This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft File: I22P43gCkUrBm_04YGAw4-Q-KPs.mft (raw, json) Hash identifier: UBZT+Oudr6du8zX0eAIVOIvnVfk6Rb39a8uOxarmrT8= Subject key identifier: 2A:2F:EA:DB:02:51:C2:1B:28:9F:21:28:C6:9F:71:2D:55:56:2C:26 Authority key identifier: 23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB Certificate issuer: /CN=236d8fe37802914ac19bfd38606030e3e43e28fb Certificate serial: 019B59E39034E2276FCB6E932B37BE0E63BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft Manifest number: AF Signing time: Fri 26 Dec 2025 09:00:44 +0000 Manifest this update: Fri 26 Dec 2025 09:00:44 +0000 Manifest next update: Sat 27 Dec 2025 09:00:44 +0000 Files and hashes: 1: I22P43gCkUrBm_04YGAw4-Q-KPs.crl (hash: Z8xOl2r0Z2QGNWAO1sfnUqDMrie2h+NJ2mUEcG+nQHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:90:34:e2:27:6f:cb:6e:93:2b:37:be:0e:63:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=236d8fe37802914ac19bfd38606030e3e43e28fb Validity Not Before: Dec 26 09:00:44 2025 GMT Not After : Dec 27 09:00:44 2025 GMT Subject: CN=2a2feadb0251c21b289f2128c69f712d55562c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:2d:0e:88:c3:10:fe:e7:ab:54:53:3d:c2: 7d:72:6e:14:ed:6b:af:63:30:6f:9c:f5:b9:5f:31: 3c:ac:5f:42:77:e6:88:5c:df:83:5c:47:ec:e3:0c: 72:07:3d:15:5a:2d:9f:60:72:90:c2:35:5d:a6:68: ee:76:b2:14:5b:cf:bd:66:5c:3b:c8:e2:5b:15:a9: e5:ad:a9:f8:4f:60:20:b2:46:d5:bd:50:cd:48:f8: a7:d6:0f:77:a3:3b:1c:b3:28:35:5a:13:64:e6:04: 99:38:c8:bc:c4:1d:de:ec:1c:a0:c7:ab:0c:67:06: ee:da:18:75:18:f6:68:41:7e:47:d1:4d:6f:5f:2d: a0:c6:ea:7f:af:bc:b3:c3:5f:d2:56:77:bb:4c:08: e7:e9:7a:d8:8c:23:56:27:77:61:4e:48:16:db:bc: ea:d2:52:7d:a0:5d:1a:06:85:1f:12:08:eb:45:07: ae:c4:61:a1:bb:99:27:b9:d1:e2:e6:6e:8f:45:97: 99:6a:f5:1f:93:a7:d0:ce:22:af:10:1e:b9:f7:76: 02:eb:4e:fa:4d:61:9e:1e:2e:f1:c8:14:f1:f9:c1: 74:a6:dd:dd:5e:7b:b2:6a:64:c8:72:f4:89:52:85: 86:8f:85:3e:ff:a7:5b:ea:67:e1:7c:86:e6:de:ca: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:EA:DB:02:51:C2:1B:28:9F:21:28:C6:9F:71:2D:55:56:2C:26 X509v3 Authority Key Identifier: keyid:23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3c:14:a5:e8:8b:3a:16:9f:ea:87:0a:54:2a:63:d0:8d:d7: a2:1c:98:a0:7a:3b:a3:08:1a:7b:e2:1e:c4:fb:62:44:24:37: 65:a2:a9:cf:55:b6:4a:8d:69:5a:2f:88:0a:ba:3a:aa:a3:11: