This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json) Hash identifier: GOQfI9S8SOOF0RHyWbx55nY6qRDbJoqbOvzdlbofNbo= Subject key identifier: 40:C8:21:5E:0A:01:E7:0A:7E:49:CE:93:84:0D:38:6B:C4:5D:55:93 Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4 Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4 Certificate serial: 019B6A328B24A4922896F396F6925A0C394E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft Manifest number: 03A1 Signing time: Mon 29 Dec 2025 13:00:55 +0000 Manifest this update: Mon 29 Dec 2025 13:00:55 +0000 Manifest next update: Tue 30 Dec 2025 13:00:55 +0000 Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: aRb1eM00m9RBQSdeVfXe9MVCMovsSxmh/Pb/Frywc8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:8b:24:a4:92:28:96:f3:96:f6:92:5a:0c:39:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4 Validity Not Before: Dec 29 13:00:55 2025 GMT Not After : Dec 30 13:00:55 2025 GMT Subject: CN=40c8215e0a01e70a7e49ce93840d386bc45d5593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ed:be:1a:f9:9a:26:78:f8:48:46:9e:be:ed: 27:e7:6b:9b:e4:90:b3:d4:e0:dc:c7:60:6b:71:a0: 07:a4:ca:36:6c:e4:fb:61:7a:3c:b3:01:20:d7:66: 60:24:9c:99:f5:5d:30:57:91:5e:e3:96:05:30:ed: 10:15:ce:66:f3:15:c7:87:5d:95:cf:6c:01:bc:cd: 08:d5:67:dc:dc:47:63:00:f2:d2:53:9f:44:3c:21: ba:d8:53:72:16:67:db:f5:6e:ff:6d:42:7e:b9:79: b5:4e:20:4e:6a:68:81:e1:f3:2a:d4:da:c9:f5:73: 02:b2:53:ec:06:d1:ce:1c:ac:6d:97:46:39:87:79: 97:a8:de:5d:15:58:94:56:00:2a:ce:c9:cc:4f:05: 48:e3:b4:51:6a:34:70:a5:73:6b:1d:ac:8b:62:fe: 8b:b8:92:4f:06:d6:a8:01:f2:03:b3:ba:d7:59:66: b7:aa:ba:69:24:3c:e4:86:4d:97:94:33:42:c0:6a: 97:e8:98:ba:cd:94:70:49:c1:9c:45:65:08:3d:13: 72:0e:6f:94:70:ab:da:15:1a:a3:3e:0d:fb:00:07: d2:7c:f0:6e:2c:cd:14:68:a9:dc:fd:f4:40:02:d0: 06:6a:03:25:15:41:f2:d1:c6:6f:70:3e:ed:45:b5: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C8:21:5E:0A:01:E7:0A:7E:49:CE:93:84:0D:38:6B:C4:5D:55:93 X509v3 Authority Key Identifier: keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:dc:bb:e8:51:08:67:3b:80:48:10:a2:14:ed:71:73:7f:fb: 44:16:99:fc:a4:74:84:86:ed:89:30:af:61:f7:cf:3f:82:fb: 1b:eb:8f:af:80:b0:e7:fe:1a:b3:35:93:f3:22:47:5b:8e:20: 32:62:81:bf:55:af:e9:57:1b:dd:1a:a8:ef:b8:68:a1:0a:6a: 18:5f:fb:32:1c:fd:c2:34:c4:52:47:a0:7d:42:a4:b0:3f:9e: b4:52:c7:1f:38:10:ff:b3:ed:78:41:91:c7:fb:a9:aa:20:65: b1:a5:4f:0d:9d:5e:4d:ca:a5:e9:aa:e9:73:41:ff:91:83:6b: d9:a6:c5:0e:2e:d5:92:b7:c3:53:9b:a2:ce:95:90:3d:05:bd: 88:47:bb:03:59:ad:5f:41:b6:e3:ae:d7:19:f9:1e:c9:ce:66: da:a8:8b:f4:af:85:66:2f:4b:36:bf:9f:0b:60:11:fe:c9:a5: 0f:17:35:2f:65:08:3f:b6:24:94:c5:86:ec:15:ba:e7:15:17: db:f6:fc:bc:cb:00:14:f5:b8:31:57:f7:35:b5:f3:f4:35:34: 9b:ef:cd:5c:bf:d9:2a:0f:10:61:81:7b:eb:cf:04:5d:d3:d3: b8:1a:30:25:5b:e0:36:46:2c:cd:f2:20:5c:0f:ae:1b:cd:37: 9f:a6:f1:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMoskpJIolvOW9pJaDDlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx YmE3YzQwHhcNMjUxMjI5MTMwMDU1WhcNMjUxMjMwMTMwMDU1WjAzMTEwLwYDVQQD Eyg0MGM4MjE1ZTBhMDFlNzBhN2U0OWNlOTM4NDBkMzg2YmM0NWQ1NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e2+GvmaJnj4SEaevu0n52ub5JCz 1ODcx2BrcaAHpMo2bOT7YXo8swEg12ZgJJyZ9V0wV5Fe45YFMO0QFc5m8xXHh12V z2wBvM0I1Wfc3EdjAPLSU59EPCG62FNyFmfb9W7/bUJ+uXm1TiBOamiB4fMq1NrJ 9XMCslPsBtHOHKxtl0Y5h3mXqN5dFViUVgAqzsnMTwVI47RRajRwpXNrHayLYv6L uJJPBtaoAfIDs7rXWWa3qrppJDzkhk2XlDNCwGqX6Ji6zZRwScGcRWUIPRNyDm+U cKvaFRqjPg37AAfSfPBuLM0UaKnc/fRAAtAGagMlFUHy0cZvcD7tRbVlMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDIIV4KAecKfknOk4QNOGvEXVWTMB8GA1UdIwQY MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1 LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdy76FEI ZzuASBCiFO1xc3/7RBaZ/KR0hIbtiTCvYffPP4L7G+uPr4Cw5/4aszWT8yJHW44g MmKBv1Wv6Vcb3Rqo77hooQpqGF/7Mhz9wjTEUkegfUKksD+etFLHHzgQ/7PteEGR x/upqiBlsaVPDZ1eTcql6arpc0H/kYNr2abFDi7VkrfDU5uizpWQPQW9iEe7A1mt X0G2467XGfkeyc5m2qiL9K+FZi9LNr+fC2AR/smlDxc1L2UIP7YklMWG7BW65xUX 2/b8vMsAFPW4MVf3NbXz9DU0m+/NXL/ZKg8QYYF7688EXdPTuBowJVvgNkYszfIg XA+uG803n6bxjA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:38:59 2025 by rpki-client