This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json) Hash identifier: WqTEVDRRsZFKD7gcdnUhsZe0Vlz1wtDAQFybPMqJf38= Subject key identifier: 14:6C:89:08:14:4D:27:2C:0E:3C:5D:CD:10:6C:E4:4E:BB:89:E5:F4 Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6 Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6 Certificate serial: 019AF5AF1E0791206B2F082DE879F5661D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft Manifest number: 14A8 Signing time: Sat 06 Dec 2025 22:01:25 +0000 Manifest this update: Sat 06 Dec 2025 22:01:25 +0000 Manifest next update: Sun 07 Dec 2025 22:01:25 +0000 Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=) 2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: nmOybe+S6Nrw/PvbdwZARClDKYHjp6LlADpoT9qJT2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:1e:07:91:20:6b:2f:08:2d:e8:79:f5:66:1d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6 Validity Not Before: Dec 6 22:01:25 2025 GMT Not After : Dec 7 22:01:25 2025 GMT Subject: CN=146c8908144d272c0e3c5dcd106ce44ebb89e5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:e8:ae:6c:e8:04:51:c6:08:8d:1a:19:2f: 62:1e:71:a7:80:d1:3e:09:2b:54:d5:42:21:e0:6b: 1f:c4:d5:3c:69:54:bb:7d:d9:8d:73:7f:cd:0c:3f: e1:99:7d:46:35:06:e8:53:4e:e7:c1:87:58:d1:f2: 1a:d3:c1:56:1f:fb:a8:29:db:6b:3c:2b:c7:22:86: b5:35:a9:2d:03:57:cc:81:98:4b:c4:3d:07:40:f4: 59:fd:7d:0f:8b:a8:3c:15:28:8e:d3:e2:f9:5a:9a: 3f:96:8c:4b:ab:6a:18:ba:9c:77:21:0a:90:85:fe: 76:1a:fb:81:50:c4:1e:02:22:5b:bc:88:d9:ec:cf: 18:67:d4:cb:d4:6e:bc:0b:80:df:0b:4f:79:e3:07: 97:3e:29:d6:89:de:0a:b0:4a:56:f8:cf:0d:e8:43: 74:f4:dc:e6:ff:0a:aa:4e:93:4a:42:28:00:dd:8a: 9e:b6:33:6b:f7:8f:e5:f1:ba:8b:ef:1c:26:6c:73: 40:1c:a7:b8:9e:14:42:60:60:e5:d3:56:eb:82:34: 01:e1:d0:56:9e:e4:e9:0b:9c:52:48:08:8b:df:56: 6e:5b:c4:a7:49:79:cd:78:40:4c:7a:cc:c2:6d:27: 7d:56:cd:21:9e:ba:b6:d2:82:f4:9c:70:4f:71:a1: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:89:08:14:4D:27:2C:0E:3C:5D:CD:10:6C:E4:4E:BB:89:E5:F4 X509v3 Authority Key Identifier: keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a8:a2:07:45:d1:4b:32:2b:db:32:14:0f:21:b7:e1:a4:a7: ae:d1:f0:8a:c0:04:65:01:34:bc:b0:c9:60:f8:e1:bf:1b:ed: ba:16:9c:27:bd:62:85:e7:9e:4c:b0:77:eb:f9:59:8d:63:42: b9:3a:b4:51:53:08:11:e7:e4:cf:77:dc:e0:60:1c:99:58:fa: ee:22:81:5e:9b:c5:bd:72:33:6e:cb:35:e7:34:9c:49:f0:6e: c5:20:bf:4b:a6:b4:62:09:94:38:77:7b:a0:76:26:a4:fe:b4: 97:77:0b:5f:3d:77:b3:7b:99:d2:01:2b:12:79:f4:cc:5e:95: 4d:47:4d:f6:0a:5b:b6:f0:d9:ea:6b:69:eb:07:fc:ef:33:86: d4:28:4c:56:85:32:49:cf:8e:7d:d9:33:7f:77:3c:1f:d7:8f: a0:13:65:7e:3f:77:4b:73:42:07:67:56:f8:e5:fa:2a:0f:26: 89:90:f2:0c:4e:b2:fb:02:66:12:a7:da:72:eb:45:46:fc:ed: fb:f6:bc:03:6b:3a:5a:19:dd:8e:d6:2e:68:86:5b:fc:cd:97: e0:34:d2:2e:ec:f3:08:d1:58:91:ac:37:4e:20:af:6a:c2:f4: 2c:cd:2c:3e:32:d5:35:db:7c:5a:d0:c7:37:e3:39:7d:93:70: a7:fd:6e:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rx4HkSBrLwgt6Hn1Zh2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzOWQwNjU3ZWFhZWYwOTZiZWM5NGIxMWY0ZDY5ZDBkM2Vk MDRjZTYwHhcNMjUxMjA2MjIwMTI1WhcNMjUxMjA3MjIwMTI1WjAzMTEwLwYDVQQD EygxNDZjODkwODE0NGQyNzJjMGUzYzVkY2QxMDZjZTQ0ZWJiODllNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaformzoBFHGCI0aGS9iHnGngNE+ CStU1UIh4GsfxNU8aVS7fdmNc3/NDD/hmX1GNQboU07nwYdY0fIa08FWH/uoKdtr PCvHIoa1NaktA1fMgZhLxD0HQPRZ/X0Pi6g8FSiO0+L5Wpo/loxLq2oYupx3IQqQ hf52GvuBUMQeAiJbvIjZ7M8YZ9TL1G68C4DfC0954weXPinWid4KsEpW+M8N6EN0 9Nzm/wqqTpNKQigA3YqetjNr94/l8bqL7xwmbHNAHKe4nhRCYGDl01brgjQB4dBW nuTpC5xSSAiL31ZuW8SnSXnNeEBMeszCbSd9Vs0hnrq20oL0nHBPcaHF8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRsiQgUTScsDjxdzRBs5E67ieX0MB8GA1UdIwQY MBaAFCOdBlfqrvCWvslLEfTWnQ0+0EzmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTUwR1YtcXU4SmEteVVzUjlOYWREVDdRVE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xZjFkNDMtNDNkYi00ZjRhLWI0OTQt N2RmOWFlNTNkNDg0LzEvSTUwR1YtcXU4SmEteVVzUjlOYWREVDdRVE9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xZjFkNDMtNDNkYi00ZjRhLWI0OTQtN2RmOWFlNTNkNDg0 LzEvSTUwR1YtcXU4SmEteVVzUjlOYWREVDdRVE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6iiB0XR SzIr2zIUDyG34aSnrtHwisAEZQE0vLDJYPjhvxvtuhacJ71iheeeTLB36/lZjWNC uTq0UVMIEefkz3fc4GAcmVj67iKBXpvFvXIzbss15zScSfBuxSC/S6a0YgmUOHd7 oHYmpP60l3cLXz13s3uZ0gErEnn0zF6VTUdN9gpbtvDZ6mtp6wf87zOG1ChMVoUy Sc+Ofdkzf3c8H9ePoBNlfj93S3NCB2dW+OX6Kg8miZDyDE6y+wJmEqfacutFRvzt +/a8A2s6WhndjtYuaIZb/M2X4DTSLuzzCNFYkaw3TiCvasL0LM0sPjLVNdt8WtDH N+M5fZNwp/1u4Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:16:17 2025 by rpki-client