This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json) Hash identifier: kT3pistQsrB1b8Whh3O+Ane4wRIYWmVHBhtWoJhcVT4= Subject key identifier: 80:3F:0F:B9:4E:5B:BC:85:BD:DB:CD:AD:66:39:F1:64:A6:E4:51:CD Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06 Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906 Certificate serial: 019B4E166BB21E746861618E74E1BCF066E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft Manifest number: 178E Signing time: Wed 24 Dec 2025 02:00:50 +0000 Manifest this update: Wed 24 Dec 2025 02:00:50 +0000 Manifest next update: Thu 25 Dec 2025 02:00:50 +0000 Files and hashes: 1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: rGPwFfkZm+9MpWYDNbjFRBb3bIkhBXSC6uz3Aomqrww=) 2: L1nx6g959I4u5e_n7rqsUK0vG74.roa (hash: X8LU286M1DCtu5IfhCO2jJJ+1Cy+WsVLYYIMMfE/G4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:6b:b2:1e:74:68:61:61:8e:74:e1:bc:f0:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906 Validity Not Before: Dec 24 02:00:50 2025 GMT Not After : Dec 25 02:00:50 2025 GMT Subject: CN=803f0fb94e5bbc85bddbcdad6639f164a6e451cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:2d:cd:67:67:7a:f2:20:cf:ea:aa:d9:2b: 63:8d:8a:45:19:2e:d6:83:aa:d2:4c:95:22:15:a8: 2d:d7:71:5f:e6:a9:e7:ed:93:1a:42:81:3b:cb:3f: 2b:ee:e7:aa:a4:d9:df:66:ce:6d:76:36:2d:1c:e7: 69:41:32:63:3c:a2:3a:9b:9e:2b:e8:9f:08:8f:34: 9e:cb:fa:fc:2e:03:be:fe:ee:36:ea:47:d5:29:b2: 96:f5:db:4c:c2:93:3b:a4:5e:a9:76:cb:d4:66:6e: 56:62:34:ce:6c:7e:4c:b4:76:4b:3e:df:7b:ca:5f: b5:f4:d1:77:07:a6:36:0b:d5:8e:5d:b7:a4:dd:e0: 84:07:82:ca:3b:6f:b2:ad:ec:cc:bb:57:02:cf:a5: 9f:3f:80:e0:4c:a0:35:a9:98:8a:ae:d9:0d:54:f5: 6c:02:19:d7:83:4c:3c:96:08:0b:01:29:e5:83:0d: 8a:cc:74:90:d3:2f:e2:2f:a6:7c:8b:f8:b0:eb:4b: fb:9d:f6:42:7c:df:12:51:12:3e:ae:fd:b9:ca:83: 05:dc:39:44:63:33:a1:ba:ed:b7:05:0e:3c:2b:e6: b7:17:dd:13:c3:1e:c7:96:24:b0:53:f9:3c:49:ca: 09:a0:ed:32:42:41:4b:fc:68:5a:e2:d7:37:a9:43: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3F:0F:B9:4E:5B:BC:85:BD:DB:CD:AD:66:39:F1:64:A6:E4:51:CD X509v3 Authority Key Identifier: keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6f:6b:24:df:da:42:b1:fa:89:7b:f2:7b:f0:30:d5:d7:94: ee:95:c0:16:67:3e:46:5f:b2:f6:3a:12:2d:99:fa:f5:be:a7: b2:f3:87:f3:03:1e:30:4b:d7:13:7a:ee:90:55:95:d7:a1:f0: ba:6d:29:25:2e:77:dd:f0:cc:89:de:fe:6a:a7:f6:d8:97:c5: 72:2f:25:ee:3b:3b:f4:0c:22:d0:e1:7c:d4:79:38:f4:04:71: f7:23:fa:95:11:b9:08:64:74:c6:ea:ec:69:c2:0c:0f:f5:1e: b6:c1:ce:f5:0b:40:0d:ad:20:70:66:8e:b3:ba:d4:1f:5c:18: 9e:79:7b:d9:b9:87:43:71:e7:fb:d3:be:af:f6:24:03:81:d7: ce:fa:94:a4:a9:e1:78:00:77:25:1f:d5:11:2b:aa:dc:85:88: c3:8f:50:29:47:a3:d7:b7:ff:b1:f0:9c:35:4e:6b:af:b1:e7: cd:05:3d:66:2c:23:4e:54:09:64:09:9d:1d:ee:0d:e1:5b:53: 74:fa:94:e3:13:46:77:33:b3:ac:d3:6e:3c:2c:a9:e9:14:ca: cf:37:62:92:22:85:49:d1:3e:5f:a3:31:8e:5c:11:98:87:bf: c2:2e:04:a9:79:e8:c2:55:3c:61:36:04:48:39:ea:c1:8f:70: 2b:f6:4e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFmuyHnRoYWGOdOG88GbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYzAyYWY0ZjU4ZjExMzIwYWYzMTk2OTQ2ZTFmY2U5ZDA1 MGM5MDYwHhcNMjUxMjI0MDIwMDUwWhcNMjUxMjI1MDIwMDUwWjAzMTEwLwYDVQQD Eyg4MDNmMGZiOTRlNWJiYzg1YmRkYmNkYWQ2NjM5ZjE2NGE2ZTQ1MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t4tzWdnevIgz+qq2StjjYpFGS7W g6rSTJUiFagt13Ff5qnn7ZMaQoE7yz8r7ueqpNnfZs5tdjYtHOdpQTJjPKI6m54r 6J8IjzSey/r8LgO+/u426kfVKbKW9dtMwpM7pF6pdsvUZm5WYjTObH5MtHZLPt97 yl+19NF3B6Y2C9WOXbek3eCEB4LKO2+yrezMu1cCz6WfP4DgTKA1qZiKrtkNVPVs AhnXg0w8lggLASnlgw2KzHSQ0y/iL6Z8i/iw60v7nfZCfN8SURI+rv25yoMF3DlE YzOhuu23BQ48K+a3F90Twx7HliSwU/k8ScoJoO0yQkFL/Gha4tc3qUMjjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA/D7lOW7yFvdvNrWY58WSm5FHNMB8GA1UdIwQY MBaAFCPAKvT1jxEyCvMZaUbh/OnQUMkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQt NjJjYjhhY2E5NjE4LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQtNjJjYjhhY2E5NjE4 LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG9rJN/a QrH6iXvye/Aw1deU7pXAFmc+Rl+y9joSLZn69b6nsvOH8wMeMEvXE3rukFWV16Hw um0pJS533fDMid7+aqf22JfFci8l7js79Awi0OF81Hk49ARx9yP6lRG5CGR0xurs acIMD/UetsHO9QtADa0gcGaOs7rUH1wYnnl72bmHQ3Hn+9O+r/YkA4HXzvqUpKnh eAB3JR/VESuq3IWIw49QKUej17f/sfCcNU5rr7HnzQU9ZiwjTlQJZAmdHe4N4VtT dPqU4xNGdzOzrNNuPCyp6RTKzzdikiKFSdE+X6MxjlwRmIe/wi4EqXnowlU8YTYE SDnqwY9wK/ZO1w== -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:18 2025 by rpki-client