This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft File: I22P43gCkUrBm_04YGAw4-Q-KPs.mft (raw, json) Hash identifier: VdmSIKmPFWzajqJvk+vpcNtJ8Xc/vPFqrA8xWMoUhPs= Subject key identifier: 28:A7:2A:98:F2:D4:62:71:58:DE:35:DA:AB:01:D3:6C:FC:B6:E9:C7 Authority key identifier: 23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB Certificate issuer: /CN=236d8fe37802914ac19bfd38606030e3e43e28fb Certificate serial: 019AF19AB2C7819A3B1869EC3809441E0E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft Manifest number: 79 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: I22P43gCkUrBm_04YGAw4-Q-KPs.crl (hash: OmqS6Y4SzHl79lJOIsQ3YjBAZH3DFNTEZi4qa2id96M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b2:c7:81:9a:3b:18:69:ec:38:09:44:1e:0e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=236d8fe37802914ac19bfd38606030e3e43e28fb Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=28a72a98f2d4627158de35daab01d36cfcb6e9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:66:ed:0c:c3:7c:99:5d:8e:a0:ef:4d:25: 53:d2:75:16:f1:e7:ae:33:cf:22:e4:f6:d6:51:20: a6:b6:b1:69:ae:f1:fe:44:b0:c8:1b:21:c5:94:aa: d4:2e:3e:87:e8:39:f9:94:89:af:9f:e2:89:0a:88: 2e:93:fa:7e:27:f7:63:cd:7d:a8:34:df:e9:ce:dd: d3:7a:c9:b3:31:52:62:15:3a:66:59:cc:06:ab:ab: 7e:25:9b:70:d1:df:5c:98:83:81:dd:7e:1d:f6:62: a5:52:6e:3b:de:78:1d:34:26:97:f9:64:6c:b1:cb: 4d:b3:a3:85:4d:c9:5e:93:a5:6c:eb:38:cf:42:3a: e0:f8:11:9b:8d:0f:33:d5:cb:9a:60:09:b2:5a:cb: 25:d7:fc:e9:08:9d:8f:fe:8d:15:14:13:ff:f0:17: 96:a8:73:1b:23:d7:7c:3a:e5:1b:d4:51:23:29:cd: e5:a2:b5:64:95:dc:58:8c:c3:18:17:f8:fc:07:2c: 80:33:c3:43:52:8e:d2:e7:23:c5:ba:8d:f9:2c:93: 36:c4:39:be:d1:9f:ae:9e:3b:cf:8c:e6:ed:ac:05: 82:75:1d:74:f3:bd:ac:db:a2:dc:b1:a2:90:a7:06: ba:19:46:2c:10:1a:20:46:a7:79:c5:f5:0f:b0:48: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A7:2A:98:F2:D4:62:71:58:DE:35:DA:AB:01:D3:6C:FC:B6:E9:C7 X509v3 Authority Key Identifier: keyid:23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5c:c7:95:33:fa:78:59:d1:9f:ad:b8:1b:8b:de:24:5a:d9: fe:11:31:83:93:3b:58:96:79:21:5f:16:a3:19:f6:d9:62:fd: 77:5b:76:24:52:2d:d7:55:0d:a9:cb:59:26:c1:18:98:b0:10: ed:78:ec:e7:30:79:89:b3:21:ce:fb:6a:7e:e9:03:57:22:d2: f6:07:16:92:89:ac:f1:8d:fd:13:1f:fb:a6:5d:c7:d7:0f:33: b8:9d:6f:c8:a9:a1:25:37:4d:0d:b7:f7:f9:f9:fa:1f:fd:6c: b5:77:30:86:31:4a:20:85:16:dc:b5:05:46:56:cb:d4:8d:1c: 71:c4:58:65:69:91:0e:e4:37:b3:91:a4:9d:9f:bf:c2:d7:55: 40:7d:0d:3b:a5:ae:90:08:88:20:02:c7:61:01:16:e8:82:35: ac:2b:58:63:f7:48:94:08:88:8b:41:5c:95:d1:b6:6b:3a:08: b0:f3:71:80:e4:3e:bc:ba:d4:0f:62:02:1f:12:79:c0:f4:24: fc:cf:17:0b:56:79:d2:c3:ba:0a:02:44:63:76:f8:0f:a1:94: 05:74:13:61:7a:dd:90:e6:62:0f:bb:19:48:aa:f7:4f:6d:ee: d3:c7:e8:8f:a9:6e:ff:b4:59:63:7d:b9:6e:0e:f9:94:b2:4c: d7:e6:fe:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrLHgZo7GGnsOAlEHg5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNmQ4ZmUzNzgwMjkxNGFjMTliZmQzODYwNjAzMGUzZTQz ZTI4ZmIwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD EygyOGE3MmE5OGYyZDQ2MjcxNThkZTM1ZGFhYjAxZDM2Y2ZjYjZlOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssNm7QzDfJldjqDvTSVT0nUW8eeu M88i5PbWUSCmtrFprvH+RLDIGyHFlKrULj6H6Dn5lImvn+KJCoguk/p+J/djzX2o NN/pzt3TesmzMVJiFTpmWcwGq6t+JZtw0d9cmIOB3X4d9mKlUm473ngdNCaX+WRs sctNs6OFTclek6Vs6zjPQjrg+BGbjQ8z1cuaYAmyWssl1/zpCJ2P/o0VFBP/8BeW qHMbI9d8OuUb1FEjKc3lorVkldxYjMMYF/j8ByyAM8NDUo7S5yPFuo35LJM2xDm+ 0Z+unjvPjObtrAWCdR10872s26LcsaKQpwa6GUYsEBogRqd5xfUPsEj1OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCinKpjy1GJxWN412qsB02z8tunHMB8GA1UdIwQY MBaAFCNtj+N4ApFKwZv9OGBgMOPkPij7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTIyUDQzZ0NrVXJCbV8wNFlHQXc0LVEtS1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yNTU1ZWYtMDI3NC00Yjk1LTgyZDQt ZDczMWJkMTkwOGUzLzEvSTIyUDQzZ0NrVXJCbV8wNFlHQXc0LVEtS1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yNTU1ZWYtMDI3NC00Yjk1LTgyZDQtZDczMWJkMTkwOGUz LzEvSTIyUDQzZ0NrVXJCbV8wNFlHQXc0LVEtS1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1zHlTP6 eFnRn624G4veJFrZ/hExg5M7WJZ5IV8Woxn22WL9d1t2JFIt11UNqctZJsEYmLAQ 7Xjs5zB5ibMhzvtqfukDVyLS9gcWkoms8Y39Ex/7pl3H1w8zuJ1vyKmhJTdNDbf3 +fn6H/1stXcwhjFKIIUW3LUFRlbL1I0cccRYZWmRDuQ3s5GknZ+/wtdVQH0NO6Wu kAiIIALHYQEW6II1rCtYY/dIlAiIi0FcldG2azoIsPNxgOQ+vLrUD2ICHxJ5wPQk /M8XC1Z50sO6CgJEY3b4D6GUBXQTYXrdkOZiD7sZSKr3T23u08foj6lu/7RZY325 bg75lLJM1+b+Wg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:31 2025 by rpki-client