This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json) Hash identifier: JA9j78vCG0Iv8iUPJT3elL/C9poj0tsm2gln96bczOg= Subject key identifier: 92:5B:EE:A7:D7:59:4C:43:1D:30:77:30:B4:78:B1:08:57:EE:3A:98 Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Certificate serial: 019B5907EEA9DB4888FC5878F01295EC992E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft Manifest number: 02E1 Signing time: Fri 26 Dec 2025 05:00:50 +0000 Manifest this update: Fri 26 Dec 2025 05:00:50 +0000 Manifest next update: Sat 27 Dec 2025 05:00:50 +0000 Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: aXXyOCG6H9KU+w9lS61afyhOqBU4+4JUIF0lMndIYUg=) 2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:ee:a9:db:48:88:fc:58:78:f0:12:95:ec:99:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99 Validity Not Before: Dec 26 05:00:50 2025 GMT Not After : Dec 27 05:00:50 2025 GMT Subject: CN=925beea7d7594c431d307730b478b10857ee3a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:62:d7:8d:9f:2f:3a:f2:04:b6:e1:eb:7f: ca:2e:40:a7:36:80:26:a7:8e:06:df:fa:1a:50:c5: b2:b8:dc:80:b0:e9:87:36:58:32:05:46:0b:ca:b9: 25:89:99:21:25:4f:92:84:7b:4a:cb:c8:03:01:25: 43:a0:00:b5:2b:88:83:3b:0a:99:71:e4:71:e3:fc: e4:e0:bc:7e:28:78:6a:77:b0:aa:26:5c:87:95:cc: 41:d2:ab:f0:ed:7b:61:86:3a:90:63:c8:8e:63:06: e0:d2:e3:14:f1:6e:10:fa:86:12:83:86:7d:7c:00: 17:98:30:50:7f:9b:01:97:3d:aa:0b:2a:0c:9f:a0: 1f:86:54:27:65:db:41:c8:b3:15:6d:50:43:3b:73: 77:ed:3e:3b:a0:e0:70:fa:c0:12:8c:34:39:6a:1f: 0e:75:93:7d:8f:b3:fb:9a:03:4a:ad:e4:09:a2:f2: 58:f9:57:22:3f:50:d0:24:f0:03:d9:ed:21:5c:39: 33:af:1c:24:6d:0d:be:50:ef:10:42:99:5a:9d:89: d2:61:ac:7d:08:a0:76:21:09:00:10:ab:38:73:70: 14:e9:e1:c8:0d:bf:96:32:be:87:eb:ea:f9:d2:06: 2f:ab:68:1c:8e:81:a0:a4:d3:4d:61:5d:4f:d3:02: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5B:EE:A7:D7:59:4C:43:1D:30:77:30:B4:78:B1:08:57:EE:3A:98 X509v3 Authority Key Identifier: keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2c:f1:1a:f2:d7:25:26:2c:85:3c:1c:59:4f:85:fa:ec:5e: bd:da:6c:3e:7a:3b:3d:97:4c:43:69:bc:e0:1e:dc:f4:33:5d: bb:59:c8:d2:d6:09:cf:bd:40:ba:70:c7:fb:30:e9:e4:dd:ba: ad:48:5e:35:cd:64:0a:e0:0f:41:d7:59:49:b3:c8:e9:cc:3f: 9f:2d:61:46:ef:a0:3a:fe:5b:c6:67:68:35:47:73:e7:8c:04: 3b:d3:0c:32:06:39:cc:92:ea:64:a8:0c:b7:74:26:fa:b8:9a: eb:a0:2c:a0:64:61:04:36:64:22:df:3f:16:b2:15:32:70:a5: ae:9b:11:89:16:0f:d8:82:ab:84:22:5b:7b:1d:00:36:73:80: d6:97:bc:02:63:30:bb:f5:e7:77:f3:0c:db:3b:68:99:a7:eb: b2:0b:9d:84:c2:be:55:6f:69:b4:65:24:07:5e:80:1c:98:9b: ed:e1:09:01:27:0b:13:bc:76:6d:76:0e:10:09:ed:e4:ee:cf: d9:0e:31:11:e8:e6:18:fa:f9:e9:51:3a:6d:f4:e7:1e:8c:23: ee:36:bb:b4:53:61:77:bb:8b:46:2f:cc:cb:5f:3f:02:7b:9d: 8d:00:14:a3:a9:a2:e4:47:35:90:92:08:c8:38:71:e5:cd:ff: c9:94:a6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB+6p20iI/Fh48BKV7JkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODQ2NzRlYTAwN2ExMjAzMGFjOGQyYmU1NjBkYjIxZjRm YzBiOTkwHhcNMjUxMjI2MDUwMDUwWhcNMjUxMjI3MDUwMDUwWjAzMTEwLwYDVQQD Eyg5MjViZWVhN2Q3NTk0YzQzMWQzMDc3MzBiNDc4YjEwODU3ZWUzYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg5i142fLzryBLbh63/KLkCnNoAm p44G3/oaUMWyuNyAsOmHNlgyBUYLyrkliZkhJU+ShHtKy8gDASVDoAC1K4iDOwqZ ceRx4/zk4Lx+KHhqd7CqJlyHlcxB0qvw7XthhjqQY8iOYwbg0uMU8W4Q+oYSg4Z9 fAAXmDBQf5sBlz2qCyoMn6AfhlQnZdtByLMVbVBDO3N37T47oOBw+sASjDQ5ah8O dZN9j7P7mgNKreQJovJY+VciP1DQJPAD2e0hXDkzrxwkbQ2+UO8QQplanYnSYax9 CKB2IQkAEKs4c3AU6eHIDb+WMr6H6+r50gYvq2gcjoGgpNNNYV1P0wKsAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJb7qfXWUxDHTB3MLR4sQhX7jqYMB8GA1UdIwQY MBaAFCOEZ06gB6EgMKyNK+Vg2yH0/AuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUt YzhmNTZjMTIyZmVjLzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUtYzhmNTZjMTIyZmVj LzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSzxGvLX JSYshTwcWU+F+uxevdpsPno7PZdMQ2m84B7c9DNdu1nI0tYJz71AunDH+zDp5N26 rUheNc1kCuAPQddZSbPI6cw/ny1hRu+gOv5bxmdoNUdz54wEO9MMMgY5zJLqZKgM t3Qm+ria66AsoGRhBDZkIt8/FrIVMnClrpsRiRYP2IKrhCJbex0ANnOA1pe8AmMw u/Xnd/MM2ztomafrsgudhMK+VW9ptGUkB16AHJib7eEJAScLE7x2bXYOEAnt5O7P 2Q4xEejmGPr56VE6bfTnHowj7ja7tFNhd7uLRi/My18/AnudjQAUo6mi5Ec1kJII yDhx5c3/yZSmAw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:41 2025 by rpki-client