This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json) Hash identifier: xLXaoC8r4jZf7lRFjrZ++oZAy7vbVGsOThKYkNxgwLg= Subject key identifier: 78:7E:13:06:F7:D0:F7:D6:24:C6:B1:6E:DE:9B:21:48:3C:60:30:1C Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019B3CB4B882171CF6A57D4E5B39CAC713DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft Manifest number: 14BF Signing time: Sat 20 Dec 2025 17:00:35 +0000 Manifest this update: Sat 20 Dec 2025 17:00:35 +0000 Manifest next update: Sun 21 Dec 2025 17:00:35 +0000 Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: CNwEZtPZnfld6UpDNjCQY47oCafQrtPXaPJnxsgvll4=) 2: dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa (hash: Apxi4HVF9cbEKfl01+GMULsLDvfabVWHAPxCuePrSkA=) 3: dkb5gZIob1tpW-aZ36OG6g6eqVg.roa (hash: 6qmzftK2St+wbMPcDJN5VBpBK/rYP12e7Qen5uHlL/g=) 4: mgi-sHB9BvG_JhGVaolwV53PdcI.roa (hash: Mp5ienel094fK7II/BeJb819aKnF3b9Sr1dy+H9Nl2U=) 5: rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa (hash: kAqEU3AZtb+qAVPxKeiCoJPu2fI++dhercqPaQVS1jY=) 6: vAX6cMjo8la6961Io6NKSibrpLs.roa (hash: QGc4CY1otQW+SDtxZLvjRsQAMwHLQ4AN0c1HPwQX50Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b8:82:17:1c:f6:a5:7d:4e:5b:39:ca:c7:13:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Dec 20 17:00:35 2025 GMT Not After : Dec 21 17:00:35 2025 GMT Subject: CN=787e1306f7d0f7d624c6b16ede9b21483c60301c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:2b:99:f3:23:69:f9:df:fa:54:d2:de:78: 90:18:82:85:7e:fe:a7:4d:d3:fe:39:e9:41:b8:9d: 24:1d:b0:4a:5d:c0:5d:21:77:69:5e:9a:de:92:af: 8c:2f:e2:2c:66:bd:38:27:9c:7d:34:f0:7a:97:e8: 58:2b:b2:b6:43:34:6a:d1:ce:23:a8:a9:5b:d9:28: 09:42:f8:24:7f:26:80:e9:a3:74:5f:43:27:7d:44: da:27:3d:47:5e:e6:c4:0b:62:2a:16:ed:35:40:d8: 4c:06:56:56:b7:b5:30:9f:bb:7f:df:59:5f:10:59: 9e:c7:d2:91:da:f1:22:ae:d1:2c:9d:33:21:c7:45: a7:4f:e6:d7:9e:9b:00:cb:d0:35:ca:f4:37:56:37: 20:7a:a9:74:d0:d1:2f:9e:ac:a3:15:09:02:45:f5: 71:8f:93:ad:44:47:14:ff:c5:eb:d4:aa:66:ee:aa: aa:71:6d:89:c3:2d:5f:ea:8e:aa:8c:62:e9:47:e0: 07:21:76:69:b7:9d:84:0a:18:2a:28:36:70:7d:fa: 53:21:09:91:08:d3:39:98:50:75:4d:8a:14:3f:53: 8b:4b:24:50:68:fe:98:b0:2a:a0:a3:4c:26:93:6a: 5c:d2:9e:78:e0:4a:7c:06:cd:76:fc:f3:f8:e5:bb: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7E:13:06:F7:D0:F7:D6:24:C6:B1:6E:DE:9B:21:48:3C:60:30:1C X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:cb:0b:37:47:ba:94:d1:ea:eb:09:b6:7d:41:ec:85:ec:3d: 90:11:06:2a:2f:ce:fc:44:a0:ab:94:ff:a6:72:c7:02:76:58: a0:85:1f:ad:38:bf:9b:df:ec:aa:63:8f:2c:58:07:0e:c4:20: 02:35:73:21:1c:11:d2:d0:f8:ac:40:c0:2f:5e:99:e6:56:2d: c4:56:16:13:18:e6:cd:14:18:9d:b4:5e:58:77:87:7a:2d:2b: 6e:e9:15:71:c2:d2:d0:be:f3:b5:91:fa:f2:e3:4e:01:17:25: 36:cd:65:7a:cb:94:7b:05:85:8f:2b:03:86:4d:ab:35:8b:9a: 30:b4:19:ca:70:5a:09:22:e6:68:68:be:c1:41:ce:5b:3e:1e: e0:cb:dc:90:6a:95:fd:6f:2c:a2:6d:6e:a9:2b:95:e3:20:3b: 3d:e0:00:11:fe:72:d4:cf:8d:17:e8:d6:3c:33:e3:bd:86:e1: 0a:c8:7a:0a:8b:dc:11:bd:70:a0:75:00:9e:92:bc:c2:ad:bc: 84:76:7d:de:ab:82:c4:b4:f4:ad:94:19:7d:6c:75:ba:19:06: e2:9d:89:e3:08:d8:44:d6:b2:da:e6:bb:0e:50:14:fe:55:26: 42:98:37:1f:06:31:d3:bd:85:f5:d6:15:91:3e:65:5f:6d:3b: 3f:6a:c7:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLiCFxz2pX1OWznKxxPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjUxMjIwMTcwMDM1WhcNMjUxMjIxMTcwMDM1WjAzMTEwLwYDVQQD Eyg3ODdlMTMwNmY3ZDBmN2Q2MjRjNmIxNmVkZTliMjE0ODNjNjAzMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/srmfMjafnf+lTS3niQGIKFfv6n TdP+OelBuJ0kHbBKXcBdIXdpXprekq+ML+IsZr04J5x9NPB6l+hYK7K2QzRq0c4j qKlb2SgJQvgkfyaA6aN0X0MnfUTaJz1HXubEC2IqFu01QNhMBlZWt7Uwn7t/31lf EFmex9KR2vEirtEsnTMhx0WnT+bXnpsAy9A1yvQ3Vjcgeql00NEvnqyjFQkCRfVx j5OtREcU/8Xr1Kpm7qqqcW2Jwy1f6o6qjGLpR+AHIXZpt52EChgqKDZwffpTIQmR CNM5mFB1TYoUP1OLSyRQaP6YsCqgo0wmk2pc0p544Ep8Bs12/PP45buPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh+Ewb30PfWJMaxbt6bIUg8YDAcMB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8sLN0e6 lNHq6wm2fUHshew9kBEGKi/O/ESgq5T/pnLHAnZYoIUfrTi/m9/sqmOPLFgHDsQg AjVzIRwR0tD4rEDAL16Z5lYtxFYWExjmzRQYnbReWHeHei0rbukVccLS0L7ztZH6 8uNOARclNs1lesuUewWFjysDhk2rNYuaMLQZynBaCSLmaGi+wUHOWz4e4MvckGqV /W8som1uqSuV4yA7PeAAEf5y1M+NF+jWPDPjvYbhCsh6CovcEb1woHUAnpK8wq28 hHZ93quCxLT0rZQZfWx1uhkG4p2J4wjYRNay2ua7DlAU/lUmQpg3HwYx072F9dYV kT5lX207P2rHfw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:06:59 2025 by rpki-client