This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json) Hash identifier: dde2qcqji0/ImeoaDCOIxXMvxeogd995j5jzaS4aDNA= Subject key identifier: B0:6C:C8:2B:10:AC:CE:1A:5A:C9:FA:07:57:D1:2E:1F:02:0B:4B:5C Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21 Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821 Certificate serial: 019B0F00AB21458482C1B3185EB4F5A8E06F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft Manifest number: 16C5 Signing time: Thu 11 Dec 2025 20:01:00 +0000 Manifest this update: Thu 11 Dec 2025 20:01:00 +0000 Manifest next update: Fri 12 Dec 2025 20:01:00 +0000 Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: /k17jwH0aFyLb9DNsOSdkoazaaFOy2plLCeSVEd/tu8=) 2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ab:21:45:84:82:c1:b3:18:5e:b4:f5:a8:e0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821 Validity Not Before: Dec 11 20:01:00 2025 GMT Not After : Dec 12 20:01:00 2025 GMT Subject: CN=b06cc82b10acce1a5ac9fa0757d12e1f020b4b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:fe:71:bc:f6:6d:88:42:38:46:27:15:70: 07:9a:87:66:20:7f:e8:35:0d:95:82:21:27:f2:cf: 60:0a:8b:a5:9e:62:b1:54:2e:90:5c:1f:3a:b8:a1: 51:96:b8:e4:00:ef:d8:97:11:de:df:a2:74:7e:c9: b8:5c:71:29:4e:57:ab:f3:ac:3f:05:74:47:2f:f8: 2b:7e:64:57:64:d0:f4:05:61:5a:23:a6:02:1a:65: 0d:e5:60:63:cd:26:c2:08:38:42:a4:b1:cb:a4:73: 4f:e2:c7:a6:1b:5e:cb:ae:d3:56:58:c4:e4:b2:43: bc:db:8a:90:b5:59:c0:95:a7:f1:37:9d:45:80:61: 58:92:9b:a6:39:70:15:52:4e:1b:b3:3a:92:af:95: 38:08:7b:8f:19:b9:24:32:91:0d:39:91:ea:10:bf: ba:f9:64:84:1b:b5:6a:b7:f5:60:0c:ca:1b:94:5d: de:d0:70:23:b7:fd:71:41:e9:52:19:f1:82:0b:e3: f1:bc:ab:ec:f7:02:72:34:07:7e:fb:a4:64:f4:98: 3d:66:0e:f0:cf:17:7d:3f:8e:44:b1:82:ce:69:19: 7a:36:55:c1:aa:6d:82:47:f0:47:b7:4c:fb:dc:57: e6:bf:ec:d6:3c:e9:55:b3:01:84:b6:58:b5:c2:2c: 22:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6C:C8:2B:10:AC:CE:1A:5A:C9:FA:07:57:D1:2E:1F:02:0B:4B:5C X509v3 Authority Key Identifier: keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f5:82:f0:b5:6b:88:e7:16:bf:09:4b:d5:cf:6a:f3:0d:f3: 97:04:52:8f:f1:9a:2c:e1:93:53:56:5a:00:0c:5d:8b:8e:66: 6b:0f:09:1a:01:58:da:53:11:a6:0c:06:b8:d8:d0:25:55:93: 2d:46:47:09:54:9a:e9:2d:31:88:cd:29:6e:3f:bf:00:73:a3: 96:25:1a:e4:c7:df:1e:17:66:81:6d:4f:ba:e1:66:c7:3c:04: c3:32:d9:82:5d:65:04:e3:31:b7:e5:53:47:ad:c8:33:46:49: 0a:c7:5f:04:a6:b2:6f:81:c0:ce:18:3b:08:cb:92:c3:28:c4: e0:15:fc:35:f1:52:c0:cc:91:7a:9b:f5:bb:c5:05:69:b0:4a: 5c:08:35:14:37:23:f1:45:af:d2:17:70:1a:28:b8:b0:e5:44: c1:d8:ad:e1:ab:46:56:93:ea:7d:ab:1f:8c:f0:a0:e4:6e:ba: f3:21:0f:0f:60:51:2f:2b:e8:f2:b5:c5:aa:29:8f:65:d1:b8: b2:04:d3:a3:e2:13:f6:19:7b:00:f9:72:5a:df:4c:2e:22:7d: 3f:72:7e:5a:6a:81:43:24:ac:24:0e:8d:4f:e9:29:f8:f8:4f: 25:a1:27:66:dc:de:06:8d:e4:ec:b4:72:43:a9:5f:bc:d3:f0: bc:8b:5f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKshRYSCwbMYXrT1qOBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2IyYjUwYmYwYzE4YTUzMWU2ZGIxNTY2N2JlN2VkNzZi YjI4MjEwHhcNMjUxMjExMjAwMTAwWhcNMjUxMjEyMjAwMTAwWjAzMTEwLwYDVQQD EyhiMDZjYzgyYjEwYWNjZTFhNWFjOWZhMDc1N2QxMmUxZjAyMGI0YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ7+cbz2bYhCOEYnFXAHmodmIH/o NQ2VgiEn8s9gCoulnmKxVC6QXB86uKFRlrjkAO/YlxHe36J0fsm4XHEpTler86w/ BXRHL/grfmRXZND0BWFaI6YCGmUN5WBjzSbCCDhCpLHLpHNP4semG17LrtNWWMTk skO824qQtVnAlafxN51FgGFYkpumOXAVUk4bszqSr5U4CHuPGbkkMpENOZHqEL+6 +WSEG7Vqt/VgDMoblF3e0HAjt/1xQelSGfGCC+PxvKvs9wJyNAd++6Rk9Jg9Zg7w zxd9P45EsYLOaRl6NlXBqm2CR/BHt0z73Ffmv+zWPOlVswGEtli1wiwiowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBsyCsQrM4aWsn6B1fRLh8CC0tcMB8GA1UdIwQY MBaAFCN7K1C/DBilMebbFWZ75+12uyghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2Yt YjYxNWRmN2ZjZTllLzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2YtYjYxNWRmN2ZjZTll LzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/WC8LVr iOcWvwlL1c9q8w3zlwRSj/GaLOGTU1ZaAAxdi45maw8JGgFY2lMRpgwGuNjQJVWT LUZHCVSa6S0xiM0pbj+/AHOjliUa5MffHhdmgW1PuuFmxzwEwzLZgl1lBOMxt+VT R63IM0ZJCsdfBKayb4HAzhg7CMuSwyjE4BX8NfFSwMyRepv1u8UFabBKXAg1FDcj 8UWv0hdwGii4sOVEwdit4atGVpPqfasfjPCg5G668yEPD2BRLyvo8rXFqimPZdG4 sgTTo+IT9hl7APlyWt9MLiJ9P3J+WmqBQySsJA6NT+kp+PhPJaEnZtzeBo3k7LRy Q6lfvNPwvItftQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:44:40 2025 by rpki-client