This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json) Hash identifier: MpSO53NNpqpvh82WZTVObLkDMD1fq++OOHqQ82V0UtU= Subject key identifier: D4:77:91:17:2B:2E:E8:59:F0:A8:4D:F3:48:65:4C:F5:C4:BB:30:32 Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832 Certificate serial: 019AF19B225684907AC461E02CDFDEA7D82F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft Manifest number: 0364 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: Zt/8BYb5IJ/nZrQH711ux7W45WuwBQyhMZQbV4u1sP0=) 2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=) 3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:22:56:84:90:7a:c4:61:e0:2c:df:de:a7:d8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23607105955c764a813fd9524a7e41b940c56832 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=d47791172b2ee859f0a84df348654cf5c4bb3032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:01:b4:96:af:05:2c:a7:a4:28:1f:d1:90: 06:6f:9e:6c:6f:29:7a:1a:42:2f:63:8f:d5:26:ac: fa:1c:80:61:ad:c3:e7:fc:55:c9:29:04:a8:c2:4a: b0:b1:9c:70:4b:b3:16:6a:ff:a9:f1:08:ca:dd:66: 55:de:56:48:47:0a:b7:81:ec:c6:26:07:d9:73:6c: 76:9e:1d:30:92:41:29:f8:1d:c8:36:17:71:0d:ea: 5b:f8:77:58:ae:2e:50:1b:ba:63:dd:70:5e:cf:c0: a5:ea:52:12:a4:12:38:43:77:ae:8f:fe:24:04:68: 34:45:63:30:59:bc:d2:6a:5d:5c:26:b3:7f:ca:9b: 41:a2:70:bd:ac:6c:ca:a8:86:a9:49:43:c4:46:76: 84:61:14:30:f8:3c:8a:73:31:b2:83:bd:5b:70:03: bf:5d:91:68:73:38:fe:2f:5a:e8:a6:15:99:48:ee: 3f:03:47:8a:1a:75:f2:f7:9f:f2:60:e3:64:ef:4d: ec:bc:a3:53:c1:43:eb:fc:57:6e:de:8a:5b:fb:23: 48:a4:b8:ba:8c:ac:51:4b:5a:7e:45:d1:be:00:89: e6:40:b0:73:2a:6b:f5:96:18:e0:ac:66:74:22:7b: 94:42:14:d6:96:a5:d6:2f:a8:4c:79:26:d5:70:fb: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:77:91:17:2B:2E:E8:59:F0:A8:4D:F3:48:65:4C:F5:C4:BB:30:32 X509v3 Authority Key Identifier: keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6a:52:a9:3b:8c:b6:4e:c0:d7:be:46:2a:e5:5e:88:33:6b: 8f:2e:38:ff:94:71:5e:ef:f0:43:0b:c6:08:fd:9e:94:d1:df: ca:76:28:a0:ba:f3:ec:f3:fe:98:ff:95:fa:a3:ac:f8:d8:a6: 85:25:d5:58:f6:67:b8:57:a3:13:76:34:1c:58:18:a3:c3:da: cc:32:e2:81:5e:f1:c3:92:ac:30:bd:28:fc:eb:07:cf:df:96: d4:5d:fb:a1:8f:e4:22:ba:aa:62:c0:5b:17:64:51:7e:11:39: 33:1c:1f:3f:71:ac:30:39:72:17:88:7b:d7:c8:85:69:9d:2d: 46:c9:e5:54:ff:7a:e2:03:2c:7a:fc:f6:3e:7c:0f:8a:25:88: 89:c0:5f:28:6a:c1:02:93:d0:af:30:f5:ac:6a:7b:08:49:84: 50:ef:69:ad:0c:83:d8:9f:cf:7c:13:9f:72:d4:c2:6e:2e:e9: 46:03:e2:f3:10:42:87:93:10:af:4a:7c:3c:c4:b8:5a:57:da: 94:1f:83:89:a2:95:4b:0d:8a:0a:ca:c7:ad:e7:c5:17:fc:05: 4c:cc:8d:78:9e:4b:35:63:38:b0:19:65:54:34:af:d0:02:52: 36:9e:7e:80:13:9b:5f:79:fc:3c:59:f7:0a:d7:e2:ae:26:13: 41:18:6c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyJWhJB6xGHgLN/ep9gvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjA3MTA1OTU1Yzc2NGE4MTNmZDk1MjRhN2U0MWI5NDBj NTY4MzIwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EyhkNDc3OTExNzJiMmVlODU5ZjBhODRkZjM0ODY1NGNmNWM0YmIzMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz00BtJavBSynpCgf0ZAGb55sbyl6 GkIvY4/VJqz6HIBhrcPn/FXJKQSowkqwsZxwS7MWav+p8QjK3WZV3lZIRwq3gezG JgfZc2x2nh0wkkEp+B3INhdxDepb+HdYri5QG7pj3XBez8Cl6lISpBI4Q3euj/4k BGg0RWMwWbzSal1cJrN/yptBonC9rGzKqIapSUPERnaEYRQw+DyKczGyg71bcAO/ XZFoczj+L1rophWZSO4/A0eKGnXy95/yYONk703svKNTwUPr/Fdu3opb+yNIpLi6 jKxRS1p+RdG+AInmQLBzKmv1lhjgrGZ0InuUQhTWlqXWL6hMeSbVcPtXyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR3kRcrLuhZ8KhN80hlTPXEuzAyMB8GA1UdIwQY MBaAFCNgcQWVXHZKgT/ZUkp+QblAxWgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTkt NDg0NzBmNjlkNzlkLzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTktNDg0NzBmNjlkNzlk LzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWpSqTuM tk7A175GKuVeiDNrjy44/5RxXu/wQwvGCP2elNHfynYooLrz7PP+mP+V+qOs+Nim hSXVWPZnuFejE3Y0HFgYo8PazDLigV7xw5KsML0o/OsHz9+W1F37oY/kIrqqYsBb F2RRfhE5MxwfP3GsMDlyF4h718iFaZ0tRsnlVP964gMsevz2PnwPiiWIicBfKGrB ApPQrzD1rGp7CEmEUO9prQyD2J/PfBOfctTCbi7pRgPi8xBCh5MQr0p8PMS4Wlfa lB+DiaKVSw2KCsrHrefFF/wFTMyNeJ5LNWM4sBllVDSv0AJSNp5+gBObX3n8PFn3 CtfiriYTQRhsog== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:04 2025 by rpki-client