This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft File: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json) Hash identifier: PUetncIRuULNNh6xFMWszw1V9IO38PNJChQ8ri9/O+U= Subject key identifier: 70:EE:35:D0:44:BC:81:62:F3:9A:BD:AE:3B:36:74:CE:03:B7:D9:FC Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D Certificate issuer: /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d Certificate serial: 019B2D0C248F5FCF7696A558C1F486D747E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft Manifest number: 080A Signing time: Wed 17 Dec 2025 16:02:08 +0000 Manifest this update: Wed 17 Dec 2025 16:02:08 +0000 Manifest next update: Thu 18 Dec 2025 16:02:08 +0000 Files and hashes: 1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: 5eg/sn620h838wW+0B5WDfKFF21DfN0w+3Z/095VH1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:24:8f:5f:cf:76:96:a5:58:c1:f4:86:d7:47:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d Validity Not Before: Dec 17 16:02:08 2025 GMT Not After : Dec 18 16:02:08 2025 GMT Subject: CN=70ee35d044bc8162f39abdae3b3674ce03b7d9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:f8:72:53:46:8e:fb:74:9c:95:c1:ab:13: 06:18:c7:ef:26:b1:20:c2:28:5b:fc:87:3b:e5:2e: c9:2e:90:9f:76:71:49:7a:67:e0:92:fa:71:2f:31: 67:25:82:29:db:1b:89:06:98:f5:d1:c1:b8:67:86: 99:1e:3f:2e:80:3f:b8:58:a1:1b:0c:85:00:57:9f: 2a:42:ca:12:7d:d1:79:3c:93:68:4d:bd:1a:14:d1: 9b:75:48:d5:77:5f:61:35:1c:45:38:10:ca:09:08: 84:d8:25:ee:92:ba:b9:f3:9f:4c:d7:b7:30:98:cc: 73:3d:fd:ad:65:19:af:c3:a2:f4:29:4c:6d:a0:b3: d6:57:d0:f1:92:eb:11:64:d0:8c:0c:9f:04:90:64: 89:1e:1e:a8:9e:90:be:b0:ba:f2:2a:33:a2:c5:56: 5d:ab:b4:3d:c5:69:3b:c5:e6:36:a4:5c:3d:6c:35: 71:f1:27:72:b4:54:62:1b:ff:1f:3e:11:97:5a:ae: b9:01:7b:41:07:15:20:ad:f3:7f:ab:2c:fd:cb:db: 47:88:fa:16:e6:3b:dc:3e:0e:d0:b3:1e:e6:a0:10: d7:87:13:3f:ef:3a:11:a0:4d:36:d4:44:be:87:c2: 9d:87:ef:6b:ce:f8:e3:70:d4:fc:5e:3c:4f:ef:33: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EE:35:D0:44:BC:81:62:F3:9A:BD:AE:3B:36:74:CE:03:B7:D9:FC X509v3 Authority Key Identifier: keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:61:a1:4c:5e:2c:e6:7e:34:55:8c:43:33:da:d9:59:b1:3a: 5c:97:21:4e:b0:b2:d5:00:9b:f9:44:80:91:f5:e7:4d:b3:9f: 30:7e:ee:80:9a:fb:b3:21:d2:bd:61:71:f7:2b:0b:9e:e6:24: 71:26:7b:85:e3:31:31:57:1e:70:c5:bb:44:3b:fe:a3:f0:15: 0f:61:c5:65:a5:db:85:cd:2d:0c:11:14:39:8f:eb:e1:9e:46: 0d:09:4f:c6:fe:23:9f:a6:e5:ce:b6:10:f4:30:1f:86:cf:0d: 1d:6f:aa:a0:74:71:82:b1:05:1c:18:50:f8:7e:9d:fc:5a:0a: 1c:be:ce:83:57:1d:c8:8f:de:b2:f5:0d:6f:99:4c:3f:ec:8a: 60:f6:d3:27:49:cd:76:e7:38:d0:cf:27:e9:4b:ac:e3:59:62: f9:43:38:67:67:8c:c3:61:d4:93:c3:67:46:c5:9d:de:95:24: 69:85:b9:34:de:68:c4:34:22:eb:aa:f7:fe:b4:cc:8e:88:29: 2e:0e:6f:2a:7a:56:ff:03:82:7a:97:62:00:8f:19:06:7d:00: 7c:85:49:3f:91:61:d1:fe:2d:f2:bc:79:8b:21:a7:e8:54:50: 36:5a:53:f8:da:e4:7e:70:d1:4a:24:f1:20:d3:11:8b:fd:06: ae:9d:fc:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDCSPX892lqVYwfSG10fiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjVhYTNkZjU4YzllNTVkOWUwN2VhMmNmZjJjYWU4NWVl MTVjMWQwHhcNMjUxMjE3MTYwMjA4WhcNMjUxMjE4MTYwMjA4WjAzMTEwLwYDVQQD Eyg3MGVlMzVkMDQ0YmM4MTYyZjM5YWJkYWUzYjM2NzRjZTAzYjdkOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum34clNGjvt0nJXBqxMGGMfvJrEg wihb/Ic75S7JLpCfdnFJemfgkvpxLzFnJYIp2xuJBpj10cG4Z4aZHj8ugD+4WKEb DIUAV58qQsoSfdF5PJNoTb0aFNGbdUjVd19hNRxFOBDKCQiE2CXukrq5859M17cw mMxzPf2tZRmvw6L0KUxtoLPWV9DxkusRZNCMDJ8EkGSJHh6onpC+sLryKjOixVZd q7Q9xWk7xeY2pFw9bDVx8SdytFRiG/8fPhGXWq65AXtBBxUgrfN/qyz9y9tHiPoW 5jvcPg7Qsx7moBDXhxM/7zoRoE021ES+h8Kdh+9rzvjjcNT8XjxP7zNm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDuNdBEvIFi85q9rjs2dM4Dt9n8MB8GA1UdIwQY MBaAFCNlqj31jJ5V2eB+os/yyuhe4VwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJXcVBmV01ubFhaNEg2aXpfTEs2RjdoWEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yMjA3OGQtY2Q1MS00ZWQyLWJiYmQt ODJjZTQ2NGMyY2RkLzEvSTJXcVBmV01ubFhaNEg2aXpfTEs2RjdoWEIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8yMjA3OGQtY2Q1MS00ZWQyLWJiYmQtODJjZTQ2NGMyY2Rk LzEvSTJXcVBmV01ubFhaNEg2aXpfTEs2RjdoWEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2GhTF4s 5n40VYxDM9rZWbE6XJchTrCy1QCb+USAkfXnTbOfMH7ugJr7syHSvWFx9ysLnuYk cSZ7heMxMVcecMW7RDv+o/AVD2HFZaXbhc0tDBEUOY/r4Z5GDQlPxv4jn6blzrYQ 9DAfhs8NHW+qoHRxgrEFHBhQ+H6d/FoKHL7Og1cdyI/esvUNb5lMP+yKYPbTJ0nN duc40M8n6Uus41li+UM4Z2eMw2HUk8NnRsWd3pUkaYW5NN5oxDQi66r3/rTMjogp Lg5vKnpW/wOCepdiAI8ZBn0AfIVJP5Fh0f4t8rx5iyGn6FRQNlpT+NrkfnDRSiTx INMRi/0Grp38AQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:02 2025 by rpki-client