This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json) Hash identifier: b7yFb7cQSPBsj+oqUtk20Yo6wU4Q81OPQEieFoOXFvo= Subject key identifier: 97:F0:C1:20:71:64:79:4F:B7:76:0C:9D:4F:50:7E:CF:96:26:0A:56 Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06 Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906 Certificate serial: 019B3CB4F5BE92B9E7F91E4AB904BBFC17E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 17:00:50 +0000 Manifest this update: Sat 20 Dec 2025 17:00:50 +0000 Manifest next update: Sun 21 Dec 2025 17:00:50 +0000 Files and hashes: 1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: qFV6Hb6YIGlhZmAb/Ljrnrk5boY68/iykV9SWVsb+5Q=) 2: L1nx6g959I4u5e_n7rqsUK0vG74.roa (hash: X8LU286M1DCtu5IfhCO2jJJ+1Cy+WsVLYYIMMfE/G4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f5:be:92:b9:e7:f9:1e:4a:b9:04:bb:fc:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906 Validity Not Before: Dec 20 17:00:50 2025 GMT Not After : Dec 21 17:00:50 2025 GMT Subject: CN=97f0c1207164794fb7760c9d4f507ecf96260a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:2f:11:d2:29:c7:a7:9a:c6:78:79:0d:5c: 08:60:dc:a0:3f:3b:23:82:01:c9:6c:14:8a:00:08: ff:d4:0c:1b:c7:be:2e:34:57:73:3e:b6:5c:16:58: 4b:5f:01:e2:be:65:f5:fc:72:a3:e8:77:14:f1:31: 34:0e:57:f7:52:7d:c3:9c:1a:33:1f:14:2d:a8:89: 0e:4b:d3:e8:56:8f:f5:35:b2:f9:54:c6:0b:ec:2f: 16:2d:c4:10:b7:84:04:37:59:63:7f:58:97:fb:a1: 29:ec:b6:ed:94:58:81:c7:8d:a3:5a:88:a3:f4:06: fd:11:d7:21:08:9e:56:07:76:42:a2:7b:b7:bf:c3: 9d:a4:af:b8:69:5b:d4:39:6b:12:1c:95:e8:5c:d6: d5:31:d9:7c:7c:42:6a:89:15:f3:dc:98:3d:e3:36: 82:05:33:78:12:b2:c3:ff:e8:f1:0f:dd:67:f2:ae: 96:f7:fd:2a:4b:0e:61:66:5e:f1:5a:36:79:5c:46: 69:92:e4:fb:ad:fe:2c:c3:80:37:da:6b:b3:ba:2e: ac:19:8b:5e:3b:cc:35:2b:91:7b:77:5d:37:b1:44: e7:9c:af:ad:1d:e8:f8:e5:9f:00:bf:81:d1:d7:98: db:6a:1a:47:14:6f:48:ba:9c:26:c9:70:fa:f5:54: 8a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F0:C1:20:71:64:79:4F:B7:76:0C:9D:4F:50:7E:CF:96:26:0A:56 X509v3 Authority Key Identifier: keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2e:c0:2d:73:23:6e:9e:82:26:3c:6c:b2:09:b6:a1:20:f3: 05:10:78:0f:e5:21:77:48:ca:cb:29:7c:7d:5f:66:cd:6a:d7: 5f:40:8a:31:f0:59:28:8c:7b:a0:be:18:80:79:e3:30:e6:3b: 27:03:c2:b3:20:00:9f:de:6d:a2:d3:a4:54:3a:9c:88:b3:95: 79:37:03:f8:ab:82:9d:96:07:9a:70:78:bf:8e:63:b5:ad:bb: 4c:1f:de:53:19:63:85:98:8c:56:35:87:7e:81:12:71:cd:de: ad:c0:fc:0d:3f:cb:a1:88:3c:c7:1a:13:57:4e:fe:34:47:d9: 8d:f0:24:ce:f5:a0:52:e1:c2:96:99:b0:fd:3f:84:5a:35:1d: 7f:a0:1b:e7:50:b2:17:28:ef:3b:04:46:95:e9:93:c3:2e:cf: 5e:07:49:a4:d2:69:c1:42:e8:da:69:69:45:a6:be:f3:95:97: 96:0e:43:48:08:78:c1:e3:30:95:54:20:69:69:1d:e8:e8:b2: 5c:dc:b1:7a:9f:01:5d:5e:a1:5a:40:29:73:b1:5c:50:cf:69: 78:d7:f5:8d:03:8f:87:3b:32:b1:6c:96:4b:32:e9:b2:0a:2e: fb:89:18:51:11:c9:0c:31:17:44:58:47:24:c7:7f:aa:a2:93: 11:ae:fc:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPW+krnn+R5KuQS7/BfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYzAyYWY0ZjU4ZjExMzIwYWYzMTk2OTQ2ZTFmY2U5ZDA1 MGM5MDYwHhcNMjUxMjIwMTcwMDUwWhcNMjUxMjIxMTcwMDUwWjAzMTEwLwYDVQQD Eyg5N2YwYzEyMDcxNjQ3OTRmYjc3NjBjOWQ0ZjUwN2VjZjk2MjYwYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNAvEdIpx6eaxnh5DVwIYNygPzsj ggHJbBSKAAj/1Awbx74uNFdzPrZcFlhLXwHivmX1/HKj6HcU8TE0Dlf3Un3DnBoz HxQtqIkOS9PoVo/1NbL5VMYL7C8WLcQQt4QEN1ljf1iX+6Ep7LbtlFiBx42jWoij 9Ab9EdchCJ5WB3ZConu3v8OdpK+4aVvUOWsSHJXoXNbVMdl8fEJqiRXz3Jg94zaC BTN4ErLD/+jxD91n8q6W9/0qSw5hZl7xWjZ5XEZpkuT7rf4sw4A32muzui6sGYte O8w1K5F7d103sUTnnK+tHej45Z8Av4HR15jbahpHFG9IupwmyXD69VSKIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfwwSBxZHlPt3YMnU9Qfs+WJgpWMB8GA1UdIwQY MBaAFCPAKvT1jxEyCvMZaUbh/OnQUMkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQt NjJjYjhhY2E5NjE4LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQtNjJjYjhhY2E5NjE4 LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS7ALXMj bp6CJjxssgm2oSDzBRB4D+Uhd0jKyyl8fV9mzWrXX0CKMfBZKIx7oL4YgHnjMOY7 JwPCsyAAn95totOkVDqciLOVeTcD+KuCnZYHmnB4v45jta27TB/eUxljhZiMVjWH foEScc3ercD8DT/LoYg8xxoTV07+NEfZjfAkzvWgUuHClpmw/T+EWjUdf6Ab51Cy FyjvOwRGlemTwy7PXgdJpNJpwULo2mlpRaa+85WXlg5DSAh4weMwlVQgaWkd6Oiy XNyxep8BXV6hWkApc7FcUM9peNf1jQOPhzsysWyWSzLpsgou+4kYURHJDDEXRFhH JMd/qqKTEa78Tw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:23 2025 by rpki-client