This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json) Hash identifier: 36ZjU258wysquSgDhzVzKBdV23GPvC3OgZgQkkEpv3s= Subject key identifier: 15:D7:03:36:E6:CC:03:8B:65:09:E7:BE:8E:B8:CD:20:CC:0B:B0:9A Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2 Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2 Certificate serial: 019B1495261DB996F027CD6B949F723F9484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft Manifest number: 0121 Signing time: Fri 12 Dec 2025 22:01:17 +0000 Manifest this update: Fri 12 Dec 2025 22:01:17 +0000 Manifest next update: Sat 13 Dec 2025 22:01:17 +0000 Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: MVJZkO6aiVqKo4eweO/RTNbNYo9um/4MC7QUsBP+T9Y=) 2: PwxQMG9ujj6pfZhzC7G_kz3NsYA.roa (hash: 09V39ykqveB1AyZv1j7X/quqHqzhf0uH/toO7YLzAy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:95:26:1d:b9:96:f0:27:cd:6b:94:9f:72:3f:94:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2 Validity Not Before: Dec 12 22:01:17 2025 GMT Not After : Dec 13 22:01:17 2025 GMT Subject: CN=15d70336e6cc038b6509e7be8eb8cd20cc0bb09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:21:7e:72:89:f3:db:02:97:35:53:a6:d3: 4b:2e:51:92:4d:d0:7e:3e:79:92:2e:a2:a8:9f:73: 34:bb:ce:43:bd:f8:6f:26:91:92:c0:c2:bd:83:e9: 38:8a:a1:f2:e9:88:1e:aa:3b:90:23:2e:3e:83:e0: 8a:c3:0d:5f:41:01:3d:e1:5b:e5:fa:1b:a4:72:10: 21:d5:f3:06:f8:21:0f:64:2e:8d:63:f0:2a:9c:7c: 5a:6d:34:25:f8:10:b9:95:74:88:97:be:7b:b2:bf: 77:e3:90:63:d1:44:40:6b:ad:2a:8f:5a:03:6a:8c: ac:02:4e:c2:c5:87:b8:de:54:cb:6f:c7:04:e8:ea: 35:2c:c3:18:03:d4:48:60:1f:92:68:f0:44:df:f7: 39:6a:02:bb:dc:cf:52:8e:23:98:30:53:1b:e9:5e: 3a:e2:c0:12:5b:bf:ab:12:1e:a8:25:94:c1:1d:2c: 35:2e:0c:69:76:ff:0f:8d:8e:c1:26:13:05:f8:f0: d0:43:b0:d9:9a:41:48:f8:72:01:48:d0:cf:e4:58: 42:74:96:f2:cc:4e:c0:d7:39:9d:fd:e9:00:d6:26: ee:5e:7b:ec:03:3a:90:fc:5e:3a:6f:ba:e7:0f:61: 77:47:12:f6:d1:c5:db:98:32:c7:2c:21:f4:bd:48: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D7:03:36:E6:CC:03:8B:65:09:E7:BE:8E:B8:CD:20:CC:0B:B0:9A X509v3 Authority Key Identifier: keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:9d:f8:6f:24:68:b0:1d:cc:e4:df:6b:60:d4:61:56:13: 88:15:fe:95:d5:db:e1:11:12:44:33:68:e0:c6:39:58:b5:87: 47:60:37:fa:66:7d:e3:be:91:73:57:09:d1:54:23:a8:c6:27: d0:fe:8c:0b:d9:03:9e:d9:28:ab:b1:8c:7a:49:19:ce:3b:a6: 71:55:8e:6e:0f:17:63:1e:12:2a:7d:15:fe:8b:52:cf:21:3d: 76:e7:cd:60:20:9b:09:95:7a:cf:8a:49:72:77:b1:c6:79:df: 34:cc:b1:1c:6b:33:a0:b5:a8:74:98:4d:89:ed:e8:64:ab:9f: 3f:d2:6f:07:5d:36:43:22:54:1d:4c:7c:f9:99:23:b1:36:70: 92:80:31:b2:db:81:ba:c0:e9:eb:f3:05:a0:75:f9:e0:b4:d5: c5:38:e2:94:45:50:b1:a9:75:47:92:55:d5:1f:cb:14:7a:5a: 45:69:a6:8b:2d:e9:eb:c0:1f:b4:fc:1f:b7:78:6d:56:b6:62: e4:39:f5:2d:cd:37:45:55:6c:0b:2d:5c:73:ed:0e:16:11:f8: fe:80:61:54:5c:1f:9f:9d:54:20:0a:cd:13:82:6b:c9:23:48: ee:92:12:40:0f:83:b4:e2:e5:5d:8d:3b:bc:f8:8c:e7:49:2b: 98:de:fa:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUlSYduZbwJ81rlJ9yP5SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjVjMjU4NTM4MjA4NDc5MmYxM2FkMTk3MjA1ZWZkZDI3 NTJkZjIwHhcNMjUxMjEyMjIwMTE3WhcNMjUxMjEzMjIwMTE3WjAzMTEwLwYDVQQD EygxNWQ3MDMzNmU2Y2MwMzhiNjUwOWU3YmU4ZWI4Y2QyMGNjMGJiMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzohfnKJ89sClzVTptNLLlGSTdB+ PnmSLqKon3M0u85DvfhvJpGSwMK9g+k4iqHy6YgeqjuQIy4+g+CKww1fQQE94Vvl +hukchAh1fMG+CEPZC6NY/AqnHxabTQl+BC5lXSIl757sr9345Bj0URAa60qj1oD aoysAk7CxYe43lTLb8cE6Oo1LMMYA9RIYB+SaPBE3/c5agK73M9SjiOYMFMb6V46 4sASW7+rEh6oJZTBHSw1Lgxpdv8PjY7BJhMF+PDQQ7DZmkFI+HIBSNDP5FhCdJby zE7A1zmd/ekA1ibuXnvsAzqQ/F46b7rnD2F3RxL20cXbmDLHLCH0vUhhJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXXAzbmzAOLZQnnvo64zSDMC7CaMB8GA1UdIwQY MBaAFCP1wlhTgghHkvE60ZcgXv3SdS3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2Ut OGZiNTI0NGJjMjU2LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2UtOGZiNTI0NGJjMjU2 LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMned+G8k aLAdzOTfa2DUYVYTiBX+ldXb4RESRDNo4MY5WLWHR2A3+mZ9476Rc1cJ0VQjqMYn 0P6MC9kDntkoq7GMekkZzjumcVWObg8XYx4SKn0V/otSzyE9dufNYCCbCZV6z4pJ cnexxnnfNMyxHGszoLWodJhNie3oZKufP9JvB102QyJUHUx8+ZkjsTZwkoAxstuB usDp6/MFoHX54LTVxTjilEVQsal1R5JV1R/LFHpaRWmmiy3p68AftPwft3htVrZi 5Dn1Lc03RVVsCy1cc+0OFhH4/oBhVFwfn51UIArNE4JrySNI7pISQA+DtOLlXY07 vPiM50krmN76hw== -----END CERTIFICATE-----Generated at Sat Dec 13 02:19:08 2025 by rpki-client