This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json) Hash identifier: vh3IecpQMi6zkcbigRvrf1f9d1hgKy2IxNmuS4cQ1dc= Subject key identifier: C8:6D:89:02:6C:C7:7A:B3:FB:67:D7:55:47:C6:04:9A:1B:39:F1:BB Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97 Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97 Certificate serial: 019AF12CF64F64D32BF89FF6B26C44720B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft Manifest number: 0831 Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: 6WPJcIyDQjnxNXRL+6zg4BTAOZVYCbxajebrUF5irIs=) 2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f6:4f:64:d3:2b:f8:9f:f6:b2:6c:44:72:0b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97 Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=c86d89026cc77ab3fb67d75547c6049a1b39f1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:18:42:a9:27:b3:a6:7b:66:a4:6a:4b:e3: ce:1a:17:b2:f2:05:bf:09:1e:31:3c:fe:a3:f7:51: 70:45:a9:c4:d3:1e:f7:e7:96:37:6b:7c:cf:60:07: 88:54:ff:03:8e:16:04:66:3c:5f:56:de:4c:f3:9b: ca:ff:ca:ed:6a:bc:7f:f5:c5:fe:e2:64:9a:63:ef: 2d:b6:70:d2:be:6d:c3:0d:dc:04:12:67:08:04:51: 9d:d5:53:6c:26:d1:d9:f3:4a:96:11:69:d0:8b:f7: 58:67:a2:90:2e:eb:48:c3:c5:9d:57:00:a2:bc:5b: 6c:65:96:b7:7c:02:9b:68:fa:10:70:df:bd:3b:c0: 6b:55:03:5f:57:ba:9e:a3:cc:ad:6b:76:6f:df:14: 9b:88:fd:4b:31:bb:21:9d:c2:b7:1b:63:8c:81:ef: 35:89:93:43:f2:3c:9c:9d:8b:c9:4f:9b:d4:48:d5: 21:f3:ba:f3:ed:f8:be:a3:80:2d:2f:33:b8:0e:cd: 63:63:a8:7c:e1:5c:7c:97:36:d7:b0:70:45:d0:6a: aa:fd:84:74:6e:d1:87:c2:cb:ec:34:a6:04:75:55: 86:5a:de:eb:b7:d8:b4:34:5d:fd:88:a0:c1:2a:06: 05:34:31:1f:d3:e3:0f:1c:1b:50:c2:e7:16:ca:ce: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6D:89:02:6C:C7:7A:B3:FB:67:D7:55:47:C6:04:9A:1B:39:F1:BB X509v3 Authority Key Identifier: keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ae:dd:ab:a5:03:26:86:4e:b2:87:8f:1b:51:42:b8:01:7e: cc:80:5e:bd:d5:f8:ae:50:c3:75:58:d2:ab:1a:e7:44:2f:0a: 39:da:36:6c:41:8c:5f:a3:38:20:6a:ac:99:01:db:53:ac:39: 48:4c:f6:6c:58:1f:99:08:44:6f:2c:32:2e:5b:10:10:5a:a1: fb:1f:cd:58:56:e6:40:c5:f3:88:b6:1d:12:7e:b7:7c:46:0b: 7c:c9:15:63:dc:30:ac:65:f9:ce:ce:ae:04:6d:5a:6f:24:d4: 7b:f8:97:c5:88:0c:fa:70:7e:e9:ff:de:93:1c:22:54:2b:02: 2a:83:ec:fa:2f:5c:25:70:a3:ff:2f:b2:de:4c:82:80:f5:a7: 82:76:b2:46:2b:92:8d:1a:cd:de:0b:f7:c4:d0:1d:8d:c3:64: b2:c6:8d:2a:a9:ac:fa:99:27:b4:80:f5:5b:be:ae:56:5f:8e: 60:01:10:2c:bb:b7:d2:00:61:39:2d:80:cd:24:1e:48:f4:e5: ea:ce:6f:a6:47:f7:d1:d5:34:55:c7:23:f5:af:ad:2d:5c:e2: ec:5e:7b:33:3f:b0:ee:82:2a:02:af:d1:5a:2a:3f:c9:1f:fd: 20:4f:69:84:20:0e:d2:a8:03:db:04:75:45:f9:9b:d8:31:23: 1d:9b:7a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPZPZNMr+J/2smxEcgtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTQ1MTY0YzU3MmVkZGU1ZGYyNTM5MTdjYzEyYTJkZmQz OThiOTcwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD EyhjODZkODkwMjZjYzc3YWIzZmI2N2Q3NTU0N2M2MDQ5YTFiMzlmMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQIYQqkns6Z7ZqRqS+POGhey8gW/ CR4xPP6j91FwRanE0x7355Y3a3zPYAeIVP8DjhYEZjxfVt5M85vK/8rtarx/9cX+ 4mSaY+8ttnDSvm3DDdwEEmcIBFGd1VNsJtHZ80qWEWnQi/dYZ6KQLutIw8WdVwCi vFtsZZa3fAKbaPoQcN+9O8BrVQNfV7qeo8yta3Zv3xSbiP1LMbshncK3G2OMge81 iZND8jycnYvJT5vUSNUh87rz7fi+o4AtLzO4Ds1jY6h84Vx8lzbXsHBF0Gqq/YR0 btGHwsvsNKYEdVWGWt7rt9i0NF39iKDBKgYFNDEf0+MPHBtQwucWys5NcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhtiQJsx3qz+2fXVUfGBJobOfG7MB8GA1UdIwQY MBaAFCPkUWTFcu3eXfJTkXzBKi39OYuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEt NjZhYTJhMjMyMzllLzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEtNjZhYTJhMjMyMzll LzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq7dq6UD JoZOsoePG1FCuAF+zIBevdX4rlDDdVjSqxrnRC8KOdo2bEGMX6M4IGqsmQHbU6w5 SEz2bFgfmQhEbywyLlsQEFqh+x/NWFbmQMXziLYdEn63fEYLfMkVY9wwrGX5zs6u BG1abyTUe/iXxYgM+nB+6f/ekxwiVCsCKoPs+i9cJXCj/y+y3kyCgPWngnayRiuS jRrN3gv3xNAdjcNkssaNKqms+pkntID1W76uVl+OYAEQLLu30gBhOS2AzSQeSPTl 6s5vpkf30dU0Vccj9a+tLVzi7F57Mz+w7oIqAq/RWio/yR/9IE9phCAO0qgD2wR1 Rfmb2DEjHZt6dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:23:57 2025 by rpki-client