This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json) Hash identifier: DyYPyli0uX6GGfQDCuzJXiXuLHjnDxEwSLcgF7PpkOk= Subject key identifier: B0:B6:6D:AE:A6:05:61:4A:F0:35:31:28:68:20:42:37:AC:DE:A3:92 Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Certificate serial: 019B213D9962B9B4AAD3BAD7B43744B80EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 09:00:43 +0000 Manifest this update: Mon 15 Dec 2025 09:00:43 +0000 Manifest next update: Tue 16 Dec 2025 09:00:43 +0000 Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=) 2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: sVpXEl82Z5JWWBUcgwKvIcCgrYZVEdaSwX3OuvXULbA=) 3: SVlLEhHqyoa8VmAwyeAz-eO7tmk.roa (hash: 3GqZDoa/8luHJb3c9fM/8sF9/CWphehWtTWgxsoVdy8=) 4: m-Ncfpuw9lyFAGvhN6SO1U82ZPI.roa (hash: /M7ImEM1ZD0v5nu/Nb9bLOvnyebMcwld8IBc6QoNAjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:99:62:b9:b4:aa:d3:ba:d7:b4:37:44:b8:0e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Validity Not Before: Dec 15 09:00:43 2025 GMT Not After : Dec 16 09:00:43 2025 GMT Subject: CN=b0b66daea605614af035312868204237acdea392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:bb:2d:26:65:52:a6:20:30:7b:4f:0b:12: bd:79:67:76:59:1b:6f:64:34:58:fe:d0:bc:7c:60: 5c:08:14:4e:5d:3f:0a:1f:9b:b1:ed:e8:87:67:c7: e8:69:4a:92:4d:9b:d5:d9:3f:90:de:66:42:44:02: 5b:c6:ee:1f:3a:34:36:6e:00:24:dc:eb:c7:73:76: f8:87:87:3b:a2:87:c5:99:d2:1a:29:3c:9f:e9:10: 8e:a1:af:fc:fd:9c:95:94:57:f8:f5:f8:1c:bf:22: 38:90:50:3d:d9:a4:5d:93:c5:85:9a:56:3c:b3:e9: d0:03:f3:05:f0:21:77:89:0d:71:93:6e:93:01:2c: da:ad:36:7c:44:a0:da:52:30:ce:82:69:ec:bb:8a: ba:a4:91:f2:5d:7c:7c:90:e5:3d:ab:2b:70:be:41: 7e:79:3e:58:f6:fd:6c:c2:fe:04:a0:39:2f:23:66: 70:f6:26:35:31:50:0c:84:b1:68:d5:46:19:15:e6: eb:bd:7c:e0:2c:64:29:38:f3:c1:ae:e8:a9:49:34: 0c:e1:e8:6c:91:6b:03:da:57:1d:27:57:53:f8:4b: b1:04:27:da:e1:41:9f:f0:a4:59:fa:6e:7f:17:96: d5:13:58:b8:ad:76:46:00:f0:5b:a7:ea:c9:56:9f: 1c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:6D:AE:A6:05:61:4A:F0:35:31:28:68:20:42:37:AC:DE:A3:92 X509v3 Authority Key Identifier: keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c2:95:14:d7:16:bb:9f:bd:c2:7c:00:25:98:94:e3:20:95: 2c:2c:35:8a:b6:43:ca:38:ff:d4:14:46:6b:34:d1:2f:61:c4: be:b2:18:1d:fd:75:23:6d:4c:de:87:ea:64:5c:e5:86:50:d6: 80:f6:bb:7d:92:58:50:39:a3:8f:fd:62:88:51:a3:7a:da:85: 26:39:68:26:56:19:dd:fd:e1:f7:0e:cb:ac:05:f1:a8:65:d5: 97:04:4b:49:dd:f7:8e:a2:4e:3d:dd:07:93:ee:50:2a:9c:a6: b0:ad:18:a0:b2:ef:68:d4:5c:c8:b7:e5:ba:97:64:41:ea:f4: 38:42:f7:ab:57:9c:5e:af:b3:e5:e6:c0:9e:00:fc:d4:40:13: e1:b5:c2:15:dc:22:db:20:2e:e5:b7:ff:bd:5b:39:4b:c8:03: 2f:42:fe:a5:99:f0:80:13:71:01:60:1e:98:4b:87:62:a6:5c: b1:ec:29:35:21:c2:d6:e0:ff:b7:91:da:a7:51:d3:f1:14:c9: 20:a6:57:76:6b:7a:85:eb:74:54:c4:ed:f1:9d:18:28:79:c0: 7e:8e:62:73:e6:41:85:bd:b4:ce:d2:31:b3:42:2a:2d:7c:2f: 0f:f9:de:b5:4f:f5:3c:f3:f7:35:12:8b:58:01:7c:19:25:97: 84:20:88:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPZliubSq07rXtDdEuA7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk M2UzNWUwHhcNMjUxMjE1MDkwMDQzWhcNMjUxMjE2MDkwMDQzWjAzMTEwLwYDVQQD EyhiMGI2NmRhZWE2MDU2MTRhZjAzNTMxMjg2ODIwNDIzN2FjZGVhMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfq7LSZlUqYgMHtPCxK9eWd2WRtv ZDRY/tC8fGBcCBROXT8KH5ux7eiHZ8foaUqSTZvV2T+Q3mZCRAJbxu4fOjQ2bgAk 3OvHc3b4h4c7oofFmdIaKTyf6RCOoa/8/ZyVlFf49fgcvyI4kFA92aRdk8WFmlY8 s+nQA/MF8CF3iQ1xk26TASzarTZ8RKDaUjDOgmnsu4q6pJHyXXx8kOU9qytwvkF+ eT5Y9v1swv4EoDkvI2Zw9iY1MVAMhLFo1UYZFebrvXzgLGQpOPPBruipSTQM4ehs kWsD2lcdJ1dT+EuxBCfa4UGf8KRZ+m5/F5bVE1i4rXZGAPBbp+rJVp8c0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC2ba6mBWFK8DUxKGggQjes3qOSMB8GA1UdIwQY MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4 LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsKVFNcW u5+9wnwAJZiU4yCVLCw1irZDyjj/1BRGazTRL2HEvrIYHf11I21M3ofqZFzlhlDW gPa7fZJYUDmjj/1iiFGjetqFJjloJlYZ3f3h9w7LrAXxqGXVlwRLSd33jqJOPd0H k+5QKpymsK0YoLLvaNRcyLflupdkQer0OEL3q1ecXq+z5ebAngD81EAT4bXCFdwi 2yAu5bf/vVs5S8gDL0L+pZnwgBNxAWAemEuHYqZcsewpNSHC1uD/t5Hap1HT8RTJ IKZXdmt6het0VMTt8Z0YKHnAfo5ic+ZBhb20ztIxs0IqLXwvD/netU/1PPP3NRKL WAF8GSWXhCCIGQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:30 2025 by rpki-client