This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json) Hash identifier: GSvEfQcbRo9ARF9SsdlMiLO5RumswEwF3zKWyVLytxE= Subject key identifier: 78:7A:CC:92:71:3F:49:B8:F3:26:CB:0F:FB:48:30:E5:BB:C6:CE:41 Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec Certificate serial: 019B405C14906104E5CA1B0A11474611B5A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft Manifest number: 1184 Signing time: Sun 21 Dec 2025 10:02:14 +0000 Manifest this update: Sun 21 Dec 2025 10:02:14 +0000 Manifest next update: Mon 22 Dec 2025 10:02:14 +0000 Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: TQtJzwTflqw44qYvm8qnyoIx9tJemVdV/50S9Cm/EZo=) 2: LposyqjV73-zT4I-NkDoALIwk_k.roa (hash: OHnWiOPJ0+vl8RYqLw+3oMseEcMGYzbghowhWqyDjck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:14:90:61:04:e5:ca:1b:0a:11:47:46:11:b5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec Validity Not Before: Dec 21 10:02:14 2025 GMT Not After : Dec 22 10:02:14 2025 GMT Subject: CN=787acc92713f49b8f326cb0ffb4830e5bbc6ce41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:eb:f2:61:c1:91:df:05:f0:c6:56:4c:70: 13:c8:5a:30:5a:ba:ec:05:19:3e:ba:6c:b6:77:3c: 7c:f8:2f:07:ff:22:df:25:34:a2:fd:e5:78:7a:65: 5b:f4:de:1c:e7:aa:6f:ef:a1:4a:0c:4a:da:75:96: d2:a9:d3:51:ad:4b:01:a4:b8:07:d3:f8:8c:83:95: fb:a6:36:d3:4e:17:1c:13:dc:27:48:6c:49:8a:49: 23:ad:f1:29:80:88:7c:3a:a8:cb:61:b2:90:2c:a9: 14:1e:53:6a:28:7a:76:f8:06:e4:37:1f:0a:39:5e: c6:91:aa:fe:07:38:d2:ef:78:fe:e0:a8:fd:a0:0d: eb:8a:30:d4:a5:80:5d:30:35:85:55:62:17:21:b6: 65:5a:ef:06:91:71:b2:a5:91:8e:d5:ad:db:77:09: cc:67:ce:db:64:43:7b:f9:3f:37:2d:63:ad:7e:6e: f6:39:08:76:ff:65:2e:f8:6a:8f:90:0f:dc:ba:a9: fa:07:3e:e8:e0:2b:fa:74:94:65:ba:66:90:9f:79: 29:5c:16:3b:85:33:e6:a9:76:98:fc:1b:dd:3d:05: 78:54:f6:14:e9:df:4f:a7:7e:bc:7f:89:a4:10:e6: 3e:0d:1d:99:0e:13:69:27:b9:65:7b:4a:44:94:03: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7A:CC:92:71:3F:49:B8:F3:26:CB:0F:FB:48:30:E5:BB:C6:CE:41 X509v3 Authority Key Identifier: keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ea:8f:e1:58:b1:cb:63:e5:5b:9f:07:47:53:46:3a:12:1e: e4:e1:03:75:f2:cf:8e:c8:a6:02:2d:58:93:55:c9:05:da:76: 96:db:0e:21:c7:de:ef:50:f0:e3:4e:7e:03:b6:0f:92:b9:bd: fc:2b:c6:1f:d1:37:9f:b4:67:a1:4f:89:48:c7:a1:84:e8:0b: 68:93:36:a7:38:b1:fd:52:11:2d:7b:bc:ae:e8:ea:62:46:f1: 76:b8:fa:e0:19:b6:8a:ba:42:ab:a2:9e:54:2c:8e:93:a7:64: 0c:d6:f4:ff:14:0d:18:c7:f6:a4:2f:f9:1f:6d:0b:41:76:63: 70:25:60:00:1d:0b:22:1e:c1:c7:1b:ab:86:25:b8:76:ac:41: 29:07:7d:3a:2c:45:5d:a8:bb:84:d2:b6:4e:fb:73:27:3e:9e: cc:4c:8c:3f:05:ef:11:d7:a2:4f:42:ef:5b:fc:13:1b:97:4c: a8:d1:90:f5:51:10:30:55:b9:ae:04:fd:e6:c9:60:77:04:dc: 58:03:17:14:6e:3d:78:ec:cb:86:1f:9e:9a:80:01:81:58:71: c9:e8:6d:3e:a1:85:30:23:4b:50:aa:40:7f:08:3a:7b:8c:f5: 50:ef:22:70:31:24:2f:12:42:90:c0:a2:e5:e4:2e:54:f8:74: 45:a0:8a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBSQYQTlyhsKEUdGEbWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDM0ZGQzZDIxMWU1YzJlYTdiZDJmNTI3YTEzZTFlOTk2 ODIwZWMwHhcNMjUxMjIxMTAwMjE0WhcNMjUxMjIyMTAwMjE0WjAzMTEwLwYDVQQD Eyg3ODdhY2M5MjcxM2Y0OWI4ZjMyNmNiMGZmYjQ4MzBlNWJiYzZjZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpTr8mHBkd8F8MZWTHATyFowWrrs BRk+umy2dzx8+C8H/yLfJTSi/eV4emVb9N4c56pv76FKDEradZbSqdNRrUsBpLgH 0/iMg5X7pjbTThccE9wnSGxJikkjrfEpgIh8OqjLYbKQLKkUHlNqKHp2+AbkNx8K OV7Gkar+BzjS73j+4Kj9oA3rijDUpYBdMDWFVWIXIbZlWu8GkXGypZGO1a3bdwnM Z87bZEN7+T83LWOtfm72OQh2/2Uu+GqPkA/cuqn6Bz7o4Cv6dJRlumaQn3kpXBY7 hTPmqXaY/BvdPQV4VPYU6d9Pp368f4mkEOY+DR2ZDhNpJ7lle0pElAPjawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh6zJJxP0m48ybLD/tIMOW7xs5BMB8GA1UdIwQY MBaAFCPTTdPSEeXC6nvS9SehPh6ZaCDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQt ZmU2NzFjMWQ1MTUwLzEvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQtZmU2NzFjMWQ1MTUw LzEvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOqP4Vix y2PlW58HR1NGOhIe5OEDdfLPjsimAi1Yk1XJBdp2ltsOIcfe71Dw405+A7YPkrm9 /CvGH9E3n7RnoU+JSMehhOgLaJM2pzix/VIRLXu8rujqYkbxdrj64Bm2irpCq6Ke VCyOk6dkDNb0/xQNGMf2pC/5H20LQXZjcCVgAB0LIh7BxxurhiW4dqxBKQd9OixF Xai7hNK2TvtzJz6ezEyMPwXvEdeiT0LvW/wTG5dMqNGQ9VEQMFW5rgT95slgdwTc WAMXFG49eOzLhh+emoABgVhxyehtPqGFMCNLUKpAfwg6e4z1UO8icDEkLxJCkMCi 5eQuVPh0RaCKRw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:20 2025 by rpki-client