This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json) Hash identifier: Awh/JSGMqvZbsTkVbhO03zl0VnelCjutvWnd78ye+ZY= Subject key identifier: 63:19:BA:E1:FF:9D:A2:D9:E6:E5:C7:32:63:C4:F4:6C:43:F4:73:9A Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b Certificate serial: 019B32D7D334441D7203D28E8F0EA8A5268D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 19:02:43 +0000 Manifest this update: Thu 18 Dec 2025 19:02:43 +0000 Manifest next update: Fri 19 Dec 2025 19:02:43 +0000 Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: gNjQ6QGZAMRU+FPI+PufkKk+fDnL9/WiKiW3chn1UDA=) 2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:d3:34:44:1d:72:03:d2:8e:8f:0e:a8:a5:26:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b Validity Not Before: Dec 18 19:02:43 2025 GMT Not After : Dec 19 19:02:43 2025 GMT Subject: CN=6319bae1ff9da2d9e6e5c73263c4f46c43f4739a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:08:d2:c4:19:16:08:87:1a:a2:db:11:da: fe:a1:b0:5f:45:a9:c0:c7:3b:9d:f8:6b:99:52:0e: 5c:de:91:91:e1:34:af:1e:2a:1f:b4:41:62:a4:4a: a3:ac:2b:09:ae:34:c0:68:a1:9b:4f:b4:50:79:6a: 7f:44:05:0f:16:3c:09:7a:0a:ad:0c:64:6d:e9:98: 84:9e:b3:55:9f:ea:d4:59:14:92:55:6c:e6:f8:50: 8e:f7:6c:c3:32:a9:cb:29:ec:b9:99:42:e9:a5:16: 89:aa:e1:2a:b6:1b:55:a9:ed:8a:4e:f8:0f:38:55: 16:99:9e:75:0d:4f:78:f4:ec:8d:39:06:5e:c5:d3: 66:fb:85:cf:98:29:04:db:7f:bc:6a:e6:6c:61:08: 0b:76:3b:ac:b0:87:38:47:b9:bd:2a:37:63:30:89: 1a:5e:2b:a5:46:29:14:1d:16:3b:db:11:f3:14:74: f5:12:6a:20:3a:ae:46:ce:56:4c:b3:b2:1d:54:7a: b4:f1:69:3f:5a:f0:fa:18:20:e7:e2:c5:34:0c:7b: b9:fa:6e:7e:7c:e6:a0:8f:41:e9:88:11:c0:36:33: a0:48:be:87:03:97:b2:aa:3c:cc:4f:01:63:e4:17: bb:9e:87:58:08:04:16:89:03:77:72:e5:7f:2f:a3: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:19:BA:E1:FF:9D:A2:D9:E6:E5:C7:32:63:C4:F4:6C:43:F4:73:9A X509v3 Authority Key Identifier: keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:0d:6b:d4:79:d7:50:6d:31:9e:ab:0e:df:8c:83:69:9e:8f: a8:46:b2:da:11:8e:38:ba:4b:32:7a:57:1b:84:72:b9:4f:d7: ff:d0:f8:c4:33:03:c4:03:26:9e:f9:5c:b6:02:7d:fb:25:31: 9a:51:0e:18:70:94:ca:22:26:b9:ec:3a:85:95:93:bd:8b:6a: fe:29:13:ee:2a:f6:0c:26:c7:23:9b:46:00:8f:58:86:eb:db: 8c:d6:05:76:41:58:32:96:d4:b8:09:e9:21:87:27:c3:04:f6: 41:fc:69:da:fb:05:29:0c:55:1f:c7:17:32:0f:66:54:2b:8f: 97:44:a2:76:79:d4:95:c3:41:c8:dc:02:49:cb:db:13:03:40: 10:b7:95:84:65:66:01:5e:e7:94:9b:1e:46:a9:12:4b:42:a3: 6d:63:61:77:05:f7:ff:b9:76:81:9a:21:45:4e:17:42:28:58: 5b:0e:2d:38:a2:4d:77:c3:52:4f:a4:58:86:66:90:f8:50:eb: 18:dc:66:1b:a2:7f:e5:2a:b0:34:c0:df:46:6f:6b:f8:2f:46: 9f:ff:a6:dd:d9:87:67:47:90:89:c7:9d:14:e9:c3:36:e5:64: 19:4b:4f:8a:36:a9:85:07:f2:b7:c8:21:fd:29:e9:79:0e:47: c3:a5:f0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy19M0RB1yA9KOjw6opSaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYWM0ODY4MDczOThhYzFjZWVjMDkyMWQwNGQ0MDlhNGY3 ZjQ3OWIwHhcNMjUxMjE4MTkwMjQzWhcNMjUxMjE5MTkwMjQzWjAzMTEwLwYDVQQD Eyg2MzE5YmFlMWZmOWRhMmQ5ZTZlNWM3MzI2M2M0ZjQ2YzQzZjQ3MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DQI0sQZFgiHGqLbEdr+obBfRanA xzud+GuZUg5c3pGR4TSvHioftEFipEqjrCsJrjTAaKGbT7RQeWp/RAUPFjwJegqt DGRt6ZiEnrNVn+rUWRSSVWzm+FCO92zDMqnLKey5mULppRaJquEqthtVqe2KTvgP OFUWmZ51DU949OyNOQZexdNm+4XPmCkE23+8auZsYQgLdjussIc4R7m9KjdjMIka XiulRikUHRY72xHzFHT1EmogOq5GzlZMs7IdVHq08Wk/WvD6GCDn4sU0DHu5+m5+ fOagj0HpiBHANjOgSL6HA5eyqjzMTwFj5Be7nodYCAQWiQN3cuV/L6NrUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMZuuH/naLZ5uXHMmPE9GxD9HOaMB8GA1UdIwQY MBaAFCOsSGgHOYrBzuwJIdBNQJpPf0ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2Qt NjE2MDViMjZmODJkLzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2QtNjE2MDViMjZmODJk LzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqg1r1HnX UG0xnqsO34yDaZ6PqEay2hGOOLpLMnpXG4RyuU/X/9D4xDMDxAMmnvlctgJ9+yUx mlEOGHCUyiImuew6hZWTvYtq/ikT7ir2DCbHI5tGAI9YhuvbjNYFdkFYMpbUuAnp IYcnwwT2Qfxp2vsFKQxVH8cXMg9mVCuPl0SidnnUlcNByNwCScvbEwNAELeVhGVm AV7nlJseRqkSS0KjbWNhdwX3/7l2gZohRU4XQihYWw4tOKJNd8NST6RYhmaQ+FDr GNxmG6J/5SqwNMDfRm9r+C9Gn/+m3dmHZ0eQicedFOnDNuVkGUtPijaphQfyt8gh /SnpeQ5Hw6Xw5g== -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:50 2025 by rpki-client