This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json) Hash identifier: 1duQ6oCajqws9vzqaAod+kS3mpmcZymQaKc9rGLgrdU= Subject key identifier: 6F:ED:AC:32:B5:5F:30:99:5C:3B:20:22:BC:82:E4:6C:17:61:F5:1B Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3 Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3 Certificate serial: 019AF163D5165B509A5F8169DFC7713E5004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=) 2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: d0/KxshIy7x5/POYoYx20Z2cPEu2KO3jMGSO5lv7BD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d5:16:5b:50:9a:5f:81:69:df:c7:71:3e:50:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f210bc1534badc08ff947d99350471193531b3 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=6fedac32b55f30995c3b2022bc82e46c1761f51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:72:a5:07:4f:8c:40:f6:01:a7:0b:18:5a: dd:0d:93:fc:f5:ca:ea:3f:eb:29:91:9e:56:3d:bc: 58:e6:d8:73:c7:db:4f:7e:a2:ca:7f:55:c0:1d:69: 99:ae:eb:1c:9b:4e:c2:37:f9:96:d3:ba:b5:53:b5: 21:c2:69:73:c4:ca:95:d2:15:8a:98:d0:37:23:34: 0d:0e:1f:cc:e4:9b:1a:41:72:01:b0:a3:f5:05:0e: 7c:4f:bc:0e:f6:77:74:e7:3f:96:0a:29:1e:57:c9: be:b8:09:69:20:55:87:d7:18:e1:31:71:71:b5:5f: 9e:e6:7c:fe:21:4d:7d:d6:ba:1d:7d:12:51:21:86: f2:c6:4c:14:e3:ab:18:43:eb:0b:f3:48:4a:d1:6c: d4:8a:2d:4a:43:c3:32:ce:e9:6e:c9:ed:e5:6a:7e: dd:98:8e:ce:20:b1:c7:c5:6a:ff:5b:81:ef:2f:a8: d8:ec:09:e6:45:82:2c:be:28:c2:cb:a3:4d:7c:c8: ce:66:3c:ea:52:0e:77:85:d1:ea:a5:e1:98:7d:5e: df:5c:03:30:d5:13:d4:22:9a:50:f8:7e:dc:1e:b8: 0f:98:e1:b9:ea:16:eb:c4:6c:a3:44:23:f7:a1:dd: 29:d1:aa:9d:e5:b0:ad:01:0a:54:2a:80:08:ab:2b: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:ED:AC:32:B5:5F:30:99:5C:3B:20:22:BC:82:E4:6C:17:61:F5:1B X509v3 Authority Key Identifier: keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e6:c8:2b:53:a2:b0:a2:2f:b2:51:49:d6:a1:fb:df:3e:38: ce:fe:71:61:2c:19:b0:a1:a4:89:56:fb:a2:7b:3e:03:69:10: 99:cf:e2:d0:bc:d9:6e:73:f8:fb:fc:99:ed:94:ad:ef:3d:01: e1:44:3e:7b:e5:f4:e6:17:25:91:cb:aa:4d:3c:50:e0:58:15: 47:ed:56:09:3f:38:af:7f:5f:90:9d:61:b9:2d:c8:56:f3:d7: fe:8f:f9:a1:03:15:39:2a:b7:a7:cc:3b:1a:44:b6:25:ad:12: 7d:c3:a1:85:55:39:a5:28:dc:6b:f0:08:a2:c4:2c:0f:45:cd: c0:ad:b3:84:43:4c:e9:39:67:07:be:c0:31:61:65:91:fd:97: b7:77:8d:d4:07:b9:16:49:a8:19:2b:9a:5d:c8:90:12:cc:65: b2:d0:a7:62:94:19:c4:be:80:ac:1a:11:91:56:70:bd:78:ff: 30:15:88:d5:dd:c0:12:80:6f:a5:db:6c:d5:c9:04:6d:1c:cf: ba:10:c0:21:0b:da:fc:2d:69:98:9e:f9:87:2c:c8:d0:d5:a3: 70:a4:e6:70:ad:33:89:7b:76:d0:5f:7d:5f:d4:77:da:45:01: d0:6d:55:9e:cb:94:df:dc:fc:95:17:d6:ef:ce:ae:2b:21:e9: 52:ea:90:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9UWW1CaX4Fp38dxPlAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjIxMGJjMTUzNGJhZGMwOGZmOTQ3ZDk5MzUwNDcxMTkz NTMxYjMwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD Eyg2ZmVkYWMzMmI1NWYzMDk5NWMzYjIwMjJiYzgyZTQ2YzE3NjFmNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmNypQdPjED2AacLGFrdDZP89crq P+spkZ5WPbxY5thzx9tPfqLKf1XAHWmZruscm07CN/mW07q1U7UhwmlzxMqV0hWK mNA3IzQNDh/M5JsaQXIBsKP1BQ58T7wO9nd05z+WCikeV8m+uAlpIFWH1xjhMXFx tV+e5nz+IU191rodfRJRIYbyxkwU46sYQ+sL80hK0WzUii1KQ8Myzuluye3lan7d mI7OILHHxWr/W4HvL6jY7AnmRYIsvijCy6NNfMjOZjzqUg53hdHqpeGYfV7fXAMw 1RPUIppQ+H7cHrgPmOG56hbrxGyjRCP3od0p0aqd5bCtAQpUKoAIqyul6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/trDK1XzCZXDsgIryC5GwXYfUbMB8GA1UdIwQY MBaAFCPyELwVNLrcCP+UfZk1BHEZNTGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYt MTEzNjNhMmJjZmFiLzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYtMTEzNjNhMmJjZmFi LzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACubIK1Oi sKIvslFJ1qH73z44zv5xYSwZsKGkiVb7ons+A2kQmc/i0LzZbnP4+/yZ7ZSt7z0B 4UQ+e+X05hclkcuqTTxQ4FgVR+1WCT84r39fkJ1huS3IVvPX/o/5oQMVOSq3p8w7 GkS2Ja0SfcOhhVU5pSjca/AIosQsD0XNwK2zhENM6TlnB77AMWFlkf2Xt3eN1Ae5 FkmoGSuaXciQEsxlstCnYpQZxL6ArBoRkVZwvXj/MBWI1d3AEoBvpdts1ckEbRzP uhDAIQva/C1pmJ75hyzI0NWjcKTmcK0ziXt20F99X9R32kUB0G1VnsuU39z8lRfW 786uKyHpUuqQXA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:40 2025 by rpki-client