This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json) Hash identifier: ri4GRKPDQf01/EFaa4lzIFkloc7OHWLu+PFXJXMddLM= Subject key identifier: BB:76:7A:61:54:BD:50:D4:82:E8:5A:CA:9D:E8:72:68:A1:AE:F5:6C Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06 Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906 Certificate serial: 019AF164089E5267F43135174196EF181C24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 02:00:56 +0000 Manifest this update: Sat 06 Dec 2025 02:00:56 +0000 Manifest next update: Sun 07 Dec 2025 02:00:56 +0000 Files and hashes: 1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: eIWO1F+OksRgzPn0auD6aGwu80mhhjKfApOVC4pv4Lc=) 2: L1nx6g959I4u5e_n7rqsUK0vG74.roa (hash: X8LU286M1DCtu5IfhCO2jJJ+1Cy+WsVLYYIMMfE/G4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:08:9e:52:67:f4:31:35:17:41:96:ef:18:1c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906 Validity Not Before: Dec 6 02:00:56 2025 GMT Not After : Dec 7 02:00:56 2025 GMT Subject: CN=bb767a6154bd50d482e85aca9de87268a1aef56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:83:33:93:84:56:7b:cb:2e:80:75:65:24: 0d:4d:11:8e:ab:5f:99:3f:a9:2b:9b:05:f1:0f:64: 65:e9:ac:50:78:55:dc:4c:fe:95:de:1a:ba:66:1c: 2b:bc:20:d2:1e:4b:8a:4f:4c:83:be:0f:38:f9:c2: 1d:68:25:a3:44:09:c9:ba:77:ec:1a:09:e8:b3:8e: 0d:6d:bb:38:fb:ca:7b:72:ce:d3:49:42:47:96:13: 89:66:f0:9c:5f:ff:45:3c:6b:27:08:4a:b8:4e:b0: 8b:e4:79:5e:17:a9:fd:27:29:60:ab:c9:70:3b:a7: b2:e4:78:f1:2b:dd:3d:1b:ff:1d:a8:0b:a3:c6:98: b2:9e:70:f1:6b:cc:dc:0b:0d:58:ee:40:63:8c:45: 3a:8c:62:f1:83:22:ac:8f:3e:a0:e4:b8:f9:e6:8b: c6:8f:f6:5d:36:b7:e1:ca:70:cd:91:e8:de:98:25: 1d:f5:33:57:0d:11:aa:97:4c:64:25:11:85:f4:c7: fa:39:ee:3f:28:43:42:6c:ab:6a:05:bf:1d:99:ca: a8:bd:92:a8:b8:c6:d5:4b:4c:77:96:22:f3:df:c1: 72:3a:5b:4c:1d:8c:15:9b:92:ba:76:10:fb:ec:fd: 16:5c:c4:9a:2e:55:97:aa:4a:2a:01:e9:e6:70:22: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:7A:61:54:BD:50:D4:82:E8:5A:CA:9D:E8:72:68:A1:AE:F5:6C X509v3 Authority Key Identifier: keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:38:f5:b2:45:91:2a:5e:ae:56:ef:5f:62:d1:7b:a7:4a:45: de:83:bb:84:fa:33:ff:30:87:3e:a9:86:5e:72:82:95:17:db: 5a:60:23:71:f7:77:b1:bf:54:74:df:e5:99:9a:54:0a:3e:27: 4f:ab:4c:aa:42:43:73:05:f5:b2:43:c8:54:b0:55:7f:2b:0a: f9:fa:b6:7e:6b:20:fd:fc:64:c8:23:bb:53:d3:08:bc:25:ce: 4e:fc:b9:3c:19:de:23:4e:a1:b9:9b:f3:bd:70:88:7c:71:e2: 64:2b:74:50:c2:eb:a0:f4:f6:31:80:f4:f1:8e:42:79:56:e1: bd:f0:e4:98:2a:6d:4a:80:8e:e5:44:97:c5:5a:c3:d9:3e:ee: 5a:58:0f:91:8d:14:77:53:07:ef:61:fe:ef:c4:9d:27:bb:f0: 81:50:b1:64:52:2c:41:bc:8e:00:91:5c:a8:b9:81:68:39:16: d5:d2:8d:c4:3b:74:b4:df:5a:4d:a5:f1:e9:87:6a:95:6c:7b: 13:f5:62:83:f3:ec:42:0a:22:6f:1a:7e:30:fc:5a:77:28:65: b9:6d:9d:f3:f0:15:fd:f9:c5:2e:9b:1e:d4:b6:0a:64:47:6f: fa:11:ab:bf:c5:aa:3e:e2:ab:d8:cf:3a:63:10:41:77:f3:bd: 40:75:06:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAieUmf0MTUXQZbvGBwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYzAyYWY0ZjU4ZjExMzIwYWYzMTk2OTQ2ZTFmY2U5ZDA1 MGM5MDYwHhcNMjUxMjA2MDIwMDU2WhcNMjUxMjA3MDIwMDU2WjAzMTEwLwYDVQQD EyhiYjc2N2E2MTU0YmQ1MGQ0ODJlODVhY2E5ZGU4NzI2OGExYWVmNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQmDM5OEVnvLLoB1ZSQNTRGOq1+Z P6krmwXxD2Rl6axQeFXcTP6V3hq6ZhwrvCDSHkuKT0yDvg84+cIdaCWjRAnJunfs Ggnos44Nbbs4+8p7cs7TSUJHlhOJZvCcX/9FPGsnCEq4TrCL5HleF6n9Jylgq8lw O6ey5HjxK909G/8dqAujxpiynnDxa8zcCw1Y7kBjjEU6jGLxgyKsjz6g5Lj55ovG j/ZdNrfhynDNkejemCUd9TNXDRGql0xkJRGF9Mf6Oe4/KENCbKtqBb8dmcqovZKo uMbVS0x3liLz38FyOltMHYwVm5K6dhD77P0WXMSaLlWXqkoqAenmcCKXCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLt2emFUvVDUguhayp3ocmihrvVsMB8GA1UdIwQY MBaAFCPAKvT1jxEyCvMZaUbh/OnQUMkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQt NjJjYjhhY2E5NjE4LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQtNjJjYjhhY2E5NjE4 LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzj1skWR Kl6uVu9fYtF7p0pF3oO7hPoz/zCHPqmGXnKClRfbWmAjcfd3sb9UdN/lmZpUCj4n T6tMqkJDcwX1skPIVLBVfysK+fq2fmsg/fxkyCO7U9MIvCXOTvy5PBneI06huZvz vXCIfHHiZCt0UMLroPT2MYD08Y5CeVbhvfDkmCptSoCO5USXxVrD2T7uWlgPkY0U d1MH72H+78SdJ7vwgVCxZFIsQbyOAJFcqLmBaDkW1dKNxDt0tN9aTaXx6YdqlWx7 E/Vig/PsQgoibxp+MPxadyhluW2d8/AV/fnFLpse1LYKZEdv+hGrv8WqPuKr2M86 YxBBd/O9QHUGpw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:40 2025 by rpki-client