This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json) Hash identifier: iRRs+JAggBXz2IrLy1rdo2aK96hhX+d2Jj502C1SFnI= Subject key identifier: A9:35:0B:8A:36:80:9C:55:1C:8C:2D:2B:4F:A9:D7:76:EB:10:E0:DB Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68 Certificate serial: 019AF0BEECA4CDA996D3E2C18166161C0B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft Manifest number: 134D Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=) 2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: STBHH0+V5Bk9W5U+Uhv7Rs7K1sxHWK3cZKK6h/ZhK/w=) 3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ec:a4:cd:a9:96:d3:e2:c1:81:66:16:1c:0b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68 Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=a9350b8a36809c551c8c2d2b4fa9d776eb10e0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:7a:d8:2e:46:ad:be:48:d6:99:46:99:88: 22:69:01:1f:78:20:3d:c5:84:c4:60:f4:c2:fd:49: 35:27:a7:2c:2b:de:f6:93:79:1e:93:00:f1:4e:75: d7:c2:36:61:96:27:4d:dd:d6:5c:3d:d6:4c:86:08: 1f:fc:55:e5:5f:09:73:52:5d:7f:79:ef:ca:56:ee: 88:b4:aa:95:13:a0:43:2c:80:67:d3:9f:8e:8d:31: e3:d2:63:03:bc:cd:4f:62:4b:2d:9f:ce:2b:b2:89: db:35:b3:d9:cd:8f:a2:a2:79:a6:77:b3:0a:c5:8f: d7:84:21:5b:39:aa:1e:5f:de:e2:b5:fc:8c:49:61: 5d:56:83:95:b8:52:7a:a5:e1:77:75:a4:2b:4f:54: ce:48:62:df:44:bf:19:c0:fa:dc:5a:7c:0c:e1:cc: e5:7d:1e:a5:cb:e7:ac:37:98:88:87:20:c2:a3:be: 3b:fc:2b:ad:61:d9:54:e9:68:86:56:93:05:29:86: 46:bd:b6:a1:4f:fa:d7:a5:ab:36:59:03:9d:31:65: 1f:9b:31:06:5c:3b:ba:eb:70:7b:64:c2:6a:3a:e8: da:f7:65:ff:a4:fb:bd:37:53:93:e5:e1:3e:84:c3: 34:4f:c0:d5:e4:51:e9:92:22:82:40:90:a7:f8:d5: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:35:0B:8A:36:80:9C:55:1C:8C:2D:2B:4F:A9:D7:76:EB:10:E0:DB X509v3 Authority Key Identifier: keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a8:1b:aa:70:92:56:5a:f7:88:6e:0b:72:95:ed:02:99:e2: 75:4a:58:d6:f0:e6:03:5a:40:ee:5d:60:c6:a7:18:af:e1:a8: 2e:fc:96:d9:c8:65:69:ed:c6:58:21:0f:74:92:3b:43:ea:06: 29:be:37:c3:25:6e:31:4b:e4:dc:79:1e:a0:bb:2a:e8:9a:04: 6b:ce:0d:5c:1d:73:19:e3:18:23:b4:b0:b8:b2:d8:71:0d:92: 51:fb:24:2c:d5:e5:3d:97:0f:b5:c4:94:b1:90:f3:73:68:ff: 9c:1f:e9:06:cd:8d:32:81:f8:bd:04:b4:fb:d7:2f:55:73:d2: 06:86:b6:ea:12:f1:14:8f:ac:7b:29:28:16:f7:02:78:49:19: 5d:b6:dd:b4:69:eb:69:78:18:a2:44:98:57:d1:ea:31:4b:90: 4c:b7:68:c2:4a:37:5a:da:33:27:ab:f3:34:b1:79:40:c0:ee: af:03:ad:76:4b:3b:e6:27:30:70:18:b7:ba:27:d2:14:a3:c5: 8a:65:43:5b:ca:38:93:3e:99:fd:be:31:ab:e6:a1:0d:72:46: eb:b4:c2:eb:a7:a0:dc:30:65:50:2f:3c:18:c3:2c:f3:75:a2: 7c:c4:55:34:3f:6c:1e:3e:82:40:5b:ac:41:5e:3c:68:2c:d4: 1a:16:b3:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuykzamW0+LBgWYWHAtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm MDJkNjgwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD EyhhOTM1MGI4YTM2ODA5YzU1MWM4YzJkMmI0ZmE5ZDc3NmViMTBlMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUl62C5Grb5I1plGmYgiaQEfeCA9 xYTEYPTC/Uk1J6csK972k3kekwDxTnXXwjZhlidN3dZcPdZMhggf/FXlXwlzUl1/ ee/KVu6ItKqVE6BDLIBn05+OjTHj0mMDvM1PYkstn84rsonbNbPZzY+ionmmd7MK xY/XhCFbOaoeX97itfyMSWFdVoOVuFJ6peF3daQrT1TOSGLfRL8ZwPrcWnwM4czl fR6ly+esN5iIhyDCo747/CutYdlU6WiGVpMFKYZGvbahT/rXpas2WQOdMWUfmzEG XDu663B7ZMJqOuja92X/pPu9N1OT5eE+hMM0T8DV5FHpkiKCQJCn+NXR/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk1C4o2gJxVHIwtK0+p13brEODbMB8GA1UdIwQY MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdagbqnCS Vlr3iG4LcpXtApnidUpY1vDmA1pA7l1gxqcYr+GoLvyW2chlae3GWCEPdJI7Q+oG Kb43wyVuMUvk3HkeoLsq6JoEa84NXB1zGeMYI7SwuLLYcQ2SUfskLNXlPZcPtcSU sZDzc2j/nB/pBs2NMoH4vQS0+9cvVXPSBoa26hLxFI+seykoFvcCeEkZXbbdtGnr aXgYokSYV9HqMUuQTLdowko3WtozJ6vzNLF5QMDurwOtdks75icwcBi3uifSFKPF imVDW8o4kz6Z/b4xq+ahDXJG67TC66eg3DBlUC88GMMs83WifMRVND9sHj6CQFus QV48aCzUGhazew== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:21 2025 by rpki-client