This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json) Hash identifier: rQcouFCN//TOircQMHZOcPdNFX2zJ/UCgXC1sOEIzxw= Subject key identifier: BE:C3:7D:CC:BC:7B:FD:D1:24:70:A1:CB:A5:59:0D:25:18:44:FA:9B Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Certificate serial: 019AF389637E1B6F62C506237BF82A55D51B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft Manifest number: 045B Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: kFDz9nfdc5dTw5mER/HqqaGG1xujov/mbXsXPomHE5Y=) 2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:63:7e:1b:6f:62:c5:06:23:7b:f8:2a:55:d5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=bec37dccbc7bfdd12470a1cba5590d251844fa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:3b:98:eb:4b:7a:b4:d8:e6:d8:4c:d7:77: f1:72:30:d8:ea:2b:d1:8c:2b:05:39:1c:e2:a2:91: ce:96:85:e8:78:52:e3:af:73:40:b2:de:10:2a:d3: de:ec:8d:69:e8:78:03:81:48:43:11:e0:45:c8:2f: 0f:89:9e:24:43:65:7e:8c:b1:8d:23:54:e8:7b:5e: 5f:7c:36:24:8a:ab:01:64:f6:20:49:1c:19:f9:d7: 44:06:fc:f7:e8:8e:84:34:04:b4:70:eb:b3:5e:64: 64:99:00:f5:ea:57:2b:70:d0:49:12:4a:6f:7e:72: d7:9c:b2:c6:11:eb:b5:8e:61:08:2a:ce:29:b0:08: 65:59:d6:7b:01:1d:7f:f6:61:e9:b3:c4:90:4b:da: ef:fe:a1:24:24:db:23:41:79:2f:18:40:d2:e0:49: bf:fd:26:d7:90:86:3c:9d:e0:62:4e:88:03:0f:0a: 21:d9:37:4d:e8:64:8f:75:9f:36:17:91:c6:00:dd: be:87:45:e9:68:38:e4:f8:a6:5f:00:1c:c1:ba:09: f2:df:17:5b:d8:bf:ca:2c:8a:a5:e0:1a:ff:71:c5: 6b:f0:99:f0:ba:fa:e7:47:bd:19:15:81:c9:ac:1b: ef:a7:4b:f6:d7:c9:d7:02:b1:36:46:79:f7:ca:4d: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C3:7D:CC:BC:7B:FD:D1:24:70:A1:CB:A5:59:0D:25:18:44:FA:9B X509v3 Authority Key Identifier: keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:ff:45:e8:4e:0c:49:3e:48:e6:69:ef:61:cf:a2:90:7f: fa:3e:b0:86:f4:a0:b1:df:df:cc:19:d5:06:2a:c5:bb:58:54: f1:b9:5e:a6:fb:0e:91:4b:01:d3:96:0c:85:17:3c:f8:77:b7: ca:8f:aa:b6:67:5f:df:5c:60:93:6e:57:86:68:c3:e7:0f:68: 23:c2:58:2f:92:f4:7a:5e:df:05:40:c8:64:77:d3:65:fe:73: 6a:1f:35:3f:f2:a9:cd:a1:9a:06:55:db:dc:a1:b3:19:fd:e7: ae:19:72:17:07:f9:b5:02:25:d0:fb:e9:4c:69:a7:c7:70:b4: a1:32:12:0d:20:bf:b6:f2:dc:02:f9:0e:33:a0:4b:c6:60:3b: 6c:b1:a0:a4:17:09:a9:24:79:3a:e8:f7:00:84:71:7d:df:ee: 00:d4:6d:ef:e5:3d:dc:48:1b:e9:22:ff:f8:45:9e:a2:cd:fc: 63:7c:65:b9:a4:4f:e5:68:a7:a4:db:41:6c:27:ca:62:70:74: d3:fc:b6:30:d2:d0:6c:c7:c1:02:f1:6f:5a:c9:3e:26:2b:1b: 50:61:9e:6f:7a:2d:8b:2d:e8:39:2d:78:5b:f7:a7:ca:6f:65: 48:23:97:7c:ee:8c:e4:32:d1:e1:c2:0b:95:be:73:40:23:18: e9:5b:fd:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWN+G29ixQYje/gqVdUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz YmYzNmEwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD EyhiZWMzN2RjY2JjN2JmZGQxMjQ3MGExY2JhNTU5MGQyNTE4NDRmYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhw7mOtLerTY5thM13fxcjDY6ivR jCsFORziopHOloXoeFLjr3NAst4QKtPe7I1p6HgDgUhDEeBFyC8PiZ4kQ2V+jLGN I1Toe15ffDYkiqsBZPYgSRwZ+ddEBvz36I6ENAS0cOuzXmRkmQD16lcrcNBJEkpv fnLXnLLGEeu1jmEIKs4psAhlWdZ7AR1/9mHps8SQS9rv/qEkJNsjQXkvGEDS4Em/ /SbXkIY8neBiTogDDwoh2TdN6GSPdZ82F5HGAN2+h0XpaDjk+KZfABzBugny3xdb 2L/KLIql4Br/ccVr8JnwuvrnR70ZFYHJrBvvp0v218nXArE2Rnn3yk37VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Dfcy8e/3RJHChy6VZDSUYRPqbMB8GA1UdIwQY MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt NTk0YTI3ZGIxNDZiLzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6H/RehO DEk+SOZp72HPopB/+j6whvSgsd/fzBnVBirFu1hU8blepvsOkUsB05YMhRc8+He3 yo+qtmdf31xgk25XhmjD5w9oI8JYL5L0el7fBUDIZHfTZf5zah81P/KpzaGaBlXb 3KGzGf3nrhlyFwf5tQIl0PvpTGmnx3C0oTISDSC/tvLcAvkOM6BLxmA7bLGgpBcJ qSR5Ouj3AIRxfd/uANRt7+U93Egb6SL/+EWeos38Y3xluaRP5WinpNtBbCfKYnB0 0/y2MNLQbMfBAvFvWsk+JisbUGGeb3otiy3oOS14W/enym9lSCOXfO6M5DLR4cIL lb5zQCMY6Vv9wg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:45:04 2025 by rpki-client