This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json) Hash identifier: vusNX81K89Ep/Z1RdkfxTwvEsLUgzVMji2WjGWpjoCM= Subject key identifier: 24:FC:93:1C:CA:8E:3A:0C:36:3D:E3:69:00:C4:2A:10:63:AA:80:98 Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Certificate serial: 019AF1D1F88942C274C36224A4438478ACC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft Manifest number: 1465 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: /HeT+9fEdQEYZ+s5+dzSzJrkITJZVPIOr1nyPm4UyvI=) 2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=) 3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f8:89:42:c2:74:c3:62:24:a4:43:84:78:ac:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=24fc931cca8e3a0c363de36900c42a1063aa8098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:82:ee:85:b1:54:2e:9e:3a:98:57:cf:cf: 2d:60:fb:3d:69:a6:ec:fd:24:01:f9:31:4c:59:97: d5:35:09:b2:dd:eb:ca:c6:38:af:fd:66:b5:eb:d9: 4a:8f:87:09:8a:de:bc:bb:85:b4:4d:7e:72:9e:3a: 9a:e8:af:e7:47:8a:3d:d9:48:f5:14:12:c3:15:00: 48:2b:de:40:77:32:b7:05:1d:1f:7c:d9:7f:b6:2e: 38:80:de:31:07:e1:2a:0a:86:41:a9:73:7c:d8:a8: a6:1c:a0:ce:a2:63:38:ba:c1:a5:ce:1c:e6:da:cc: fb:a7:19:c8:b7:69:16:ea:9b:9d:77:e6:f3:9b:3e: 0a:65:f4:34:4c:e2:25:fc:2b:8c:3d:61:42:c9:f6: 9f:3c:be:21:00:c1:92:7c:ee:c5:b3:0a:4c:5e:fb: a2:c9:9b:90:e2:86:1d:a9:43:94:52:c9:fa:6b:d0: 7d:c4:a4:80:62:3a:a1:43:3e:a8:b6:2a:ab:7a:89: 8a:e4:8e:1a:74:ae:6a:2e:05:00:db:eb:1d:1e:8c: 7e:48:29:55:db:bb:0e:3d:a0:4a:af:84:87:3b:d2: 2a:58:b9:50:42:9f:da:b7:d6:a7:ff:48:ef:28:46: d9:8a:45:e1:4a:bb:19:e0:05:57:c5:49:d3:c1:4b: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FC:93:1C:CA:8E:3A:0C:36:3D:E3:69:00:C4:2A:10:63:AA:80:98 X509v3 Authority Key Identifier: keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:23:08:3b:76:22:7d:cc:5c:01:3c:5f:2d:29:0d:a9:1f:df: f1:cf:d8:83:3b:82:67:1d:f4:2e:90:72:e5:ff:82:82:0c:5d: 44:80:00:ba:27:42:ef:00:e6:42:b6:82:d4:38:54:aa:de:94: 79:78:fc:f6:01:88:06:81:49:8e:00:88:64:7c:56:3a:98:34: f6:e2:0a:16:0c:a4:40:e6:af:f0:02:2b:03:d9:9a:76:81:78: 8d:3c:af:e3:df:1e:90:fc:7b:82:b3:a9:e9:07:a9:a9:c2:32: bc:16:31:13:a2:45:2b:98:da:ec:90:c9:2d:91:96:2b:96:36: da:bc:80:03:a5:a6:00:6e:5c:05:0c:af:f4:c3:62:c2:1b:75: f8:74:a2:4b:19:fb:56:58:0d:c5:23:43:77:de:96:b1:df:b7: 4e:40:54:92:38:3f:1b:33:96:f3:22:82:19:3a:9f:16:6c:c2: c7:18:52:1b:e9:c1:cc:cc:75:06:7c:86:c4:5d:25:61:88:78: 2c:6e:47:cc:a5:ad:bb:4c:92:e3:13:f7:54:01:9f:f8:31:2b: 4d:86:8b:1c:92:c0:cc:b7:ad:0c:0a:7d:6c:c2:69:7e:93:73: ca:48:d3:81:d4:7b:08:7a:9c:94:52:f3:80:ff:7a:d0:ca:cc: 78:a9:a4:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fiJQsJ0w2IkpEOEeKzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl NzVhMGIwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EygyNGZjOTMxY2NhOGUzYTBjMzYzZGUzNjkwMGM0MmExMDYzYWE4MDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVuC7oWxVC6eOphXz88tYPs9aabs /SQB+TFMWZfVNQmy3evKxjiv/Wa169lKj4cJit68u4W0TX5ynjqa6K/nR4o92Uj1 FBLDFQBIK95AdzK3BR0ffNl/ti44gN4xB+EqCoZBqXN82KimHKDOomM4usGlzhzm 2sz7pxnIt2kW6pudd+bzmz4KZfQ0TOIl/CuMPWFCyfafPL4hAMGSfO7FswpMXvui yZuQ4oYdqUOUUsn6a9B9xKSAYjqhQz6otiqreomK5I4adK5qLgUA2+sdHox+SClV 27sOPaBKr4SHO9IqWLlQQp/at9an/0jvKEbZikXhSrsZ4AVXxUnTwUsffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT8kxzKjjoMNj3jaQDEKhBjqoCYMB8GA1UdIwQY MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSMIO3Yi fcxcATxfLSkNqR/f8c/YgzuCZx30LpBy5f+CggxdRIAAuidC7wDmQraC1DhUqt6U eXj89gGIBoFJjgCIZHxWOpg09uIKFgykQOav8AIrA9madoF4jTyv498ekPx7grOp 6QepqcIyvBYxE6JFK5ja7JDJLZGWK5Y22ryAA6WmAG5cBQyv9MNiwht1+HSiSxn7 VlgNxSNDd96Wsd+3TkBUkjg/GzOW8yKCGTqfFmzCxxhSG+nBzMx1BnyGxF0lYYh4 LG5HzKWtu0yS4xP3VAGf+DErTYaLHJLAzLetDAp9bMJpfpNzykjTgdR7CHqclFLz gP960MrMeKmkmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:14 2025 by rpki-client