This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft File: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json) Hash identifier: QHaeXim0LWLIEnwzpDLT+Fau9MSg05NlOTbmGAV/Jek= Subject key identifier: 8F:64:E8:6B:42:96:BF:CA:31:35:1A:08:F4:5B:57:36:C4:1B:E4:C9 Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7 Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7 Certificate serial: 019AF389A81929C40F7EE2CD7BA5A54C3F6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:16 +0000 Manifest this update: Sat 06 Dec 2025 12:01:16 +0000 Manifest next update: Sun 07 Dec 2025 12:01:16 +0000 Files and hashes: 1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: T8kokM53tKlZnev1O39pYD0D+RWAvNCyPU+PIhWntC8=) 2: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (hash: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a8:19:29:c4:0f:7e:e2:cd:7b:a5:a5:4c:3f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7 Validity Not Before: Dec 6 12:01:16 2025 GMT Not After : Dec 7 12:01:16 2025 GMT Subject: CN=8f64e86b4296bfca31351a08f45b5736c41be4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:ce:6c:64:1e:e7:16:3b:2f:7c:0f:f1:81: 38:e5:19:d5:2d:63:5e:d6:4e:28:f6:29:cc:80:87: 46:de:39:64:0d:c0:c0:f0:e6:6e:54:47:ac:f7:ec: 5c:be:da:cc:ae:ad:5d:ad:96:c9:e8:0f:ab:1d:29: ec:e8:9f:29:92:bb:b6:62:cb:31:7b:da:19:7e:8b: 26:56:24:3c:b3:94:bf:79:5f:4a:ba:1b:cf:d4:26: c0:ed:04:23:0d:63:a2:2f:99:d0:d1:20:a2:b5:47: 13:b9:b0:17:ea:17:b0:fb:94:12:77:63:0b:ae:e7: de:2f:af:77:55:29:1e:97:c2:89:c5:25:86:b4:a0: 00:84:6a:20:4d:b6:58:6c:c5:03:16:d1:83:b7:e4: 91:27:2b:a9:39:b6:8b:d1:f9:ae:d5:67:08:5e:58: 9b:e7:a0:32:6f:86:e0:3b:5b:bc:62:42:ac:4a:87: fc:1c:e2:ea:6a:bc:8c:a4:4c:40:ee:36:6a:21:39: 5d:6e:59:7e:d1:88:c3:6d:68:32:3e:31:a1:ee:c2: d7:80:bc:08:b2:7a:40:52:be:be:a2:c8:cd:29:a4: 81:67:7a:11:14:f1:36:0e:b0:e3:0b:5e:ca:42:d7: 90:7c:9e:f1:a0:4b:e2:54:89:7d:f2:7a:d3:d6:5a: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:E8:6B:42:96:BF:CA:31:35:1A:08:F4:5B:57:36:C4:1B:E4:C9 X509v3 Authority Key Identifier: keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:87:9f:21:64:91:13:17:c3:58:8c:16:e7:c5:37:ae:50:ab: fb:9e:c2:b7:c6:5f:c5:5e:ec:e2:b4:fe:9c:f0:a8:16:12:e3: 8a:c6:91:0e:07:5c:97:fa:7f:77:a5:78:19:ff:60:1f:9f:eb: f5:09:e7:74:fd:e5:7a:b2:29:d1:c8:35:e7:05:32:4e:70:16: 13:65:af:77:b6:cc:b4:81:8f:59:98:1a:22:9d:7d:59:a7:d0: 64:03:e9:f4:de:32:98:0b:70:1a:1d:6b:9f:bd:91:c8:86:34: d6:3d:8d:1b:08:94:6f:59:33:49:74:21:c2:16:fd:65:e5:62: 33:db:5b:09:f7:ab:96:3d:46:6e:0b:8a:d4:14:2a:56:d8:68: 04:76:58:e5:e3:cb:3f:76:cf:82:4d:78:db:3e:a0:eb:c7:22: 36:15:33:b8:31:a6:d2:20:a7:4b:1a:5d:6c:91:cc:d3:4c:70: 0b:a9:5e:21:f7:22:9c:15:27:c5:9c:24:42:ef:aa:76:dc:f8: 56:ee:53:16:e5:54:f5:be:09:f8:fc:99:c1:35:a4:46:18:25: 5f:c4:cb:14:a2:a2:cd:89:cd:c5:43:5d:a6:21:ee:74:2c:07: 83:ec:85:75:94:49:7d:f3:d5:08:a0:15:b0:7b:30:01:6b:25: 58:48:11:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziagZKcQPfuLNe6WlTD9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTQyNDk3OTcwZDY1NTQxZGRiMTU5NjU4ZTNiMGE2ZTJm NTE2YjcwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD Eyg4ZjY0ZTg2YjQyOTZiZmNhMzEzNTFhMDhmNDViNTczNmM0MWJlNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNLObGQe5xY7L3wP8YE45RnVLWNe 1k4o9inMgIdG3jlkDcDA8OZuVEes9+xcvtrMrq1drZbJ6A+rHSns6J8pkru2Yssx e9oZfosmViQ8s5S/eV9KuhvP1CbA7QQjDWOiL5nQ0SCitUcTubAX6hew+5QSd2ML rufeL693VSkel8KJxSWGtKAAhGogTbZYbMUDFtGDt+SRJyupObaL0fmu1WcIXlib 56Ayb4bgO1u8YkKsSof8HOLqaryMpExA7jZqITldbll+0YjDbWgyPjGh7sLXgLwI snpAUr6+osjNKaSBZ3oRFPE2DrDjC17KQteQfJ7xoEviVIl98nrT1lrPqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9k6GtClr/KMTUaCPRbVzbEG+TJMB8GA1UdIwQY MBaAFCOkJJeXDWVUHdsVlljjsKbi9Ra3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iYTI4NTctYzA5OC00NGQyLTljMDEt ZTcyMGZlYjEwMTAzLzEvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9iYTI4NTctYzA5OC00NGQyLTljMDEtZTcyMGZlYjEwMTAz LzEvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoefIWSR ExfDWIwW58U3rlCr+57Ct8ZfxV7s4rT+nPCoFhLjisaRDgdcl/p/d6V4Gf9gH5/r 9QnndP3lerIp0cg15wUyTnAWE2Wvd7bMtIGPWZgaIp19WafQZAPp9N4ymAtwGh1r n72RyIY01j2NGwiUb1kzSXQhwhb9ZeViM9tbCferlj1GbguK1BQqVthoBHZY5ePL P3bPgk142z6g68ciNhUzuDGm0iCnSxpdbJHM00xwC6leIfcinBUnxZwkQu+qdtz4 Vu5TFuVU9b4J+PyZwTWkRhglX8TLFKKizYnNxUNdpiHudCwHg+yFdZRJffPVCKAV sHswAWslWEgRkA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:58:18 2025 by rpki-client