This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json) Hash identifier: /ERNTKUrqFnIm94NW83B2Sr9/urILJZC0fU/jIgxbOw= Subject key identifier: 7D:F6:A2:47:82:EE:14:E5:E4:0B:EF:0F:F7:60:72:1D:F7:D3:E1:D1 Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00 Certificate serial: 019AF31CE22D79A48F218CCB9D4BF070A318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:02:27 +0000 Manifest this update: Sat 06 Dec 2025 10:02:27 +0000 Manifest next update: Sun 07 Dec 2025 10:02:27 +0000 Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: DtRP4eKTvvBx5LR8W98/QJkioSQkWvHXkUATjshb8rs=) 2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=) 3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e2:2d:79:a4:8f:21:8c:cb:9d:4b:f0:70:a3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239c45e43625522080aec53952989a13a28abd00 Validity Not Before: Dec 6 10:02:27 2025 GMT Not After : Dec 7 10:02:27 2025 GMT Subject: CN=7df6a24782ee14e5e40bef0ff760721df7d3e1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:04:15:01:c6:ab:22:c6:e7:ef:f1:08:87: 46:2b:7f:a1:e0:98:d2:4b:ce:af:28:dd:13:c8:19: 2d:c1:21:b5:da:9f:09:85:bd:9d:73:80:f8:b1:ae: 47:63:a4:7e:0f:da:06:86:34:52:40:f2:45:b9:dd: 07:61:8f:7b:0e:e5:ac:60:bc:b7:c1:5f:4a:90:24: c2:f9:38:d9:cf:bb:61:68:db:bc:5c:e6:c4:83:30: 85:33:f6:32:0e:c3:e0:e6:26:83:e3:95:81:55:35: 7e:20:c8:af:b8:dc:e6:bc:b0:08:6f:c4:dc:de:40: 21:4d:52:bc:05:b8:d8:c7:0a:d5:59:96:d7:e6:3b: 78:86:2e:80:cf:cf:8b:9b:70:83:90:75:55:f0:4c: ee:d1:a4:58:52:6f:b3:7a:da:a2:cf:f7:62:67:18: 6a:ed:51:ae:19:31:95:37:1a:a7:11:29:e8:e9:db: a6:c5:22:d3:b4:6d:4e:30:69:6f:9e:d8:77:07:10: 8c:d5:9c:ef:00:b1:84:00:6c:37:df:07:10:fa:d6: 1f:60:3a:24:77:f9:42:ec:3e:bd:49:00:3e:3b:59: e6:d0:6c:68:17:9d:14:14:32:6a:51:f0:59:37:3b: 5b:a0:b2:4c:9e:64:37:b5:a9:aa:d9:13:9f:e5:bb: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F6:A2:47:82:EE:14:E5:E4:0B:EF:0F:F7:60:72:1D:F7:D3:E1:D1 X509v3 Authority Key Identifier: keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bf:cb:96:a1:41:69:77:71:c1:11:67:8a:22:0f:46:5b:8e: 23:2f:4c:b1:ed:9e:16:05:de:cc:bc:f2:85:88:74:75:e2:35: 03:5b:8c:96:0f:c9:ff:97:f2:de:29:61:76:5c:c1:00:a3:61: 01:51:64:fe:46:79:5b:c7:68:d8:0c:07:27:f4:ee:46:e3:52: 0f:22:fd:dd:8c:06:50:cb:f4:98:a4:96:4a:1a:1a:cd:fe:31: 46:2f:58:c5:7c:3e:fa:b4:40:6a:33:bb:96:58:fb:56:af:75: 69:75:9b:a1:7f:4f:f6:42:34:b2:fa:5e:3e:25:c0:06:b1:9c: a1:43:66:a7:b9:45:de:26:24:9c:db:8a:18:13:40:fa:5c:7d: 46:57:59:85:15:7f:92:db:53:71:b2:ae:27:56:9d:df:ea:4e: 4b:8e:6a:a7:45:75:59:b9:60:42:0d:b2:26:be:1a:4c:7a:3f: 51:0d:ee:dc:a0:a7:3d:cd:d6:81:33:b7:85:b9:56:73:2d:cf: 9d:b8:9b:57:2c:2b:46:17:b5:7e:e2:95:37:f9:fa:78:fe:39: 1a:36:b9:20:38:3f:48:e5:47:85:1d:cf:e6:3a:84:75:d2:e1: 1a:e1:b0:f7:fb:b8:2d:f2:ee:fc:6e:42:87:a1:b6:b1:28:bc: 36:d0:66:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOIteaSPIYzLnUvwcKMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4 YWJkMDAwHhcNMjUxMjA2MTAwMjI3WhcNMjUxMjA3MTAwMjI3WjAzMTEwLwYDVQQD Eyg3ZGY2YTI0NzgyZWUxNGU1ZTQwYmVmMGZmNzYwNzIxZGY3ZDNlMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWcEFQHGqyLG5+/xCIdGK3+h4JjS S86vKN0TyBktwSG12p8Jhb2dc4D4sa5HY6R+D9oGhjRSQPJFud0HYY97DuWsYLy3 wV9KkCTC+TjZz7thaNu8XObEgzCFM/YyDsPg5iaD45WBVTV+IMivuNzmvLAIb8Tc 3kAhTVK8BbjYxwrVWZbX5jt4hi6Az8+Lm3CDkHVV8Ezu0aRYUm+zetqiz/diZxhq 7VGuGTGVNxqnESno6dumxSLTtG1OMGlvnth3BxCM1ZzvALGEAGw33wcQ+tYfYDok d/lC7D69SQA+O1nm0GxoF50UFDJqUfBZNztboLJMnmQ3tamq2ROf5bvH9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH32okeC7hTl5AvvD/dgch330+HRMB8GA1UdIwQY MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt OTc1YTIzN2VjZDA2LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2 LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPb/LlqFB aXdxwRFniiIPRluOIy9Mse2eFgXezLzyhYh0deI1A1uMlg/J/5fy3ilhdlzBAKNh AVFk/kZ5W8do2AwHJ/TuRuNSDyL93YwGUMv0mKSWShoazf4xRi9YxXw++rRAajO7 llj7Vq91aXWboX9P9kI0svpePiXABrGcoUNmp7lF3iYknNuKGBNA+lx9RldZhRV/ kttTcbKuJ1ad3+pOS45qp0V1WblgQg2yJr4aTHo/UQ3u3KCnPc3WgTO3hblWcy3P nbibVywrRhe1fuKVN/n6eP45Gja5IDg/SOVHhR3P5jqEddLhGuGw9/u4LfLu/G5C h6G2sSi8NtBmeg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:53 2025 by rpki-client