This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json) Hash identifier: GivYNqvGE44c+5z/ObpnCNhA+QBNaXtGrfz+hSo23sE= Subject key identifier: 09:31:37:3E:5C:1C:D5:29:47:FC:83:A9:40:C2:F4:50:E3:AF:1D:7F Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Certificate serial: 019AF35252593974713B2ACDAB95D519E6AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:49 +0000 Manifest this update: Sat 06 Dec 2025 11:00:49 +0000 Manifest next update: Sun 07 Dec 2025 11:00:49 +0000 Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=) 2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: jviQ9Td6yxAtbNQT7PaEf/xaH3eH+Nmf2Ff8xAqiYEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:52:59:39:74:71:3b:2a:cd:ab:95:d5:19:e6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Validity Not Before: Dec 6 11:00:49 2025 GMT Not After : Dec 7 11:00:49 2025 GMT Subject: CN=0931373e5c1cd52947fc83a940c2f450e3af1d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:c7:4e:58:fd:56:9e:09:6c:a3:97:97:79: 85:48:0f:cf:ab:6b:8a:9b:a6:8d:f3:23:37:b6:32: 43:20:06:23:e5:9f:29:e9:39:ef:66:65:f9:ae:c7: a5:f7:1d:13:d7:b7:f3:06:e0:a7:09:fd:fd:41:ce: 27:a2:21:27:22:94:84:f8:33:a7:00:b4:58:77:dd: f1:b1:d0:8e:88:bd:95:b2:a4:64:93:8f:31:49:37: 07:69:2a:20:4a:7f:9d:63:dc:e5:e8:6f:7f:84:6b: 85:0f:13:fc:f4:24:52:92:53:1d:94:f3:cc:51:40: ee:03:c7:14:00:65:e0:09:d4:1e:71:86:3a:ae:5d: 1c:b6:97:2c:64:43:2a:1e:14:1e:08:17:f8:48:6b: 4b:b2:2a:da:db:5d:00:8b:cd:76:d4:6f:4a:bc:67: 76:4f:89:e6:71:79:cd:20:28:0f:39:29:7f:1a:a6: 62:f4:be:cb:83:49:cd:08:ec:19:00:cc:27:07:e9: 80:39:7c:62:b5:92:5c:17:3d:08:20:43:d8:97:6b: 4e:5d:72:37:77:2e:d9:fb:dd:b8:9d:90:da:cd:97: da:93:67:f1:25:c3:41:99:8b:ae:ca:c8:a4:e3:d3: be:f5:e0:8e:d6:e9:dd:70:9e:03:f2:a5:f7:c0:d0: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:31:37:3E:5C:1C:D5:29:47:FC:83:A9:40:C2:F4:50:E3:AF:1D:7F X509v3 Authority Key Identifier: keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9e:b4:5a:1e:92:a4:20:62:47:a0:58:ac:42:49:58:18:0f: 67:e2:40:35:b4:84:06:0a:84:0b:4b:c4:f5:27:1c:d3:3b:28: 4b:0d:28:78:57:0e:90:75:a0:00:ad:90:c2:05:45:22:85:0e: 32:91:e9:b9:57:1c:d3:cc:6d:d1:d8:14:71:3d:f4:51:62:75: d0:f2:85:b2:b7:06:c1:ab:d1:bb:70:cd:76:ab:d7:1b:89:90: 0a:d7:07:3b:87:af:77:b8:17:02:c2:09:6d:80:fa:d1:69:0d: 7b:85:92:b3:8c:eb:72:5e:3b:f7:78:73:37:13:18:53:b6:c2: f7:c7:96:6b:ef:63:0f:20:2c:64:6e:ac:60:1d:ab:bf:4d:99: fa:72:dc:a5:b6:8a:21:55:92:df:16:7c:db:13:31:5b:83:26: 66:8a:c9:e8:49:b4:91:b9:62:2f:97:ec:4c:9f:39:0f:d3:52: 84:30:46:b6:e8:ce:da:5d:6f:f3:d2:10:e5:de:6d:18:05:a3: d3:2b:ef:9e:5d:21:41:9f:ef:bd:65:d9:b6:00:0c:36:9a:93: 2b:2e:e8:6e:b2:9e:8d:ed:46:58:fe:fd:fc:f4:16:ff:ff:b7: 62:a4:0c:2b:40:b6:b8:4c:8b:82:d9:95:9c:83:09:9a:b1:ae: 48:16:b8:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlJZOXRxOyrNq5XVGeaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjIxZjczMTZlMWJkNzhmODZlZWE2NDI1ZDVjMjI5Yjk4 MGY5YWMwHhcNMjUxMjA2MTEwMDQ5WhcNMjUxMjA3MTEwMDQ5WjAzMTEwLwYDVQQD EygwOTMxMzczZTVjMWNkNTI5NDdmYzgzYTk0MGMyZjQ1MGUzYWYxZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT/HTlj9Vp4JbKOXl3mFSA/Pq2uK m6aN8yM3tjJDIAYj5Z8p6TnvZmX5rsel9x0T17fzBuCnCf39Qc4noiEnIpSE+DOn ALRYd93xsdCOiL2VsqRkk48xSTcHaSogSn+dY9zl6G9/hGuFDxP89CRSklMdlPPM UUDuA8cUAGXgCdQecYY6rl0ctpcsZEMqHhQeCBf4SGtLsira210Ai8121G9KvGd2 T4nmcXnNICgPOSl/GqZi9L7Lg0nNCOwZAMwnB+mAOXxitZJcFz0IIEPYl2tOXXI3 dy7Z+924nZDazZfak2fxJcNBmYuuysik49O+9eCO1undcJ4D8qX3wNBksQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkxNz5cHNUpR/yDqUDC9FDjrx1/MB8GA1UdIwQY MBaAFCPyH3MW4b14+G7qZCXVwim5gPmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2Yt OTc0YzMxZjI2NjBiLzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2YtOTc0YzMxZjI2NjBi LzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZ60Wh6S pCBiR6BYrEJJWBgPZ+JANbSEBgqEC0vE9Scc0zsoSw0oeFcOkHWgAK2QwgVFIoUO MpHpuVcc08xt0dgUcT30UWJ10PKFsrcGwavRu3DNdqvXG4mQCtcHO4evd7gXAsIJ bYD60WkNe4WSs4zrcl4793hzNxMYU7bC98eWa+9jDyAsZG6sYB2rv02Z+nLcpbaK IVWS3xZ82xMxW4MmZorJ6Em0kbliL5fsTJ85D9NShDBGtujO2l1v89IQ5d5tGAWj 0yvvnl0hQZ/vvWXZtgAMNpqTKy7obrKeje1GWP79/PQW//+3YqQMK0C2uEyLgtmV nIMJmrGuSBa45Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:25 2025 by rpki-client