWXTi1e2EzkC2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODQ2NzRlYTAwN2ExMjAzMGFjOGQyYmU1NjBkYjIxZjRm YzBiOTkwHhcNMjUxMjE3MDUwMDQyWhcNMjUxMjE4MDUwMDQyWjAzMTEwLwYDVQQD Eyg1MDJmYmIwYzkxN2U0ODQzZDE1NDMyNTgzMzExM2JkNDYwMGI2NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ln+WCiUL2i1uuaFtKVjh2xuALE+ ybq4VTPAsZQCH7qTVWgRJfL7aP89bJXaHN965T6JjV7U20Sd+b1vAkww/WxqXm1i jZpepzTDDFr1xA+qiI2u4VsFZCgOaVS089RGJQ543xADoXlfjtWURCoeEZMim9g2 lY1+WHDH6BNLFmqk1qBazxn+Q8M5kJq4Yv5W4h9Tg+EHDc+YAwxVsEebMGmLq5Lq cfpPGI451f8FA6riFdWwTOCTjZsZLLDa8Uj4uyA1bnDCfdjyX8bEdAjWzMc59Cm8 KqjAmRYo92brYk/KxpFcaM4HurAMFjDiyC9VHxzx0Zog9MMg9+rV9G2l5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAvuwyRfkhD0VQyWDMRO9RgC2TzMB8GA1UdIwQY MBaAFCOEZ06gB6EgMKyNK+Vg2yH0/AuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUt YzhmNTZjMTIyZmVjLzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUtYzhmNTZjMTIyZmVj LzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwW/v6OGe p6+FJzLXi9nJqDN5a3vhScridohi9c2d8kAqBqU+gXFELgnoJCj18G5Gh4yyLKj4 /yP7E9Plauh2XVUdYmj0GpQqPZsNJ7TtlAj5ri7QqIM4UWu51GJQT47GzWfccMKQ DxvArVrObibnFpyV1xbvxab7gjWNPNmMYMcPnUcIfJWJypXMqw6o/qkkCqsOBdWe ou0TWA8Y0OXbPA+VCOa84cZy1QvAl6A/iLLFaJuc4SiIQ4MhWXII8DmLGJbLITr6 ZdKmG2Hz582f91lO0FUcDqRD3jc5eW441kOXgSphSzmyIXfwlI95mgSkLBLxpPRl 8LeUi8IsS1WB/g== -----END CERTIFICATE-----Generated at Wed Dec 17 11:22:29 2025 by rpki-client