This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json) Hash identifier: yk+mWQdzlYBap6yessRuB6arzrRzKbELNqFkg6gTC0U= Subject key identifier: A9:33:56:10:BF:0B:9E:16:8E:67:FA:06:EA:3D:8C:C4:0E:EC:AD:AC Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4 Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4 Certificate serial: 019AF27655E047142BEC14B45FF037059764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft Manifest number: 0363 Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: Gtjv9SsNJuxEsqxjHlcw6nFSI07OQLmMZB0rXfmBgH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:55:e0:47:14:2b:ec:14:b4:5f:f0:37:05:97:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4 Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=a9335610bf0b9e168e67fa06ea3d8cc40eecadac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:c3:4e:0d:3d:8f:f5:60:cf:dc:66:47:48: df:32:29:01:bc:90:ee:7c:6c:91:6f:ca:02:51:b9: b0:2e:89:49:2e:f5:9c:b4:31:c8:ca:79:54:9b:b9: 7f:7a:18:74:bd:8f:79:f4:46:dd:e9:09:14:f3:7a: 9c:76:ea:ea:90:20:cd:7c:8d:9d:17:86:59:fa:b6: 93:d3:73:0b:c9:6e:76:b6:15:da:61:ed:09:82:04: c3:13:83:5d:ed:25:d9:6e:cf:54:9f:95:50:c3:2a: 74:2c:36:bf:8b:19:b5:81:64:2f:0e:61:cd:fb:58: 50:86:2e:6a:4d:83:38:7d:39:31:08:d4:aa:30:e8: 08:06:eb:51:0f:79:9a:14:e6:ac:dc:dc:69:50:bb: 3b:cc:6f:88:0f:50:12:29:69:04:16:7e:78:6b:21: 9a:f0:52:eb:94:dc:91:37:95:5a:9e:b9:cf:6e:39: 02:ba:bd:eb:a3:5f:b2:05:4e:7d:41:46:e0:9a:ae: 22:2e:33:e6:3a:f4:7c:8d:0e:33:94:91:bb:d3:89: c1:16:20:37:98:d0:7d:f4:d7:3b:3a:91:d9:4a:53: 30:2a:c4:20:49:09:d3:43:95:64:32:a7:63:ba:28: 79:21:b7:e1:5e:d4:7c:83:50:64:fd:f6:30:2b:53: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:33:56:10:BF:0B:9E:16:8E:67:FA:06:EA:3D:8C:C4:0E:EC:AD:AC X509v3 Authority Key Identifier: keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:d2:0f:f8:9f:bc:b5:0b:01:f9:ed:ae:f9:42:46:65:eb:8c: 1c:2d:ff:a9:ff:55:7f:b6:a4:50:4a:5d:91:54:27:40:15:da: e0:dc:17:d0:87:50:aa:16:55:46:e4:a1:85:81:2f:5e:c5:9e: 8b:7c:11:1f:62:24:cd:f0:1e:88:a1:27:e4:fe:45:ec:09:64: 08:6f:8c:14:13:77:ed:b5:87:6c:7b:42:97:47:e6:01:3a:af: 7a:1b:24:e7:9a:44:1a:21:14:87:61:d4:73:29:2b:08:8b:ad: 9c:0f:cf:e7:c7:c1:c5:ca:2c:a0:bc:51:ae:5d:ec:04:f9:ab: 48:d1:82:44:cc:01:d7:93:5c:72:ad:ac:39:77:20:6d:47:62: aa:ba:bf:f9:93:92:34:11:d4:4c:f7:69:30:95:c3:69:a2:e6: e4:94:35:37:16:4a:57:3f:22:4d:1f:3f:c3:6b:9c:53:3d:93: 4d:8d:ce:03:5e:62:5a:f2:28:5d:28:90:8f:b7:d8:d0:38:a6: 8f:95:4f:e8:40:e9:9a:01:ee:08:d3:54:66:07:e8:8c:48:83: 3c:73:06:3d:7b:63:55:f9:45:fe:a5:de:bb:5f:c9:57:70:6a: 80:1e:96:a6:de:b5:52:97:b2:80:3d:6c:88:c5:d6:bf:9d:5a: 49:96:b5:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlXgRxQr7BS0X/A3BZdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx YmE3YzQwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD EyhhOTMzNTYxMGJmMGI5ZTE2OGU2N2ZhMDZlYTNkOGNjNDBlZWNhZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp77DTg09j/Vgz9xmR0jfMikBvJDu fGyRb8oCUbmwLolJLvWctDHIynlUm7l/ehh0vY959Ebd6QkU83qcdurqkCDNfI2d F4ZZ+raT03MLyW52thXaYe0JggTDE4Nd7SXZbs9Un5VQwyp0LDa/ixm1gWQvDmHN +1hQhi5qTYM4fTkxCNSqMOgIButRD3maFOas3NxpULs7zG+ID1ASKWkEFn54ayGa 8FLrlNyRN5VanrnPbjkCur3ro1+yBU59QUbgmq4iLjPmOvR8jQ4zlJG704nBFiA3 mNB99Nc7OpHZSlMwKsQgSQnTQ5VkMqdjuih5IbfhXtR8g1Bk/fYwK1NtvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkzVhC/C54Wjmf6Buo9jMQO7K2sMB8GA1UdIwQY MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1 LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3NIP+J+8 tQsB+e2u+UJGZeuMHC3/qf9Vf7akUEpdkVQnQBXa4NwX0IdQqhZVRuShhYEvXsWe i3wRH2IkzfAeiKEn5P5F7AlkCG+MFBN37bWHbHtCl0fmATqvehsk55pEGiEUh2HU cykrCIutnA/P58fBxcosoLxRrl3sBPmrSNGCRMwB15Nccq2sOXcgbUdiqrq/+ZOS NBHUTPdpMJXDaaLm5JQ1NxZKVz8iTR8/w2ucUz2TTY3OA15iWvIoXSiQj7fY0Dim j5VP6EDpmgHuCNNUZgfojEiDPHMGPXtjVflF/qXeu1/JV3BqgB6Wpt61UpeygD1s iMXWv51aSZa1Xw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:16 2025 by rpki-client