This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json) Hash identifier: epGF9nUYIFd3w9+M7NTrjGVqWsfaKF+TJMVMSC1VluE= Subject key identifier: CE:0A:FD:FF:F4:03:2A:BF:B1:E0:B8:0C:09:74:68:30:84:BB:42:DF Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Certificate serial: 019AAC4BD75D2809AAD702E0C24EE9CD491C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft Manifest number: 1441 Signing time: Sat 22 Nov 2025 16:00:42 +0000 Manifest this update: Sat 22 Nov 2025 16:00:42 +0000 Manifest next update: Sun 23 Nov 2025 16:00:42 +0000 Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: t760KJtLTwOi8y05MzrMKUFifMMQhuKXlaPMMhFHLic=) 2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=) 3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:d7:5d:28:09:aa:d7:02:e0:c2:4e:e9:cd:49:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b Validity Not Before: Nov 22 16:00:42 2025 GMT Not After : Nov 23 16:00:42 2025 GMT Subject: CN=ce0afdfff4032abfb1e0b80c0974683084bb42df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:5e:69:c1:fe:fc:0d:cd:1d:f3:10:04:cf: 6b:50:51:e7:96:09:eb:26:4f:e5:6f:8c:e9:24:ba: b6:d5:36:9f:dd:12:a3:04:db:29:14:54:35:c0:1d: e6:b8:96:25:84:cb:f1:26:ea:c1:2e:0b:2b:2e:68: 50:2e:af:e0:4b:c2:ee:b9:f0:f0:f7:a9:df:ab:f0: 74:39:d3:d7:f8:e5:06:9a:54:e0:43:63:87:80:8b: 6b:fe:fb:95:ec:f9:42:a6:eb:0c:cd:57:53:3d:f8: 98:2e:1c:09:90:03:31:d0:05:f0:9f:56:e0:67:6a: 61:d6:91:ee:35:b1:28:7a:5e:78:96:69:30:35:4a: ad:22:26:16:90:68:b5:d1:fa:64:dc:92:8f:17:a1: 9e:44:8d:21:b2:5d:5d:f3:19:66:b4:4f:15:8f:db: 49:90:e1:f8:4f:3f:ab:66:9a:e4:84:fb:64:01:f8: b6:a6:0f:9b:0c:5a:33:43:ec:01:0e:c3:6e:0a:15: 2c:58:cb:1b:22:37:e9:84:e0:7e:83:db:20:47:e7: c6:c8:cb:64:c6:18:b7:ad:b7:b2:00:53:34:67:81: cb:68:e0:86:5f:d3:77:4c:6d:a6:e9:48:27:99:28: 91:45:af:ef:f0:ed:e9:c4:c7:7b:b4:51:d7:58:ee: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0A:FD:FF:F4:03:2A:BF:B1:E0:B8:0C:09:74:68:30:84:BB:42:DF X509v3 Authority Key Identifier: keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ae:d4:65:c7:a4:80:2c:78:92:fc:b7:a9:71:99:5c:37:a3: b9:0c:44:a4:7b:e8:6e:0a:96:3b:ab:c8:8e:0b:18:c6:c2:15: 77:7a:ec:d2:6e:b0:cd:20:d1:06:80:26:b2:81:d8:a7:4e:03: 79:ed:d3:88:28:d6:3e:e1:fe:0b:f8:ba:99:c6:18:af:44:8f: 46:46:b9:46:e2:a5:85:c7:86:71:56:9f:1a:cc:58:47:a0:ce: aa:92:36:08:2b:30:4c:7f:0e:09:90:8b:ec:a5:53:aa:ed:a6: 68:66:0b:77:1b:75:91:20:c9:c0:02:92:47:e5:91:4f:ec:33: 20:17:63:df:43:71:c0:0c:a5:ee:a8:df:53:a6:03:02:de:bf: 2d:ee:2c:13:dc:5b:59:d5:46:8b:df:a4:df:69:79:1a:d4:73: f8:92:00:d8:05:62:5e:c6:42:1f:5d:f8:6d:fb:3a:2b:0c:51: 83:a9:31:d7:5e:90:ab:76:f7:b1:d7:d7:5f:b9:32:39:60:40: bf:01:16:94:49:44:a7:74:c1:33:eb:5c:74:d3:75:01:ac:c6: e9:78:e5:7b:68:72:2c:2c:c0:ee:32:a2:f6:a4:2f:87:b3:c5: 15:2c:34:7e:a8:f2:ea:4f:41:58:a1:5b:9d:e4:ae:fa:73:54: 41:63:c2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS9ddKAmq1wLgwk7pzUkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl NzVhMGIwHhcNMjUxMTIyMTYwMDQyWhcNMjUxMTIzMTYwMDQyWjAzMTEwLwYDVQQD EyhjZTBhZmRmZmY0MDMyYWJmYjFlMGI4MGMwOTc0NjgzMDg0YmI0MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWheacH+/A3NHfMQBM9rUFHnlgnr Jk/lb4zpJLq21Taf3RKjBNspFFQ1wB3muJYlhMvxJurBLgsrLmhQLq/gS8LuufDw 96nfq/B0OdPX+OUGmlTgQ2OHgItr/vuV7PlCpusMzVdTPfiYLhwJkAMx0AXwn1bg Z2ph1pHuNbEoel54lmkwNUqtIiYWkGi10fpk3JKPF6GeRI0hsl1d8xlmtE8Vj9tJ kOH4Tz+rZprkhPtkAfi2pg+bDFozQ+wBDsNuChUsWMsbIjfphOB+g9sgR+fGyMtk xhi3rbeyAFM0Z4HLaOCGX9N3TG2m6UgnmSiRRa/v8O3pxMd7tFHXWO4MPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4K/f/0Ayq/seC4DAl0aDCEu0LfMB8GA1UdIwQY MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACa7UZcek gCx4kvy3qXGZXDejuQxEpHvobgqWO6vIjgsYxsIVd3rs0m6wzSDRBoAmsoHYp04D ee3TiCjWPuH+C/i6mcYYr0SPRka5RuKlhceGcVafGsxYR6DOqpI2CCswTH8OCZCL 7KVTqu2maGYLdxt1kSDJwAKSR+WRT+wzIBdj30NxwAyl7qjfU6YDAt6/Le4sE9xb WdVGi9+k32l5GtRz+JIA2AViXsZCH134bfs6KwxRg6kx116Qq3b3sdfXX7kyOWBA vwEWlElEp3TBM+tcdNN1AazG6Xjle2hyLCzA7jKi9qQvh7PFFSw0fqjy6k9BWKFb neSu+nNUQWPCMg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:21 2025 by rpki-client