b5:cc:62:0e:0a:95:af:70:15:86:c6:31:b0:2e:b0:79:fe:c2: 61:e7:cc:2e:81:40:b2:6e:51:df:b9:9c:28:e3:c2:f5:a6:6d: 40:a0:c3:dc:f7:ae:65:5f:e0:dc:ca:a1:90:54:b6:0b:94:d4: 83:01:e3:58:84:a7:d3:3a:04:c4:5c:32:1c:0f:d4:0b:ee:6a: 03:39:c7:5a:07:f6:6c:31:cc:5f:39:60:1a:1c:ec:4f:7f:1b: 7a:9f:5c:41:38:89:3f:fc:42:d0:a8:75:36:ae:74:17:8f:f5: a2:3b:99:0d:82:7e:85:87:1c:be:72:6a:bb:a0:31:26:9b:4e: 9f:26:d5:b0:b9:31:e3:22:97:59:d2:c0:bb:5b:93:bb:cd:a6: ff:49:e7:9f:29:c4:bc:60:c8:a0:c7:c5:c6:5f:be:3f:a3:7e: 86:9f:c6:99:4e:6e:9e:94:8d:c0:d3:a2:eb:65:62:d7:ad:fe: 1c:2e:24:f9:c8:1d:33:8e:dd:1c:84:ea:69:48:a0:0c:64:06: c3:a1:b0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45A04idvy26TKze+DmO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNmQ4ZmUzNzgwMjkxNGFjMTliZmQzODYwNjAzMGUzZTQz ZTI4ZmIwHhcNMjUxMjI2MDkwMDQ0WhcNMjUxMjI3MDkwMDQ0WjAzMTEwLwYDVQQD EygyYTJmZWFkYjAyNTFjMjFiMjg5ZjIxMjhjNjlmNzEyZDU1NTYyYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZYtDojDEP7nq1RTPcJ9cm4U7Wuv YzBvnPW5XzE8rF9Cd+aIXN+DXEfs4wxyBz0VWi2fYHKQwjVdpmjudrIUW8+9Zlw7 yOJbFanlran4T2AgskbVvVDNSPin1g93ozscsyg1WhNk5gSZOMi8xB3e7Bygx6sM Zwbu2hh1GPZoQX5H0U1vXy2gxup/r7yzw1/SVne7TAjn6XrYjCNWJ3dhTkgW27zq 0lJ9oF0aBoUfEgjrRQeuxGGhu5knudHi5m6PRZeZavUfk6fQziKvEB6593YC6076 TWGeHi7xyBTx+cF0pt3dXnuyamTIcvSJUoWGj4U+/6db6mfhfIbm3sqlFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCov6tsCUcIbKJ8hKMafcS1VViwmMB8GA1UdIwQY MBaAFCNtj+N4ApFKwZv9OGBgMOPkPij7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTIyUDQzZ0NrVXJCbV8wNFlHQXc0LVEtS1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yNTU1ZWYtMDI3NC00Yjk1LTgyZDQt ZDczMWJkMTkwOGUzLzEvSTIyUDQzZ0NrVXJCbV8wNFlHQXc0LVEtS1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yNTU1ZWYtMDI3NC00Yjk1LTgyZDQtZDczMWJkMTkwOGUz LzEvSTIyUDQzZ0NrVXJCbV8wNFlHQXc0LVEtS1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzwUpeiL Ohaf6ocKVCpj0I3XohyYoHo7owgae+IexPtiRCQ3ZaKpz1W2So1pWi+ICro6qqMR tcxiDgqVr3AVhsYxsC6wef7CYefMLoFAsm5R37mcKOPC9aZtQKDD3PeuZV/g3Mqh kFS2C5TUgwHjWISn0zoExFwyHA/UC+5qAznHWgf2bDHMXzlgGhzsT38bep9cQTiJ P/xC0Kh1Nq50F4/1ojuZDYJ+hYccvnJqu6AxJptOnybVsLkx4yKXWdLAu1uTu82m /0nnnynEvGDIoMfFxl++P6N+hp/GmU5unpSNwNOi62Vi163+HC4k+cgdM47dHITq aUigDGQGw6Gw4w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:29 2025 by rpki-client