This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json) Hash identifier: nm8Bx+0gdBHT+jSTaU/OGl9Un74pewuJ7xpE+Y9uyas= Subject key identifier: B9:4B:E1:C7:37:9B:CC:8E:D2:20:81:66:F1:37:50:C0:6C:69:34:FB Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Certificate serial: 019B6CC709D1235994F2A6D42B7CFEF0899E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft Manifest number: 0970 Signing time: Tue 30 Dec 2025 01:02:21 +0000 Manifest this update: Tue 30 Dec 2025 01:02:21 +0000 Manifest next update: Wed 31 Dec 2025 01:02:21 +0000 Files and hashes: 1: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (hash: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=) 2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: A1JHcZvvWnwcFTfqIf26zaPoYNUT7omMc7BL5tuWDhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c7:09:d1:23:59:94:f2:a6:d4:2b:7c:fe:f0:89:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Validity Not Before: Dec 30 01:02:21 2025 GMT Not After : Dec 31 01:02:21 2025 GMT Subject: CN=b94be1c7379bcc8ed2208166f13750c06c6934fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:08:1a:95:47:be:a9:a9:aa:b5:83:97:f8: 25:d0:e8:bd:e8:11:06:dd:d1:2e:03:20:f0:45:a4: 24:28:b8:2d:3f:c9:2c:de:7d:3e:ac:18:7e:48:ef: bf:52:81:86:6a:6e:bb:f6:3b:17:c3:d0:bc:5e:4c: c2:39:3e:5b:43:77:d8:12:93:13:d3:d7:9b:d4:b4: f7:5d:ed:ce:3b:1b:dd:61:24:07:9e:96:4b:8d:38: 20:61:b1:ed:e9:00:58:0a:20:15:f9:59:ff:6e:f1: 66:5c:77:01:0d:22:95:4d:7e:82:8e:4b:1f:06:6c: fa:0f:5f:77:47:84:90:3f:a5:24:86:41:64:39:6e: e8:88:28:ea:25:8e:df:45:95:93:28:49:4c:cf:51: c9:20:0d:a9:7c:88:f1:0b:c7:6c:61:58:9c:2c:a8: 2b:50:92:99:c9:f2:5f:1e:70:6e:a1:db:26:b3:7b: 6b:b2:4d:18:ee:f0:ba:0b:9c:be:da:aa:77:7f:19: bf:65:45:59:6e:7d:0c:08:8e:80:2e:4a:2d:0e:3e: f7:4f:6d:7a:93:f1:6a:c4:8a:0e:43:f9:6d:0a:01: 8b:19:99:55:12:d9:e0:8d:91:ae:21:7c:b0:05:bc: ad:ab:7d:12:60:d0:3c:d5:d8:81:76:4f:0e:9e:ea: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4B:E1:C7:37:9B:CC:8E:D2:20:81:66:F1:37:50:C0:6C:69:34:FB X509v3 Authority Key Identifier: keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6f:f3:ae:37:b5:94:56:b6:ff:10:eb:a6:7f:ce:1b:83:aa: 8e:ee:76:ec:a5:9e:30:72:9d:d6:9a:ff:ae:c7:74:07:f5:2a: f8:07:6b:50:42:0b:48:48:8c:bc:a6:cc:88:b2:3f:af:c5:0b: fa:8f:60:d1:70:bb:e7:dd:b0:47:62:13:72:39:f4:29:91:bd: 2c:b8:50:e1:b6:65:53:1e:63:37:0a:ac:cd:ca:74:25:aa:18: cc:25:dd:db:53:92:bb:85:e7:df:ab:75:a6:a6:54:36:73:a8: 8c:ce:aa:65:3e:b0:04:f7:eb:fd:74:ae:2b:2c:88:55:86:3c: ad:79:54:bd:2d:23:2c:fc:4e:58:0b:85:60:19:22:92:7d:42: 32:f6:04:81:73:35:f5:b2:0e:28:3a:46:8b:98:86:b7:70:d0: 98:a4:68:6d:0a:0b:c1:ae:ce:04:82:d1:95:41:43:0c:e5:01: 34:97:30:18:bf:7b:95:2d:ce:12:32:85:1c:83:35:c9:39:58: ff:aa:21:47:e8:48:b3:f4:9b:7b:d7:3f:66:aa:e3:4f:9c:af: 70:6e:2f:20:cb:f8:52:92:c6:6b:fe:7f:c0:78:12:cb:f3:b1: a1:58:fc:31:27:e1:9b:23:93:1c:5c:f3:44:d3:62:a0:1d:fd: 84:07:ce:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxwnRI1mU8qbUK3z+8ImeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh ZWRkYjMwHhcNMjUxMjMwMDEwMjIxWhcNMjUxMjMxMDEwMjIxWjAzMTEwLwYDVQQD EyhiOTRiZTFjNzM3OWJjYzhlZDIyMDgxNjZmMTM3NTBjMDZjNjkzNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOgIGpVHvqmpqrWDl/gl0Oi96BEG 3dEuAyDwRaQkKLgtP8ks3n0+rBh+SO+/UoGGam679jsXw9C8XkzCOT5bQ3fYEpMT 09eb1LT3Xe3OOxvdYSQHnpZLjTggYbHt6QBYCiAV+Vn/bvFmXHcBDSKVTX6Cjksf Bmz6D193R4SQP6UkhkFkOW7oiCjqJY7fRZWTKElMz1HJIA2pfIjxC8dsYVicLKgr UJKZyfJfHnBuodsms3trsk0Y7vC6C5y+2qp3fxm/ZUVZbn0MCI6ALkotDj73T216 k/FqxIoOQ/ltCgGLGZlVEtngjZGuIXywBbytq30SYNA81diBdk8OnuodyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlL4cc3m8yO0iCBZvE3UMBsaTT7MB8GA1UdIwQY MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt ZmVjNmMyNzAxZWRhLzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW/zrje1 lFa2/xDrpn/OG4Oqju527KWeMHKd1pr/rsd0B/Uq+AdrUEILSEiMvKbMiLI/r8UL +o9g0XC7592wR2ITcjn0KZG9LLhQ4bZlUx5jNwqszcp0JaoYzCXd21OSu4Xn36t1 pqZUNnOojM6qZT6wBPfr/XSuKyyIVYY8rXlUvS0jLPxOWAuFYBkikn1CMvYEgXM1 9bIOKDpGi5iGt3DQmKRobQoLwa7OBILRlUFDDOUBNJcwGL97lS3OEjKFHIM1yTlY /6ohR+hIs/Sbe9c/ZqrjT5yvcG4vIMv4UpLGa/5/wHgSy/OxoVj8MSfhmyOTHFzz RNNioB39hAfOrQ== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:41 2025 by rpki-client