This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft File: i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json) Hash identifier: JDUZhZhL4HdgZAaXkLVF0qfgf59jj+YONMGYBEoRhj8= Subject key identifier: 0F:70:C2:EA:69:80:62:0F:51:81:BD:95:CF:9C:2E:46:21:E6:BC:60 Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Certificate serial: 019B38A0FC2E334E6B1E31BCA5636C447E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 22:00:32 +0000 Manifest this update: Fri 19 Dec 2025 22:00:32 +0000 Manifest next update: Sat 20 Dec 2025 22:00:32 +0000 Files and hashes: 1: CPJvfKG9AEorpsEiz1e05zSo0sY.roa (hash: NjB+IttX3MugwGYS/PHLAC82z3nIjH+wrKBqWV/iJTI=) 2: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (hash: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=) 3: P2LC5eQJryM958-FLkXKkEDZeLw.roa (hash: QpIfoLa+fmj9YdQlV+XdklTrRRwRDMjjOVtTi9BX00s=) 4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: NEe5wGPeU8dG1+K3WMaboMMw9V3EAPeel0GaVUofylo=) 5: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (hash: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a0:fc:2e:33:4e:6b:1e:31:bc:a5:63:6c:44:7e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Validity Not Before: Dec 19 22:00:32 2025 GMT Not After : Dec 20 22:00:32 2025 GMT Subject: CN=0f70c2ea6980620f5181bd95cf9c2e4621e6bc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:f7:63:56:3e:87:82:f4:b3:71:c2:ab:f7: fb:47:2d:09:2d:1e:22:d8:63:47:a7:cd:49:bb:75: ac:f2:c1:44:14:88:b8:50:bc:88:12:b2:5b:df:49: 52:d4:bd:4a:1a:7a:ac:ef:6b:5e:c3:fa:c9:50:03: 1c:3f:25:9d:6d:02:e6:3d:0b:d1:a0:fd:06:20:81: 62:50:49:7b:ad:a1:dd:76:d3:7b:d3:a3:21:92:38: 24:53:00:a9:88:0b:a6:d3:a9:10:b1:dd:74:07:63: e3:24:08:98:d2:87:0a:8b:0f:e4:b5:9b:d6:7a:35: 4a:37:dc:4a:30:76:9f:37:5e:6e:00:d3:d6:a5:f8: d2:b1:e1:ff:04:cb:0e:e9:e9:b2:85:00:4b:0c:cb: da:1c:d7:31:0a:42:15:55:00:14:b9:a7:4b:d6:05: 59:4e:86:64:e7:d3:0a:73:fc:a4:c5:c6:df:60:05: 57:27:9b:a6:45:a1:51:d5:9e:02:da:ce:64:35:3f: 99:49:57:ad:ed:db:1d:b7:23:67:2e:e6:c3:ec:a0: c6:54:f1:1e:d8:c8:3e:fa:0c:38:54:76:ff:dc:70: 18:a8:a1:b4:a4:bf:e1:33:cf:14:4e:c5:20:01:96: 12:ba:15:e2:8c:bb:56:80:ae:2c:87:ec:41:ee:91: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:70:C2:EA:69:80:62:0F:51:81:BD:95:CF:9C:2E:46:21:E6:BC:60 X509v3 Authority Key Identifier: keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2c:03:84:0f:12:42:4c:d6:3f:52:7b:cd:78:50:9f:91:44: e1:b2:d2:5f:4f:3b:4e:01:63:4b:84:ce:5f:42:22:6c:c7:25: 4d:4d:83:26:8e:7f:a9:9c:d9:10:db:62:d5:d0:73:f5:66:2a: f9:46:79:50:bd:e1:6f:c0:9e:6b:04:fe:42:d7:4c:8e:cd:09: 8e:82:80:85:39:53:24:49:8a:dc:71:4d:0f:c0:e0:80:5c:29: 23:29:6a:45:94:4d:ef:72:9b:b0:d5:c4:cd:54:f9:2d:ea:ab: a3:88:1c:61:70:07:ce:9f:56:09:b4:3c:c7:5d:26:be:03:95: 99:21:66:61:4e:32:10:c2:56:8d:57:43:3c:cb:de:09:4a:12: 77:1e:e4:24:4f:71:cc:ea:92:dc:70:98:41:d7:14:76:3c:81: de:0d:fa:54:ce:cc:31:bd:70:93:b4:e5:47:27:73:f5:0a:2f: 60:e0:29:0b:ac:69:3f:01:2b:55:7d:27:a5:48:b5:4f:ad:e0: db:c0:5c:80:fe:4b:4d:3d:94:ae:38:75:e3:88:13:b4:aa:d6: 83:93:37:ac:1d:19:c3:1b:50:5a:4f:49:9f:68:cd:4e:66:ed: 74:2f:23:20:ea:e6:0b:5d:ac:07:cd:8e:04:6b:96:20:a7:7e: 6e:ad:b2:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oPwuM05rHjG8pWNsRH45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3 NWY0YTYwHhcNMjUxMjE5MjIwMDMyWhcNMjUxMjIwMjIwMDMyWjAzMTEwLwYDVQQD EygwZjcwYzJlYTY5ODA2MjBmNTE4MWJkOTVjZjljMmU0NjIxZTZiYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlH3Y1Y+h4L0s3HCq/f7Ry0JLR4i 2GNHp81Ju3Ws8sFEFIi4ULyIErJb30lS1L1KGnqs72tew/rJUAMcPyWdbQLmPQvR oP0GIIFiUEl7raHddtN706MhkjgkUwCpiAum06kQsd10B2PjJAiY0ocKiw/ktZvW ejVKN9xKMHafN15uANPWpfjSseH/BMsO6emyhQBLDMvaHNcxCkIVVQAUuadL1gVZ ToZk59MKc/ykxcbfYAVXJ5umRaFR1Z4C2s5kNT+ZSVet7dsdtyNnLubD7KDGVPEe 2Mg++gw4VHb/3HAYqKG0pL/hM88UTsUgAZYSuhXijLtWgK4sh+xB7pG2RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9wwuppgGIPUYG9lc+cLkYh5rxgMB8GA1UdIwQY MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt ZjJmNDI2ZWZlMDM5LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5 LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWywDhA8S QkzWP1J7zXhQn5FE4bLSX087TgFjS4TOX0IibMclTU2DJo5/qZzZENti1dBz9WYq +UZ5UL3hb8CeawT+QtdMjs0JjoKAhTlTJEmK3HFND8DggFwpIylqRZRN73KbsNXE zVT5Leqro4gcYXAHzp9WCbQ8x10mvgOVmSFmYU4yEMJWjVdDPMveCUoSdx7kJE9x zOqS3HCYQdcUdjyB3g36VM7MMb1wk7TlRydz9QovYOApC6xpPwErVX0npUi1T63g 28BcgP5LTT2Urjh144gTtKrWg5M3rB0ZwxtQWk9Jn2jNTmbtdC8jIOrmC12sB82O BGuWIKd+bq2yEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:40:11 2025 by rpki-client