This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json) Hash identifier: wbw3nS+H+WYEH4ThQTo0/mjYh7w4D7XhSaNL2ZFLMa0= Subject key identifier: 47:11:4D:84:A1:31:BB:25:EB:E8:5A:E4:5A:EC:DC:80:8E:66:6A:16 Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f Certificate serial: 019B0E2607DBE0FC9D9BE478E7804338AEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft Manifest number: 03F1 Signing time: Thu 11 Dec 2025 16:02:11 +0000 Manifest this update: Thu 11 Dec 2025 16:02:11 +0000 Manifest next update: Fri 12 Dec 2025 16:02:11 +0000 Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: Ye85dRHgXFkgrlNdt/qrYTmusxTuO2/ia5PQAGA+Aso=) 2: bfd_WpvacXpVJP__dq6vej5IyyY.roa (hash: /B+pNt8vIwVV5x8COrKPeKukz7hh0c0T1g3kvtIg6Z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:07:db:e0:fc:9d:9b:e4:78:e7:80:43:38:ae:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f Validity Not Before: Dec 11 16:02:11 2025 GMT Not After : Dec 12 16:02:11 2025 GMT Subject: CN=47114d84a131bb25ebe85ae45aecdc808e666a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:f7:e1:b8:6e:de:28:6b:79:61:5d:ce:9b: 8b:1b:29:44:93:0f:5b:59:aa:58:78:a9:60:d8:ea: 44:14:1b:7b:ea:7b:15:00:9d:3a:aa:e7:e3:98:41: 28:8c:40:3f:6a:36:57:4d:f5:b1:e2:80:68:dc:d7: ce:86:43:40:a8:25:82:f6:8f:d4:ca:e1:45:52:f6: 37:c9:fb:d8:2e:a8:1d:bc:dc:8d:4f:84:27:af:22: 89:20:9b:7f:66:58:89:92:f1:f2:54:00:c3:e5:ed: 9a:63:8b:2c:c3:be:b7:0b:e4:c1:74:4c:a0:1a:4a: f2:e6:9d:a4:16:c6:fa:a7:f5:c6:2e:90:13:aa:1d: 5a:d0:9f:19:c6:65:41:9f:35:27:9a:f5:f8:6a:33: c6:a9:86:5b:c1:d1:e2:2c:4f:20:08:61:8b:04:f9: 4f:c3:9c:eb:0f:a4:f1:2a:4d:9d:e3:b3:90:c2:c8: 8f:4b:a3:5f:8c:5a:3a:01:7c:d2:d0:d3:ba:3c:d3: 31:07:e8:32:93:92:91:08:13:c7:06:40:b6:4a:5b: 9d:0c:a8:81:73:39:dc:dd:78:21:05:03:4c:2e:ef: 05:0c:b7:7f:e0:01:6b:ca:70:d0:bc:83:18:bc:41: a3:73:4a:93:bc:73:b7:74:e0:07:b1:7f:c7:a9:7a: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:4D:84:A1:31:BB:25:EB:E8:5A:E4:5A:EC:DC:80:8E:66:6A:16 X509v3 Authority Key Identifier: keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d6:8a:49:16:11:a2:62:20:f6:cc:70:93:7e:7b:5b:0c:55: ee:fa:09:74:9a:32:99:b5:7e:66:dc:fa:34:93:6b:0d:7f:2f: 98:36:c7:86:76:7c:3c:b4:70:1e:8b:1b:13:c8:ce:8c:ca:b6: b3:d6:4a:97:a2:13:cf:c7:b9:9d:92:0c:75:3f:e7:22:af:eb: 26:ae:54:c0:ef:ec:aa:85:55:ca:f8:b4:b8:83:6c:3d:b2:37: 8d:d2:72:84:7b:28:ca:4a:cd:db:bc:e8:fb:fb:d3:fb:55:ec: 17:88:c7:55:c2:e0:12:ff:52:f8:3c:bc:46:b8:ad:3c:01:c7: cc:d6:dd:b8:4e:3b:f7:e1:10:0a:92:2d:23:d8:53:bd:16:9d: 18:8e:dc:2e:a0:4b:c1:98:1a:0d:36:63:33:b3:24:66:da:8e: e3:67:53:0a:af:30:1f:58:56:8b:8a:11:91:0a:1f:cf:ad:97: 48:cb:76:a2:b2:36:3b:3c:bd:10:94:92:63:1f:bb:f9:c9:d9: 94:38:ee:2a:ff:f7:03:ac:f9:de:61:27:af:8c:ea:34:58:a4: 6f:65:0c:f1:a5:36:45:0a:dd:a5:ba:05:74:a2:10:74:6f:4d: e4:65:c0:ec:c9:76:75:a6:c2:3c:62:03:36:e2:42:13:4b:ed: ec:3c:1e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJgfb4Pydm+R454BDOK6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDE0YWZlODc1MDIxM2MyODBlNWI2OGJlZmIxODg2NmY3 OTQ5N2YwHhcNMjUxMjExMTYwMjExWhcNMjUxMjEyMTYwMjExWjAzMTEwLwYDVQQD Eyg0NzExNGQ4NGExMzFiYjI1ZWJlODVhZTQ1YWVjZGM4MDhlNjY2YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJj34bhu3ihreWFdzpuLGylEkw9b WapYeKlg2OpEFBt76nsVAJ06qufjmEEojEA/ajZXTfWx4oBo3NfOhkNAqCWC9o/U yuFFUvY3yfvYLqgdvNyNT4QnryKJIJt/ZliJkvHyVADD5e2aY4ssw763C+TBdEyg Gkry5p2kFsb6p/XGLpATqh1a0J8ZxmVBnzUnmvX4ajPGqYZbwdHiLE8gCGGLBPlP w5zrD6TxKk2d47OQwsiPS6NfjFo6AXzS0NO6PNMxB+gyk5KRCBPHBkC2SludDKiB cznc3XghBQNMLu8FDLd/4AFrynDQvIMYvEGjc0qTvHO3dOAHsX/HqXq+KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcRTYShMbsl6+ha5Frs3ICOZmoWMB8GA1UdIwQY MBaAFCPRSv6HUCE8KA5baL77GIZveUl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84OWY4NDUtNTc2NS00YzExLTkyY2Qt ODQ3MmNhNDBmN2E3LzEvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84OWY4NDUtNTc2NS00YzExLTkyY2QtODQ3MmNhNDBmN2E3 LzEvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9aKSRYR omIg9sxwk357WwxV7voJdJoymbV+Ztz6NJNrDX8vmDbHhnZ8PLRwHosbE8jOjMq2 s9ZKl6ITz8e5nZIMdT/nIq/rJq5UwO/sqoVVyvi0uINsPbI3jdJyhHsoykrN27zo +/vT+1XsF4jHVcLgEv9S+Dy8RritPAHHzNbduE479+EQCpItI9hTvRadGI7cLqBL wZgaDTZjM7MkZtqO42dTCq8wH1hWi4oRkQofz62XSMt2orI2Ozy9EJSSYx+7+cnZ lDjuKv/3A6z53mEnr4zqNFikb2UM8aU2RQrdpboFdKIQdG9N5GXA7Ml2dabCPGID NuJCE0vt7Dweuw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:25:15 2025 by rpki-client