This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json) Hash identifier: Rsq9fl5NEayuRJp6FkoQJXFpDgY9WQvEF9WVGj6FrJo= Subject key identifier: B7:41:D1:0A:73:F4:8A:33:1C:7A:31:96:C4:09:25:1B:59:53:63:0C Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec Certificate serial: 019AF12E609CCC666CA7AC7DD055C390113F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: 9mmqx6V9z7GOw9UfYKh6jN1mcyEYz5z7svXKdZE7rfs=) 2: LposyqjV73-zT4I-NkDoALIwk_k.roa (hash: OHnWiOPJ0+vl8RYqLw+3oMseEcMGYzbghowhWqyDjck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:60:9c:cc:66:6c:a7:ac:7d:d0:55:c3:90:11:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=b741d10a73f48a331c7a3196c409251b5953630c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:45:41:71:29:45:b2:de:f1:e9:2c:37:49: 98:a0:44:bb:e7:fc:0b:29:39:70:ae:d3:b3:3c:60: 88:a7:0c:4a:fa:0e:d7:eb:13:a7:5e:4b:b7:cb:93: 33:70:c7:88:79:06:57:4d:cf:3d:7b:21:57:5a:1d: ad:04:bd:17:0c:87:36:ec:cd:a7:6a:7e:fd:2b:4e: 08:bf:cd:d8:46:b3:63:71:93:58:38:b9:bd:b0:b8: e5:06:c8:cc:a2:87:75:b4:09:57:96:c5:0d:65:3d: 78:c3:35:a1:37:e2:d0:77:f4:84:b9:7c:ca:1f:91: 7d:bb:cd:64:db:1a:75:e3:ae:e6:e3:24:01:5b:bc: e2:72:6a:fa:3c:88:ff:67:6e:e4:43:91:a1:87:b0: 06:1d:81:b2:02:05:0a:a3:94:19:30:68:57:95:07: 8d:a4:50:69:03:f8:95:86:b3:b2:0f:9c:2b:35:d8: ec:66:c8:d0:4f:0c:ca:55:c9:1b:e3:7a:56:58:fc: 5b:db:15:fa:e2:1f:58:b9:c0:b3:3a:9a:63:de:41: cf:dc:f8:ab:30:33:78:82:40:a7:17:65:cd:a9:60: 73:b9:17:fb:1c:a8:4d:cd:e0:32:38:ea:69:70:43: b8:7c:43:7a:4c:e4:58:1e:58:fb:ca:60:ec:c7:7e: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:D1:0A:73:F4:8A:33:1C:7A:31:96:C4:09:25:1B:59:53:63:0C X509v3 Authority Key Identifier: keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:c7:ab:e1:1d:c0:f8:35:ee:76:87:ec:cd:55:dc:3f:7a:8b: 37:5f:28:79:85:ed:17:ca:a6:30:df:cf:07:25:c8:9b:b4:0a: 27:1b:56:79:52:4b:46:31:a8:6d:be:25:15:ff:7d:d0:8c:db: b2:45:ec:5b:63:27:62:07:28:4f:96:62:42:79:0e:92:ed:6d: 31:ee:4c:23:f6:49:db:4d:d1:56:1f:ce:35:21:a9:7a:95:c0: 02:d8:36:4a:5f:0e:bb:55:c3:01:27:be:92:de:4c:ed:e8:7e: 61:cf:f5:e7:11:5f:8b:d8:07:49:b3:53:67:7a:a0:1f:1e:01: 6f:8c:c5:64:81:bd:f7:29:42:4f:8f:97:11:4a:a4:bd:05:6a: de:d5:ca:7a:55:8c:b9:07:01:23:63:73:82:51:62:14:fb:ec: 54:8e:1b:00:ef:a0:1f:ae:d5:61:73:92:86:75:49:e4:64:93: f6:91:85:df:3b:cd:dd:46:38:03:86:92:d0:0b:da:91:72:77: 32:bf:0c:5f:4a:67:c3:1a:c9:bd:49:a6:a9:71:23:ae:a4:3f: 52:f1:af:49:48:61:c1:35:fe:1a:d1:26:63:1b:5c:1e:62:e7: 8e:ca:68:d1:4c:3c:93:60:9e:a6:f3:a9:6f:c8:b4:67:90:32: ce:8f:a9:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmCczGZsp6x90FXDkBE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDM0ZGQzZDIxMWU1YzJlYTdiZDJmNTI3YTEzZTFlOTk2 ODIwZWMwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD EyhiNzQxZDEwYTczZjQ4YTMzMWM3YTMxOTZjNDA5MjUxYjU5NTM2MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8hFQXEpRbLe8eksN0mYoES75/wL KTlwrtOzPGCIpwxK+g7X6xOnXku3y5MzcMeIeQZXTc89eyFXWh2tBL0XDIc27M2n an79K04Iv83YRrNjcZNYOLm9sLjlBsjMood1tAlXlsUNZT14wzWhN+LQd/SEuXzK H5F9u81k2xp1467m4yQBW7zicmr6PIj/Z27kQ5Ghh7AGHYGyAgUKo5QZMGhXlQeN pFBpA/iVhrOyD5wrNdjsZsjQTwzKVckb43pWWPxb2xX64h9YucCzOppj3kHP3Pir MDN4gkCnF2XNqWBzuRf7HKhNzeAyOOppcEO4fEN6TORYHlj7ymDsx36e/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdB0Qpz9IozHHoxlsQJJRtZU2MMMB8GA1UdIwQY MBaAFCPTTdPSEeXC6nvS9SehPh6ZaCDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQt ZmU2NzFjMWQ1MTUwLzEvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQtZmU2NzFjMWQ1MTUw LzEvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz8er4R3A +DXudofszVXcP3qLN18oeYXtF8qmMN/PByXIm7QKJxtWeVJLRjGobb4lFf990Izb skXsW2MnYgcoT5ZiQnkOku1tMe5MI/ZJ203RVh/ONSGpepXAAtg2Sl8Ou1XDASe+ kt5M7eh+Yc/15xFfi9gHSbNTZ3qgHx4Bb4zFZIG99ylCT4+XEUqkvQVq3tXKelWM uQcBI2NzglFiFPvsVI4bAO+gH67VYXOShnVJ5GST9pGF3zvN3UY4A4aS0AvakXJ3 Mr8MX0pnwxrJvUmmqXEjrqQ/UvGvSUhhwTX+GtEmYxtcHmLnjspo0Uw8k2CepvOp b8i0Z5Ayzo+pZA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:13 2025 by rpki-client