This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft File: I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json) Hash identifier: c5o87gFQnEoeKISeo1fUCL8iUDSlddtS5RG7xPgwl8M= Subject key identifier: 75:E8:E0:76:B7:50:30:62:FA:E7:43:C0:1E:A3:6B:8E:C2:16:30:DC Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39 Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39 Certificate serial: 019B481603DD3BBA2657A856686B1471F99F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft Manifest number: 1794 Signing time: Mon 22 Dec 2025 22:02:40 +0000 Manifest this update: Mon 22 Dec 2025 22:02:40 +0000 Manifest next update: Tue 23 Dec 2025 22:02:40 +0000 Files and hashes: 1: 0w9FBc0vTYSPsjAWKJJCnffXw-k.roa (hash: jLDk0IcPs8Pb9A807RQu6H+l6FnV9GFyw8DjOzzYbaA=) 2: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: 8pFsW+dRR8nBiGK8OMEK0Tj0c0q32Y6vyVRo1DoS9HA=) 3: gKeAQqo6LHoqnf4Vl-8HYj5MieI.roa (hash: SOGNQLrBgWGkjZGYc/wKjLGsnvGnOrdebSHsTRsYQCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:03:dd:3b:ba:26:57:a8:56:68:6b:14:71:f9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39 Validity Not Before: Dec 22 22:02:40 2025 GMT Not After : Dec 23 22:02:40 2025 GMT Subject: CN=75e8e076b7503062fae743c01ea36b8ec21630dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:89:cd:d9:e5:3c:36:a5:30:76:18:49:7e: 06:39:d7:2b:1c:72:64:31:ac:37:d5:54:5b:fd:d1: 4c:dc:ac:11:c0:78:78:05:33:f5:f8:bc:49:82:24: 9e:12:be:81:27:f3:06:ac:f2:fe:13:27:f7:ce:b1: cd:e2:08:ee:44:6b:bc:e3:ad:0e:d2:5e:f7:97:13: 62:79:d3:d1:76:6b:15:52:ba:12:4c:ed:6a:6e:37: 4d:05:e4:db:f8:39:80:f3:09:5d:b6:1f:50:b2:30: 44:d1:28:fc:e0:2f:c3:56:e1:79:30:e8:c8:21:aa: b9:da:4c:0a:3e:a7:58:0d:3a:a7:7c:56:95:0b:ed: 4b:01:72:22:1a:ee:31:e7:50:79:75:68:ed:2c:9e: cf:e8:09:69:e2:c0:4e:24:67:37:0e:c0:3b:9b:d4: cb:dd:26:99:7f:07:25:30:1d:ea:1a:e3:b4:73:83: 89:dd:13:ed:98:c1:a6:43:b8:9b:af:66:a6:62:c4: c6:a2:db:d9:4a:5c:b3:5a:41:68:44:f1:dd:5d:99: 28:83:3d:d2:ec:40:6f:a8:3e:e9:c0:49:a4:b6:28: bd:ae:61:39:4c:bd:0d:37:7c:04:3e:b1:85:70:39: f9:94:a6:b5:bf:5c:f4:2c:f6:81:51:3f:d9:4b:50: f0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E8:E0:76:B7:50:30:62:FA:E7:43:C0:1E:A3:6B:8E:C2:16:30:DC X509v3 Authority Key Identifier: keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:71:bd:e6:62:1e:03:4e:1d:38:0d:be:f1:78:8c:9e:45: 54:d6:8c:38:0f:ba:5d:8b:04:e9:08:86:ce:ff:c6:81:5f:4b: ed:ec:e5:dd:00:56:a7:57:bd:d9:0c:ce:49:4a:15:ba:22:86: be:65:e5:37:13:1d:cd:77:a7:06:dd:00:0c:f4:fd:17:c3:d0: 2d:b9:76:b5:3c:34:a8:3e:3e:85:10:05:21:4e:c5:c5:0f:22: 22:ee:43:dd:ad:4a:a9:55:f8:6a:28:61:31:2d:d2:57:01:1f: 52:ba:89:e6:e6:d8:9c:82:83:54:83:1b:df:69:e4:4c:96:a1: b3:97:b4:f4:b9:f4:46:bb:98:a5:f8:0b:11:da:23:95:8f:bf: e0:eb:2d:96:28:c5:73:22:15:1b:dc:61:81:96:5d:33:4f:22: 77:39:f6:35:bb:84:0d:37:65:b3:15:46:f7:a7:ec:c5:3f:d2: 62:b6:06:bf:25:3d:ac:2e:18:3f:21:a0:84:37:bf:c1:4e:59: 3d:6a:7e:9a:a0:96:52:2b:77:ba:7d:55:2d:51:b9:45:3c:2f: 43:d0:81:d7:aa:68:1c:c7:e1:b5:07:43:d2:2c:c5:10:a1:66: a2:72:ea:0d:92:3d:29:3b:2a:73:22:20:79:d4:c8:e4:89:88: 12:e2:2a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFgPdO7omV6hWaGsUcfmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNTE2M2QzOWRiODg4MTZjZGRjNTk3YTVkYjVlYWU3MDdk M2RlMzkwHhcNMjUxMjIyMjIwMjQwWhcNMjUxMjIzMjIwMjQwWjAzMTEwLwYDVQQD Eyg3NWU4ZTA3NmI3NTAzMDYyZmFlNzQzYzAxZWEzNmI4ZWMyMTYzMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr2JzdnlPDalMHYYSX4GOdcrHHJk Maw31VRb/dFM3KwRwHh4BTP1+LxJgiSeEr6BJ/MGrPL+Eyf3zrHN4gjuRGu8460O 0l73lxNiedPRdmsVUroSTO1qbjdNBeTb+DmA8wldth9QsjBE0Sj84C/DVuF5MOjI Iaq52kwKPqdYDTqnfFaVC+1LAXIiGu4x51B5dWjtLJ7P6Alp4sBOJGc3DsA7m9TL 3SaZfwclMB3qGuO0c4OJ3RPtmMGmQ7ibr2amYsTGotvZSlyzWkFoRPHdXZkogz3S 7EBvqD7pwEmktii9rmE5TL0NN3wEPrGFcDn5lKa1v1z0LPaBUT/ZS1DwjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXo4Ha3UDBi+udDwB6ja47CFjDcMB8GA1UdIwQY MBaAFCNRY9OduIgWzdxZel216ucH0945MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgt OTE1MDI5NmRhYTBhLzEvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgtOTE1MDI5NmRhYTBh LzEvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFFxveZi HgNOHTgNvvF4jJ5FVNaMOA+6XYsE6QiGzv/GgV9L7ezl3QBWp1e92QzOSUoVuiKG vmXlNxMdzXenBt0ADPT9F8PQLbl2tTw0qD4+hRAFIU7FxQ8iIu5D3a1KqVX4aihh MS3SVwEfUrqJ5ubYnIKDVIMb32nkTJahs5e09Ln0RruYpfgLEdojlY+/4OstlijF cyIVG9xhgZZdM08idzn2NbuEDTdlsxVG96fsxT/SYrYGvyU9rC4YPyGghDe/wU5Z PWp+mqCWUit3un1VLVG5RTwvQ9CB16poHMfhtQdD0izFEKFmonLqDZI9KTsqcyIg edTI5ImIEuIqtg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:37 2025 by rpki-client