This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json) Hash identifier: nSMgS10pOxFsdRIZ+EiElWiyTaVgxv5f0sgIm04IA/4= Subject key identifier: B5:24:93:FA:89:1A:F2:35:0B:7C:5A:BA:B6:F6:43:3B:62:2E:84:4C Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00 Certificate serial: 019B38A18E0B86F31B8BBEC868EE94BC5BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 22:01:10 +0000 Manifest this update: Fri 19 Dec 2025 22:01:10 +0000 Manifest next update: Sat 20 Dec 2025 22:01:10 +0000 Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: 7RBguTiKy1251/oBRYU7OxBQZno6net9wc8J+ReXe48=) 2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=) 3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:8e:0b:86:f3:1b:8b:be:c8:68:ee:94:bc:5b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239c45e43625522080aec53952989a13a28abd00 Validity Not Before: Dec 19 22:01:10 2025 GMT Not After : Dec 20 22:01:10 2025 GMT Subject: CN=b52493fa891af2350b7c5abab6f6433b622e844c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:02:2a:4d:b2:10:99:b3:7e:35:58:a8:87: 7a:8b:82:c6:7d:99:e5:95:63:23:35:9c:2c:9d:da: b3:ca:37:23:a9:53:dd:b5:ad:17:cd:e3:e1:91:ea: a8:08:1f:4a:9c:99:ae:ea:10:0d:6d:78:cc:70:b3: af:23:69:04:ca:56:92:93:5b:ad:50:a3:d0:fa:de: 56:6e:0b:10:34:1f:bf:18:27:d9:95:f9:c0:57:11: f2:74:fb:0e:5e:88:15:c6:93:7d:d0:28:b9:56:f4: 77:b7:8e:0a:49:fd:75:9b:e7:00:2e:22:de:43:3d: 8d:45:38:3d:fc:63:0b:00:ab:84:af:8c:20:fc:f3: 28:48:0c:90:e8:c3:0e:42:61:64:3f:b9:e4:f9:d9: a3:2d:a9:d7:4e:fb:ab:fd:81:ac:db:04:5a:88:42: b4:6d:b2:ac:8b:b1:d2:c5:47:ea:6c:5e:9b:1b:f4: b6:7d:d3:0d:62:54:fb:86:65:53:bb:0d:ee:c0:28: 66:74:38:94:30:fe:ba:59:d1:5b:16:b6:b6:b0:fd: b9:25:56:5c:f5:4d:ad:78:3b:d6:47:4b:59:4b:14: ba:0b:c8:94:b3:a0:88:fb:78:00:c4:d6:59:2d:09: 3c:24:00:72:01:d3:e1:6f:ef:0f:37:ae:f4:31:be: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:93:FA:89:1A:F2:35:0B:7C:5A:BA:B6:F6:43:3B:62:2E:84:4C X509v3 Authority Key Identifier: keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:25:cd:4e:f4:30:4e:b8:dc:fc:69:4c:07:f2:22:42:12:6d: a9:14:42:c6:37:03:af:59:74:fa:09:a6:70:fd:12:25:db:65: eb:49:02:9b:ff:46:1e:1e:9e:b8:7d:7e:5c:24:ae:e5:a0:b3: 92:97:29:28:c2:96:bd:eb:42:ca:f6:b6:b4:c1:88:b5:0a:35: d2:ce:9b:64:0a:91:c6:f8:b0:d3:b1:c6:86:15:8a:3b:01:65: 5f:a1:9f:a5:73:72:5d:2e:ed:26:96:05:62:77:d0:ac:bd:c2: d1:80:d8:37:58:88:2d:c2:06:f5:86:b2:84:e6:f3:31:9e:97: 26:21:9f:77:14:20:78:eb:ca:c4:91:5d:ec:10:17:9f:d8:8e: f4:21:83:8a:77:e9:2f:19:24:9d:92:52:87:75:b9:20:48:b5: bc:c9:2e:60:9d:b9:83:44:07:8c:16:59:6f:9e:fd:ff:3a:73: ad:a5:cc:98:c4:59:24:11:4b:39:02:15:4a:31:5e:2a:fa:53: 18:cd:42:3a:f7:a5:69:b2:93:1e:d2:54:7b:77:5e:97:c5:06: ee:32:8e:6e:69:ea:bb:d5:07:c7:23:60:96:1a:cd:4a:de:ea: 7a:fd:5d:46:6c:78:ed:b7:f8:20:80:f2:50:b8:ec:4d:9c:a2: b0:c9:f1:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oY4LhvMbi77IaO6UvFv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4 YWJkMDAwHhcNMjUxMjE5MjIwMTEwWhcNMjUxMjIwMjIwMTEwWjAzMTEwLwYDVQQD EyhiNTI0OTNmYTg5MWFmMjM1MGI3YzVhYmFiNmY2NDMzYjYyMmU4NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEsCKk2yEJmzfjVYqId6i4LGfZnl lWMjNZwsndqzyjcjqVPdta0XzePhkeqoCB9KnJmu6hANbXjMcLOvI2kEylaSk1ut UKPQ+t5WbgsQNB+/GCfZlfnAVxHydPsOXogVxpN90Ci5VvR3t44KSf11m+cALiLe Qz2NRTg9/GMLAKuEr4wg/PMoSAyQ6MMOQmFkP7nk+dmjLanXTvur/YGs2wRaiEK0 bbKsi7HSxUfqbF6bG/S2fdMNYlT7hmVTuw3uwChmdDiUMP66WdFbFra2sP25JVZc 9U2teDvWR0tZSxS6C8iUs6CI+3gAxNZZLQk8JAByAdPhb+8PN670Mb4d3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUkk/qJGvI1C3xaurb2QztiLoRMMB8GA1UdIwQY MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt OTc1YTIzN2VjZDA2LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2 LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyXNTvQw Trjc/GlMB/IiQhJtqRRCxjcDr1l0+gmmcP0SJdtl60kCm/9GHh6euH1+XCSu5aCz kpcpKMKWvetCyva2tMGItQo10s6bZAqRxviw07HGhhWKOwFlX6GfpXNyXS7tJpYF YnfQrL3C0YDYN1iILcIG9YayhObzMZ6XJiGfdxQgeOvKxJFd7BAXn9iO9CGDinfp LxkknZJSh3W5IEi1vMkuYJ25g0QHjBZZb579/zpzraXMmMRZJBFLOQIVSjFeKvpT GM1COvelabKTHtJUe3del8UG7jKObmnqu9UHxyNglhrNSt7qev1dRmx47bf4IIDy ULjsTZyisMnxcQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:14:37 2025 by rpki-client