This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json) Hash identifier: ro1E45+WANDdjENuu58o/ahM5+3472tfI8w8dcQbzfA= Subject key identifier: 93:60:E4:3F:33:62:92:08:B7:2C:AA:9B:23:0B:9D:9D:F2:3E:71:7E Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03 Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603 Certificate serial: 019AF1D21F027B90E50A2AA15A64D58DCFB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: yn+RmqjgM61iFl+6fj8yij9rk8JgPaRbfPlV/203Va4=) 2: VjhlG8a2ZawkNaB1appig3Nz2is.roa (hash: gke6BC6KbRZ7BZ8YEtQe4nlgcZZfU/kgtOMqrBXfKKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1f:02:7b:90:e5:0a:2a:a1:5a:64:d5:8d:cf:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603 Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=9360e43f33629208b72caa9b230b9d9df23e717e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:9e:d9:29:79:88:be:92:6b:f2:e5:6b:ba: 0c:e3:a9:ab:86:a1:f2:3e:49:6e:6c:32:32:25:83: ee:9e:b6:61:2f:93:7e:52:49:f9:04:b7:82:6b:96: 1e:c5:4a:f7:4c:b7:33:63:ed:93:08:b9:28:fb:5a: c3:d2:bf:a8:84:a8:2a:66:bb:e2:05:05:53:a8:12: ae:3f:43:8e:97:94:e3:c6:27:50:77:26:9a:5a:f5: 4c:29:29:4c:d5:54:71:10:88:67:9e:9d:5f:ac:ce: bb:58:5e:3d:8d:3f:64:43:5a:49:0b:06:f5:3c:b5: bb:db:b8:d0:ef:45:1b:c3:b7:05:f3:6f:39:a5:60: 62:2b:81:9f:d4:dc:2d:0a:95:b0:cc:b1:ec:39:4c: a4:68:0f:ac:6b:ef:59:82:6d:76:86:35:92:a0:13: 61:07:93:ef:7d:34:3e:83:7d:ab:dc:96:f1:e2:a5: 65:e2:43:90:81:04:39:d4:ab:64:ca:54:aa:09:48: ac:2f:02:35:95:2e:16:57:2f:7c:9a:58:0b:81:87: 22:7d:b6:80:f5:59:78:e9:12:d1:2f:8e:16:c5:92: df:43:fd:b3:50:f4:7d:03:44:3a:9b:dc:bc:86:fe: 80:f2:03:a6:1f:b6:da:63:a5:81:01:57:e4:95:03: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:E4:3F:33:62:92:08:B7:2C:AA:9B:23:0B:9D:9D:F2:3E:71:7E X509v3 Authority Key Identifier: keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6e:af:81:1a:db:7a:d7:84:80:d8:ab:4d:ce:e1:bc:f0:36: fb:7e:90:b3:5b:40:82:e9:bc:98:80:dc:da:3d:f8:7d:98:9d: 9a:69:04:36:82:3b:02:67:d2:cf:a4:3b:b5:70:22:7f:80:f2: 86:01:a7:90:41:08:3b:a7:f3:ba:50:1c:82:9e:3c:90:3d:80: 45:04:7d:12:39:29:30:de:b1:57:bf:90:90:b3:cc:f8:af:eb: a2:48:0d:37:ef:6f:0d:86:cf:7a:fc:00:e0:63:f4:45:41:12: 3b:ea:c0:d5:7b:eb:34:c0:c6:b9:dc:90:e4:ed:ee:a9:68:d4: 2c:6e:d6:b7:e8:f3:42:8f:99:a3:b0:3f:6e:f3:68:87:5d:d2: 67:df:a6:0a:67:c5:57:a0:ab:bc:68:5a:0f:c8:cf:c0:4b:65: d2:9e:b6:0e:d7:e1:41:9c:12:8c:05:18:75:19:ef:cd:82:31: 07:d4:bf:50:79:ca:0a:ef:9b:43:23:bb:34:13:d0:a1:14:35: cd:a3:78:66:8c:05:73:cc:87:a8:15:cc:2d:ec:3f:d8:bd:53: 1b:de:5a:8d:d0:ba:09:53:41:30:6d:87:a1:e2:b8:4b:bf:37: 9e:ff:50:8b:3b:6e:f8:d3:f9:68:6d:7e:ef:76:05:d3:10:5c: 88:aa:ca:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0h8Ce5DlCiqhWmTVjc+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNzA4NDcxMmZkZWJiMWJmYzVhOGMwMjYyZDkxOWE4YWE0 NDA2MDMwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD Eyg5MzYwZTQzZjMzNjI5MjA4YjcyY2FhOWIyMzBiOWQ5ZGYyM2U3MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBue2Sl5iL6Sa/Lla7oM46mrhqHy PklubDIyJYPunrZhL5N+Ukn5BLeCa5YexUr3TLczY+2TCLko+1rD0r+ohKgqZrvi BQVTqBKuP0OOl5TjxidQdyaaWvVMKSlM1VRxEIhnnp1frM67WF49jT9kQ1pJCwb1 PLW727jQ70Ubw7cF8285pWBiK4Gf1NwtCpWwzLHsOUykaA+sa+9Zgm12hjWSoBNh B5PvfTQ+g32r3Jbx4qVl4kOQgQQ51KtkylSqCUisLwI1lS4WVy98mlgLgYcifbaA 9Vl46RLRL44WxZLfQ/2zUPR9A0Q6m9y8hv6A8gOmH7baY6WBAVfklQM4nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNg5D8zYpIItyyqmyMLnZ3yPnF+MB8GA1UdIwQY MBaAFCNwhHEv3rsb/FqMAmLZGaiqRAYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgt N2UxMzI5ZTA1ZmY0LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgtN2UxMzI5ZTA1ZmY0 LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW6vgRrb eteEgNirTc7hvPA2+36Qs1tAgum8mIDc2j34fZidmmkENoI7AmfSz6Q7tXAif4Dy hgGnkEEIO6fzulAcgp48kD2ARQR9EjkpMN6xV7+QkLPM+K/rokgNN+9vDYbPevwA 4GP0RUESO+rA1XvrNMDGudyQ5O3uqWjULG7Wt+jzQo+Zo7A/bvNoh13SZ9+mCmfF V6CrvGhaD8jPwEtl0p62DtfhQZwSjAUYdRnvzYIxB9S/UHnKCu+bQyO7NBPQoRQ1 zaN4ZowFc8yHqBXMLew/2L1TG95ajdC6CVNBMG2HoeK4S783nv9Qiztu+NP5aG1+ 73YF0xBciKrK5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:00 2025 by rpki-client