This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json) Hash identifier: +pB4V44G/w8vwr7d8rs32CuFBP6B5Brrz8x+nfYYMug= Subject key identifier: C9:53:FA:6C:75:F5:E9:AA:1E:1C:35:73:47:C2:21:B8:18:78:EA:FC Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24 Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224 Certificate serial: 019B3EA3A652B855328884F39416281C7FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:01:10 +0000 Manifest this update: Sun 21 Dec 2025 02:01:10 +0000 Manifest next update: Mon 22 Dec 2025 02:01:10 +0000 Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: 6XVBMpLbklksb7IS6GpJs22QM3MpzbsPOGmYhwjSVWQ=) 2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a6:52:b8:55:32:88:84:f3:94:16:28:1c:7f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224 Validity Not Before: Dec 21 02:01:10 2025 GMT Not After : Dec 22 02:01:10 2025 GMT Subject: CN=c953fa6c75f5e9aa1e1c357347c221b81878eafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:98:a4:00:1e:16:36:a2:78:20:d5:0c:b4: b9:0f:ee:be:a9:1f:27:8b:1f:00:92:9a:a5:6a:36: 58:6a:cc:5b:20:92:66:4a:ce:c7:07:52:bd:4c:7d: 94:c2:5e:79:8c:d9:1f:d4:fa:bb:26:28:74:5f:60: 95:02:77:fd:51:e2:2d:d1:c2:fc:81:58:9b:a5:72: 57:63:2e:ba:40:07:2e:32:e3:f5:fe:96:a9:5f:95: 33:c2:fc:18:f0:ce:76:61:37:93:78:66:e7:94:a6: 7b:f3:54:38:7d:66:60:70:e5:2f:a3:33:10:30:b7: 67:ef:d3:fd:83:d5:b1:3b:14:ff:31:8e:4f:58:7c: c9:d0:68:9f:e6:34:d0:48:19:c0:63:36:73:f6:92: 69:44:57:6e:dd:aa:cb:32:d9:27:8d:68:3b:db:9c: 92:4c:49:36:01:c6:93:33:ee:ec:a3:3f:ca:9a:10: 3a:ea:eb:fb:1b:4e:e9:b3:f1:da:20:0e:76:45:34: 67:86:4b:d6:1c:70:45:d0:80:f5:aa:9e:af:98:73: ec:42:61:07:dd:fe:7d:f1:0b:3e:bb:88:6c:0d:ad: ad:4e:8f:e2:40:6d:77:91:3d:9d:28:2b:87:63:96: fc:cf:41:59:90:55:f9:f5:5c:71:ce:5f:50:05:b5: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:53:FA:6C:75:F5:E9:AA:1E:1C:35:73:47:C2:21:B8:18:78:EA:FC X509v3 Authority Key Identifier: keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:37:de:a2:d7:dc:0a:a3:72:a1:64:5e:67:d1:1d:91:25:00: d8:4a:89:b3:f6:06:0e:3d:7a:b9:8e:74:f9:d0:b3:de:c6:bb: 45:6a:f0:4e:f4:72:9f:e6:70:86:83:23:bc:e9:e2:fa:1b:bb: 27:a7:b4:99:b7:8f:ac:62:4d:ee:53:11:21:23:33:da:57:b2: c7:3f:3a:dd:ba:79:13:b9:83:72:0d:75:a8:e6:ad:ef:4d:51: 27:5c:df:30:d1:2e:e2:55:4d:74:52:60:9b:cc:dc:d0:c6:fb: 5d:9d:24:88:da:74:9f:df:01:34:97:0a:be:8a:31:58:91:0d: 5d:e3:3f:fc:0c:22:51:1a:0f:2e:26:8c:48:2b:6a:73:30:80: c7:cc:28:1c:57:d8:c6:79:54:7a:ae:ac:b3:62:50:73:fa:49: 8d:55:f4:7a:de:5b:8f:19:4f:80:ba:13:79:2c:0b:63:bb:13: 98:d0:b8:03:c8:9e:8a:70:4c:a1:49:04:ea:be:9e:2e:77:da: 8d:13:dc:f3:9d:d5:7b:06:5f:77:42:7b:6c:59:9f:25:49:00: 37:38:b6:9e:45:1d:0b:04:98:56:40:4a:b1:c0:00:40:6c:d5: 65:e2:fa:f3:e5:1b:04:69:34:f2:9d:f0:cf:97:e0:f5:af:55: ed:7f:92:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6ZSuFUyiITzlBYoHH/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj MjMyMjQwHhcNMjUxMjIxMDIwMTEwWhcNMjUxMjIyMDIwMTEwWjAzMTEwLwYDVQQD EyhjOTUzZmE2Yzc1ZjVlOWFhMWUxYzM1NzM0N2MyMjFiODE4NzhlYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSmYpAAeFjaieCDVDLS5D+6+qR8n ix8AkpqlajZYasxbIJJmSs7HB1K9TH2Uwl55jNkf1Pq7Jih0X2CVAnf9UeIt0cL8 gVibpXJXYy66QAcuMuP1/papX5UzwvwY8M52YTeTeGbnlKZ781Q4fWZgcOUvozMQ MLdn79P9g9WxOxT/MY5PWHzJ0Gif5jTQSBnAYzZz9pJpRFdu3arLMtknjWg725yS TEk2AcaTM+7soz/KmhA66uv7G07ps/HaIA52RTRnhkvWHHBF0ID1qp6vmHPsQmEH 3f598Qs+u4hsDa2tTo/iQG13kT2dKCuHY5b8z0FZkFX59Vxxzl9QBbXw2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlT+mx19emqHhw1c0fCIbgYeOr8MB8GA1UdIwQY MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDfeotfc CqNyoWReZ9EdkSUA2EqJs/YGDj16uY50+dCz3sa7RWrwTvRyn+ZwhoMjvOni+hu7 J6e0mbePrGJN7lMRISMz2leyxz863bp5E7mDcg11qOat701RJ1zfMNEu4lVNdFJg m8zc0Mb7XZ0kiNp0n98BNJcKvooxWJENXeM//AwiURoPLiaMSCtqczCAx8woHFfY xnlUeq6ss2JQc/pJjVX0et5bjxlPgLoTeSwLY7sTmNC4A8ieinBMoUkE6r6eLnfa jRPc853VewZfd0J7bFmfJUkANzi2nkUdCwSYVkBKscAAQGzVZeL68+UbBGk08p3w z5fg9a9V7X+S4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:11 2025 by rpki-client