This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json) Hash identifier: v36mfiQFCx/9ZNltOldLeMw5uVqi3K5eycnB3ZClSO0= Subject key identifier: D3:6E:DE:41:8D:44:13:65:E8:99:91:E2:CE:40:9F:69:B9:E3:69:F1 Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7 Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7 Certificate serial: 019B372186E82F5D03724B4CE99DB5E82C63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft Manifest number: 0366 Signing time: Fri 19 Dec 2025 15:01:42 +0000 Manifest this update: Fri 19 Dec 2025 15:01:42 +0000 Manifest next update: Sat 20 Dec 2025 15:01:42 +0000 Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: NOI64/KDcVs+TEw/4LJ/j/HK7IbVfP8gV1FQDDAXTzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:86:e8:2f:5d:03:72:4b:4c:e9:9d:b5:e8:2c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7 Validity Not Before: Dec 19 15:01:42 2025 GMT Not After : Dec 20 15:01:42 2025 GMT Subject: CN=d36ede418d441365e89991e2ce409f69b9e369f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:ae:fa:d8:65:ef:a2:54:df:ac:70:e8:c7: bf:f5:6a:c8:78:c7:7c:06:d3:93:97:f2:e3:7f:29: f1:09:6a:a9:68:e6:1f:02:4b:1d:e5:bd:41:7f:b7: 8b:96:a5:7a:c0:12:67:60:b3:39:45:9c:72:95:c6: d7:be:da:68:d4:7e:7b:cd:14:2c:40:9c:02:43:2e: 19:b0:1b:56:32:72:47:1b:c5:e7:df:22:42:2f:05: c1:fc:38:f3:fb:dc:8e:f7:61:0f:dd:57:ec:eb:4a: 81:93:44:0e:70:a1:6b:01:6d:d5:78:6e:77:33:8e: 07:ab:76:a1:d7:3f:60:a5:d5:7a:68:97:d0:16:49: 07:43:5b:30:c6:08:8c:4b:78:5f:ee:e4:af:56:f3: ec:2e:9c:d2:d8:62:fe:9c:e3:9c:cd:53:44:0b:d7: 29:69:0f:32:61:1c:77:8d:63:0a:96:54:1b:5c:0b: ba:4a:99:e5:66:5e:1f:9e:2c:c8:c5:a5:2f:76:7b: a9:7a:2b:d5:65:36:57:23:43:ca:50:2b:e1:23:cb: b5:2b:66:f6:25:82:e7:38:d9:b3:b6:dd:92:72:07: 9f:f9:88:20:a3:a6:2f:c0:62:c9:73:4d:2f:d6:e1: a6:99:f6:40:e7:30:15:f9:c2:9a:b5:bf:36:b6:84: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:DE:41:8D:44:13:65:E8:99:91:E2:CE:40:9F:69:B9:E3:69:F1 X509v3 Authority Key Identifier: keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b6:83:db:64:9a:ab:c1:a3:70:71:6e:f1:ed:df:ac:24:90: ef:d3:d6:fc:c3:a5:f2:20:42:37:96:6b:2c:d3:2b:b4:68:ad: 37:06:88:7d:f7:01:54:d2:5d:5f:88:35:80:13:39:87:93:dc: bc:64:96:09:1b:0d:36:b5:b3:a0:8a:a6:58:49:27:c1:23:79: 05:31:f5:6c:1b:38:cc:bd:05:8e:cd:bf:7d:c3:ea:13:a9:77: 2a:53:72:2c:76:03:61:6f:ca:7d:5a:30:a1:79:23:72:9f:79: e7:10:3a:2f:e6:3c:bf:23:73:c1:5f:f3:72:48:a6:78:9b:50: dc:a1:98:6b:5a:80:56:4a:bd:61:08:9d:56:ee:4a:a9:06:ed: 12:9a:82:34:07:8b:6a:46:c3:3d:d6:f8:93:7c:7f:2d:2c:76: 50:35:4a:8e:a0:98:82:ea:1c:e2:34:a3:89:5b:fe:84:77:e6: 33:3a:1a:39:cc:ea:be:98:ed:0d:5d:49:e8:01:09:62:fd:0c: 0c:2d:25:12:6b:18:7f:6c:7d:fc:0b:96:95:67:73:8f:a6:ac: ec:8f:c2:47:b2:be:d1:2b:cf:35:3b:6d:5c:d3:51:5b:a8:b2: d7:5a:7f:27:a4:6e:d9:a0:e3:4e:e1:c5:0a:ac:d7:34:77:4d: b4:cd:d9:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IYboL10DcktM6Z216CxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDAxOGI1NTEzYjc3OWQyZTFlM2FjMWE4NmE1OTNiZGQ5 NzRjYTcwHhcNMjUxMjE5MTUwMTQyWhcNMjUxMjIwMTUwMTQyWjAzMTEwLwYDVQQD EyhkMzZlZGU0MThkNDQxMzY1ZTg5OTkxZTJjZTQwOWY2OWI5ZTM2OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIyu+thl76JU36xw6Me/9WrIeMd8 BtOTl/LjfynxCWqpaOYfAksd5b1Bf7eLlqV6wBJnYLM5RZxylcbXvtpo1H57zRQs QJwCQy4ZsBtWMnJHG8Xn3yJCLwXB/Djz+9yO92EP3Vfs60qBk0QOcKFrAW3VeG53 M44Hq3ah1z9gpdV6aJfQFkkHQ1swxgiMS3hf7uSvVvPsLpzS2GL+nOOczVNEC9cp aQ8yYRx3jWMKllQbXAu6SpnlZl4fnizIxaUvdnupeivVZTZXI0PKUCvhI8u1K2b2 JYLnONmztt2Scgef+Yggo6YvwGLJc00v1uGmmfZA5zAV+cKatb82toS/IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNu3kGNRBNl6JmR4s5An2m542nxMB8GA1UdIwQY MBaAFCNAGLVRO3edLh46wahqWTvdl0ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9iMTgwODAtZTNjOS00MTE0LWExNzQt YzNkNmM3YzhiYThhLzEvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9iMTgwODAtZTNjOS00MTE0LWExNzQtYzNkNmM3YzhiYThh LzEvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7aD22Sa q8GjcHFu8e3frCSQ79PW/MOl8iBCN5ZrLNMrtGitNwaIffcBVNJdX4g1gBM5h5Pc vGSWCRsNNrWzoIqmWEknwSN5BTH1bBs4zL0Fjs2/fcPqE6l3KlNyLHYDYW/KfVow oXkjcp955xA6L+Y8vyNzwV/zckimeJtQ3KGYa1qAVkq9YQidVu5KqQbtEpqCNAeL akbDPdb4k3x/LSx2UDVKjqCYguoc4jSjiVv+hHfmMzoaOczqvpjtDV1J6AEJYv0M DC0lEmsYf2x9/AuWlWdzj6as7I/CR7K+0SvPNTttXNNRW6iy11p/J6Ru2aDjTuHF CqzXNHdNtM3ZSw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:37:39 2025 by rpki-client