This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json) Hash identifier: UMwLHRGgJ8+MNTldaD6eAapFTxDO+EI+lVWaCM/fDV8= Subject key identifier: ED:FA:F6:A0:A9:BD:41:CF:4C:E7:92:C0:D0:A8:E9:90:DD:D9:DC:C8 Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Certificate serial: 019AF2E45F5F6C5B4E3A3C4C2F343B4848FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 09:00:44 +0000 Manifest this update: Sat 06 Dec 2025 09:00:44 +0000 Manifest next update: Sun 07 Dec 2025 09:00:44 +0000 Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=) 2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: p8Rw4WCv4ic7c77BnWg8hb7mNJrPlRMX54+vSJZoKa0=) 3: SVlLEhHqyoa8VmAwyeAz-eO7tmk.roa (hash: 3GqZDoa/8luHJb3c9fM/8sF9/CWphehWtTWgxsoVdy8=) 4: m-Ncfpuw9lyFAGvhN6SO1U82ZPI.roa (hash: /M7ImEM1ZD0v5nu/Nb9bLOvnyebMcwld8IBc6QoNAjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:5f:5f:6c:5b:4e:3a:3c:4c:2f:34:3b:48:48:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Validity Not Before: Dec 6 09:00:44 2025 GMT Not After : Dec 7 09:00:44 2025 GMT Subject: CN=edfaf6a0a9bd41cf4ce792c0d0a8e990ddd9dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:34:95:66:76:17:c4:ab:a4:27:0d:3a:82: f4:df:9c:ef:2e:21:84:c9:68:73:24:e6:40:7c:33: 06:40:7d:a0:82:1c:7e:9b:b2:c0:69:a1:3d:4c:9b: 26:5e:bb:af:df:22:a2:07:98:3c:de:a6:69:9e:12: 8b:78:ef:0e:74:27:59:9f:f0:cd:fd:46:c5:b4:5b: 79:52:dc:5a:46:02:db:ee:31:2d:23:36:e7:88:c4: d4:cd:c8:9c:83:40:89:aa:33:e7:57:35:76:79:57: a6:d9:fd:50:47:e1:ab:05:f0:96:62:40:35:60:9d: 01:01:4c:9d:d7:b7:eb:86:93:ac:1b:45:3c:e6:d9: 0d:6c:25:ca:bf:1e:e4:17:9d:b6:f5:77:06:f0:31: da:05:e9:03:24:16:9c:f0:dc:e4:8b:67:e8:f3:a8: 4d:b6:d8:35:ce:7b:89:7e:58:6f:50:da:b0:a6:45: 93:3b:1a:56:dd:cd:2a:d2:42:d6:21:38:e3:c3:70: 44:06:60:cf:a5:af:33:8c:4e:59:2d:2b:02:9c:3a: 05:4c:6d:68:1b:86:df:b1:66:71:8c:31:c4:a1:5c: df:1f:d1:1e:e7:de:9e:b5:4d:36:c6:3b:49:17:0a: d2:7d:96:f8:a9:b1:f6:aa:ad:a2:bf:21:71:ac:bc: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FA:F6:A0:A9:BD:41:CF:4C:E7:92:C0:D0:A8:E9:90:DD:D9:DC:C8 X509v3 Authority Key Identifier: keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:70:6d:64:c0:9d:6c:1e:5e:31:2c:84:3d:90:51:a1:04:76: f7:89:21:96:39:48:c1:40:27:7d:b3:63:21:fb:a9:52:6b:d4: 9c:8e:5f:51:6e:60:96:8e:b8:0e:99:66:01:96:a7:45:db:a8: 4d:e8:88:a2:eb:95:bb:fb:4b:ec:92:6e:37:6a:96:ad:65:ac: 25:98:82:0f:97:46:04:8b:fa:1d:5b:c0:22:16:d4:ee:be:fe: 08:7e:12:a8:75:cf:aa:fd:0b:4c:3f:48:07:d8:36:6d:72:eb: ac:7a:80:a1:ed:12:d9:bb:a9:0e:9b:e9:a3:ab:b2:c4:19:f2: 2c:9e:55:49:03:ed:e4:ad:3e:f3:2f:4b:b0:5b:2c:c4:c7:88: 5f:4f:71:3a:4d:ed:1b:23:79:be:e1:73:5c:f1:99:60:ef:b9: 99:b7:b4:8e:20:3f:32:7f:2c:79:63:a0:55:3c:5f:a0:c5:09: e8:31:86:92:42:8b:46:1a:e0:6a:7f:59:d7:a0:25:15:86:49: 57:b0:47:2b:05:5a:a9:41:60:18:38:f9:db:cc:fb:98:df:0f: c2:8c:c7:45:78:5e:59:44:b0:0a:24:9a:88:9d:41:82:97:04: 64:e2:5d:ba:bf:f1:d0:1a:50:c7:fe:6b:ef:94:01:2d:d2:40: 35:fa:56:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5F9fbFtOOjxMLzQ7SEj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk M2UzNWUwHhcNMjUxMjA2MDkwMDQ0WhcNMjUxMjA3MDkwMDQ0WjAzMTEwLwYDVQQD EyhlZGZhZjZhMGE5YmQ0MWNmNGNlNzkyYzBkMGE4ZTk5MGRkZDlkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6c0lWZ2F8SrpCcNOoL035zvLiGE yWhzJOZAfDMGQH2gghx+m7LAaaE9TJsmXruv3yKiB5g83qZpnhKLeO8OdCdZn/DN /UbFtFt5UtxaRgLb7jEtIzbniMTUzcicg0CJqjPnVzV2eVem2f1QR+GrBfCWYkA1 YJ0BAUyd17frhpOsG0U85tkNbCXKvx7kF5229XcG8DHaBekDJBac8Nzki2fo86hN ttg1znuJflhvUNqwpkWTOxpW3c0q0kLWITjjw3BEBmDPpa8zjE5ZLSsCnDoFTG1o G4bfsWZxjDHEoVzfH9Ee596etU02xjtJFwrSfZb4qbH2qq2ivyFxrLyy6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO369qCpvUHPTOeSwNCo6ZDd2dzIMB8GA1UdIwQY MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4 LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHBtZMCd bB5eMSyEPZBRoQR294khljlIwUAnfbNjIfupUmvUnI5fUW5glo64DplmAZanRduo TeiIouuVu/tL7JJuN2qWrWWsJZiCD5dGBIv6HVvAIhbU7r7+CH4SqHXPqv0LTD9I B9g2bXLrrHqAoe0S2bupDpvpo6uyxBnyLJ5VSQPt5K0+8y9LsFssxMeIX09xOk3t GyN5vuFzXPGZYO+5mbe0jiA/Mn8seWOgVTxfoMUJ6DGGkkKLRhrgan9Z16AlFYZJ V7BHKwVaqUFgGDj528z7mN8PwozHRXheWUSwCiSaiJ1BgpcEZOJdur/x0BpQx/5r 75QBLdJANfpWsw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:14 2025 by rpki-client