This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json) Hash identifier: N82B6YJE3f6dtIFTd7HrideUsX//2MWi7ivsgKQTpY8= Subject key identifier: 6B:18:B6:BA:CB:F8:A0:9A:15:7C:26:80:78:88:ED:89:A0:F9:EA:17 Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Certificate serial: 019B46CAE9248EF99BDE298672DDF34257FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 16:01:01 +0000 Manifest this update: Mon 22 Dec 2025 16:01:01 +0000 Manifest next update: Tue 23 Dec 2025 16:01:01 +0000 Files and hashes: 1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=) 2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=) 3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=) 4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: /FikgmZJbAr93wwf1ZHwoqz2pW6t9PZQ48IsFdEY9WE=) 5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:e9:24:8e:f9:9b:de:29:86:72:dd:f3:42:57:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Validity Not Before: Dec 22 16:01:01 2025 GMT Not After : Dec 23 16:01:01 2025 GMT Subject: CN=6b18b6bacbf8a09a157c26807888ed89a0f9ea17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:48:33:21:66:f5:01:7f:f9:ad:e7:ea:c0: f6:a5:9a:60:55:34:ae:81:ba:99:74:35:91:c1:e9: d6:fe:d4:f5:9f:05:b8:12:87:5b:85:1e:5d:04:18: c3:1c:14:f3:1a:22:eb:32:48:f0:7a:47:24:99:ed: fb:c1:da:69:e7:c1:e9:78:b8:3b:2f:6e:98:b0:35: 5f:7e:74:bd:28:fd:39:ff:84:dc:1b:38:95:c8:26: b9:90:62:92:9a:78:a5:b5:a2:01:39:92:54:30:ae: e3:3c:b5:23:d6:7d:04:24:1d:45:fc:a1:d3:17:65: 54:e2:6f:6d:7f:5a:dc:65:39:18:4c:5a:a5:5a:38: 54:7d:d6:de:27:b8:04:6a:43:70:91:14:cf:61:d1: f5:0c:d5:73:a3:5d:22:6f:57:ad:e8:10:08:f0:5a: 86:28:7d:d3:f5:00:13:f6:d8:a7:8e:0e:ec:55:12: 36:83:b6:dd:ef:3c:b7:b0:2c:96:06:71:f5:92:7e: f1:fe:9f:d8:39:51:59:d8:94:40:ec:12:77:07:9d: 60:5b:b5:a8:10:8d:6a:5b:d0:07:4d:0f:40:88:88: 30:d5:c8:fd:d5:ab:26:5e:02:ce:21:7a:73:4b:d5: 98:2c:ae:1f:45:bd:3c:4c:48:4b:af:ec:2c:1a:c0: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:18:B6:BA:CB:F8:A0:9A:15:7C:26:80:78:88:ED:89:A0:F9:EA:17 X509v3 Authority Key Identifier: keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2b:1f:f2:d6:95:ff:eb:a3:3a:b7:86:e1:7d:1f:0b:09:01: d7:7d:02:82:c3:1d:63:58:19:9f:64:fe:eb:ca:73:b6:62:11: f4:e1:08:00:cc:ff:b8:43:8d:33:d6:2f:96:cc:a6:34:13:ab: 39:0c:c4:34:cb:bc:60:a4:4c:1f:19:ed:9e:08:b2:37:26:2e: 3b:d0:45:1c:f9:60:be:4c:5e:81:1f:cb:18:23:7e:16:1a:6b: d0:a3:e8:c1:c4:7a:14:ce:14:30:dd:24:6c:49:02:06:01:e9: 28:eb:cd:de:ca:c3:66:09:81:7a:3c:07:f4:d9:71:aa:bc:c6: 2d:fc:d0:27:a6:2f:3b:c5:d7:b4:34:bd:3b:32:c0:bf:8c:e4: 01:08:e2:2c:81:d0:5d:12:2e:db:34:03:05:5f:47:7e:46:c2: f6:c7:da:8f:f9:2a:ed:0e:dd:8b:07:46:d2:fe:fe:59:c2:fb: c7:8a:5b:69:94:d7:9c:d5:3d:63:84:f4:61:9e:8d:08:9f:ad: e6:5c:55:f0:a7:04:42:f2:19:61:ff:67:38:06:74:23:7a:7d: 1b:26:c8:d6:24:7f:50:a1:16:47:47:40:b3:4a:fe:62:6f:b3: 2f:a9:89:fc:d3:6e:e9:51:c2:6f:55:1f:c6:7e:4f:65:fc:09: 00:65:79:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyukkjvmb3imGct3zQlf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDg0NDhjNWNiOTAzOThlNGMyODVjZWM5YzBmNDc2NmFj OTMxZGYwHhcNMjUxMjIyMTYwMTAxWhcNMjUxMjIzMTYwMTAxWjAzMTEwLwYDVQQD Eyg2YjE4YjZiYWNiZjhhMDlhMTU3YzI2ODA3ODg4ZWQ4OWEwZjllYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh5IMyFm9QF/+a3n6sD2pZpgVTSu gbqZdDWRwenW/tT1nwW4EodbhR5dBBjDHBTzGiLrMkjwekckme37wdpp58HpeLg7 L26YsDVffnS9KP05/4TcGziVyCa5kGKSmniltaIBOZJUMK7jPLUj1n0EJB1F/KHT F2VU4m9tf1rcZTkYTFqlWjhUfdbeJ7gEakNwkRTPYdH1DNVzo10ib1et6BAI8FqG KH3T9QAT9tinjg7sVRI2g7bd7zy3sCyWBnH1kn7x/p/YOVFZ2JRA7BJ3B51gW7Wo EI1qW9AHTQ9AiIgw1cj91asmXgLOIXpzS9WYLK4fRb08TEhLr+wsGsD+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsYtrrL+KCaFXwmgHiI7Ymg+eoXMB8GA1UdIwQY MBaAFCPYRIxcuQOY5MKFzsnA9HZqyTHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUt Zjc3MmEwMTM5MDE2LzEvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUtZjc3MmEwMTM5MDE2 LzEvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCsf8taV /+ujOreG4X0fCwkB130CgsMdY1gZn2T+68pztmIR9OEIAMz/uEONM9YvlsymNBOr OQzENMu8YKRMHxntngiyNyYuO9BFHPlgvkxegR/LGCN+Fhpr0KPowcR6FM4UMN0k bEkCBgHpKOvN3srDZgmBejwH9NlxqrzGLfzQJ6YvO8XXtDS9OzLAv4zkAQjiLIHQ XRIu2zQDBV9HfkbC9sfaj/kq7Q7diwdG0v7+WcL7x4pbaZTXnNU9Y4T0YZ6NCJ+t 5lxV8KcEQvIZYf9nOAZ0I3p9GybI1iR/UKEWR0dAs0r+Ym+zL6mJ/NNu6VHCb1Uf xn5PZfwJAGV5UA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:29 2025 by rpki-client