This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json) Hash identifier: OCB6S0BxTkG7fBlROcAJ6eQbVOyn9C1s6myS3Lsz3h8= Subject key identifier: 21:BE:21:6A:66:FA:F6:14:02:4D:92:3C:AB:DD:78:F2:36:33:19:E0 Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24 Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824 Certificate serial: 019AF0881E62ACF92BFAE3964D89A66F5E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft Manifest number: 0C38 Signing time: Fri 05 Dec 2025 22:00:43 +0000 Manifest this update: Fri 05 Dec 2025 22:00:43 +0000 Manifest next update: Sat 06 Dec 2025 22:00:43 +0000 Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: 2Rm2Ktt6NNMYWPmPee/CVlgWfhORig2er0dKO2zEOf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1e:62:ac:f9:2b:fa:e3:96:4d:89:a6:6f:5e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824 Validity Not Before: Dec 5 22:00:43 2025 GMT Not After : Dec 6 22:00:43 2025 GMT Subject: CN=21be216a66faf614024d923cabdd78f2363319e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:61:79:01:b9:cc:3a:43:17:c6:de:c1:5f: 2b:3e:5b:25:21:a0:7b:c3:0a:62:7c:e0:ce:ca:e8: e1:4d:99:0e:74:78:1a:85:15:e7:d2:5f:2d:90:e1: ec:7e:18:ba:37:7f:8c:89:98:b6:f6:43:5d:84:d0: a7:6e:78:bc:ee:39:48:42:ce:15:69:2c:2b:51:21: 89:a3:a8:67:0b:41:84:b9:fc:58:f5:33:8d:41:87: 34:23:e4:87:fe:0d:35:d1:0f:46:4b:c9:49:62:93: 99:d0:5d:98:04:ee:fb:42:0a:ae:6e:69:22:c3:b0: b2:2a:a3:39:f6:49:c7:e2:f3:92:df:dd:1f:49:cf: ef:c5:18:9e:32:4b:41:78:a8:b0:82:f3:cd:d5:e9: d0:d2:4d:d6:c5:5a:59:4f:86:8b:fe:2f:36:d7:16: ff:55:99:1f:82:87:79:ea:58:8e:84:51:a2:65:9f: d0:bb:cd:01:3b:38:05:cd:50:39:9d:ad:1b:25:4e: 3e:31:16:af:f0:30:83:83:96:2e:b9:1a:52:bd:7f: 12:50:a8:17:87:9e:49:fe:96:70:b8:c7:13:a6:11: bb:26:ac:af:fe:7b:3b:99:b3:63:97:14:9a:9a:f1: 78:99:2c:fb:e4:88:81:4b:3d:b9:b7:ad:54:ed:09: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:21:6A:66:FA:F6:14:02:4D:92:3C:AB:DD:78:F2:36:33:19:E0 X509v3 Authority Key Identifier: keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:eb:1c:d5:8f:ad:fd:6c:9f:b4:ad:28:ce:ae:83:99:c5:7c: 2d:75:2f:26:77:e6:5e:1e:c4:a8:46:7f:81:bc:36:bd:29:05: 83:20:1c:6b:d4:ed:1e:ee:9d:9c:14:f7:7e:f7:70:c2:bf:a2: 1b:96:22:7b:ba:65:59:91:a9:cc:3f:f3:37:48:7e:08:29:e0: eb:8c:8c:9f:eb:11:ef:32:a0:c1:f3:a0:1f:36:e3:70:01:ff: e5:8e:0e:e6:5f:c3:c6:b5:2d:30:cb:bd:d2:e1:8c:9e:16:23: c4:7d:db:34:01:fb:23:f7:22:06:44:1a:a1:fd:6c:af:d7:a7: 86:f8:01:e9:55:8f:a4:33:ca:14:67:9c:8f:e5:de:84:a1:aa: 07:26:c8:80:28:1a:9f:5d:b5:4b:04:1e:84:62:6c:54:5f:5c: 22:2c:58:90:1a:ae:77:f5:23:e2:ad:56:ae:18:73:f6:fd:2b: 91:6f:46:bc:a4:a1:28:ff:7d:2a:cb:cc:8c:94:c1:b6:d2:06: 05:61:6b:70:cb:0c:c4:90:49:2c:bd:5c:74:84:34:2c:46:b4: d1:a9:10:6f:55:0b:b9:cc:32:be:d6:9d:34:20:e3:b7:c7:db: 21:b3:04:26:c4:73:99:c0:4f:ed:1d:02:ea:09:41:6c:ce:5f: 8b:fd:55:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiB5irPkr+uOWTYmmb16IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZDg5MzFmNjM1Nzk0MjhiZjA4Y2NiMTk5YTNhOThkY2Jh NmI4MjQwHhcNMjUxMjA1MjIwMDQzWhcNMjUxMjA2MjIwMDQzWjAzMTEwLwYDVQQD EygyMWJlMjE2YTY2ZmFmNjE0MDI0ZDkyM2NhYmRkNzhmMjM2MzMxOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMlheQG5zDpDF8bewV8rPlslIaB7 wwpifODOyujhTZkOdHgahRXn0l8tkOHsfhi6N3+MiZi29kNdhNCnbni87jlIQs4V aSwrUSGJo6hnC0GEufxY9TONQYc0I+SH/g010Q9GS8lJYpOZ0F2YBO77Qgqubmki w7CyKqM59knH4vOS390fSc/vxRieMktBeKiwgvPN1enQ0k3WxVpZT4aL/i821xb/ VZkfgod56liOhFGiZZ/Qu80BOzgFzVA5na0bJU4+MRav8DCDg5YuuRpSvX8SUKgX h55J/pZwuMcTphG7Jqyv/ns7mbNjlxSamvF4mSz75IiBSz25t61U7Ql0mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG+IWpm+vYUAk2SPKvdePI2MxngMB8GA1UdIwQY MBaAFIvYkx9jV5QovwjMsZmjqY3LprgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWM3YmItMjFkYy00YTExLTk3OTEt NGVlMTZkNmM4MGE2LzEvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83YWM3YmItMjFkYy00YTExLTk3OTEtNGVlMTZkNmM4MGE2 LzEvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGesc1Y+t /WyftK0ozq6DmcV8LXUvJnfmXh7EqEZ/gbw2vSkFgyAca9TtHu6dnBT3fvdwwr+i G5Yie7plWZGpzD/zN0h+CCng64yMn+sR7zKgwfOgHzbjcAH/5Y4O5l/DxrUtMMu9 0uGMnhYjxH3bNAH7I/ciBkQaof1sr9enhvgB6VWPpDPKFGecj+XehKGqBybIgCga n121SwQehGJsVF9cIixYkBqud/Uj4q1Wrhhz9v0rkW9GvKShKP99KsvMjJTBttIG BWFrcMsMxJBJLL1cdIQ0LEa00akQb1ULucwyvtadNCDjt8fbIbMEJsRzmcBP7R0C 6glBbM5fi/1Vfw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:18 2025 by rpki-client