This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json) Hash identifier: 0QHqSCf7pworzEKmMayAdCHhjbmC+YgIfHaEnjBAbj8= Subject key identifier: 17:2C:59:20:DB:00:EF:A7:BE:75:5A:40:93:12:74:88:B0:02:69:96 Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45 Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45 Certificate serial: 019AF19B5042E4DA467F80B56B66C8C0FD19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: kOPh2GngVIqcuwJPxWKdmmYHQB3g8f/JOiJJQpHGisk=) 2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=) 3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:50:42:e4:da:46:7f:80:b5:6b:66:c8:c0:fd:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=172c5920db00efa7be755a4093127488b0026996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:f0:09:74:fb:9d:10:f9:6f:a0:9e:6f:52: 66:9e:c0:c2:31:f9:1f:07:65:d9:04:f9:6e:bf:f0: c5:3e:35:dc:d7:28:99:71:15:51:18:30:b8:64:c0: df:52:46:87:74:ec:36:dc:72:c0:0c:1f:ba:63:44: 04:36:53:e1:27:bd:a5:e8:50:96:d5:d6:4a:1e:0a: 5c:7e:37:61:80:e5:1c:12:4f:cd:22:19:72:c6:27: 3a:02:6c:d3:70:b3:a2:44:39:85:ec:26:92:4c:d5: 45:f6:3c:8d:6f:86:c1:17:21:45:7e:9d:1a:8b:4f: 2c:da:57:ef:46:3d:72:bc:07:57:3b:4e:8f:d4:d5: a0:85:86:38:42:cf:b9:8f:22:1c:17:57:cc:67:e4: f4:63:b1:ce:17:97:d3:dc:ad:45:ba:1d:24:45:06: eb:98:ce:e8:a5:01:98:1e:eb:d0:6f:69:90:6b:50: 9a:e7:f7:d7:51:ba:ac:61:3f:ae:de:95:c6:7d:64: fb:81:17:77:7e:e4:e9:54:9b:bb:2e:b7:5a:b5:ca: 6c:72:51:aa:f2:8c:f7:5d:49:89:c8:93:98:5a:b1: 8d:77:2b:8b:ee:2b:cd:37:ae:aa:11:25:8c:13:dc: 1c:98:ed:e5:a1:63:8d:c9:2b:1c:64:f8:f4:fd:f4: 28:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2C:59:20:DB:00:EF:A7:BE:75:5A:40:93:12:74:88:B0:02:69:96 X509v3 Authority Key Identifier: keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e4:bd:85:1c:bf:81:4a:cf:fb:2a:dd:85:85:a1:34:ec:ba: f7:94:ed:24:56:e4:4c:3e:17:75:48:7f:fa:d8:2d:43:6c:f2: e3:fb:dd:75:e5:7d:b5:93:f8:e2:5c:a0:8b:26:d8:35:7a:5f: 20:f7:9e:2f:d9:92:17:f2:b3:f9:75:26:30:33:8a:58:1e:16: f1:ed:3e:24:e8:6c:c5:9c:00:18:61:33:5a:2a:d6:7d:b4:92: f7:2f:3c:fb:f4:0a:ef:4c:4f:92:b2:cd:c8:d8:b6:42:9c:33: e9:53:bf:3d:c6:dd:e6:f6:26:5b:2f:79:7d:82:5b:f6:c3:fc: e3:3f:58:4e:22:79:6a:a7:a2:e1:f8:58:90:50:2e:d5:5c:6b: 13:7c:6e:62:ea:01:7f:88:24:ff:57:9b:ad:97:6d:50:05:91: 8a:06:33:40:f1:91:24:12:38:9c:83:b3:cd:03:ca:c8:a2:c7: 9a:4e:11:b6:62:bb:b5:55:22:45:c0:14:ea:bc:20:60:17:8d: 4d:88:eb:22:56:45:06:79:04:ff:67:13:a3:bd:ba:18:8e:03: 8b:63:e3:df:97:08:2f:3b:82:25:57:b7:57:c4:68:a0:b3:fe: f3:05:b0:6a:8b:e4:2e:25:16:4a:62:b3:7b:d8:94:59:c6:ca: 89:22:95:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1BC5NpGf4C1a2bIwP0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGNkMzQ5MTFjZmNlOTQ2YTIyZWE4NDY2MzczOGNkY2Mw NzZkNDUwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EygxNzJjNTkyMGRiMDBlZmE3YmU3NTVhNDA5MzEyNzQ4OGIwMDI2OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEzwCXT7nRD5b6Ceb1JmnsDCMfkf B2XZBPluv/DFPjXc1yiZcRVRGDC4ZMDfUkaHdOw23HLADB+6Y0QENlPhJ72l6FCW 1dZKHgpcfjdhgOUcEk/NIhlyxic6AmzTcLOiRDmF7CaSTNVF9jyNb4bBFyFFfp0a i08s2lfvRj1yvAdXO06P1NWghYY4Qs+5jyIcF1fMZ+T0Y7HOF5fT3K1Fuh0kRQbr mM7opQGYHuvQb2mQa1Ca5/fXUbqsYT+u3pXGfWT7gRd3fuTpVJu7LrdatcpsclGq 8oz3XUmJyJOYWrGNdyuL7ivNN66qESWME9wcmO3loWONySscZPj0/fQo8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcsWSDbAO+nvnVaQJMSdIiwAmmWMB8GA1UdIwQY MBaAFCNM00kRz86UaiLqhGY3OM3MB21FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4Zjkt MTI1NTAwZDJiZTk0LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4ZjktMTI1NTAwZDJiZTk0 LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOS9hRy/ gUrP+yrdhYWhNOy695TtJFbkTD4XdUh/+tgtQ2zy4/vddeV9tZP44lygiybYNXpf IPeeL9mSF/Kz+XUmMDOKWB4W8e0+JOhsxZwAGGEzWirWfbSS9y88+/QK70xPkrLN yNi2Qpwz6VO/Pcbd5vYmWy95fYJb9sP84z9YTiJ5aqei4fhYkFAu1VxrE3xuYuoB f4gk/1ebrZdtUAWRigYzQPGRJBI4nIOzzQPKyKLHmk4RtmK7tVUiRcAU6rwgYBeN TYjrIlZFBnkE/2cTo726GI4Di2Pj35cILzuCJVe3V8RooLP+8wWwaovkLiUWSmKz e9iUWcbKiSKVwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:50 2025 by rpki-client