This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json) Hash identifier: vBsFui2hRnctubJXgOTGBDPobmusruvb2KJqN1e0RDo= Subject key identifier: FE:73:68:1E:15:DC:91:31:9F:EE:B9:87:91:28:A6:38:EA:66:27:8D Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Certificate serial: 019AF12D44E081251DA1F3304E5933A19240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: Dj+ZpgD8diRRVRb/nQ05iTjq1rvRwJfRmtk2wK1VWT4=) 2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=) 3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:44:e0:81:25:1d:a1:f3:30:4e:59:33:a1:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=fe73681e15dc91319feeb9879128a638ea66278d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cb:d2:b3:27:51:f8:0d:de:20:06:f2:b8:29: df:05:be:b2:6a:61:68:ed:52:eb:3f:49:a5:bf:40: 6f:4b:07:e3:19:c3:99:78:50:53:fb:de:bd:bd:bd: 9f:f4:49:f8:f6:5a:80:a2:44:22:19:2a:35:ad:e3: 40:7f:37:52:a9:28:ec:c1:c3:41:64:fe:e0:3d:dd: e7:06:30:16:00:30:61:95:89:a1:2d:e2:9d:40:df: a4:40:2e:5f:55:7d:e0:a9:7c:51:69:f9:06:ef:d3: 7d:88:e4:be:9d:ba:25:db:50:c3:d5:5d:4d:45:0c: 6b:a3:65:4b:03:f3:49:fd:56:99:c4:87:a7:42:0c: 7a:c7:3d:2c:63:f8:f3:c6:d5:59:2e:ec:fb:c9:c9: 62:81:df:3c:ac:b1:8f:4f:39:24:61:d3:82:65:ce: 19:86:b8:32:c6:08:f1:d2:ee:b5:f6:d0:a9:df:fb: 44:08:28:0e:03:26:dc:c0:57:fc:77:c9:a0:ab:99: 73:93:7d:13:61:be:3f:cb:e6:a5:ce:11:99:95:e7: 74:de:6c:0f:3a:da:8c:83:b7:cf:87:b5:dd:fc:b0: 45:cf:75:7b:b9:52:ba:73:73:71:e5:10:87:1b:4a: 2d:02:90:47:b1:41:21:56:e9:f3:ce:7a:4b:b4:dc: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:73:68:1E:15:DC:91:31:9F:EE:B9:87:91:28:A6:38:EA:66:27:8D X509v3 Authority Key Identifier: keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:35:87:85:a3:9e:4e:2a:82:56:a2:c7:58:2c:59:07:27:bf: 0a:98:2e:f0:a4:02:03:ab:5b:d6:5a:68:6a:95:ea:dc:39:ee: ad:85:21:a1:73:47:fd:21:62:7b:7f:ce:19:ae:e5:c4:0a:07: f4:0c:aa:d6:1b:01:a5:62:d0:1d:0b:77:17:28:3c:e6:89:d1: d6:33:96:29:6a:fb:af:ce:03:6d:96:c8:0b:19:50:b6:dc:40: 26:b7:6b:da:14:4e:5c:1a:6b:a2:a9:8c:a2:c5:e0:44:8e:bd: 74:ee:b9:eb:23:5f:9f:85:02:28:08:c3:9e:6c:f6:80:07:6e: 2d:9a:ee:cf:97:af:86:eb:68:69:1a:ba:52:0c:50:09:91:cf: f4:22:f7:d4:7c:c5:42:9b:7f:93:f0:b5:89:04:75:26:5d:04: 2c:b2:cd:47:43:2d:0b:f7:a7:b0:90:99:77:36:15:3b:ce:8a: 29:26:eb:d8:de:22:96:9c:d4:0c:85:0d:ac:c8:bf:2d:63:ab: 37:30:4e:aa:31:66:5b:ec:f2:e6:be:bd:24:db:99:41:21:9f: d4:f8:b2:3e:8b:5b:da:bd:cb:e4:18:41:b8:be:7a:78:68:3c: 9b:96:2d:c6:c3:ff:3d:02:37:4b:b8:25:37:ff:e8:d8:38:24: c1:72:4b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUTggSUdofMwTlkzoZJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj N2U2YjYwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD EyhmZTczNjgxZTE1ZGM5MTMxOWZlZWI5ODc5MTI4YTYzOGVhNjYyNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58vSsydR+A3eIAbyuCnfBb6yamFo 7VLrP0mlv0BvSwfjGcOZeFBT+969vb2f9En49lqAokQiGSo1reNAfzdSqSjswcNB ZP7gPd3nBjAWADBhlYmhLeKdQN+kQC5fVX3gqXxRafkG79N9iOS+nbol21DD1V1N RQxro2VLA/NJ/VaZxIenQgx6xz0sY/jzxtVZLuz7ycligd88rLGPTzkkYdOCZc4Z hrgyxgjx0u619tCp3/tECCgOAybcwFf8d8mgq5lzk30TYb4/y+alzhGZled03mwP OtqMg7fPh7Xd/LBFz3V7uVK6c3Nx5RCHG0otApBHsUEhVunzznpLtNygpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5zaB4V3JExn+65h5EopjjqZieNMB8GA1UdIwQY MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt YTMxODUzZTY5OTdhLzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTWHhaOe TiqCVqLHWCxZBye/Cpgu8KQCA6tb1lpoapXq3DnurYUhoXNH/SFie3/OGa7lxAoH 9Ayq1hsBpWLQHQt3Fyg85onR1jOWKWr7r84DbZbICxlQttxAJrdr2hROXBproqmM osXgRI69dO656yNfn4UCKAjDnmz2gAduLZruz5evhutoaRq6UgxQCZHP9CL31HzF Qpt/k/C1iQR1Jl0ELLLNR0MtC/ensJCZdzYVO86KKSbr2N4ilpzUDIUNrMi/LWOr NzBOqjFmW+zy5r69JNuZQSGf1PiyPotb2r3L5BhBuL56eGg8m5YtxsP/PQI3S7gl N//o2DgkwXJLsw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:39 2025 by rpki-client