This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json) Hash identifier: 6e/WMkvtj/P9oQc86haUoSg5r/TLVCBq6B1oufYi/IE= Subject key identifier: 21:06:10:3B:97:EB:EE:4E:53:90:BD:20:B9:AE:0D:BF:F8:C1:D7:E2 Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4 Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4 Certificate serial: 019AF2095EC38E21510B8CE7EF2EC2B611A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=) 2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: 2+B0T09vCZ3T9vFnMsvP1OqBBmch6RlS57o09ifOPuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5e:c3:8e:21:51:0b:8c:e7:ef:2e:c2:b6:11:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=2106103b97ebee4e5390bd20b9ae0dbff8c1d7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:9f:e0:69:9a:25:a9:23:c5:33:a2:19:d3: fa:69:a0:5b:e4:65:80:e5:3a:56:41:ac:0b:7a:36: 8b:bc:e6:32:e1:64:9e:85:0c:06:d0:16:c3:2d:a9: fb:7a:08:7d:57:6a:26:7e:15:f6:5b:6a:a7:bf:71: dc:63:01:5b:18:aa:4b:f3:e1:9f:4b:45:ae:62:d8: 04:f6:27:fa:c6:f4:67:d0:6b:ba:e2:49:a3:71:eb: 68:9a:47:5e:b2:10:06:1b:e3:31:ca:3e:e1:dd:18: 71:c9:1e:80:bf:50:1a:6a:6d:54:f8:dc:f1:bf:fa: 89:5f:2d:0b:82:a2:34:78:d5:05:97:82:d4:72:c6: 10:5c:ff:11:4a:51:31:be:5b:a6:d2:54:6f:9d:18: 44:21:46:24:12:15:6b:1a:98:71:aa:f0:18:ab:c2: e1:f1:f7:59:3f:d9:fa:d9:81:c4:31:06:6d:67:d9: 7f:af:23:52:f8:23:eb:21:a4:e5:5a:c8:fb:63:02: 7d:1e:b8:1d:39:07:cf:2f:7c:22:6f:d4:34:d4:3d: e8:7e:e4:92:c0:82:85:19:da:72:0c:9e:4e:15:47: f9:6c:7c:71:d1:9e:86:87:6c:5d:94:22:e8:89:58: c3:95:b2:9e:75:30:10:7a:fa:d8:56:6c:b5:31:0e: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:10:3B:97:EB:EE:4E:53:90:BD:20:B9:AE:0D:BF:F8:C1:D7:E2 X509v3 Authority Key Identifier: keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7f:4e:e6:53:34:8d:82:59:33:f8:01:05:85:e0:4e:b7:df: e4:21:b6:04:fb:75:b5:e5:52:90:68:48:d4:6f:73:a2:e6:6a: 08:4d:3a:77:1d:34:0f:d1:04:29:61:a4:d8:ad:e0:1b:9c:7b: f3:9b:b2:17:99:11:64:60:64:f0:8d:cc:87:41:c4:85:80:af: 2b:2a:e0:5f:d6:b7:d7:f1:57:f5:dd:2b:84:6d:0a:03:da:13: ba:a4:fd:cb:f5:75:df:01:f4:fd:b6:c4:2c:7f:c9:ee:58:98: a5:d1:67:c3:a1:1a:75:b2:a7:9e:6b:e2:a9:5b:92:f3:42:9c: 6e:8d:16:b1:bb:7d:69:b1:f7:98:f2:e2:50:40:72:3f:f2:68: 8d:f6:64:b9:63:f8:3b:3a:9e:4b:51:06:c7:af:5b:e4:c5:6f: 82:9f:6d:82:0e:3b:15:e4:ea:27:46:91:fb:6b:a8:11:36:5b: 74:56:d6:eb:23:de:1a:29:c4:4f:36:23:62:32:ba:37:41:b7: f3:03:ea:21:f4:06:a5:51:c8:67:83:ec:6a:1a:58:7d:27:e6: 74:5d:41:dc:6e:85:e4:bb:1e:4b:2d:ec:85:ed:4e:55:12:ac: a2:cc:3f:ff:c3:59:88:6b:af:a7:41:a0:55:b1:0b:24:00:d5: c3:d8:a4:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV7DjiFRC4zn7y7CthGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZGNkNmYxNzEyNmQ0ZTk1MWQ5MmJjNWY0YzA2YmE5NDUw ZmM4ZDQwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EygyMTA2MTAzYjk3ZWJlZTRlNTM5MGJkMjBiOWFlMGRiZmY4YzFkN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4uf4GmaJakjxTOiGdP6aaBb5GWA 5TpWQawLejaLvOYy4WSehQwG0BbDLan7egh9V2omfhX2W2qnv3HcYwFbGKpL8+Gf S0WuYtgE9if6xvRn0Gu64kmjcetomkdeshAGG+Mxyj7h3RhxyR6Av1Aaam1U+Nzx v/qJXy0LgqI0eNUFl4LUcsYQXP8RSlExvlum0lRvnRhEIUYkEhVrGphxqvAYq8Lh 8fdZP9n62YHEMQZtZ9l/ryNS+CPrIaTlWsj7YwJ9HrgdOQfPL3wib9Q01D3ofuSS wIKFGdpyDJ5OFUf5bHxx0Z6Gh2xdlCLoiVjDlbKedTAQevrYVmy1MQ7ZrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEGEDuX6+5OU5C9ILmuDb/4wdfiMB8GA1UdIwQY MBaAFCPc1vFxJtTpUdkrxfTAa6lFD8jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mZGEwNTktMzQzNi00MTU4LWExZTQt NDlkYTA1OTc4YWQwLzEvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9mZGEwNTktMzQzNi00MTU4LWExZTQtNDlkYTA1OTc4YWQw LzEvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs39O5lM0 jYJZM/gBBYXgTrff5CG2BPt1teVSkGhI1G9zouZqCE06dx00D9EEKWGk2K3gG5x7 85uyF5kRZGBk8I3Mh0HEhYCvKyrgX9a31/FX9d0rhG0KA9oTuqT9y/V13wH0/bbE LH/J7liYpdFnw6EadbKnnmviqVuS80Kcbo0Wsbt9abH3mPLiUEByP/JojfZkuWP4 OzqeS1EGx69b5MVvgp9tgg47FeTqJ0aR+2uoETZbdFbW6yPeGinETzYjYjK6N0G3 8wPqIfQGpVHIZ4PsahpYfSfmdF1B3G6F5LseSy3she1OVRKsosw//8NZiGuvp0Gg VbELJADVw9ikDw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:33 2025 by rpki-client