This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft File: i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json) Hash identifier: yU9Av1EhkQXrOxXMuY4njkw4dBvUvxOT78aP/teFpGM= Subject key identifier: 9F:F0:BB:E1:6E:AE:B5:F9:48:01:6C:83:43:0F:DE:88:E3:B8:DF:28 Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Certificate serial: 019AF12E0A32BF2C09278C588BA70B47C990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: CPJvfKG9AEorpsEiz1e05zSo0sY.roa (hash: NjB+IttX3MugwGYS/PHLAC82z3nIjH+wrKBqWV/iJTI=) 2: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (hash: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=) 3: P2LC5eQJryM958-FLkXKkEDZeLw.roa (hash: QpIfoLa+fmj9YdQlV+XdklTrRRwRDMjjOVtTi9BX00s=) 4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: Wk0l0mSGzb+MknXZ5s3dbP44Gq8WZPRES2fv6slWBmU=) 5: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (hash: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0a:32:bf:2c:09:27:8c:58:8b:a7:0b:47:c9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=9ff0bbe16eaeb5f948016c83430fde88e3b8df28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ad:d7:ba:1f:55:f1:23:ae:41:ad:98:fa:81: 1c:1a:81:a9:fc:5b:a2:34:b0:5b:05:fc:c0:59:a6: 6f:30:b0:a6:e2:c7:07:09:ab:2f:ff:09:39:37:c7: 95:c2:a0:72:70:ad:3e:c7:f3:bf:84:45:65:dd:c3: 34:21:ff:b5:19:53:01:b0:ef:ab:e1:56:85:e4:2c: 58:94:29:02:cf:ec:41:60:ef:18:94:21:3f:36:8d: 3c:c9:38:aa:e6:51:39:82:30:e3:34:9e:7a:c9:35: 1a:3f:d1:97:34:f0:5d:9f:f7:8d:84:1a:67:1c:11: 9f:3b:09:ae:8b:87:4b:4f:c1:5f:60:2a:1f:3d:b6: 4e:0d:df:7c:79:7d:f5:68:6d:5e:b9:f7:74:4e:e8: 0d:31:d2:2e:7c:87:6f:71:20:cb:ca:f6:54:fb:d2: b1:93:bd:ad:42:58:ba:3f:07:46:bb:dd:4f:51:96: af:97:b8:10:92:21:4b:d1:af:b5:6f:28:1b:73:cd: 47:3d:16:99:2a:44:05:ec:13:76:3f:dd:d5:8d:7e: 36:f3:77:25:83:a3:58:21:97:99:51:8e:b1:47:e6: ac:7e:c7:88:50:48:84:f8:b1:c5:b0:98:9c:8d:d0: 5a:6b:15:67:c6:06:c6:62:91:71:d0:40:30:5c:35: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:BB:E1:6E:AE:B5:F9:48:01:6C:83:43:0F:DE:88:E3:B8:DF:28 X509v3 Authority Key Identifier: keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:39:2e:dc:b5:86:c3:49:a6:18:ab:19:34:6c:74:06:cf:71: 3c:4c:2b:cd:a4:1e:b3:ee:4a:7e:2c:87:ca:4e:a5:1d:32:ba: 82:8e:ee:b2:be:ba:9a:51:31:5f:39:7c:9b:aa:a4:ab:d2:29: 58:55:82:35:7a:10:15:a6:ae:24:9d:63:da:62:07:0a:ff:ae: 0d:aa:51:69:8b:de:25:14:37:dc:46:b7:6d:2b:9f:2f:d1:4a: 48:c7:5a:3a:54:0d:87:49:ba:d0:d4:b4:a1:e0:dd:92:99:f8: e3:16:26:f8:2c:9e:14:b1:7a:0f:b8:ec:78:c6:43:ec:42:0a: 14:3b:61:11:78:9b:8d:a6:02:56:8e:b5:0f:a3:cd:36:1d:9f: 7e:83:b7:f4:1f:6d:22:31:a3:5c:f5:bd:f7:32:bb:24:6f:02: 16:da:58:00:7b:0b:9e:e5:a4:ad:08:ab:a0:35:15:d9:ac:77: 38:ed:76:00:38:2d:a9:ff:04:9d:6b:26:50:4b:0b:9d:6f:c0: bf:7d:00:71:ab:a8:c3:1b:fa:86:a2:d3:b5:e7:dc:fa:2a:2f: 77:45:eb:a3:34:83:a1:8c:ce:6c:6f:68:36:1f:c3:5b:5b:6f: f9:b7:89:81:d4:83:1b:cc:ba:60:32:5c:cd:b6:f9:96:29:f7: 35:50:0d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgoyvywJJ4xYi6cLR8mQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3 NWY0YTYwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD Eyg5ZmYwYmJlMTZlYWViNWY5NDgwMTZjODM0MzBmZGU4OGUzYjhkZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA663Xuh9V8SOuQa2Y+oEcGoGp/Fui NLBbBfzAWaZvMLCm4scHCasv/wk5N8eVwqBycK0+x/O/hEVl3cM0If+1GVMBsO+r 4VaF5CxYlCkCz+xBYO8YlCE/No08yTiq5lE5gjDjNJ56yTUaP9GXNPBdn/eNhBpn HBGfOwmui4dLT8FfYCofPbZODd98eX31aG1eufd0TugNMdIufIdvcSDLyvZU+9Kx k72tQli6PwdGu91PUZavl7gQkiFL0a+1bygbc81HPRaZKkQF7BN2P93VjX4283cl g6NYIZeZUY6xR+asfseIUEiE+LHFsJicjdBaaxVnxgbGYpFx0EAwXDXkTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/wu+FurrX5SAFsg0MP3ojjuN8oMB8GA1UdIwQY MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt ZjJmNDI2ZWZlMDM5LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5 LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTku3LWG w0mmGKsZNGx0Bs9xPEwrzaQes+5KfiyHyk6lHTK6go7usr66mlExXzl8m6qkq9Ip WFWCNXoQFaauJJ1j2mIHCv+uDapRaYveJRQ33Ea3bSufL9FKSMdaOlQNh0m60NS0 oeDdkpn44xYm+CyeFLF6D7jseMZD7EIKFDthEXibjaYCVo61D6PNNh2ffoO39B9t IjGjXPW99zK7JG8CFtpYAHsLnuWkrQiroDUV2ax3OO12ADgtqf8EnWsmUEsLnW/A v30Acauowxv6hqLTtefc+iovd0XrozSDoYzObG9oNh/DW1tv+beJgdSDG8y6YDJc zbb5lin3NVANUg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:40 2025 by rpki-client