This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft File: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json) Hash identifier: RdiG8HSaV+7rcLPCodJCEO9Zh0c1bF1Qq4Q8AaCrdlU= Subject key identifier: 2E:B6:E5:86:83:FA:9B:19:78:8F:A9:94:9D:AD:04:E6:26:DB:B7:97 Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03 Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03 Certificate serial: 019AF088236F7F551667B249E7077BC481FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft Manifest number: 0A16 Signing time: Fri 05 Dec 2025 22:00:44 +0000 Manifest this update: Fri 05 Dec 2025 22:00:44 +0000 Manifest next update: Sat 06 Dec 2025 22:00:44 +0000 Files and hashes: 1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: 9me9UoMdisU5+PnJfU9+9iHe/6mQO3V6Cxioptu35r8=) 2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:23:6f:7f:55:16:67:b2:49:e7:07:7b:c4:81:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03 Validity Not Before: Dec 5 22:00:44 2025 GMT Not After : Dec 6 22:00:44 2025 GMT Subject: CN=2eb6e58683fa9b19788fa9949dad04e626dbb797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:4d:b4:7f:9e:d1:d1:6e:3a:a3:df:e1:37: e9:b3:29:3f:18:1b:a6:29:8c:e8:43:11:2b:ba:17: af:8f:60:e5:71:0a:b2:21:0c:29:11:af:e0:b6:11: 7b:32:e8:c0:15:26:0c:79:b0:83:d1:0d:11:91:ae: d9:5a:c1:db:de:b4:b1:d3:83:ec:d2:0a:95:14:c6: 52:7d:9c:eb:d2:ec:e3:b9:84:c6:3d:c8:8d:cd:98: 60:ba:5a:93:1e:de:c6:6d:a4:c0:9f:f1:90:16:2e: 27:f4:db:b0:b1:f3:be:12:ee:d9:bb:67:29:ff:81: b3:45:49:1b:a2:db:3d:5d:93:2d:39:ce:d0:58:20: cb:94:21:ca:ac:75:21:4b:af:2f:62:83:7f:27:1f: c5:a2:92:c7:5b:5f:3a:38:85:3b:63:b5:04:45:94: cd:f7:0d:63:46:e1:78:03:cc:58:e3:81:9e:71:c6: 29:a1:61:c8:6b:11:0c:f3:37:4d:76:38:24:62:3a: ab:6f:64:dc:a9:10:a1:eb:78:9e:5e:2f:11:82:29: 72:ee:54:3c:07:82:b7:5f:52:84:7a:5b:62:8f:1d: 62:4b:1d:07:61:64:6f:69:18:a4:07:71:23:fa:d4: 8f:4c:1d:54:de:36:8d:16:6e:08:6f:c5:43:1c:56: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B6:E5:86:83:FA:9B:19:78:8F:A9:94:9D:AD:04:E6:26:DB:B7:97 X509v3 Authority Key Identifier: keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2f:53:49:88:00:ba:b0:33:f8:b7:a9:aa:32:f8:93:e6:cd: 8e:48:40:74:b1:f3:ab:7f:93:51:54:3f:4c:f1:a5:bc:aa:2d: dd:84:15:4d:ae:26:64:4e:84:64:38:35:2c:93:25:09:5c:65: 06:13:72:04:1f:7e:5f:f4:dc:49:fa:5a:56:6d:25:5e:8d:e7: 18:97:d9:1b:5c:66:b5:d3:93:47:dc:6e:63:0a:32:5f:c5:b2: 65:99:64:81:d3:c9:5e:60:ea:31:1b:ec:76:91:33:c9:b4:49: 9e:cc:97:ed:63:94:25:4c:e3:62:c9:b5:2d:b4:89:e5:f0:e4: 52:7a:8d:c2:8a:f2:c4:e9:8b:30:b9:a2:df:a0:1f:f9:9a:61: 83:71:29:ba:ef:e5:78:3b:41:6f:a6:a7:96:65:ad:3b:ff:16: 28:24:f6:73:f1:08:fe:ae:c3:5e:d5:fb:17:a2:c6:9f:b8:aa: 29:e2:75:e8:88:01:28:7e:7e:a4:01:87:82:6f:ea:6e:94:c4: 98:48:7e:fa:66:da:1f:92:e8:2e:c6:4d:4e:3f:e0:1d:c1:ec: d0:ae:0a:96:31:e9:5d:53:ec:8c:be:26:0a:b6:ed:83:f4:60: 8f:50:ae:9f:54:63:5f:82:36:27:38:df:1b:bb:a7:fd:a1:6d: 2a:4a:1f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCNvf1UWZ7JJ5wd7xIH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTI4OWQ4ODI1OWMzM2NjN2FkODE0ODJiNzc5NDUwYWU0 ZWFjMDMwHhcNMjUxMjA1MjIwMDQ0WhcNMjUxMjA2MjIwMDQ0WjAzMTEwLwYDVQQD EygyZWI2ZTU4NjgzZmE5YjE5Nzg4ZmE5OTQ5ZGFkMDRlNjI2ZGJiNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3xNtH+e0dFuOqPf4Tfpsyk/GBum KYzoQxEruhevj2DlcQqyIQwpEa/gthF7MujAFSYMebCD0Q0Rka7ZWsHb3rSx04Ps 0gqVFMZSfZzr0uzjuYTGPciNzZhgulqTHt7GbaTAn/GQFi4n9NuwsfO+Eu7Zu2cp /4GzRUkbots9XZMtOc7QWCDLlCHKrHUhS68vYoN/Jx/FopLHW186OIU7Y7UERZTN 9w1jRuF4A8xY44GeccYpoWHIaxEM8zdNdjgkYjqrb2TcqRCh63ieXi8Rgily7lQ8 B4K3X1KEeltijx1iSx0HYWRvaRikB3Ej+tSPTB1U3jaNFm4Ib8VDHFbnewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC625YaD+psZeI+plJ2tBOYm27eXMB8GA1UdIwQY MBaAFIuSidiCWcM8x62BSCt3lFCuTqwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVLSjJJSlp3enpIcllGSUszZVVVSzVPckFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85ZTlkOWQtOTA5MS00MzVhLTk5Njct ZDg0NjhiNzJmMWEwLzEvaTVLSjJJSlp3enpIcllGSUszZVVVSzVPckFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85ZTlkOWQtOTA5MS00MzVhLTk5NjctZDg0NjhiNzJmMWEw LzEvaTVLSjJJSlp3enpIcllGSUszZVVVSzVPckFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC9TSYgA urAz+LepqjL4k+bNjkhAdLHzq3+TUVQ/TPGlvKot3YQVTa4mZE6EZDg1LJMlCVxl BhNyBB9+X/TcSfpaVm0lXo3nGJfZG1xmtdOTR9xuYwoyX8WyZZlkgdPJXmDqMRvs dpEzybRJnsyX7WOUJUzjYsm1LbSJ5fDkUnqNworyxOmLMLmi36Af+Zphg3Epuu/l eDtBb6anlmWtO/8WKCT2c/EI/q7DXtX7F6LGn7iqKeJ16IgBKH5+pAGHgm/qbpTE mEh++mbaH5LoLsZNTj/gHcHs0K4KljHpXVPsjL4mCrbtg/Rgj1Cun1RjX4I2Jzjf G7un/aFtKkofsg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:43 2025 by rpki-client