This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft File: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json) Hash identifier: zVF9wxD6elonG9kQYfsm+2ru4Gc4uHX5iiaweg1k4jw= Subject key identifier: A4:A1:12:16:98:9E:F6:EA:93:4C:4D:91:A2:FC:BC:84:29:80:59:89 Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7 Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7 Certificate serial: 019B2F679ED110502F06BFCF02A2A38B5D77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 03:01:18 +0000 Manifest this update: Thu 18 Dec 2025 03:01:18 +0000 Manifest next update: Fri 19 Dec 2025 03:01:18 +0000 Files and hashes: 1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: ae/YGIkFrpmqtODBuv7ciUpRYyYNQlr4lETfuf1pAYk=) 2: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (hash: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:9e:d1:10:50:2f:06:bf:cf:02:a2:a3:8b:5d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7 Validity Not Before: Dec 18 03:01:18 2025 GMT Not After : Dec 19 03:01:18 2025 GMT Subject: CN=a4a11216989ef6ea934c4d91a2fcbc8429805989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:78:3a:16:9b:d4:33:5c:87:30:de:93:1d: 9b:cb:07:0c:21:a3:27:35:68:c4:63:1d:bf:fa:89: b6:0a:da:00:3c:aa:6e:67:a5:af:bf:30:70:ba:43: 25:01:b8:d0:a3:6d:08:f6:34:62:a6:5a:7d:67:0a: 67:85:db:c9:01:da:8c:66:43:e4:72:fb:29:38:5b: 6f:03:28:a1:0b:f4:1b:5a:40:a9:09:09:99:96:ac: d8:53:f0:e0:ae:1f:83:1c:e5:e7:87:ae:be:2c:51: a2:aa:8c:41:69:c0:00:f5:e7:82:6b:0e:d8:e9:cd: 2b:b8:9a:3e:29:61:9a:b4:a2:04:57:42:02:90:c4: c9:65:c6:27:f3:10:db:23:fd:1f:3d:98:d2:d8:1d: 85:8a:20:73:1f:f0:3a:00:a0:1e:c8:a0:96:67:03: 0e:10:0f:df:52:61:dd:7b:66:84:91:72:b6:40:9e: 86:84:30:96:5b:a0:58:d9:f4:bc:5d:17:95:7a:d4: 1c:a9:8e:09:a2:90:0b:1d:60:dc:9a:21:63:99:96: e6:2c:7a:d5:c1:d6:cd:c6:46:1e:c7:75:46:90:34: b6:44:f7:0f:d6:7b:c4:45:e7:d4:09:10:58:b6:47: 57:6a:ec:88:40:f1:3b:7d:c0:1c:a0:d1:6c:58:ca: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A1:12:16:98:9E:F6:EA:93:4C:4D:91:A2:FC:BC:84:29:80:59:89 X509v3 Authority Key Identifier: keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:df:3d:07:fa:11:1f:ec:8f:b4:97:f9:dc:6c:f6:a1:cc:03: a9:43:9d:08:c9:fb:17:74:14:19:b2:b9:dd:00:3a:80:f4:4e: fc:9d:4a:1a:aa:36:2e:d9:e2:27:ff:7e:32:65:11:42:d9:e8: 4e:0a:89:6f:b6:9b:6f:b2:cf:f3:2d:dd:c5:75:ad:f5:68:69: d8:fd:06:46:21:fb:dc:71:76:f5:21:d1:d0:4f:bf:4a:04:5b: 88:83:34:9b:a0:8a:07:69:fc:3c:33:f5:0f:3b:6c:aa:f0:6c: d2:f8:a8:72:a8:43:63:ea:d0:8d:c7:bb:27:29:0c:a4:aa:e2: 58:95:de:7f:5f:e6:e6:20:b6:b9:8c:00:66:00:76:6e:a4:a6: f4:b6:b4:58:15:19:3e:13:ee:4d:a4:ad:98:0e:45:f6:c9:68: 9d:26:b0:95:c1:b5:9a:70:05:72:99:94:d0:b6:40:13:ea:2e: e1:a8:f1:bf:a6:0d:bd:eb:72:5c:70:bd:89:7f:d0:42:77:27: 70:10:e3:d8:9c:0a:43:93:e1:eb:eb:a6:40:f1:d6:d7:26:41: 46:de:8b:86:2c:ea:a1:e0:5c:ba:9c:5d:e2:8f:97:4c:aa:8a: f0:e6:b8:4b:dc:80:60:95:0a:e5:be:31:69:28:24:5b:b5:4c: 94:46:4a:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ57REFAvBr/PAqKji113MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTQyNDk3OTcwZDY1NTQxZGRiMTU5NjU4ZTNiMGE2ZTJm NTE2YjcwHhcNMjUxMjE4MDMwMTE4WhcNMjUxMjE5MDMwMTE4WjAzMTEwLwYDVQQD EyhhNGExMTIxNjk4OWVmNmVhOTM0YzRkOTFhMmZjYmM4NDI5ODA1OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJV4Ohab1DNchzDekx2bywcMIaMn NWjEYx2/+om2CtoAPKpuZ6WvvzBwukMlAbjQo20I9jRiplp9ZwpnhdvJAdqMZkPk cvspOFtvAyihC/QbWkCpCQmZlqzYU/Dgrh+DHOXnh66+LFGiqoxBacAA9eeCaw7Y 6c0ruJo+KWGatKIEV0ICkMTJZcYn8xDbI/0fPZjS2B2FiiBzH/A6AKAeyKCWZwMO EA/fUmHde2aEkXK2QJ6GhDCWW6BY2fS8XReVetQcqY4JopALHWDcmiFjmZbmLHrV wdbNxkYex3VGkDS2RPcP1nvERefUCRBYtkdXauyIQPE7fcAcoNFsWMpKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKShEhaYnvbqk0xNkaL8vIQpgFmJMB8GA1UdIwQY MBaAFCOkJJeXDWVUHdsVlljjsKbi9Ra3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iYTI4NTctYzA5OC00NGQyLTljMDEt ZTcyMGZlYjEwMTAzLzEvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9iYTI4NTctYzA5OC00NGQyLTljMDEtZTcyMGZlYjEwMTAz LzEvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW989B/oR H+yPtJf53Gz2ocwDqUOdCMn7F3QUGbK53QA6gPRO/J1KGqo2LtniJ/9+MmURQtno TgqJb7abb7LP8y3dxXWt9Whp2P0GRiH73HF29SHR0E+/SgRbiIM0m6CKB2n8PDP1 DztsqvBs0viocqhDY+rQjce7JykMpKriWJXef1/m5iC2uYwAZgB2bqSm9La0WBUZ PhPuTaStmA5F9slonSawlcG1mnAFcpmU0LZAE+ou4ajxv6YNvetyXHC9iX/QQncn cBDj2JwKQ5Ph6+umQPHW1yZBRt6LhizqoeBcupxd4o+XTKqK8Oa4S9yAYJUK5b4x aSgkW7VMlEZKTQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:24:04 2025 by rpki-client