This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json) Hash identifier: 4B29jO0l67Dc/NuQJumAnYW+8gaRxF+dGa86qVPvzMY= Subject key identifier: 4D:BE:42:D8:63:47:40:FE:D2:29:CF:FD:00:68:C5:0C:39:FC:56:47 Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019B1FBCF8F3106133C8437838BBD280D371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft Manifest number: 14B0 Signing time: Mon 15 Dec 2025 02:00:36 +0000 Manifest this update: Mon 15 Dec 2025 02:00:36 +0000 Manifest next update: Tue 16 Dec 2025 02:00:36 +0000 Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: KBgPXHf0YssBtQXaAWU19DqNv0kllohdvgcbHQ/9EtE=) 2: dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa (hash: Apxi4HVF9cbEKfl01+GMULsLDvfabVWHAPxCuePrSkA=) 3: dkb5gZIob1tpW-aZ36OG6g6eqVg.roa (hash: 6qmzftK2St+wbMPcDJN5VBpBK/rYP12e7Qen5uHlL/g=) 4: mgi-sHB9BvG_JhGVaolwV53PdcI.roa (hash: Mp5ienel094fK7II/BeJb819aKnF3b9Sr1dy+H9Nl2U=) 5: rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa (hash: kAqEU3AZtb+qAVPxKeiCoJPu2fI++dhercqPaQVS1jY=) 6: vAX6cMjo8la6961Io6NKSibrpLs.roa (hash: QGc4CY1otQW+SDtxZLvjRsQAMwHLQ4AN0c1HPwQX50Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bc:f8:f3:10:61:33:c8:43:78:38:bb:d2:80:d3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Dec 15 02:00:36 2025 GMT Not After : Dec 16 02:00:36 2025 GMT Subject: CN=4dbe42d8634740fed229cffd0068c50c39fc5647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:07:9f:3b:21:7d:ae:ad:7b:33:3a:3c:2e:6b: 7a:1a:ff:35:be:87:a4:a8:e9:85:eb:16:06:d1:38: 15:d2:0e:04:2c:6e:95:85:a1:ee:4d:57:48:6a:7b: 84:70:8f:56:46:e3:54:8e:2f:01:8d:6c:b6:14:20: 1f:7b:03:a2:38:83:f5:c1:4c:ce:9e:52:7b:38:37: c6:a8:56:24:58:a5:45:b6:4d:39:3d:20:44:28:63: 33:40:81:be:d8:38:48:dc:b8:83:e9:b9:3a:51:e1: 50:8a:e7:e5:fe:02:81:83:be:1a:91:bf:4e:e6:9f: 88:9f:2b:36:6e:4d:05:f1:8e:5c:d7:fc:8a:2a:55: ec:e5:53:bd:3d:b6:af:b4:3c:a2:0f:2b:71:fe:87: 5c:98:60:61:e8:c1:d9:8d:94:32:5b:a8:87:c7:66: 64:8e:19:25:90:d7:74:c1:a2:bc:1d:66:6a:ff:c7: 98:5f:63:9f:5b:73:42:a5:9f:60:ef:bd:00:d7:6f: 71:15:e9:cd:b2:5c:27:76:9b:78:da:db:95:3c:81: f3:ba:ef:78:39:5e:2b:25:b0:97:93:ab:ba:a1:4e: 24:7a:0f:76:2d:fd:7d:08:13:74:74:00:af:f5:1e: ab:8d:0e:9d:7c:51:7d:da:b2:61:a3:2c:06:ce:a5: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BE:42:D8:63:47:40:FE:D2:29:CF:FD:00:68:C5:0C:39:FC:56:47 X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e6:3e:c7:2c:92:39:f1:3c:0f:f8:9c:7c:7e:b9:22:80:7a: 43:d2:e1:0d:67:54:ef:99:16:46:0b:fe:8c:48:e7:c7:3f:71: d2:a7:9b:c5:bf:cb:7e:a6:46:a7:1c:b6:db:b8:95:83:f9:6a: d1:15:34:51:01:a1:ee:79:c3:49:7a:61:1a:40:f9:12:c1:b7: 73:01:ae:5a:00:9c:85:f8:ad:8e:b7:59:b3:77:67:5d:fd:1f: d9:68:9e:bd:6d:15:a7:25:d1:e0:3a:85:9d:f0:88:ea:15:f0: 24:0c:be:c2:32:d7:ee:da:99:79:ef:f7:ee:9c:5b:43:d6:e7: c7:fa:b9:60:21:2d:0a:10:d0:fb:62:27:ce:e3:f8:7b:7f:1a: f3:d6:0e:b2:19:e8:76:d5:d1:f4:4a:06:d0:28:9e:c2:e2:2d: 64:89:3f:44:75:54:05:09:44:e9:34:19:15:28:23:13:ba:97: 4a:a2:0d:4a:3c:c5:c4:44:d7:9c:70:4e:81:8a:ca:38:a7:a3: 7e:d2:76:a7:59:10:cb:f5:bd:6b:95:ad:1a:58:97:c2:78:b9: 30:a4:dd:6c:de:47:31:bc:f6:47:87:aa:90:c3:7e:66:39:be: 01:55:bb:04:22:00:7f:fc:da:e7:64:d5:44:1a:b1:24:79:99: 4a:62:2e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvPjzEGEzyEN4OLvSgNNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjUxMjE1MDIwMDM2WhcNMjUxMjE2MDIwMDM2WjAzMTEwLwYDVQQD Eyg0ZGJlNDJkODYzNDc0MGZlZDIyOWNmZmQwMDY4YzUwYzM5ZmM1NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QefOyF9rq17Mzo8Lmt6Gv81voek qOmF6xYG0TgV0g4ELG6VhaHuTVdIanuEcI9WRuNUji8BjWy2FCAfewOiOIP1wUzO nlJ7ODfGqFYkWKVFtk05PSBEKGMzQIG+2DhI3LiD6bk6UeFQiufl/gKBg74akb9O 5p+Inys2bk0F8Y5c1/yKKlXs5VO9PbavtDyiDytx/odcmGBh6MHZjZQyW6iHx2Zk jhklkNd0waK8HWZq/8eYX2OfW3NCpZ9g770A129xFenNslwndpt42tuVPIHzuu94 OV4rJbCXk6u6oU4keg92Lf19CBN0dACv9R6rjQ6dfFF92rJhoywGzqWVFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2+QthjR0D+0inP/QBoxQw5/FZHMB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+Y+xyyS OfE8D/icfH65IoB6Q9LhDWdU75kWRgv+jEjnxz9x0qebxb/LfqZGpxy227iVg/lq 0RU0UQGh7nnDSXphGkD5EsG3cwGuWgCchfitjrdZs3dnXf0f2WievW0VpyXR4DqF nfCI6hXwJAy+wjLX7tqZee/37pxbQ9bnx/q5YCEtChDQ+2InzuP4e38a89YOshno dtXR9EoG0CiewuItZIk/RHVUBQlE6TQZFSgjE7qXSqINSjzFxETXnHBOgYrKOKej ftJ2p1kQy/W9a5WtGliXwni5MKTdbN5HMbz2R4eqkMN+Zjm+AVW7BCIAf/za52TV RBqxJHmZSmIuqA== -----END CERTIFICATE-----Generated at Mon Dec 15 09:56:22 2025 by rpki-client