This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json) Hash identifier: uIj8MgGitiLlYaUvNC4gQhmrVQ4RjR0UahLEjBtd7f0= Subject key identifier: 6B:62:B6:F3:16:31:2E:E6:DE:D8:14:62:04:93:AF:18:17:45:1A:3A Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10 Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510 Certificate serial: 019B5DC095332843BF7FE21A6570203C1B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft Manifest number: 0625 Signing time: Sat 27 Dec 2025 03:01:00 +0000 Manifest this update: Sat 27 Dec 2025 03:01:00 +0000 Manifest next update: Sun 28 Dec 2025 03:01:00 +0000 Files and hashes: 1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=) 2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: BwHjaWhM5mWTf9xMVpvE9rP3A1EkqFMRAgmhYZhIvmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:95:33:28:43:bf:7f:e2:1a:65:70:20:3c:1b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510 Validity Not Before: Dec 27 03:01:00 2025 GMT Not After : Dec 28 03:01:00 2025 GMT Subject: CN=6b62b6f316312ee6ded814620493af1817451a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:4d:e9:47:a7:a7:6a:41:6a:a8:dc:21:2c: 80:99:b6:18:93:e9:47:cc:5c:10:d1:bb:71:17:fd: 65:54:e0:ed:56:49:61:0f:b6:a2:a1:f7:1d:99:60: 56:8a:f6:73:bb:62:71:a2:d5:63:4c:63:af:7e:e2: f5:10:0e:ca:99:70:01:16:b7:36:7d:65:22:c0:2e: 0e:5b:04:55:6a:89:12:cc:c9:72:ba:c0:4e:4b:13: 06:0d:ae:39:0e:6d:0a:fd:ed:e9:00:75:e5:d9:20: 65:84:eb:2e:3a:70:0a:fd:30:0e:51:c4:3b:af:2c: fd:a2:26:23:fe:a4:c7:1b:e5:4e:ca:01:75:99:8d: 6f:b2:a3:f8:2c:54:28:c5:b4:e7:21:a7:9f:e2:80: d4:fb:bf:40:94:25:9b:f4:d1:36:0e:2b:f7:91:3b: 07:6f:bf:2f:3e:e9:d7:9a:a2:44:f8:00:96:5a:0c: 3f:c9:91:42:4f:19:b7:f6:d2:48:79:58:54:b5:44: c9:9e:44:94:49:bf:5e:0f:b8:8a:7a:ef:64:68:1b: bc:a3:e3:67:20:48:6b:04:13:68:e8:a2:96:4e:50: 61:40:f9:da:a9:25:72:54:3f:ae:2f:17:02:7a:de: 5a:a1:73:37:99:d6:99:7c:54:c7:70:3d:75:39:cb: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:62:B6:F3:16:31:2E:E6:DE:D8:14:62:04:93:AF:18:17:45:1A:3A X509v3 Authority Key Identifier: keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:54:2c:cc:19:2a:10:19:77:4b:f5:7c:42:75:62:c0:94:b5: 74:a7:f9:15:e0:45:e0:47:6a:8a:e2:02:14:e0:c8:4a:ce:28: 1b:68:dc:70:fa:9e:2f:de:c1:52:e4:be:3a:fb:3f:df:67:b4: 87:28:26:21:f6:3a:3b:8e:47:db:01:49:9c:fa:68:b2:23:86: 99:35:6e:5d:04:c8:c8:48:87:82:70:7a:4a:7c:00:bb:b3:59: 81:dc:de:f5:73:de:09:d1:1a:49:d1:67:f0:75:51:f0:70:d5: 78:3f:4d:06:aa:02:25:5f:6e:63:23:72:7e:20:ca:ff:c9:32: 68:e9:0b:2a:94:3f:49:ba:93:6f:cf:58:a6:3f:c9:92:11:0c: a4:47:62:e4:87:a7:c9:b6:56:f5:c1:73:b0:ca:97:1c:64:2d: 21:fa:c1:ec:49:ae:a8:d7:65:82:94:2f:7e:b9:e6:48:bd:35: b4:8c:87:6f:9b:65:0b:91:e2:6e:3b:8b:aa:07:1b:18:55:f2: 09:9b:07:e1:b9:06:58:c7:ce:a5:67:ba:ab:70:38:31:d3:6f: f2:34:86:07:3d:a6:fb:8b:85:f9:34:74:a2:c3:f6:90:c3:c3: 36:09:ce:4b:5e:b9:e8:c0:82:54:08:d4:6f:84:10:8f:96:a8: 72:22:79:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwJUzKEO/f+IaZXAgPBszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2Q5N2YxNTA4ZTdhNDQ3ODk5ZjU5YTU1ZmI4YWE2MjQx ZWY1MTAwHhcNMjUxMjI3MDMwMTAwWhcNMjUxMjI4MDMwMTAwWjAzMTEwLwYDVQQD Eyg2YjYyYjZmMzE2MzEyZWU2ZGVkODE0NjIwNDkzYWYxODE3NDUxYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiVN6Uenp2pBaqjcISyAmbYYk+lH zFwQ0btxF/1lVODtVklhD7aiofcdmWBWivZzu2JxotVjTGOvfuL1EA7KmXABFrc2 fWUiwC4OWwRVaokSzMlyusBOSxMGDa45Dm0K/e3pAHXl2SBlhOsuOnAK/TAOUcQ7 ryz9oiYj/qTHG+VOygF1mY1vsqP4LFQoxbTnIaef4oDU+79AlCWb9NE2Div3kTsH b78vPunXmqJE+ACWWgw/yZFCTxm39tJIeVhUtUTJnkSUSb9eD7iKeu9kaBu8o+Nn IEhrBBNo6KKWTlBhQPnaqSVyVD+uLxcCet5aoXM3mdaZfFTHcD11Ocs5MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtitvMWMS7m3tgUYgSTrxgXRRo6MB8GA1UdIwQY MBaAFCN9l/FQjnpEeJn1mlX7iqYkHvUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYt NDRhNDFhOTMxMTNlLzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYtNDRhNDFhOTMxMTNl LzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1QszBkq EBl3S/V8QnViwJS1dKf5FeBF4EdqiuICFODISs4oG2jccPqeL97BUuS+Ovs/32e0 hygmIfY6O45H2wFJnPposiOGmTVuXQTIyEiHgnB6SnwAu7NZgdze9XPeCdEaSdFn 8HVR8HDVeD9NBqoCJV9uYyNyfiDK/8kyaOkLKpQ/SbqTb89Ypj/JkhEMpEdi5Ien ybZW9cFzsMqXHGQtIfrB7EmuqNdlgpQvfrnmSL01tIyHb5tlC5HibjuLqgcbGFXy CZsH4bkGWMfOpWe6q3A4MdNv8jSGBz2m+4uF+TR0osP2kMPDNgnOS1656MCCVAjU b4QQj5aociJ5oA== -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:41 2025 by rpki-client