This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json) Hash identifier: JgnEKR/9EACA95OZViz8YYWRmjYmWno598Ae2vBbo8w= Subject key identifier: 3B:09:34:F7:DD:7D:48:A4:41:38:D4:44:F8:F2:FF:BD:03:F3:71:7F Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79 Certificate serial: 019B34203C6D9E9D9B4482DE3F5E81644EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 01:01:26 +0000 Manifest this update: Fri 19 Dec 2025 01:01:26 +0000 Manifest next update: Sat 20 Dec 2025 01:01:26 +0000 Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=) 2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: eaqGIArN7oWiIFkjkHlra5R+kiD3MbJ8r57QPPz03Hk=) 3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:3c:6d:9e:9d:9b:44:82:de:3f:5e:81:64:4e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b613794927050b22525ab70091835408eee4c79 Validity Not Before: Dec 19 01:01:26 2025 GMT Not After : Dec 20 01:01:26 2025 GMT Subject: CN=3b0934f7dd7d48a44138d444f8f2ffbd03f3717f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:d4:50:92:cd:93:d0:7f:4b:0e:5f:a6:95: 5e:27:8d:c4:e5:aa:d8:4b:7d:a4:da:d1:29:b4:02: 2a:76:5d:47:9d:6c:2d:1e:1f:83:d7:da:59:41:86: 12:a7:e3:b6:cc:64:cc:c9:77:75:7d:18:9c:f7:0c: f0:d3:98:ab:95:b2:fd:70:46:12:8a:38:bd:df:d0: 82:28:89:f5:1d:70:82:86:cb:00:27:0b:c0:84:6c: 22:be:20:a8:6f:14:42:c2:fb:26:89:92:56:50:a9: 71:51:b2:f7:ca:65:55:5f:00:38:d1:0a:12:e6:b8: 3b:b0:d7:d0:72:8b:29:b0:91:73:02:e4:99:c8:c3: c1:52:aa:76:bf:ec:ec:fe:39:60:f2:32:0e:2e:c0: 80:a7:42:26:68:85:d5:24:63:f5:18:7f:c9:d4:34: 6c:b6:fa:c7:48:52:fa:43:66:e4:59:c2:6f:99:7b: 31:90:17:72:97:87:2c:a7:2d:89:07:b0:7e:8c:77: f9:ba:60:22:ad:21:12:00:c2:c7:23:b8:fd:71:5b: 03:55:df:f1:31:cd:f7:19:d3:10:ea:b2:00:93:d2: 41:4c:e4:08:3c:ee:62:d7:70:17:25:3e:f2:29:0a: 16:a5:1f:d6:eb:7f:d4:93:55:3f:c9:4a:4c:8d:b9: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:09:34:F7:DD:7D:48:A4:41:38:D4:44:F8:F2:FF:BD:03:F3:71:7F X509v3 Authority Key Identifier: keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:7c:63:3b:3f:a2:0d:68:52:a2:4d:17:3f:0c:9e:53:8d:b4: bd:8d:0e:a4:44:cb:5c:69:1e:35:84:4f:cb:7a:ab:91:bb:5f: 50:09:ce:f1:38:06:f8:3d:df:49:8c:4b:88:13:9f:c0:f2:ab: 80:c5:51:88:95:9f:f8:cd:92:09:8c:cb:47:bb:44:5a:a2:e2: ec:96:02:94:0e:da:5e:f8:29:ec:df:70:70:fd:2d:b0:08:2f: 30:92:36:3f:e0:95:ae:88:51:71:10:0e:8b:be:bf:80:ab:c2: bd:46:a7:4e:95:de:e0:17:af:f4:df:df:f9:3d:25:f5:68:33: 96:b6:6c:6f:1c:b4:c3:51:84:c6:ce:ec:2b:f1:a3:64:68:54: 3d:0f:32:fd:99:ef:23:c6:64:80:d9:2b:55:9b:61:4c:07:25: cf:a5:2c:ae:2d:7a:9a:c3:d4:2d:c5:ce:7c:47:4b:07:4c:58: bb:87:89:d6:e5:1f:23:38:30:dc:ea:b3:f7:1b:d5:07:89:7c: 04:7c:da:a5:57:95:82:b3:7d:c8:62:16:e5:d2:d1:d0:31:34: 17:62:1c:53:fd:4a:bd:6f:23:24:db:d1:9d:a7:7f:98:75:4e: 06:22:82:70:96:cb:2b:9f:01:ed:95:b9:ce:1e:0f:cb:f7:9e: 18:94:fb:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IDxtnp2bRILeP16BZE7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjEzNzk0OTI3MDUwYjIyNTI1YWI3MDA5MTgzNTQwOGVl ZTRjNzkwHhcNMjUxMjE5MDEwMTI2WhcNMjUxMjIwMDEwMTI2WjAzMTEwLwYDVQQD EygzYjA5MzRmN2RkN2Q0OGE0NDEzOGQ0NDRmOGYyZmZiZDAzZjM3MTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiTUUJLNk9B/Sw5fppVeJ43E5arY S32k2tEptAIqdl1HnWwtHh+D19pZQYYSp+O2zGTMyXd1fRic9wzw05irlbL9cEYS iji939CCKIn1HXCChssAJwvAhGwiviCobxRCwvsmiZJWUKlxUbL3ymVVXwA40QoS 5rg7sNfQcospsJFzAuSZyMPBUqp2v+zs/jlg8jIOLsCAp0ImaIXVJGP1GH/J1DRs tvrHSFL6Q2bkWcJvmXsxkBdyl4cspy2JB7B+jHf5umAirSESAMLHI7j9cVsDVd/x Mc33GdMQ6rIAk9JBTOQIPO5i13AXJT7yKQoWpR/W63/Uk1U/yUpMjblk4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsJNPfdfUikQTjURPjy/70D83F/MB8GA1UdIwQY MBaAFIthN5SScFCyJSWrcAkYNUCO7kx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2Mt ZWMwNWQwMTk1MDM2LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2MtZWMwNWQwMTk1MDM2 LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXxjOz+i DWhSok0XPwyeU420vY0OpETLXGkeNYRPy3qrkbtfUAnO8TgG+D3fSYxLiBOfwPKr gMVRiJWf+M2SCYzLR7tEWqLi7JYClA7aXvgp7N9wcP0tsAgvMJI2P+CVrohRcRAO i76/gKvCvUanTpXe4Bev9N/f+T0l9WgzlrZsbxy0w1GExs7sK/GjZGhUPQ8y/Znv I8ZkgNkrVZthTAclz6Usri16msPULcXOfEdLB0xYu4eJ1uUfIzgw3Oqz9xvVB4l8 BHzapVeVgrN9yGIW5dLR0DE0F2IcU/1KvW8jJNvRnad/mHVOBiKCcJbLK58B7ZW5 zh4Py/eeGJT7/g== -----END CERTIFICATE-----Generated at Fri Dec 19 08:12:59 2025 by rpki-client