This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json) Hash identifier: x13/yzIiymwyPbmTZxMqqHwkJkv1zKYTcs9RBL5oJo8= Subject key identifier: 14:E2:FC:61:06:80:90:8E:F5:5F:23:48:69:91:0D:67:BF:0B:92:90 Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79 Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79 Certificate serial: 019B5A885E85CDC1762948558A06779D20ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft Manifest number: 065B Signing time: Fri 26 Dec 2025 12:00:45 +0000 Manifest this update: Fri 26 Dec 2025 12:00:45 +0000 Manifest next update: Sat 27 Dec 2025 12:00:45 +0000 Files and hashes: 1: IH8GUDUUtI846g0Rs8joZvepzjk.roa (hash: 6K+vAOEWGXGlUcaWJKc3qjbd7YBtdEpAKxwmOZoDOME=) 2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: HxJAvwd/pTpOoPyOm4sDaAq6blG0+SzKXB1JeGVtDj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:5e:85:cd:c1:76:29:48:55:8a:06:77:9d:20:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79 Validity Not Before: Dec 26 12:00:45 2025 GMT Not After : Dec 27 12:00:45 2025 GMT Subject: CN=14e2fc610680908ef55f234869910d67bf0b9290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:00:cb:f6:67:21:ce:3d:16:ff:50:7f:a6: 38:51:5a:db:fd:88:eb:0d:81:9e:82:49:a7:31:ed: 7e:e4:bd:67:c6:c6:f2:82:02:66:cb:9d:55:85:17: f9:74:61:f7:ec:50:41:f1:3f:66:cf:fa:6b:6c:96: c9:c0:99:b0:ac:87:a0:b2:84:3a:41:46:68:e0:7f: 7e:43:39:6c:0a:4e:2a:b1:a7:77:15:d3:ac:59:4e: a1:b7:69:36:31:6a:b3:df:22:6a:99:62:3e:26:ef: 41:38:8c:4d:c6:e6:f2:e3:4c:67:0f:a6:62:e0:fe: 9b:73:e9:9c:07:2a:03:39:ef:d4:23:95:aa:2e:7e: 79:f8:68:2a:73:8e:10:a4:2b:eb:3c:fc:56:7d:17: 66:ee:c3:ff:03:0a:fd:eb:36:ed:60:09:b6:94:95: ba:b3:0c:d6:60:e5:0e:43:91:76:d6:12:47:ca:9c: 9c:d9:6f:ec:d7:70:c3:a2:bb:f9:69:91:c8:c9:4f: 23:be:ba:e4:ca:1e:ec:7e:bd:7e:27:dc:34:0b:67: d0:09:ec:08:3e:c2:b4:b6:ba:40:ea:fd:a6:49:51: ea:e6:3a:50:b6:3b:6f:4f:01:fb:37:58:fc:61:91: 21:d3:fd:38:db:ba:0b:5a:f0:ae:26:0d:32:34:0c: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E2:FC:61:06:80:90:8E:F5:5F:23:48:69:91:0D:67:BF:0B:92:90 X509v3 Authority Key Identifier: keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:83:f2:94:ea:15:da:31:31:bb:69:51:ae:0f:56:65:f2:ae: 68:e8:27:9c:d3:a3:c8:de:71:3c:4c:87:ef:be:1e:f8:e8:60: b1:c9:71:b0:27:fb:c3:4c:69:c9:90:d1:81:64:c9:64:65:15: ae:7f:87:f9:db:f5:ef:83:12:bf:13:d2:de:c8:9b:dd:c0:35: e4:98:1a:0d:13:dd:fd:31:94:fa:53:b9:79:05:b3:77:21:45: e3:90:16:6e:86:d6:cd:3c:ba:b5:da:26:80:4f:7a:24:23:dc: 88:93:cf:e4:e5:d8:ce:59:e1:66:b7:58:cf:03:39:a6:e8:f7: ce:40:8a:26:bf:23:32:64:1a:27:d1:f5:07:87:a6:da:5f:c3: 2c:cb:76:c6:b3:cc:7f:9a:b2:5b:ad:34:56:e5:2f:ee:4a:b9: d9:0f:86:22:33:54:f9:55:66:3c:58:25:b0:81:59:5a:b5:ee: 3f:9f:52:4f:35:40:6e:21:41:96:b2:60:dc:2f:41:42:21:80: 55:d6:30:03:47:05:c4:75:d6:01:20:28:52:56:40:c3:28:58: 9b:f5:1d:33:4d:1a:44:22:37:2c:56:51:45:34:74:38:4f:cb: f1:48:9c:f6:90:77:2b:85:2a:ea:26:a2:6a:21:1f:e9:a2:36: ac:19:a8:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiF6FzcF2KUhVigZ3nSDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4 NDZlNzkwHhcNMjUxMjI2MTIwMDQ1WhcNMjUxMjI3MTIwMDQ1WjAzMTEwLwYDVQQD EygxNGUyZmM2MTA2ODA5MDhlZjU1ZjIzNDg2OTkxMGQ2N2JmMGI5MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mwAy/ZnIc49Fv9Qf6Y4UVrb/Yjr DYGegkmnMe1+5L1nxsbyggJmy51VhRf5dGH37FBB8T9mz/prbJbJwJmwrIegsoQ6 QUZo4H9+QzlsCk4qsad3FdOsWU6ht2k2MWqz3yJqmWI+Ju9BOIxNxuby40xnD6Zi 4P6bc+mcByoDOe/UI5WqLn55+Ggqc44QpCvrPPxWfRdm7sP/Awr96zbtYAm2lJW6 swzWYOUOQ5F21hJHypyc2W/s13DDorv5aZHIyU8jvrrkyh7sfr1+J9w0C2fQCewI PsK0trpA6v2mSVHq5jpQtjtvTwH7N1j8YZEh0/0427oLWvCuJg0yNAwB3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTi/GEGgJCO9V8jSGmRDWe/C5KQMB8GA1UdIwQY MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt NjVkZDdmNTJlNDZjLzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoPylOoV 2jExu2lRrg9WZfKuaOgnnNOjyN5xPEyH774e+OhgsclxsCf7w0xpyZDRgWTJZGUV rn+H+dv174MSvxPS3sib3cA15JgaDRPd/TGU+lO5eQWzdyFF45AWbobWzTy6tdom gE96JCPciJPP5OXYzlnhZrdYzwM5puj3zkCKJr8jMmQaJ9H1B4em2l/DLMt2xrPM f5qyW600VuUv7kq52Q+GIjNU+VVmPFglsIFZWrXuP59STzVAbiFBlrJg3C9BQiGA VdYwA0cFxHXWASAoUlZAwyhYm/UdM00aRCI3LFZRRTR0OE/L8Uic9pB3K4Uq6iai aiEf6aI2rBmorA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:59 2025 by rpki-client