This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json) Hash identifier: 3lRIUXdaCnL+Hsd9SCvb1WmHcoEfh4311GdHV2V70lY= Subject key identifier: D7:88:CB:04:AA:A1:E3:57:86:5B:E6:2F:E9:E3:53:CD:B6:55:7A:C1 Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Certificate serial: 019B3F11DB29712D3373F965D18CC7167282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft Manifest number: 0237 Signing time: Sun 21 Dec 2025 04:01:33 +0000 Manifest this update: Sun 21 Dec 2025 04:01:33 +0000 Manifest next update: Mon 22 Dec 2025 04:01:33 +0000 Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=) 2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: pMLQBZuV2bD6/4AuSr8PKom6Z9e9ue95l0bTy8WJpBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:db:29:71:2d:33:73:f9:65:d1:8c:c7:16:72:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Validity Not Before: Dec 21 04:01:33 2025 GMT Not After : Dec 22 04:01:33 2025 GMT Subject: CN=d788cb04aaa1e357865be62fe9e353cdb6557ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:24:af:6c:83:93:4b:ef:e7:6c:26:e8:83: b1:53:ab:ed:15:22:8c:f8:2b:e2:17:ee:39:ce:ef: 77:21:f8:2e:ec:15:69:da:43:fa:4b:34:7d:13:72: de:0b:84:7c:ff:ec:f1:7c:10:cf:b7:5f:65:5c:a8: 74:14:46:be:75:44:fb:38:d6:5a:00:0b:c1:44:2f: 6c:3c:2b:a9:d3:eb:3b:8e:1a:23:35:b3:82:a4:62: 44:1b:73:7c:7e:22:70:eb:04:a5:9e:e0:be:a9:82: 12:35:78:27:00:a3:12:e0:3e:63:74:3b:17:05:95: 8a:f0:a6:40:bc:35:c9:14:17:94:a9:75:c0:4e:f9: 76:8a:f6:31:8b:27:19:2d:5a:28:b9:a1:f8:7d:b7: c8:53:8f:f4:95:de:1f:c0:51:72:7e:b0:3e:5f:1c: ae:7e:f5:61:01:ed:fb:44:ba:73:2f:e0:b4:f4:9d: d0:cc:fc:b6:b1:0b:a2:2f:02:99:e5:e8:44:aa:4b: 85:75:e5:c1:b4:e3:e1:af:63:be:70:31:42:2b:f5: b7:40:23:c4:21:b1:5a:25:7a:ca:cd:85:4e:e4:d0: 23:0e:ee:4b:c1:7e:db:d1:cf:cc:98:d1:f3:43:5c: f8:32:ee:94:bc:1a:d0:b4:04:28:98:a8:e3:bc:e1: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:88:CB:04:AA:A1:E3:57:86:5B:E6:2F:E9:E3:53:CD:B6:55:7A:C1 X509v3 Authority Key Identifier: keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d7:fe:eb:06:bb:63:fd:59:da:35:35:1e:eb:5e:ae:53:cf: 4a:8e:cb:37:3f:07:19:07:ca:bc:ed:22:e1:3b:2f:b7:a2:d3: 49:4f:af:dd:d4:62:3b:25:31:e7:2e:b1:b1:84:26:b2:5e:3d: 90:a9:ca:f1:7a:e4:61:8b:7f:00:04:ef:a6:4d:df:d8:4e:68: bb:2b:96:8f:c2:42:cb:68:19:75:36:14:25:65:03:e9:36:57: c3:5d:ef:25:11:73:81:d7:87:50:7e:b4:e7:6a:42:3c:cc:b5: 65:c6:85:6e:00:d5:92:60:b1:9d:5a:ac:3e:54:34:ef:d2:a8: ba:c7:8e:6e:87:87:c7:00:22:df:41:70:43:70:1a:d8:de:df: f1:de:22:55:fd:e4:fa:3d:dc:1d:d8:83:56:ca:29:b7:b7:81: 9b:19:7d:7d:67:78:7b:43:17:63:dd:fe:99:55:b6:4e:e6:b6: ca:b4:e6:6d:42:6e:8c:0d:54:d6:ad:97:f9:ef:53:13:9d:ba: f1:51:09:07:f7:0e:44:c3:0b:22:90:42:3b:6b:e8:a2:a0:cd: 35:b6:7b:e3:d9:b4:84:40:b5:be:dd:07:34:7a:5a:70:66:9e: 6d:af:4d:b3:96:19:41:57:5a:d4:a5:a7:2a:98:c0:f2:0b:81: 8e:e0:8f:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EdspcS0zc/ll0YzHFnKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5 ZDFiNTUwHhcNMjUxMjIxMDQwMTMzWhcNMjUxMjIyMDQwMTMzWjAzMTEwLwYDVQQD EyhkNzg4Y2IwNGFhYTFlMzU3ODY1YmU2MmZlOWUzNTNjZGI2NTU3YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy0kr2yDk0vv52wm6IOxU6vtFSKM +CviF+45zu93Ifgu7BVp2kP6SzR9E3LeC4R8/+zxfBDPt19lXKh0FEa+dUT7ONZa AAvBRC9sPCup0+s7jhojNbOCpGJEG3N8fiJw6wSlnuC+qYISNXgnAKMS4D5jdDsX BZWK8KZAvDXJFBeUqXXATvl2ivYxiycZLVoouaH4fbfIU4/0ld4fwFFyfrA+Xxyu fvVhAe37RLpzL+C09J3QzPy2sQuiLwKZ5ehEqkuFdeXBtOPhr2O+cDFCK/W3QCPE IbFaJXrKzYVO5NAjDu5LwX7b0c/MmNHzQ1z4Mu6UvBrQtAQomKjjvOFLhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeIywSqoeNXhlvmL+njU822VXrBMB8GA1UdIwQY MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddf+6wa7 Y/1Z2jU1HuterlPPSo7LNz8HGQfKvO0i4Tsvt6LTSU+v3dRiOyUx5y6xsYQmsl49 kKnK8XrkYYt/AATvpk3f2E5ouyuWj8JCy2gZdTYUJWUD6TZXw13vJRFzgdeHUH60 52pCPMy1ZcaFbgDVkmCxnVqsPlQ079KouseOboeHxwAi30FwQ3Aa2N7f8d4iVf3k +j3cHdiDVsopt7eBmxl9fWd4e0MXY93+mVW2Tua2yrTmbUJujA1U1q2X+e9TE526 8VEJB/cORMMLIpBCO2vooqDNNbZ749m0hEC1vt0HNHpacGaeba9Ns5YZQVda1KWn KpjA8guBjuCPlA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:27 2025 by rpki-client