This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json) Hash identifier: gYqcsqwbAzHu69q64umcRXsMwNldsqvUfGEPmZytzxw= Subject key identifier: 0C:04:E1:59:85:3B:9E:D6:EC:20:83:67:F8:FF:89:E5:44:E5:70:69 Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044 Certificate serial: 019AF7D43B432E0A7E6A3F9FA8EDA956C4E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft Manifest number: 14AC Signing time: Sun 07 Dec 2025 08:01:12 +0000 Manifest this update: Sun 07 Dec 2025 08:01:12 +0000 Manifest next update: Mon 08 Dec 2025 08:01:12 +0000 Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: bf5udq8uO9BV8UikfRiQT2Sjqsd3pQ05SNF1NkVaWvI=) 2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:3b:43:2e:0a:7e:6a:3f:9f:a8:ed:a9:56:c4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044 Validity Not Before: Dec 7 08:01:12 2025 GMT Not After : Dec 8 08:01:12 2025 GMT Subject: CN=0c04e159853b9ed6ec208367f8ff89e544e57069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:2b:88:23:1f:5a:a2:74:96:17:c2:7b:2f: 57:ea:e8:50:16:c6:4c:81:c3:3b:04:24:a9:6b:08: 5a:c8:79:60:2b:fd:a2:90:80:57:5e:fe:b2:bc:f8: 8f:28:60:a9:74:d2:d0:55:2f:00:23:ff:70:82:6e: f9:8a:56:6e:5b:e7:ad:ca:f7:2f:ad:0e:b2:79:99: d3:5b:1b:c6:78:1c:c2:f6:8e:52:9b:0b:b8:fb:eb: 2e:06:b3:af:39:6b:79:d2:ff:88:9a:10:9b:8a:19: 21:d7:82:b1:2a:b5:9c:2f:1c:38:71:51:8a:7a:43: ee:6c:c6:31:d1:a1:0f:1c:20:7f:d0:60:8c:53:57: ce:81:ac:43:d7:2d:50:64:99:90:1a:a1:12:aa:e4: 98:e5:b4:63:99:7c:9e:38:23:0d:bb:db:68:61:e8: 53:b6:cd:03:21:e8:8b:d8:98:e6:ab:93:cc:80:f3: e6:b2:77:a5:2d:28:a7:6a:a3:dd:c3:da:e6:0b:b2: 0f:70:1e:bb:2a:4b:88:40:f0:96:bb:cb:ab:73:b2: cf:fc:d8:01:19:39:50:da:b4:d1:26:7e:28:27:87: 96:26:ca:b1:c6:0c:03:07:26:fd:73:19:d3:76:e5: 94:dd:79:80:9d:ec:37:b7:7c:7a:89:c3:7f:43:d0: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:04:E1:59:85:3B:9E:D6:EC:20:83:67:F8:FF:89:E5:44:E5:70:69 X509v3 Authority Key Identifier: keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bf:6d:d5:96:06:e7:01:5f:8d:bf:03:79:f3:5d:75:aa:f5: 3d:3e:5c:6a:a6:19:52:44:d1:76:ae:fa:8e:22:1b:0e:27:19: 1a:f0:47:ec:ab:31:97:1e:38:be:e6:b6:05:32:95:28:55:ea: 70:38:fa:0f:a4:14:46:b4:32:7c:fd:d8:cc:e7:ee:22:4c:63: 01:b8:94:cb:bc:f0:af:56:5d:c2:c6:3b:ed:9b:be:a8:be:48: 13:4d:eb:5c:49:6e:4f:40:a8:99:2b:c2:b5:bb:c0:16:c0:5c: e2:07:2f:4d:dd:99:63:65:cd:4d:8a:ee:b9:3e:1f:d2:06:63: f5:fb:d8:a2:ab:0f:dd:5e:32:1f:54:3d:04:9f:22:ac:31:1c: 81:02:55:dd:52:f8:4a:1d:9a:f8:df:92:56:6a:48:65:6e:ba: c0:6d:27:a4:81:41:db:e1:ee:64:c1:f9:61:5d:a1:77:02:2d: 64:9d:a2:20:2e:02:88:09:d0:a6:74:c3:4d:37:dc:0c:4b:d2: b3:c4:8a:a5:ff:fb:f2:a7:4a:e9:92:bb:4a:15:77:8e:b5:80: 6d:80:32:2f:92:22:cb:c7:24:9c:93:ce:6c:39:fe:30:23:2f: 22:70:9c:37:72:52:db:43:f7:d7:87:69:18:0e:0e:94:bb:d1: 55:64:18:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31DtDLgp+aj+fqO2pVsTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh ODkwNDQwHhcNMjUxMjA3MDgwMTEyWhcNMjUxMjA4MDgwMTEyWjAzMTEwLwYDVQQD EygwYzA0ZTE1OTg1M2I5ZWQ2ZWMyMDgzNjdmOGZmODllNTQ0ZTU3MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRoriCMfWqJ0lhfCey9X6uhQFsZM gcM7BCSpawhayHlgK/2ikIBXXv6yvPiPKGCpdNLQVS8AI/9wgm75ilZuW+etyvcv rQ6yeZnTWxvGeBzC9o5Smwu4++suBrOvOWt50v+ImhCbihkh14KxKrWcLxw4cVGK ekPubMYx0aEPHCB/0GCMU1fOgaxD1y1QZJmQGqESquSY5bRjmXyeOCMNu9toYehT ts0DIeiL2Jjmq5PMgPPmsnelLSinaqPdw9rmC7IPcB67KkuIQPCWu8urc7LP/NgB GTlQ2rTRJn4oJ4eWJsqxxgwDByb9cxnTduWU3XmAnew3t3x6icN/Q9BNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwE4VmFO57W7CCDZ/j/ieVE5XBpMB8GA1UdIwQY MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt M2ZiNWFkZGU2MDQwLzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgL9t1ZYG 5wFfjb8DefNddar1PT5caqYZUkTRdq76jiIbDicZGvBH7Ksxlx44vua2BTKVKFXq cDj6D6QURrQyfP3YzOfuIkxjAbiUy7zwr1ZdwsY77Zu+qL5IE03rXEluT0ComSvC tbvAFsBc4gcvTd2ZY2XNTYruuT4f0gZj9fvYoqsP3V4yH1Q9BJ8irDEcgQJV3VL4 Sh2a+N+SVmpIZW66wG0npIFB2+HuZMH5YV2hdwItZJ2iIC4CiAnQpnTDTTfcDEvS s8SKpf/78qdK6ZK7ShV3jrWAbYAyL5Iiy8cknJPObDn+MCMvInCcN3JS20P314dp GA4OlLvRVWQYtg== -----END CERTIFICATE-----Generated at Sun Dec 7 10:52:50 2025 by rpki-client