This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json) Hash identifier: WOkCjXQwBBiqVRk7/d9uWL9of+UcYrw/rV+kilIzJTM= Subject key identifier: 22:9D:17:82:BF:1E:5E:99:23:6C:84:23:87:46:86:03:F2:92:A0:3D Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Certificate serial: 019B503C12BE29730F4A6653D3B71ED5231D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft Manifest number: 048B Signing time: Wed 24 Dec 2025 12:01:12 +0000 Manifest this update: Wed 24 Dec 2025 12:01:12 +0000 Manifest next update: Thu 25 Dec 2025 12:01:12 +0000 Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: N4crxuLH6RuY34uj1aymCtXNj1bpCmE+BhIGkr3GDH8=) 2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:12:be:29:73:0f:4a:66:53:d3:b7:1e:d5:23:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Validity Not Before: Dec 24 12:01:12 2025 GMT Not After : Dec 25 12:01:12 2025 GMT Subject: CN=229d1782bf1e5e99236c842387468603f292a03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:22:16:10:5f:ae:a7:db:a9:bd:2b:67:c6: 1d:30:15:2d:fc:b8:ac:c6:f8:24:5a:41:58:be:7e: a5:df:d6:ae:2c:59:71:64:bf:c5:84:2c:5e:21:a8: 74:5f:cb:72:b2:7c:c1:2f:03:4f:48:55:3e:a7:90: 05:36:3e:f5:64:4f:1b:a1:63:d2:bc:89:55:31:23: 14:2e:6a:96:90:8c:29:1b:9d:38:06:31:76:ef:37: 6c:b9:16:e4:a7:cd:88:37:c7:c5:fa:19:be:7e:45: dc:5a:62:4e:16:b2:d8:70:ff:9d:0c:01:99:07:76: fd:8d:fe:ed:61:1c:7c:6c:31:c7:53:b1:13:64:50: a7:32:db:0a:85:81:67:b2:74:f5:80:26:72:ea:40: 3d:62:0f:f9:d4:8b:96:3f:95:a3:2e:1e:40:9d:f0: 12:19:2a:ad:0a:28:dd:84:6b:b8:5e:0b:82:28:2b: 07:80:49:06:5e:c8:47:b7:c2:b4:08:45:0a:f2:cf: ef:50:64:37:12:08:06:7a:df:ee:52:06:d0:aa:8b: 1c:1d:21:f9:6f:d4:1f:3f:e1:e1:bb:f2:32:d7:c1: 02:32:fa:49:34:72:c6:61:95:f2:a4:23:ea:e5:31: 8b:0b:e9:9f:54:dc:15:2f:d2:cd:15:cb:73:00:8b: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:17:82:BF:1E:5E:99:23:6C:84:23:87:46:86:03:F2:92:A0:3D X509v3 Authority Key Identifier: keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8c:87:41:8c:5d:6e:39:3f:c2:57:ba:94:b7:34:aa:8f:0f: 46:6c:e2:84:51:4c:60:b7:17:64:17:15:96:2d:6f:e3:fe:48: 3a:c8:c0:c2:d2:15:60:c1:39:62:c1:06:54:ee:72:a5:1f:27: 7c:61:ca:c7:6f:4f:b8:ed:85:b5:bd:e9:34:bb:7c:98:96:ec: 42:52:f6:f1:cd:b1:bb:00:11:90:6d:70:37:60:b1:5f:ed:72: 94:ca:67:53:75:69:f7:ab:dd:b9:b1:78:0f:d4:ed:cf:f9:c5: bb:0e:c3:59:59:fb:c3:78:6b:ea:d5:33:ba:11:1b:9a:71:73: bf:a1:11:b8:ac:04:bd:db:e4:f3:c5:be:a8:b8:8d:96:e3:77: 63:d1:f9:69:e3:ca:d5:c0:b0:95:49:64:bb:36:8d:25:80:3c: 1f:f4:8b:70:b6:2d:24:89:9d:d6:e9:08:09:f5:9e:1f:b2:be: a2:4d:bd:2b:07:83:52:81:2e:7c:b4:f3:09:45:4d:01:f2:cc: b7:9f:b2:1e:15:1b:29:15:10:b6:57:9d:cb:27:cf:9e:06:71: b6:26:25:c7:75:c0:78:17:eb:af:4a:46:c2:0a:76:62:f5:a5: 40:ab:0b:20:ac:90:04:0e:f1:52:4a:bb:e8:df:8d:b2:88:1b: b6:59:d2:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPBK+KXMPSmZT07ce1SMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz YmYzNmEwHhcNMjUxMjI0MTIwMTEyWhcNMjUxMjI1MTIwMTEyWjAzMTEwLwYDVQQD EygyMjlkMTc4MmJmMWU1ZTk5MjM2Yzg0MjM4NzQ2ODYwM2YyOTJhMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GsiFhBfrqfbqb0rZ8YdMBUt/Lis xvgkWkFYvn6l39auLFlxZL/FhCxeIah0X8tysnzBLwNPSFU+p5AFNj71ZE8boWPS vIlVMSMULmqWkIwpG504BjF27zdsuRbkp82IN8fF+hm+fkXcWmJOFrLYcP+dDAGZ B3b9jf7tYRx8bDHHU7ETZFCnMtsKhYFnsnT1gCZy6kA9Yg/51IuWP5WjLh5AnfAS GSqtCijdhGu4XguCKCsHgEkGXshHt8K0CEUK8s/vUGQ3EggGet/uUgbQqoscHSH5 b9QfP+Hhu/Iy18ECMvpJNHLGYZXypCPq5TGLC+mfVNwVL9LNFctzAIvjKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKdF4K/Hl6ZI2yEI4dGhgPykqA9MB8GA1UdIwQY MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt NTk0YTI3ZGIxNDZiLzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoyHQYxd bjk/wle6lLc0qo8PRmzihFFMYLcXZBcVli1v4/5IOsjAwtIVYME5YsEGVO5ypR8n fGHKx29PuO2Ftb3pNLt8mJbsQlL28c2xuwARkG1wN2CxX+1ylMpnU3Vp96vdubF4 D9Ttz/nFuw7DWVn7w3hr6tUzuhEbmnFzv6ERuKwEvdvk88W+qLiNluN3Y9H5aePK 1cCwlUlkuzaNJYA8H/SLcLYtJImd1ukICfWeH7K+ok29KweDUoEufLTzCUVNAfLM t5+yHhUbKRUQtledyyfPngZxtiYlx3XAeBfrr0pGwgp2YvWlQKsLIKyQBA7xUkq7 6N+NsogbtlnSTg== -----END CERTIFICATE-----Generated at Wed Dec 24 16:46:26 2025 by rpki-client