This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json) Hash identifier: Wo+8rdGe6neInaPS3oLsPOrr1VSaHlHiCAm9uMPWoL0= Subject key identifier: 9C:CB:0A:2D:0F:4C:05:7B:1F:40:15:F4:9A:12:80:04:A6:08:2A:0F Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde Certificate serial: 019AF1D202F5A6FD59DEBF731E2504E22440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: YQi9+tchWjNMMFbF4Z28hefRjUO3aQNwTFbKoRk5whY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:02:f5:a6:fd:59:de:bf:73:1e:25:04:e2:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=9ccb0a2d0f4c057b1f4015f49a128004a6082a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:54:0b:22:e0:f1:f0:13:46:e3:06:61:a6: 9e:8c:a6:f3:f4:39:74:50:e4:f1:e6:ad:85:34:6d: eb:aa:70:8e:8b:35:5b:a7:79:aa:f4:c7:3a:86:8c: 36:34:de:4c:66:e7:b7:8c:57:fa:e1:2b:4f:72:cb: 8b:c4:09:de:aa:bd:db:42:f9:53:f5:a1:24:56:d7: 1c:80:e4:1f:53:4b:e4:7e:8e:eb:ed:78:10:0f:c4: 33:df:3d:12:23:e6:6f:84:58:64:d0:5c:0f:0d:d8: cd:54:97:09:37:53:32:fa:57:45:e8:68:56:6c:f8: 4f:ec:ab:30:52:12:8c:ba:29:c9:c5:04:56:fb:95: 1c:a8:07:30:7f:cf:a4:9d:b7:47:32:10:25:54:49: 82:fc:35:8d:6e:bd:16:85:e5:39:ed:9a:c2:6d:d5: 0a:80:75:3b:da:f4:9d:ee:32:7f:d9:01:a0:fe:ad: 94:07:b3:60:cd:f1:ed:4d:e9:b7:b3:5a:b4:8e:dd: 0f:3c:ae:24:24:e2:a3:8c:10:35:0b:3e:25:bf:5a: 7b:36:9c:d7:37:97:7a:36:82:71:d9:4b:93:c4:fd: c4:b4:2b:e3:72:1c:07:81:a9:64:e0:cc:43:d9:49: e5:eb:6e:a9:60:9b:b0:6d:fd:5a:4b:21:0c:7b:fc: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CB:0A:2D:0F:4C:05:7B:1F:40:15:F4:9A:12:80:04:A6:08:2A:0F X509v3 Authority Key Identifier: keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:14:fc:2c:0b:87:f9:ea:3e:c6:15:62:aa:cf:26:8e:4a:0f: 24:33:a4:42:cb:5b:e0:8a:90:ab:4a:21:f5:55:eb:90:91:fd: ef:30:f8:a9:83:cd:73:6b:4d:d7:15:f7:c5:32:8b:0b:57:37: 32:d7:ea:c5:3e:5d:81:6a:23:2a:12:f6:2f:d9:bb:6e:f4:63: f5:67:4c:44:c4:f5:f2:1a:7e:32:8a:0a:7c:eb:c2:0d:a2:08: 14:25:73:7b:76:06:d0:6e:3d:7a:f5:f9:4d:d4:6a:56:6d:97: 83:99:f1:90:85:60:2c:75:8e:38:ea:bc:36:ca:aa:79:96:4b: fa:99:3a:11:e8:d4:4b:55:3d:48:b7:00:f5:1f:81:5e:f0:eb: 70:7a:1c:70:68:da:c9:0b:c8:20:a2:8d:65:49:aa:7d:6b:eb: 73:59:d6:25:58:93:f5:7d:bb:b7:a2:3d:3e:db:9c:43:37:d1: 03:27:8e:a8:73:39:e3:e2:b7:b4:64:40:60:86:52:0a:e8:1b: c7:aa:d0:dc:ee:48:9d:0a:a5:f9:b9:53:f7:aa:d8:ec:4d:3d: 9d:ab:3f:41:35:c5:39:2a:d5:41:c2:05:08:43:cf:a7:f6:77: eb:95:d9:4b:86:9a:a5:33:b1:f8:51:37:2f:a5:fe:03:d8:9f: 50:ad:61:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gL1pv1Z3r9zHiUE4iRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZWZlYjMyZWE3OTRjOTQ1MDkyMDg5YWU1YzEzNTAyZjc3 MTZjZGUwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD Eyg5Y2NiMGEyZDBmNGMwNTdiMWY0MDE1ZjQ5YTEyODAwNGE2MDgyYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSBUCyLg8fATRuMGYaaejKbz9Dl0 UOTx5q2FNG3rqnCOizVbp3mq9Mc6how2NN5MZue3jFf64StPcsuLxAneqr3bQvlT 9aEkVtccgOQfU0vkfo7r7XgQD8Qz3z0SI+ZvhFhk0FwPDdjNVJcJN1My+ldF6GhW bPhP7KswUhKMuinJxQRW+5UcqAcwf8+knbdHMhAlVEmC/DWNbr0WheU57ZrCbdUK gHU72vSd7jJ/2QGg/q2UB7NgzfHtTem3s1q0jt0PPK4kJOKjjBA1Cz4lv1p7NpzX N5d6NoJx2UuTxP3EtCvjchwHgalk4MxD2Unl626pYJuwbf1aSyEMe/yA+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzLCi0PTAV7H0AV9JoSgASmCCoPMB8GA1UdIwQY MBaAFCPv6zLqeUyUUJIImuXBNQL3cWzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYt ZGZiZDViNWVhNzYwLzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYtZGZiZDViNWVhNzYw LzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxT8LAuH +eo+xhViqs8mjkoPJDOkQstb4IqQq0oh9VXrkJH97zD4qYPNc2tN1xX3xTKLC1c3 MtfqxT5dgWojKhL2L9m7bvRj9WdMRMT18hp+MooKfOvCDaIIFCVze3YG0G49evX5 TdRqVm2Xg5nxkIVgLHWOOOq8NsqqeZZL+pk6EejUS1U9SLcA9R+BXvDrcHoccGja yQvIIKKNZUmqfWvrc1nWJViT9X27t6I9PtucQzfRAyeOqHM54+K3tGRAYIZSCugb x6rQ3O5InQql+blT96rY7E09nas/QTXFOSrVQcIFCEPPp/Z365XZS4aapTOx+FE3 L6X+A9ifUK1hhA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:29 2025 by rpki-client