This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json) Hash identifier: vBjwG1WXTfJ8fejThvwZJ8z6JzSP+R6TZiB0B/3JqHk= Subject key identifier: 62:3E:BF:68:1F:11:B0:D3:29:81:F0:51:54:85:31:74:1B:76:F4:7E Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Certificate serial: 019B37579857C580D66406F39248C1E71689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 16:00:46 +0000 Manifest this update: Fri 19 Dec 2025 16:00:46 +0000 Manifest next update: Sat 20 Dec 2025 16:00:46 +0000 Files and hashes: 1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=) 2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=) 3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=) 4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: 4MyYr3sHLTiN0ykXcAJ5/5XldYQX8uEb6E12l9xiOI8=) 5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:98:57:c5:80:d6:64:06:f3:92:48:c1:e7:16:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Validity Not Before: Dec 19 16:00:46 2025 GMT Not After : Dec 20 16:00:46 2025 GMT Subject: CN=623ebf681f11b0d32981f051548531741b76f47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:92:75:11:e7:60:a5:c2:a2:4e:46:27:fa: 0f:22:d3:6c:9f:28:45:9a:e1:02:19:76:26:c5:dc: 97:16:17:78:9d:7a:5e:96:99:e3:06:31:e5:9c:e4: 8d:46:75:eb:ee:1d:8a:44:3e:7d:b9:42:0e:f4:b8: d7:85:5e:d1:4f:7f:85:0b:56:d0:7a:82:bd:7f:f6: cb:b4:b5:cb:26:26:1c:98:59:c5:2e:46:3c:35:18: 51:6f:40:6a:f2:7c:10:f3:1c:e9:15:e4:57:ce:ea: 85:70:9d:ee:2e:20:6c:68:42:c0:c6:ae:5e:3b:05: d4:e9:d6:77:82:1e:a2:c6:ad:e5:8f:3e:1e:4b:81: 65:7b:05:43:eb:10:31:5d:cd:94:19:85:43:2c:e9: a6:c2:67:6a:86:de:7e:87:71:f6:bc:aa:13:73:26: f6:e6:50:e9:ee:fc:5c:7a:64:6f:11:df:50:26:f6: 9d:27:d0:d6:58:99:5d:5b:74:47:60:a4:03:51:83: a4:e0:4e:f4:49:73:b8:a5:9a:c9:ea:62:23:e2:72: 20:08:0f:91:80:a5:28:4e:cc:9e:4e:23:8d:86:4c: 56:06:7c:7a:82:f6:29:40:ac:7f:35:b2:2d:75:61: 81:da:e2:3d:48:c8:4a:e4:0b:4b:04:95:77:00:dd: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3E:BF:68:1F:11:B0:D3:29:81:F0:51:54:85:31:74:1B:76:F4:7E X509v3 Authority Key Identifier: keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:83:14:df:b3:2e:cf:69:e9:20:fd:a9:e4:de:8e:fa:96:61: ed:ec:b0:b5:35:2b:21:54:5c:90:a1:2c:fa:2b:52:30:c3:17: 60:65:09:6e:db:6e:bf:85:86:a5:6d:9e:4f:0c:ce:1f:8d:f3: 47:9e:63:43:20:f8:3e:90:ca:ea:ef:d1:54:7e:fe:ea:98:13: a6:16:9e:8c:53:0a:cf:56:34:77:32:fc:68:a2:b8:5b:58:41: c7:6e:a9:ea:c4:a4:27:ed:a6:52:66:b3:78:c3:db:9d:74:66: e6:c0:2d:43:28:cc:91:40:87:fd:9c:be:bf:62:cd:9d:40:7e: 8c:65:7e:30:01:c1:66:b2:1d:14:a7:c9:6a:c1:e0:96:96:78: 9e:04:c2:de:dd:2c:7e:23:2e:ce:3a:5c:83:6a:9d:61:88:2d: cd:c9:db:41:bf:46:a8:0e:f8:5d:e6:e3:ce:3c:be:2f:51:3a: 59:df:17:fe:68:fc:8b:c9:b7:8e:8e:81:d6:1e:38:f8:cd:07: f1:32:35:d1:da:d5:23:57:40:9f:cb:dc:38:ec:02:6b:bb:df: e6:12:af:09:65:a2:e5:8e:4e:12:67:6f:1c:80:1b:77:86:7a: 16:5d:c5:52:8a:44:e5:20:f4:bf:3d:54:b0:39:db:8c:89:91: 93:61:c6:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V5hXxYDWZAbzkkjB5xaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDg0NDhjNWNiOTAzOThlNGMyODVjZWM5YzBmNDc2NmFj OTMxZGYwHhcNMjUxMjE5MTYwMDQ2WhcNMjUxMjIwMTYwMDQ2WjAzMTEwLwYDVQQD Eyg2MjNlYmY2ODFmMTFiMGQzMjk4MWYwNTE1NDg1MzE3NDFiNzZmNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0aSdRHnYKXCok5GJ/oPItNsnyhF muECGXYmxdyXFhd4nXpelpnjBjHlnOSNRnXr7h2KRD59uUIO9LjXhV7RT3+FC1bQ eoK9f/bLtLXLJiYcmFnFLkY8NRhRb0Bq8nwQ8xzpFeRXzuqFcJ3uLiBsaELAxq5e OwXU6dZ3gh6ixq3ljz4eS4FlewVD6xAxXc2UGYVDLOmmwmdqht5+h3H2vKoTcyb2 5lDp7vxcemRvEd9QJvadJ9DWWJldW3RHYKQDUYOk4E70SXO4pZrJ6mIj4nIgCA+R gKUoTsyeTiONhkxWBnx6gvYpQKx/NbItdWGB2uI9SMhK5AtLBJV3AN0dxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGI+v2gfEbDTKYHwUVSFMXQbdvR+MB8GA1UdIwQY MBaAFCPYRIxcuQOY5MKFzsnA9HZqyTHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUt Zjc3MmEwMTM5MDE2LzEvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUtZjc3MmEwMTM5MDE2 LzEvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYMU37Mu z2npIP2p5N6O+pZh7eywtTUrIVRckKEs+itSMMMXYGUJbttuv4WGpW2eTwzOH43z R55jQyD4PpDK6u/RVH7+6pgTphaejFMKz1Y0dzL8aKK4W1hBx26p6sSkJ+2mUmaz eMPbnXRm5sAtQyjMkUCH/Zy+v2LNnUB+jGV+MAHBZrIdFKfJasHglpZ4ngTC3t0s fiMuzjpcg2qdYYgtzcnbQb9GqA74Xebjzjy+L1E6Wd8X/mj8i8m3jo6B1h44+M0H 8TI10drVI1dAn8vcOOwCa7vf5hKvCWWi5Y5OEmdvHIAbd4Z6Fl3FUopE5SD0vz1U sDnbjImRk2HGZA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:27:50 2025 by rpki-client