This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json) Hash identifier: uLDlO+iYIvAbSKkdr1htTpl4KFMTgZb+xrnkCYatsbE= Subject key identifier: 17:23:A0:D8:FF:A0:13:AD:49:60:FE:E0:2B:2D:B0:4D:6D:1B:73:DC Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3 Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3 Certificate serial: 019B1EE189FD641907DCF52778C62DAAFB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft Manifest number: 1602 Signing time: Sun 14 Dec 2025 22:00:55 +0000 Manifest this update: Sun 14 Dec 2025 22:00:55 +0000 Manifest next update: Mon 15 Dec 2025 22:00:55 +0000 Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: R/xP+qMxOIz/wJCqLx5eWLt2tkK66lOpUNJDSV3mp4c=) 2: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:89:fd:64:19:07:dc:f5:27:78:c6:2d:aa:fb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3 Validity Not Before: Dec 14 22:00:55 2025 GMT Not After : Dec 15 22:00:55 2025 GMT Subject: CN=1723a0d8ffa013ad4960fee02b2db04d6d1b73dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:fb:37:47:b9:23:d7:b7:5e:cf:d2:f8:e0: 8d:b4:6b:99:8e:6f:ad:d4:fb:4f:7e:9b:7f:5a:a5: 1a:ef:7b:6e:26:1e:86:5d:ed:80:5a:9a:79:78:14: 98:65:61:e0:b8:1b:7b:34:05:48:f5:3d:1c:c4:1a: 9f:6b:58:20:7f:16:eb:29:6d:1f:9b:5b:d5:ec:1d: 7b:57:fa:ee:47:22:9f:dc:39:da:fd:86:88:92:68: 22:81:e7:a1:8f:1a:11:d5:a2:a5:d8:2e:05:0a:8b: 2e:15:ae:64:93:9b:fe:21:65:5c:e3:8a:c9:94:d8: 4a:69:bc:9d:ff:5f:8b:63:40:9a:b1:b5:b8:81:58: 7f:d6:63:ad:8b:19:e5:81:f4:7e:8c:90:01:75:02: 4b:13:28:1d:6a:64:03:f1:56:2c:a4:40:bc:38:1f: 9f:b6:bf:97:24:3f:f5:af:cc:df:1e:c5:be:c8:13: 21:bc:ba:99:9e:1f:f0:b5:e8:57:df:78:df:f4:40: 67:b9:a0:46:ae:00:22:aa:09:99:b4:11:1e:27:fb: 58:cf:56:b8:bd:48:b7:6e:89:17:c9:2a:a0:4f:ba: b6:a7:bc:0f:03:31:c5:00:e4:e8:ef:e7:5f:fb:35: ff:b3:00:a8:13:f7:22:a3:3e:30:43:fb:52:f3:83: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:23:A0:D8:FF:A0:13:AD:49:60:FE:E0:2B:2D:B0:4D:6D:1B:73:DC X509v3 Authority Key Identifier: keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:35:fa:8d:7f:0d:13:9b:27:ee:e3:9d:cf:05:2d:3c:83:a6: 00:2d:10:ef:4c:01:25:8f:47:2c:d9:93:ab:ed:9e:e8:bd:01: 53:d1:a0:f7:70:86:9a:5f:bb:a6:67:90:4c:cf:a7:4d:82:2d: f5:b3:4e:73:1d:ad:80:f5:be:f3:b1:e6:43:87:37:dc:b0:ff: 86:be:38:c2:3e:9a:67:1c:4c:bf:3f:b3:23:a9:1b:15:36:c7: af:1a:02:b9:42:d9:d8:f4:3d:9a:38:45:41:55:af:8e:ad:bc: 7a:d4:5d:ec:51:05:11:11:58:48:76:d6:be:be:c0:66:e5:73: df:ad:7e:48:12:0a:51:27:35:05:5c:55:3c:00:d0:0a:0b:f9: 7a:dd:a4:7c:ae:d8:3f:e9:af:0c:67:c8:57:52:3c:15:1d:eb: 0f:0c:f1:12:31:1b:03:af:4a:ae:a4:5e:9c:7b:10:8f:96:9b: e0:67:3c:94:51:21:f8:fd:ef:fa:68:07:4d:ad:6c:21:f3:c5: 3c:62:b0:d2:51:df:cd:da:04:61:4e:19:62:f9:6e:75:f0:51: 78:f6:9c:d6:b3:db:1c:43:5f:36:6a:00:f9:66:d9:1e:4b:2e: ea:7c:ad:59:d9:6e:ab:eb:e7:06:6e:93:c6:89:ed:25:70:16: 1f:f8:88:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4Yn9ZBkH3PUneMYtqvtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDQ4MGIwNzk1NjE3ZTJlMjZlNmUxODI2NDM3N2U3YTk2 Yzc4ZjMwHhcNMjUxMjE0MjIwMDU1WhcNMjUxMjE1MjIwMDU1WjAzMTEwLwYDVQQD EygxNzIzYTBkOGZmYTAxM2FkNDk2MGZlZTAyYjJkYjA0ZDZkMWI3M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43v7N0e5I9e3Xs/S+OCNtGuZjm+t 1PtPfpt/WqUa73tuJh6GXe2AWpp5eBSYZWHguBt7NAVI9T0cxBqfa1ggfxbrKW0f m1vV7B17V/ruRyKf3Dna/YaIkmgigeehjxoR1aKl2C4FCosuFa5kk5v+IWVc44rJ lNhKabyd/1+LY0CasbW4gVh/1mOtixnlgfR+jJABdQJLEygdamQD8VYspEC8OB+f tr+XJD/1r8zfHsW+yBMhvLqZnh/wtehX33jf9EBnuaBGrgAiqgmZtBEeJ/tYz1a4 vUi3bokXySqgT7q2p7wPAzHFAOTo7+df+zX/swCoE/cioz4wQ/tS84MQeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcjoNj/oBOtSWD+4CstsE1tG3PcMB8GA1UdIwQY MBaAFCPUgLB5Vhfi4m5uGCZDd+epbHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQt YWY5OGU0OWYxMWFlLzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQtYWY5OGU0OWYxMWFl LzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejX6jX8N E5sn7uOdzwUtPIOmAC0Q70wBJY9HLNmTq+2e6L0BU9Gg93CGml+7pmeQTM+nTYIt 9bNOcx2tgPW+87HmQ4c33LD/hr44wj6aZxxMvz+zI6kbFTbHrxoCuULZ2PQ9mjhF QVWvjq28etRd7FEFERFYSHbWvr7AZuVz361+SBIKUSc1BVxVPADQCgv5et2kfK7Y P+mvDGfIV1I8FR3rDwzxEjEbA69KrqRenHsQj5ab4Gc8lFEh+P3v+mgHTa1sIfPF PGKw0lHfzdoEYU4ZYvludfBRePac1rPbHENfNmoA+WbZHksu6nytWdluq+vnBm6T xontJXAWH/iIZA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:17 2025 by rpki-client