This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft File: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json) Hash identifier: XORYfw84qAkCNNuprQlTM46SIxzQYd8G43AXAI6iTko= Subject key identifier: 9D:DD:30:8D:CA:3E:BF:85:01:01:46:F8:19:9B:16:A5:1E:FE:52:A8 Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D Certificate issuer: /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d Certificate serial: 019B1F87A2967CBAA9C569340EAD9ED06064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft Manifest number: 0803 Signing time: Mon 15 Dec 2025 01:02:21 +0000 Manifest this update: Mon 15 Dec 2025 01:02:21 +0000 Manifest next update: Tue 16 Dec 2025 01:02:21 +0000 Files and hashes: 1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: zdhuoue+BBwYqQuSCMf/7SJUDymZENFTFjLrqGQQGVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:a2:96:7c:ba:a9:c5:69:34:0e:ad:9e:d0:60:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d Validity Not Before: Dec 15 01:02:21 2025 GMT Not After : Dec 16 01:02:21 2025 GMT Subject: CN=9ddd308dca3ebf85010146f8199b16a51efe52a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:8d:ad:25:31:68:09:bb:09:86:89:cd:c0: ae:e6:d8:8d:63:a9:86:b0:0f:68:7d:67:84:4a:9f: 99:73:e2:0e:58:1a:9e:f1:93:08:e5:cb:27:ed:21: f4:dd:12:6f:18:df:40:3b:90:f1:83:38:21:ff:ba: f3:24:dd:57:88:bb:33:1e:20:ac:56:25:a9:99:35: a1:8e:9b:80:7e:26:d9:1c:80:cc:83:eb:91:4a:4d: 63:25:68:41:3f:e8:3f:57:2e:ad:60:02:77:80:61: f3:4b:22:29:f2:87:43:79:13:03:45:15:60:80:10: 5c:b2:c9:e7:8d:16:11:7b:37:65:78:8c:72:4d:76: 0e:b5:9e:a1:01:8b:31:c4:1a:5b:91:16:32:36:a3: b9:0f:31:00:36:75:19:3a:26:97:a5:38:e9:3a:7b: 2c:8f:0b:49:27:4d:cb:4e:bd:ae:b6:86:e9:8b:68: 26:96:82:96:9a:df:03:ea:86:05:fe:f0:c8:ab:21: 75:57:a8:53:0d:f0:13:c7:b6:92:7f:af:41:91:59: df:6f:99:dc:b0:ac:53:1f:f6:1b:81:15:c2:75:b8: a6:95:01:40:c7:a1:0a:8e:99:51:fe:61:70:ac:69: ad:ac:67:b1:27:b7:d1:88:9a:e6:6d:fc:5d:2c:4d: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DD:30:8D:CA:3E:BF:85:01:01:46:F8:19:9B:16:A5:1E:FE:52:A8 X509v3 Authority Key Identifier: keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:12:1d:4c:37:50:04:9f:61:14:fe:6b:10:18:3d:88:d7:8d: 64:cb:8e:56:a2:bc:4f:01:1f:b3:f6:97:5b:30:4f:34:c5:f8: 22:49:2b:76:22:60:dd:73:68:56:4b:c2:01:d2:10:23:28:d6: fa:a3:b7:85:73:7b:f5:fd:d6:9f:48:e6:30:3f:d5:72:5d:52: 92:21:d2:9f:85:8e:1e:dd:71:52:39:ed:b8:a7:6d:0e:dd:1c: 64:c5:3f:19:8e:0d:ea:41:2e:74:25:2e:a9:84:93:73:77:d3: 71:54:12:83:9c:d5:f1:e4:ee:2a:0e:3e:8b:0e:7c:ae:3d:c2: 94:c4:eb:a1:44:4f:65:1d:0d:8b:4c:19:66:83:44:23:af:a5: 40:66:41:9e:07:31:01:ae:76:34:77:90:90:ab:ab:dd:81:a6: d9:97:51:59:86:07:d0:ef:8f:5e:cc:1d:1d:87:92:d4:0e:28: 15:ae:0e:f8:e1:a8:e0:a5:4b:e5:95:a3:73:f9:0a:32:34:2d: 17:c9:64:f6:42:40:69:9f:09:46:f7:57:7c:be:9b:16:d5:7f: f2:e7:5c:66:96:5f:e9:b6:44:c5:58:09:a3:86:73:1d:36:9b: bc:fe:5e:07:17:45:0e:a4:b4:a2:fe:1b:6f:bc:0d:dc:b9:12: dc:46:84:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh6KWfLqpxWk0Dq2e0GBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjVhYTNkZjU4YzllNTVkOWUwN2VhMmNmZjJjYWU4NWVl MTVjMWQwHhcNMjUxMjE1MDEwMjIxWhcNMjUxMjE2MDEwMjIxWjAzMTEwLwYDVQQD Eyg5ZGRkMzA4ZGNhM2ViZjg1MDEwMTQ2ZjgxOTliMTZhNTFlZmU1MmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV6NrSUxaAm7CYaJzcCu5tiNY6mG sA9ofWeESp+Zc+IOWBqe8ZMI5csn7SH03RJvGN9AO5Dxgzgh/7rzJN1XiLszHiCs ViWpmTWhjpuAfibZHIDMg+uRSk1jJWhBP+g/Vy6tYAJ3gGHzSyIp8odDeRMDRRVg gBBcssnnjRYRezdleIxyTXYOtZ6hAYsxxBpbkRYyNqO5DzEANnUZOiaXpTjpOnss jwtJJ03LTr2utobpi2gmloKWmt8D6oYF/vDIqyF1V6hTDfATx7aSf69BkVnfb5nc sKxTH/YbgRXCdbimlQFAx6EKjplR/mFwrGmtrGexJ7fRiJrmbfxdLE3jDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3dMI3KPr+FAQFG+BmbFqUe/lKoMB8GA1UdIwQY MBaAFCNlqj31jJ5V2eB+os/yyuhe4VwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJXcVBmV01ubFhaNEg2aXpfTEs2RjdoWEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yMjA3OGQtY2Q1MS00ZWQyLWJiYmQt ODJjZTQ2NGMyY2RkLzEvSTJXcVBmV01ubFhaNEg2aXpfTEs2RjdoWEIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8yMjA3OGQtY2Q1MS00ZWQyLWJiYmQtODJjZTQ2NGMyY2Rk LzEvSTJXcVBmV01ubFhaNEg2aXpfTEs2RjdoWEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRIdTDdQ BJ9hFP5rEBg9iNeNZMuOVqK8TwEfs/aXWzBPNMX4IkkrdiJg3XNoVkvCAdIQIyjW +qO3hXN79f3Wn0jmMD/Vcl1SkiHSn4WOHt1xUjntuKdtDt0cZMU/GY4N6kEudCUu qYSTc3fTcVQSg5zV8eTuKg4+iw58rj3ClMTroURPZR0Ni0wZZoNEI6+lQGZBngcx Aa52NHeQkKur3YGm2ZdRWYYH0O+PXswdHYeS1A4oFa4O+OGo4KVL5ZWjc/kKMjQt F8lk9kJAaZ8JRvdXfL6bFtV/8udcZpZf6bZExVgJo4ZzHTabvP5eBxdFDqS0ov4b b7wN3LkS3EaEvw== -----END CERTIFICATE-----Generated at Mon Dec 15 06:27:07 2025 by rpki-client