This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json) Hash identifier: llIRNCkzyqsXpTD84Y59H8hwQnh2IWvIm9CdKJENET0= Subject key identifier: 6E:53:A5:FE:78:57:A0:72:6C:3D:B9:3E:38:95:FF:24:B3:42:44:92 Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938 Certificate serial: 019AF12DB934DC4B5E443B4D8FDC0999DFE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft Manifest number: 0EB4 Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: kk7QFhdESU2Gg9pOJE1IZP8avFxrHxpYU0viGWuUX0o=) 2: lMtd9Et7sCIMnXubrUAx71SKNrE.roa (hash: m1edH+G4XaQspTL3esib0CDSyQxr91JPxRsi1poYwKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b9:34:dc:4b:5e:44:3b:4d:8f:dc:09:99:df:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938 Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=6e53a5fe7857a0726c3db93e3895ff24b3424492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:0a:6d:9f:45:c0:6d:73:49:0c:ea:ab:05: f0:30:a7:4a:53:ba:33:67:f3:e4:47:49:c2:20:2d: e8:82:3b:99:61:f2:b5:ac:5c:c4:51:3a:42:cd:37: 8b:ef:e3:85:59:09:ab:a0:ae:38:d3:d4:50:03:88: 11:d8:b2:64:d0:73:3a:ee:d6:1c:92:d5:63:c4:8c: 08:20:64:61:29:33:d2:ca:30:97:3c:c3:33:6a:82: f7:d6:e9:75:07:2f:29:77:78:3b:9b:b1:af:f7:9d: 7c:c8:a3:67:32:48:50:bc:af:2a:27:e9:c4:57:e6: 27:d7:65:92:4c:d9:f0:8e:20:a8:b4:ab:3d:4b:cc: ef:eb:eb:61:fe:5b:e7:43:d7:91:e6:68:54:88:84: 62:e0:59:97:e5:0f:63:32:85:c8:37:f0:4e:a1:ee: c5:f0:2f:d5:cd:8e:ad:92:b4:63:e0:ac:21:2a:8d: 0d:a2:6d:02:09:2a:a4:ee:72:22:38:cd:47:25:0b: b9:53:3c:47:1c:ce:87:fc:59:57:5c:07:55:8a:90: 9e:9e:7f:91:2d:6c:be:a4:98:f3:5f:4a:c4:08:6c: f6:46:84:d6:cf:f7:3e:0e:bf:69:16:70:f5:23:9c: 52:de:21:6b:9f:32:05:c7:d6:4d:32:aa:7f:35:9f: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:53:A5:FE:78:57:A0:72:6C:3D:B9:3E:38:95:FF:24:B3:42:44:92 X509v3 Authority Key Identifier: keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:89:0b:95:d2:09:09:70:ab:5b:1d:82:de:3e:4c:76:07:b9: cd:7b:28:a3:44:ef:d1:c6:ab:e6:db:52:6e:44:08:a7:7c:6b: 66:76:7b:25:04:6a:6f:a9:f9:a7:cd:57:1b:7f:3e:0c:70:10: f6:d1:d3:7c:2a:3d:02:48:9e:db:44:a3:46:26:b0:23:54:f0: a1:5c:14:cd:03:29:71:0f:e5:2d:2f:36:11:46:fb:dc:75:66: 9f:32:4c:60:e7:da:13:1b:f0:3c:83:fb:8a:2c:8e:b6:23:a7: ad:11:dc:81:e9:9a:ce:11:00:85:9f:b5:a7:61:9e:a6:f2:78: 47:79:5c:13:eb:b7:43:d4:70:cc:42:a7:b7:71:e3:81:df:1c: de:1b:4a:f6:e0:e1:9c:64:9b:e4:17:4f:13:fb:3c:76:2e:ee: fe:af:c6:1d:44:35:4e:f6:a9:cf:27:4b:2e:a6:2d:cd:4a:4e: 06:13:8c:1d:3d:1d:2a:db:c1:04:6d:0d:50:7c:c9:ef:b1:ca: 57:1e:39:29:02:f7:9d:b3:a5:9c:a6:86:81:19:90:a4:11:31: 5e:b0:62:e9:1b:56:45:13:d6:9c:46:f7:41:b0:3c:49:07:55: bb:15:ab:c6:f5:57:47:87:e9:ad:c0:ee:e4:f4:e8:b0:16:28: 8d:6b:98:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbk03EteRDtNj9wJmd/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjhjOTk5YjMwY2UyNDhlNmM0NjhjNzg0ZDY0ZDcyZjk2 M2U5MzgwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD Eyg2ZTUzYTVmZTc4NTdhMDcyNmMzZGI5M2UzODk1ZmYyNGIzNDI0NDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEYKbZ9FwG1zSQzqqwXwMKdKU7oz Z/PkR0nCIC3ogjuZYfK1rFzEUTpCzTeL7+OFWQmroK4409RQA4gR2LJk0HM67tYc ktVjxIwIIGRhKTPSyjCXPMMzaoL31ul1By8pd3g7m7Gv9518yKNnMkhQvK8qJ+nE V+Yn12WSTNnwjiCotKs9S8zv6+th/lvnQ9eR5mhUiIRi4FmX5Q9jMoXIN/BOoe7F 8C/VzY6tkrRj4KwhKo0Nom0CCSqk7nIiOM1HJQu5UzxHHM6H/FlXXAdVipCenn+R LWy+pJjzX0rECGz2RoTWz/c+Dr9pFnD1I5xS3iFrnzIFx9ZNMqp/NZ+qWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5Tpf54V6BybD25PjiV/ySzQkSSMB8GA1UdIwQY MBaAFCP4yZmzDOJI5sRox4TWTXL5Y+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTkt M2RmNTQ5YTA2ZDViLzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTktM2RmNTQ5YTA2ZDVi LzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4kLldIJ CXCrWx2C3j5Mdge5zXsoo0Tv0car5ttSbkQIp3xrZnZ7JQRqb6n5p81XG38+DHAQ 9tHTfCo9Akie20SjRiawI1TwoVwUzQMpcQ/lLS82EUb73HVmnzJMYOfaExvwPIP7 iiyOtiOnrRHcgemazhEAhZ+1p2GepvJ4R3lcE+u3Q9RwzEKnt3Hjgd8c3htK9uDh nGSb5BdPE/s8di7u/q/GHUQ1TvapzydLLqYtzUpOBhOMHT0dKtvBBG0NUHzJ77HK Vx45KQL3nbOlnKaGgRmQpBExXrBi6RtWRRPWnEb3QbA8SQdVuxWrxvVXR4fprcDu 5PTosBYojWuY0A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:56 2025 by rpki-client