This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft File: i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json) Hash identifier: sOwd5Ffpqv7n6A1BWIqWKVI6968VWTy4aGWse8ZXnqs= Subject key identifier: EF:BC:58:0C:70:BC:DC:00:1A:22:41:A5:7F:E1:6D:59:7B:BC:23:B2 Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23 Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123 Certificate serial: 019B3EDA2A0D414C2494AFB756312C415216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft Manifest number: 0FD6 Signing time: Sun 21 Dec 2025 03:00:43 +0000 Manifest this update: Sun 21 Dec 2025 03:00:43 +0000 Manifest next update: Mon 22 Dec 2025 03:00:43 +0000 Files and hashes: 1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=) 2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=) 3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: iNEVmLNlMDx4jp3KQp+19sxg8o7rQ5D7sUa0bvqwLlA=) 4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:2a:0d:41:4c:24:94:af:b7:56:31:2c:41:52:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123 Validity Not Before: Dec 21 03:00:43 2025 GMT Not After : Dec 22 03:00:43 2025 GMT Subject: CN=efbc580c70bcdc001a2241a57fe16d597bbc23b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:00:df:5f:0a:52:fc:cd:78:ef:84:f0:71: 3c:0a:a7:25:f7:88:1a:ec:1b:41:52:0a:b6:82:90: 18:66:89:fb:4a:d2:81:72:d3:25:92:ea:c9:d8:e8: 56:82:97:e1:81:7b:96:fc:3d:4e:c5:ed:e1:8b:24: fe:72:33:16:a8:6b:e6:21:80:5e:2a:d8:be:f9:3c: df:d1:43:d5:da:a1:38:7f:c7:36:7b:96:bc:0c:65: 2d:bd:35:1e:02:4c:24:7c:a5:41:49:cc:3d:f5:ba: d3:39:0e:92:ad:ba:56:73:7e:e4:4d:22:62:f1:f2: 2a:b9:db:3c:c4:d0:9b:58:bb:1b:00:fb:c5:de:de: 4b:10:dc:ac:9f:c8:07:27:b5:d3:ad:3d:f7:a1:bb: 35:49:18:45:e8:d8:2a:a7:a7:c8:b5:1e:9b:ee:9a: ef:0a:cb:47:d4:25:1c:ac:09:1b:8f:4b:47:40:26: 80:c5:a6:b4:ed:28:6f:e2:9f:41:6f:63:53:af:cc: c3:09:d1:26:98:85:59:61:d5:69:fa:90:be:ec:e3: a3:ab:73:e3:18:f6:ce:13:b5:a8:54:7b:a5:34:f4: e4:95:79:9c:c2:b7:ca:b6:88:09:4c:67:b9:49:bd: 32:32:c2:d9:c7:cf:b2:92:96:ca:f7:d1:a5:3e:52: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BC:58:0C:70:BC:DC:00:1A:22:41:A5:7F:E1:6D:59:7B:BC:23:B2 X509v3 Authority Key Identifier: keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:18:1e:85:3b:e9:d3:96:0d:b1:d8:b6:86:ea:96:16:3c:6c: fa:1f:b8:94:21:e8:04:9c:a0:14:2e:6c:e0:2f:23:f3:f5:16: c8:04:35:4f:7d:88:80:f2:e2:ae:e1:f3:8a:6c:49:be:d1:21: e3:e6:f2:40:b4:b2:74:b4:2a:29:03:52:49:79:cb:4d:55:b4: d1:9b:22:38:ed:cc:76:cb:04:7c:79:02:a7:4a:96:ce:58:f2: c5:4b:32:3e:74:e1:83:93:05:95:c3:6c:1a:22:a7:90:64:4e: 60:0a:03:61:9a:ef:3a:66:00:5d:22:75:bb:d9:55:6a:19:2b: d7:ec:f3:0f:5a:0b:70:28:82:08:77:38:d1:21:9b:28:41:a0: 13:bb:58:26:1a:a7:df:e2:c5:4f:1b:3b:cf:b5:f1:fb:9b:85: e8:e2:e4:a3:80:f5:ea:ca:45:01:c9:7e:c6:6b:c2:d2:f8:67: 27:02:f2:32:7e:8d:0b:da:86:49:e6:83:e6:f7:ae:c5:2d:86: 19:3e:49:ff:47:7b:c8:e3:f9:d2:51:22:cd:2b:a3:41:c5:bc: 77:09:6d:e1:42:f3:0e:04:70:63:44:ad:9d:d9:67:d7:c9:6c: dc:0f:9c:e9:63:7e:0d:6a:79:c2:05:6a:0b:82:3a:28:21:50: b4:c9:aa:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2ioNQUwklK+3VjEsQVIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWIwMTYzZWVlOWU3OTJhYWExNmI3ZDUxMDVkMzQ3MjEx ZjMxMjMwHhcNMjUxMjIxMDMwMDQzWhcNMjUxMjIyMDMwMDQzWjAzMTEwLwYDVQQD EyhlZmJjNTgwYzcwYmNkYzAwMWEyMjQxYTU3ZmUxNmQ1OTdiYmMyM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9QA318KUvzNeO+E8HE8Cqcl94ga 7BtBUgq2gpAYZon7StKBctMlkurJ2OhWgpfhgXuW/D1Oxe3hiyT+cjMWqGvmIYBe Kti++Tzf0UPV2qE4f8c2e5a8DGUtvTUeAkwkfKVBScw99brTOQ6SrbpWc37kTSJi 8fIquds8xNCbWLsbAPvF3t5LENysn8gHJ7XTrT33obs1SRhF6Ngqp6fItR6b7prv CstH1CUcrAkbj0tHQCaAxaa07Shv4p9Bb2NTr8zDCdEmmIVZYdVp+pC+7OOjq3Pj GPbOE7WoVHulNPTklXmcwrfKtogJTGe5Sb0yMsLZx8+ykpbK99GlPlJ7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+8WAxwvNwAGiJBpX/hbVl7vCOyMB8GA1UdIwQY MBaAFIubAWPu6eeSqqFrfVEF00chHzEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUt NDFiMjY2MDdiZjM2LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUtNDFiMjY2MDdiZjM2 LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphgehTvp 05YNsdi2huqWFjxs+h+4lCHoBJygFC5s4C8j8/UWyAQ1T32IgPLiruHzimxJvtEh 4+byQLSydLQqKQNSSXnLTVW00ZsiOO3MdssEfHkCp0qWzljyxUsyPnThg5MFlcNs GiKnkGROYAoDYZrvOmYAXSJ1u9lVahkr1+zzD1oLcCiCCHc40SGbKEGgE7tYJhqn 3+LFTxs7z7Xx+5uF6OLko4D16spFAcl+xmvC0vhnJwLyMn6NC9qGSeaD5veuxS2G GT5J/0d7yOP50lEizSujQcW8dwlt4ULzDgRwY0Stndln18ls3A+c6WN+DWp5wgVq C4I6KCFQtMmqzA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:16:57 2025 by rpki-client