This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: 91a7hIwwf3RBnqny7XoRNVD15r3N8Vu0FIi020TeA8k= Subject key identifier: 1D:5D:CF:E9:AC:96:0B:93:A3:A8:37:03:76:A1:99:26:36:16:18:76 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019AF19B0596EE696C51DF6F6733348FECC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0DA3 Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: YBENIStkExs6es+hpLr0SiYJ7he1JkZjOhpBHow52OA=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: d2w6eaQxd36UCs9xM2JnmsMwTwY.roa (hash: l3ruBISlGB0Od3S3VXyd+1Tt82SYApStASJlJnIUfFs=) 13: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 14: urBSbMAYWiUVjS4RHFmzGqwvjpw.roa (hash: rG62D9ZHzopifBP96CZirceLJDCthMyab0aYX69q+Bo=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:05:96:ee:69:6c:51:df:6f:67:33:34:8f:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=1d5dcfe9ac960b93a3a8370376a1992636161876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:5d:38:29:e7:ef:ac:1d:d6:14:60:07:ea: 0e:02:ac:6c:94:26:83:2a:31:f0:6e:63:ae:8f:d7: 8c:22:de:dd:a8:db:da:0b:3b:87:1b:f3:3d:9f:f0: 18:ce:48:00:88:ab:b2:7d:43:b2:bc:33:fa:19:67: 1a:01:cb:32:88:d7:11:d8:45:ab:97:32:1e:84:4d: 8e:38:4e:0a:48:88:42:ad:73:1d:7e:25:4f:42:5a: 3b:ed:4d:d7:17:88:71:2c:61:6b:3c:b4:3e:df:f7: 18:f6:44:54:f4:8e:d2:28:e6:c5:da:8a:95:20:e0: 55:e1:ae:c5:e0:de:9c:e9:5e:21:bb:07:df:20:30: 91:75:4f:b6:81:c9:44:04:00:98:7f:4e:86:76:cc: 31:87:5e:6e:cf:ad:2e:cc:84:1d:44:63:8c:12:07: fd:9f:b2:5b:1a:e7:d2:83:7e:a2:4e:f5:49:7b:11: c0:0d:8a:83:08:ee:72:66:35:41:f9:fe:0a:5e:dc: c1:e4:ce:5c:00:c5:af:56:5c:db:81:fd:69:db:71: 2a:b8:13:8b:6d:d8:2a:ca:2f:ba:3a:59:86:07:e0: cf:14:f6:1a:2a:29:bf:80:44:c3:6d:f3:f1:12:56: 98:0b:65:61:78:7d:9e:fc:a3:20:1e:b8:cd:04:58: 0f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5D:CF:E9:AC:96:0B:93:A3:A8:37:03:76:A1:99:26:36:16:18:76 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:70:24:28:bb:ac:f1:dc:f1:5d:71:58:16:ae:01:ec:09:cc: ff:70:0a:c7:b3:62:97:97:48:21:3b:bf:a9:fe:fd:b3:40:29: c2:d7:a9:86:a9:b4:39:22:b9:dd:50:f6:40:1a:bb:d2:c8:45: ac:3b:56:3e:1e:63:78:a5:3c:f3:9a:5a:28:a6:58:75:4f:de: c7:2d:0b:14:99:72:c7:9c:3d:e0:3f:28:55:9b:65:7d:75:af: fb:6f:42:b1:f2:a2:da:8c:f5:47:34:75:c3:b2:c6:a8:5c:1a: 7f:a5:4b:32:6e:1f:91:a2:b4:26:a8:16:fe:5a:98:9a:a5:79: c5:f8:ba:5f:c0:67:32:71:0d:4d:95:59:a6:0a:5f:6d:05:4d: 59:03:e0:60:5e:83:75:3f:72:aa:98:55:80:70:67:f5:32:86: 24:25:43:19:f2:15:2a:90:a3:75:5f:5d:f6:71:14:be:5c:d6: b4:54:60:5f:68:56:a0:fc:50:ba:6c:d9:f8:c9:3b:33:0f:81: 05:ac:d9:b6:3b:ac:a1:a1:6b:aa:58:38:cd:92:df:61:09:14: 6d:81:c3:1b:8d:67:d6:09:85:64:a8:19:aa:c8:e2:af:63:f4: 8a:6b:4e:d2:01:ee:8a:62:80:e0:e6:ad:23:00:d0:92:7e:94: 09:4a:15:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwWW7mlsUd9vZzM0j+zAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD EygxZDVkY2ZlOWFjOTYwYjkzYTNhODM3MDM3NmExOTkyNjM2MTYxODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYRdOCnn76wd1hRgB+oOAqxslCaD KjHwbmOuj9eMIt7dqNvaCzuHG/M9n/AYzkgAiKuyfUOyvDP6GWcaAcsyiNcR2EWr lzIehE2OOE4KSIhCrXMdfiVPQlo77U3XF4hxLGFrPLQ+3/cY9kRU9I7SKObF2oqV IOBV4a7F4N6c6V4huwffIDCRdU+2gclEBACYf06Gdswxh15uz60uzIQdRGOMEgf9 n7JbGufSg36iTvVJexHADYqDCO5yZjVB+f4KXtzB5M5cAMWvVlzbgf1p23EquBOL bdgqyi+6OlmGB+DPFPYaKim/gETDbfPxElaYC2VheH2e/KMgHrjNBFgPXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1dz+mslguTo6g3A3ahmSY2Fhh2MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnAkKLus 8dzxXXFYFq4B7AnM/3AKx7Nil5dIITu/qf79s0Apwtephqm0OSK53VD2QBq70shF rDtWPh5jeKU885paKKZYdU/exy0LFJlyx5w94D8oVZtlfXWv+29CsfKi2oz1RzR1 w7LGqFwaf6VLMm4fkaK0JqgW/lqYmqV5xfi6X8BnMnENTZVZpgpfbQVNWQPgYF6D dT9yqphVgHBn9TKGJCVDGfIVKpCjdV9d9nEUvlzWtFRgX2hWoPxQumzZ+Mk7Mw+B BazZtjusoaFrqlg4zZLfYQkUbYHDG41n1gmFZKgZqsjir2P0imtO0gHuimKA4Oat IwDQkn6UCUoV6A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:39 2025 by rpki-client