This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json) Hash identifier: nKoCvrlwyTG7AK5GDshw4x9C8UCPvZ6aVZdfwE25r7k= Subject key identifier: 21:FD:7D:F4:76:79:92:34:69:87:5F:54:17:6E:EE:FD:EA:AF:5C:6F Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938 Certificate serial: 019B631ED5E443270C021709405DFEC374BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft Manifest number: 0EEF Signing time: Sun 28 Dec 2025 04:02:03 +0000 Manifest this update: Sun 28 Dec 2025 04:02:03 +0000 Manifest next update: Mon 29 Dec 2025 04:02:03 +0000 Files and hashes: 1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: Aox4qnwuPizN50VpHJBiep9o0mPHju1/PRcMvAeQVBM=) 2: lMtd9Et7sCIMnXubrUAx71SKNrE.roa (hash: m1edH+G4XaQspTL3esib0CDSyQxr91JPxRsi1poYwKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:d5:e4:43:27:0c:02:17:09:40:5d:fe:c3:74:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938 Validity Not Before: Dec 28 04:02:03 2025 GMT Not After : Dec 29 04:02:03 2025 GMT Subject: CN=21fd7df47679923469875f54176eeefdeaaf5c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:72:e6:68:b1:b0:21:a4:04:00:6c:c9:b0:e1: 41:ce:ed:46:36:50:12:03:43:93:e1:06:b1:b2:85: e2:e2:3f:9f:75:bb:95:2a:a7:54:1e:f7:b7:30:17: f5:d5:a8:e0:c5:72:4e:19:27:b7:e4:fb:7e:ed:61: 8d:a8:7f:5e:ff:21:02:a4:0f:5b:95:0f:36:50:f9: 80:ba:b8:43:ea:bb:6a:cc:b2:de:de:de:18:1e:4e: 2e:9c:93:38:87:7f:a7:86:24:83:6d:f5:29:da:2f: 84:5c:6d:88:ca:32:97:88:31:87:08:d1:43:db:61: 4a:eb:75:89:86:54:4d:c2:6e:8d:af:ba:d2:96:b6: f5:5d:91:cb:d1:5f:bd:7b:fb:de:b6:83:b8:7a:7c: dd:13:83:7a:91:1f:0d:6f:f7:a8:2d:53:3e:f6:32: f3:48:64:06:23:99:f0:6c:5c:aa:55:ee:ee:7c:f2: 26:27:59:01:63:3f:bf:ef:17:c6:90:bf:97:00:d3: 1e:fd:88:75:22:7c:b8:10:d0:bd:fc:c9:bc:7a:02: 30:ad:c0:cd:c7:74:ee:e2:6a:17:bd:26:e9:df:4b: c1:64:b9:78:e9:dd:3d:ea:ea:d3:87:c0:ba:77:5d: 67:9a:7c:ab:42:40:df:a5:5a:ed:2b:9d:47:61:4e: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:7D:F4:76:79:92:34:69:87:5F:54:17:6E:EE:FD:EA:AF:5C:6F X509v3 Authority Key Identifier: keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:31:e1:5f:f5:7d:35:c4:cf:04:da:5c:2d:59:89:b6:dd:0a: 9b:31:b5:fb:a0:47:e1:7c:01:37:5e:f5:9c:95:96:10:ee:07: 3f:b3:e4:4d:cb:f5:58:26:bd:86:98:b6:75:0c:0b:a3:ec:95: 4f:66:71:f6:95:b3:61:db:fe:34:69:17:dd:60:62:74:cd:ee: 8a:1d:a7:38:36:48:51:cf:0a:ed:c3:37:b4:92:e8:3e:4d:76: cf:49:1b:27:95:7b:4d:df:6a:3a:1a:90:4b:28:66:4e:aa:36: 61:2a:6f:90:57:14:74:32:cd:da:d2:11:52:2a:bd:6e:4f:79: 9b:54:a4:25:5c:ce:83:f9:bd:6d:cc:7b:1f:8d:00:dc:26:c8: 22:05:23:14:63:3b:25:dd:bf:04:1e:18:a5:9d:d5:99:2a:f4: 34:dd:8a:ee:f8:0d:92:a3:7d:7a:04:e7:5a:03:76:42:fa:60: fc:34:53:7a:bf:42:a9:2e:37:74:79:a0:5e:45:24:ec:a9:dd: d2:4f:8f:f8:c2:23:f8:8d:9a:6f:11:a2:c6:ab:73:ba:19:55: 1b:e9:80:6d:d9:7f:ce:8d:47:db:de:12:1d:f5:e0:af:88:47: f7:3d:83:35:44:d4:98:18:42:16:94:f8:58:46:22:03:22:c3: 16:cf:10:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHtXkQycMAhcJQF3+w3S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjhjOTk5YjMwY2UyNDhlNmM0NjhjNzg0ZDY0ZDcyZjk2 M2U5MzgwHhcNMjUxMjI4MDQwMjAzWhcNMjUxMjI5MDQwMjAzWjAzMTEwLwYDVQQD EygyMWZkN2RmNDc2Nzk5MjM0Njk4NzVmNTQxNzZlZWVmZGVhYWY1YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HLmaLGwIaQEAGzJsOFBzu1GNlAS A0OT4QaxsoXi4j+fdbuVKqdUHve3MBf11ajgxXJOGSe35Pt+7WGNqH9e/yECpA9b lQ82UPmAurhD6rtqzLLe3t4YHk4unJM4h3+nhiSDbfUp2i+EXG2IyjKXiDGHCNFD 22FK63WJhlRNwm6Nr7rSlrb1XZHL0V+9e/vetoO4enzdE4N6kR8Nb/eoLVM+9jLz SGQGI5nwbFyqVe7ufPImJ1kBYz+/7xfGkL+XANMe/Yh1Iny4ENC9/Mm8egIwrcDN x3Tu4moXvSbp30vBZLl46d096urTh8C6d11nmnyrQkDfpVrtK51HYU5hSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH9ffR2eZI0aYdfVBdu7v3qr1xvMB8GA1UdIwQY MBaAFCP4yZmzDOJI5sRox4TWTXL5Y+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTkt M2RmNTQ5YTA2ZDViLzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTktM2RmNTQ5YTA2ZDVi LzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzHhX/V9 NcTPBNpcLVmJtt0KmzG1+6BH4XwBN171nJWWEO4HP7PkTcv1WCa9hpi2dQwLo+yV T2Zx9pWzYdv+NGkX3WBidM3uih2nODZIUc8K7cM3tJLoPk12z0kbJ5V7Td9qOhqQ SyhmTqo2YSpvkFcUdDLN2tIRUiq9bk95m1SkJVzOg/m9bcx7H40A3CbIIgUjFGM7 Jd2/BB4YpZ3VmSr0NN2K7vgNkqN9egTnWgN2Qvpg/DRTer9CqS43dHmgXkUk7Knd 0k+P+MIj+I2abxGixqtzuhlVG+mAbdl/zo1H294SHfXgr4hH9z2DNUTUmBhCFpT4 WEYiAyLDFs8Qqg== -----END CERTIFICATE-----Generated at Sun Dec 28 09:07:42 2025 by rpki-client