This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json) Hash identifier: nY27W0BoILUbuV+aFEppXkDctKsnz1krn0y2GMsx+y8= Subject key identifier: 4D:D1:9C:22:9A:09:79:79:3B:4C:9D:B6:8A:FB:B1:25:BB:E2:01:07 Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1 Certificate serial: 019AF208C0FDF2DC2C9427FBEFE01DC569DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft Manifest number: 11AA Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=) 2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: ev30p+Yf555vVVGxJtSuUw1Ns5qBdd7ePULcFEeH6fQ=) 3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c0:fd:f2:dc:2c:94:27:fb:ef:e0:1d:c5:69:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=4dd19c229a0979793b4c9db68afbb125bbe20107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:a8:27:ca:b0:36:f8:6c:da:6d:5d:2b:d2: 96:29:12:88:68:1d:84:5a:2a:8b:74:ae:dc:4c:19: 75:92:6b:a1:04:71:46:a4:6d:f9:e3:ac:b0:82:8f: 07:fc:9a:7f:9c:70:58:dc:fb:d5:ef:6b:dd:f2:d1: dc:93:ad:85:c1:49:64:b7:42:a7:0e:80:a0:3a:0b: 55:49:5a:6e:ea:3f:f4:04:ed:af:2d:11:eb:12:09: 6c:41:c5:21:25:d7:2c:4a:49:1c:52:89:6d:f0:01: 37:88:54:59:89:b5:ea:89:62:dc:2d:b3:f2:93:2b: 2c:70:57:b4:1a:06:06:1f:60:33:1d:25:3a:f2:61: 90:9a:f7:05:15:92:29:4c:12:3a:6e:20:69:2e:94: 43:78:65:7b:a8:22:43:5b:03:97:4a:57:26:b7:9c: dd:52:98:78:19:21:0b:c9:e7:ae:e2:0a:de:cb:7d: 2f:86:b5:8f:9d:ad:47:98:17:de:80:57:c2:8e:df: 45:c7:cc:2e:99:64:5b:04:23:8e:16:95:af:c7:4c: 63:ec:0e:96:3a:ce:ee:d2:fb:f4:27:13:f1:68:a5: 95:6e:ce:fb:30:0a:1d:3b:0d:76:ba:e3:3f:dc:11: c9:6e:07:10:70:c7:c8:01:df:68:d2:87:db:58:f7: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D1:9C:22:9A:09:79:79:3B:4C:9D:B6:8A:FB:B1:25:BB:E2:01:07 X509v3 Authority Key Identifier: keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b4:5a:ac:ff:43:f2:de:bf:e7:e8:76:ba:08:75:c2:25:19: 8a:09:2d:4b:69:f8:76:91:ba:d4:aa:f8:1c:11:62:b7:e6:48: c4:3b:c9:17:d3:3d:e9:91:e0:c8:78:8b:67:57:f5:77:91:7a: 39:54:a1:60:d8:95:83:ce:4e:62:ce:0b:0c:1c:b0:ff:df:03: 66:4d:4d:c4:ec:e5:da:02:3c:79:e6:53:58:97:4c:a3:36:df: 43:27:de:30:8c:a6:e4:66:d7:a5:59:86:ad:06:fa:29:de:0b: 3b:9c:d1:96:c6:35:e8:84:f4:90:80:4e:6d:e5:2d:d4:7f:a8: 6a:64:e2:17:68:7a:40:b1:b7:aa:8b:56:71:31:e9:ca:72:4a: eb:6c:f1:e5:db:37:5c:34:c5:29:f4:9f:f5:aa:c7:93:98:f2: df:16:99:d5:1e:cb:2e:b9:1c:56:77:46:79:2f:3f:18:e3:13: 59:10:37:b3:79:d9:21:f6:1e:f3:ce:e1:e1:6f:a8:63:66:99: 7d:69:64:f0:df:eb:bc:ea:df:c3:15:93:45:20:be:3c:3c:e7: 88:09:da:6a:07:ca:53:4c:33:01:a0:ef:6c:74:7e:75:89:c9: 51:f7:9d:3a:fa:b2:a7:8e:9d:e5:f7:eb:fa:da:5e:1e:86:bf: cb:e0:e0:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMD98twslCf77+AdxWncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5 NjcyZDEwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg0ZGQxOWMyMjlhMDk3OTc5M2I0YzlkYjY4YWZiYjEyNWJiZTIwMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzaoJ8qwNvhs2m1dK9KWKRKIaB2E WiqLdK7cTBl1kmuhBHFGpG3546ywgo8H/Jp/nHBY3PvV72vd8tHck62FwUlkt0Kn DoCgOgtVSVpu6j/0BO2vLRHrEglsQcUhJdcsSkkcUolt8AE3iFRZibXqiWLcLbPy kysscFe0GgYGH2AzHSU68mGQmvcFFZIpTBI6biBpLpRDeGV7qCJDWwOXSlcmt5zd Uph4GSELyeeu4grey30vhrWPna1HmBfegFfCjt9Fx8wumWRbBCOOFpWvx0xj7A6W Os7u0vv0JxPxaKWVbs77MAodOw12uuM/3BHJbgcQcMfIAd9o0ofbWPcnHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3RnCKaCXl5O0ydtor7sSW74gEHMB8GA1UdIwQY MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0 LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbRarP9D 8t6/5+h2ugh1wiUZigktS2n4dpG61Kr4HBFit+ZIxDvJF9M96ZHgyHiLZ1f1d5F6 OVShYNiVg85OYs4LDByw/98DZk1NxOzl2gI8eeZTWJdMozbfQyfeMIym5GbXpVmG rQb6Kd4LO5zRlsY16IT0kIBObeUt1H+oamTiF2h6QLG3qotWcTHpynJK62zx5ds3 XDTFKfSf9arHk5jy3xaZ1R7LLrkcVndGeS8/GOMTWRA3s3nZIfYe887h4W+oY2aZ fWlk8N/rvOrfwxWTRSC+PDzniAnaagfKU0wzAaDvbHR+dYnJUfedOvqyp46d5ffr +tpeHoa/y+Dg+w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:11 2025 by rpki-client