This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json) Hash identifier: PTVdiDKnPzAyw6Aerx6lgCMEazJM/O2dGRd1Oqk2qUA= Subject key identifier: A1:2A:5E:34:E0:48:26:9F:2B:D5:45:41:23:6C:C6:67:7B:A8:F6:89 Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Certificate serial: 019B19BB8C80C503D6CF6E0098443D0D62F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 22:01:20 +0000 Manifest this update: Sat 13 Dec 2025 22:01:20 +0000 Manifest next update: Sun 14 Dec 2025 22:01:20 +0000 Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: FweeW9riK7aBI+cabVtgvlsKxsZWhvQ18DCMFfZnAb0=) 2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=) 3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:8c:80:c5:03:d6:cf:6e:00:98:44:3d:0d:62:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Validity Not Before: Dec 13 22:01:20 2025 GMT Not After : Dec 14 22:01:20 2025 GMT Subject: CN=a12a5e34e048269f2bd54541236cc6677ba8f689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:7a:c5:fd:e0:22:bc:c9:e4:66:c7:6a:1b: c6:36:12:2d:28:a1:3a:70:21:e1:83:db:3a:08:80: 95:4b:33:cd:69:5c:a1:8e:80:c0:b7:47:e8:33:90: a7:44:be:e8:d0:ff:bf:28:43:f7:e3:46:8d:6c:73: fe:cb:22:8e:46:89:fa:df:d5:48:ab:34:2d:41:3b: ee:69:85:27:b7:c6:6c:69:3d:51:34:43:39:d3:89: 32:57:0b:44:b9:94:3b:dd:a0:a5:ca:99:4d:35:57: 87:66:30:e9:a2:58:f1:5f:0e:84:28:64:7c:a0:d6: 64:0b:d4:b3:71:63:66:16:72:99:01:44:5a:17:c8: f3:a1:cd:4c:0d:77:2f:2b:46:c8:53:bb:c3:78:58: 29:35:d1:37:94:44:67:83:c2:a5:80:c0:c4:57:92: e2:3e:05:5a:71:e3:c2:da:29:bb:05:17:dc:5c:1a: 73:75:67:ac:be:f2:9e:05:a9:19:43:9b:37:62:3a: 79:73:ff:e3:4c:1e:2b:85:9d:1c:6b:f8:2b:dc:38: d2:8f:92:72:c2:cf:50:2c:7a:62:3f:73:33:a3:20: e6:4d:4c:eb:6c:94:6a:36:1d:3f:4a:c8:69:2f:53: 01:1d:c8:77:5d:e0:14:2d:cf:b9:12:78:6b:ec:61: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:5E:34:E0:48:26:9F:2B:D5:45:41:23:6C:C6:67:7B:A8:F6:89 X509v3 Authority Key Identifier: keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ed:0a:73:d7:cf:a4:7b:62:1d:8f:1b:28:a3:18:7e:a2:b4: 2b:ab:5e:91:f5:22:27:d1:91:d4:9b:fa:6c:13:c2:fe:40:79: c6:b3:80:0b:63:c3:c3:15:a2:bd:57:c4:60:99:01:fd:77:e9: 5b:08:1e:1b:b4:7f:91:eb:57:1d:f3:c6:38:1d:a7:51:c8:e3: 06:af:90:5a:e1:01:45:92:33:c8:68:e8:8a:4a:a4:ea:45:57: 6a:56:62:5e:b2:38:4f:4b:d1:00:33:36:a7:fe:a5:63:e0:24: 6c:b3:11:b4:9a:74:19:da:4b:e9:a1:28:1e:c1:62:b6:09:64: 74:87:09:06:99:27:0e:96:1e:c4:03:9d:1d:4c:80:89:82:f9: fa:ba:86:24:86:3b:b1:a9:78:c2:ed:10:bc:09:93:04:a4:a9: 0e:72:db:32:a7:44:0f:80:e8:22:64:dc:5f:49:b6:d9:63:17: 15:a8:55:65:80:41:d0:63:0b:f1:3e:49:06:a2:87:73:a9:f5: e3:f0:da:00:ff:2f:e3:03:dc:67:59:08:4b:f0:ea:19:4d:c8: f4:e6:81:a1:1c:c3:c1:69:ff:75:c3:69:40:c7:f5:49:59:8a: 28:cc:05:dd:70:33:7f:f0:9c:e0:fb:b6:95:86:be:8c:02:81: 71:fe:57:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu4yAxQPWz24AmEQ9DWL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj N2U2YjYwHhcNMjUxMjEzMjIwMTIwWhcNMjUxMjE0MjIwMTIwWjAzMTEwLwYDVQQD EyhhMTJhNWUzNGUwNDgyNjlmMmJkNTQ1NDEyMzZjYzY2NzdiYThmNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXR6xf3gIrzJ5GbHahvGNhItKKE6 cCHhg9s6CICVSzPNaVyhjoDAt0foM5CnRL7o0P+/KEP340aNbHP+yyKORon639VI qzQtQTvuaYUnt8ZsaT1RNEM504kyVwtEuZQ73aClyplNNVeHZjDpoljxXw6EKGR8 oNZkC9SzcWNmFnKZAURaF8jzoc1MDXcvK0bIU7vDeFgpNdE3lERng8KlgMDEV5Li PgVacePC2im7BRfcXBpzdWesvvKeBakZQ5s3Yjp5c//jTB4rhZ0ca/gr3DjSj5Jy ws9QLHpiP3MzoyDmTUzrbJRqNh0/SshpL1MBHch3XeAULc+5Enhr7GH54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEqXjTgSCafK9VFQSNsxmd7qPaJMB8GA1UdIwQY MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt YTMxODUzZTY5OTdhLzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASO0Kc9fP pHtiHY8bKKMYfqK0K6tekfUiJ9GR1Jv6bBPC/kB5xrOAC2PDwxWivVfEYJkB/Xfp WwgeG7R/ketXHfPGOB2nUcjjBq+QWuEBRZIzyGjoikqk6kVXalZiXrI4T0vRADM2 p/6lY+AkbLMRtJp0GdpL6aEoHsFitglkdIcJBpknDpYexAOdHUyAiYL5+rqGJIY7 sal4wu0QvAmTBKSpDnLbMqdED4DoImTcX0m22WMXFahVZYBB0GML8T5JBqKHc6n1 4/DaAP8v4wPcZ1kIS/DqGU3I9OaBoRzDwWn/dcNpQMf1SVmKKMwF3XAzf/Cc4Pu2 lYa+jAKBcf5XjQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:24:27 2025 by rpki-client