This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json) Hash identifier: L4ZHpwzsyftfW/cCJatyTZeSbPA6HFb88nUGsX3+QiQ= Subject key identifier: 84:E1:6F:E3:35:8B:97:83:35:1C:92:30:41:AC:01:1F:DD:91:30:9B Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4 Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4 Certificate serial: 019B30E90FCE3D3CC95A31C18695597948A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 10:02:18 +0000 Manifest this update: Thu 18 Dec 2025 10:02:18 +0000 Manifest next update: Fri 19 Dec 2025 10:02:18 +0000 Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: uuerOAB1n/Rtni25yHXCHG3Jtj2VxiZqtpgD8mmb4rE=) 2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=) 3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=) 4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=) 5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:0f:ce:3d:3c:c9:5a:31:c1:86:95:59:79:48:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4 Validity Not Before: Dec 18 10:02:18 2025 GMT Not After : Dec 19 10:02:18 2025 GMT Subject: CN=84e16fe3358b9783351c923041ac011fdd91309b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:43:f5:cd:fb:f9:fb:46:17:e9:3a:c9:da: 00:4b:98:1c:8c:f7:c4:5b:b8:40:65:a4:f1:92:f4: 60:c3:a6:8c:b6:ca:f4:66:04:a0:f0:b7:47:32:8c: 0f:7a:16:11:3b:4d:44:6f:ba:01:84:eb:c0:cb:d3: 4b:d0:f0:b2:34:30:be:5a:de:c5:2d:9e:73:d9:9c: 6d:77:9f:33:1c:87:d7:74:27:26:ec:ca:5c:c4:d1: 86:ba:8a:c4:ea:17:d3:df:32:84:6f:9c:5e:6b:73: be:61:da:e4:4e:c3:d1:9e:e6:0b:05:8d:15:82:60: 49:07:4b:0d:24:2c:1c:5a:13:e1:88:d2:5b:12:31: 8e:5f:bc:36:9b:35:87:75:11:a2:c6:02:68:8e:78: 06:e5:51:d6:8b:dd:fd:9b:52:f7:25:15:c0:18:26: 34:97:41:69:82:43:d0:8c:69:55:fd:32:50:dc:cd: 6a:a6:b0:1c:ad:a4:6a:b2:36:94:12:9f:30:2b:48: aa:b7:c5:04:46:c7:41:5e:38:45:6f:a7:a4:b4:d4: d3:2a:34:8d:f0:75:2d:23:ae:e3:24:37:35:ac:13: 82:fe:b2:a3:58:0f:b4:64:99:98:87:39:8b:f0:10: e2:57:4c:4f:bd:dc:6d:c3:75:61:c4:39:ab:66:c1: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E1:6F:E3:35:8B:97:83:35:1C:92:30:41:AC:01:1F:DD:91:30:9B X509v3 Authority Key Identifier: keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0b:ed:83:2d:10:13:ed:e2:3b:9e:48:ef:e5:72:60:5c:f9: d7:e6:0e:0e:1f:23:60:f6:09:ed:20:3d:ad:1c:f5:17:b6:5f: 87:f8:a1:12:90:6c:5a:89:e2:16:f6:49:04:ff:1f:e2:47:29: 2e:af:03:c5:df:48:78:37:eb:5e:7d:70:f9:96:de:21:92:2a: d7:cd:36:b5:f2:1f:d8:da:9e:c7:40:b6:9b:74:b3:eb:95:67: 71:76:65:2c:0d:a4:90:5c:af:98:23:5a:85:79:95:4c:b1:cf: 3a:8c:fb:8d:19:49:b3:a1:9f:83:58:6d:c1:5b:9d:aa:6f:a7: 9c:6b:03:85:fa:4c:19:3d:03:7d:71:73:c1:ed:c9:99:6b:b4: 14:d5:a1:95:b8:4a:84:9b:6f:40:5f:b8:c3:02:75:a8:35:0a: 50:07:ef:5d:c3:93:ad:51:c3:23:58:be:72:e6:16:77:a9:bd: cc:25:96:db:98:96:95:84:b1:f6:9e:08:ba:71:b4:4c:9e:95: 0c:ba:65:96:aa:f9:b5:88:8c:00:35:e1:bc:62:e9:f6:63:55: 97:d0:01:f0:ce:27:ec:1a:7d:75:11:ca:45:3d:da:49:f6:de: 9c:3c:7f:36:4a:43:91:3c:c0:10:c0:4d:b2:11:10:77:d6:c9: b8:f3:7c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Q/OPTzJWjHBhpVZeUikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYmExZWM0ZjAzNWE3MmRmYTM5ZTkzMGFkOGVjNTQzNjhl YjdhZjQwHhcNMjUxMjE4MTAwMjE4WhcNMjUxMjE5MTAwMjE4WjAzMTEwLwYDVQQD Eyg4NGUxNmZlMzM1OGI5NzgzMzUxYzkyMzA0MWFjMDExZmRkOTEzMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTRD9c37+ftGF+k6ydoAS5gcjPfE W7hAZaTxkvRgw6aMtsr0ZgSg8LdHMowPehYRO01Eb7oBhOvAy9NL0PCyNDC+Wt7F LZ5z2Zxtd58zHIfXdCcm7MpcxNGGuorE6hfT3zKEb5xea3O+YdrkTsPRnuYLBY0V gmBJB0sNJCwcWhPhiNJbEjGOX7w2mzWHdRGixgJojngG5VHWi939m1L3JRXAGCY0 l0FpgkPQjGlV/TJQ3M1qprAcraRqsjaUEp8wK0iqt8UERsdBXjhFb6ektNTTKjSN 8HUtI67jJDc1rBOC/rKjWA+0ZJmYhzmL8BDiV0xPvdxtw3VhxDmrZsFFhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIThb+M1i5eDNRySMEGsAR/dkTCbMB8GA1UdIwQY MBaAFCO6HsTwNact+jnpMK2OxUNo63r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDct YmRlNjQ0OGI3ODZjLzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDctYmRlNjQ0OGI3ODZj LzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwvtgy0Q E+3iO55I7+VyYFz51+YODh8jYPYJ7SA9rRz1F7Zfh/ihEpBsWoniFvZJBP8f4kcp Lq8Dxd9IeDfrXn1w+ZbeIZIq1802tfIf2Nqex0C2m3Sz65VncXZlLA2kkFyvmCNa hXmVTLHPOoz7jRlJs6Gfg1htwVudqm+nnGsDhfpMGT0DfXFzwe3JmWu0FNWhlbhK hJtvQF+4wwJ1qDUKUAfvXcOTrVHDI1i+cuYWd6m9zCWW25iWlYSx9p4IunG0TJ6V DLpllqr5tYiMADXhvGLp9mNVl9AB8M4n7Bp9dRHKRT3aSfbenDx/NkpDkTzAEMBN shEQd9bJuPN81g== -----END CERTIFICATE-----Generated at Thu Dec 18 12:48:47 2025 by rpki-client