This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json) Hash identifier: etBGny0yjjLhthcOPRmH9C93E5Hq4clmDsTl16ZzwAQ= Subject key identifier: 75:E5:B9:DF:2B:49:02:10:7A:36:B2:FB:E2:B7:67:5C:9F:69:11:17 Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938 Certificate serial: 019B2552024BD07E2A3093DE804627347CC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft Manifest number: 0ECF Signing time: Tue 16 Dec 2025 04:01:30 +0000 Manifest this update: Tue 16 Dec 2025 04:01:30 +0000 Manifest next update: Wed 17 Dec 2025 04:01:30 +0000 Files and hashes: 1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: WecHH5m2wHUO/tqyE3NMYDa6BA9kXDlVSdYnB6/3pwk=) 2: lMtd9Et7sCIMnXubrUAx71SKNrE.roa (hash: m1edH+G4XaQspTL3esib0CDSyQxr91JPxRsi1poYwKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:02:4b:d0:7e:2a:30:93:de:80:46:27:34:7c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938 Validity Not Before: Dec 16 04:01:30 2025 GMT Not After : Dec 17 04:01:30 2025 GMT Subject: CN=75e5b9df2b4902107a36b2fbe2b7675c9f691117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:d8:89:eb:ad:52:30:db:29:3f:ad:30:db: 87:12:ed:71:98:45:e6:93:6f:29:55:7f:73:5c:ee: da:d2:1f:c7:19:ca:68:ed:5e:39:f2:34:b3:79:e7: 73:70:5b:be:39:b5:df:57:4a:bb:f4:b7:f3:62:c3: 7c:c8:95:40:1d:d8:a1:3b:e3:c9:b3:25:d3:21:7d: 91:0f:81:a7:60:1e:af:3b:3d:3d:12:99:2c:79:50: 11:09:1f:63:07:f0:a3:0c:ae:8c:dd:a0:db:89:29: 4c:2e:7c:98:28:d2:40:e4:64:f6:8b:f0:08:0f:6e: b1:a8:f1:27:8b:4a:e0:39:5f:80:56:f8:3f:d8:3c: a9:0f:08:20:6b:ce:8f:9d:6b:c7:a9:4d:6e:f8:8e: 30:5f:b8:9f:9f:2f:5e:da:46:e3:ae:42:af:4d:da: 94:30:f2:0a:1b:3e:d1:4e:f2:d8:03:eb:2b:9f:7b: a2:4c:17:9c:56:56:d0:1e:cb:d3:02:fc:83:e1:4f: 7f:fb:1d:e9:47:5a:32:71:c6:ee:cf:03:52:e6:c2: d5:70:fc:28:99:99:91:e6:a6:0e:4e:af:52:4c:5c: a1:18:c0:8c:b0:e9:69:91:f8:b3:61:cb:5e:cc:54: 78:43:66:cc:55:f8:7d:b0:ea:1b:d1:f8:f5:f6:6a: 18:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E5:B9:DF:2B:49:02:10:7A:36:B2:FB:E2:B7:67:5C:9F:69:11:17 X509v3 Authority Key Identifier: keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ea:2a:75:11:d1:89:44:2c:19:49:2b:03:d6:7f:3b:d8:5f: a0:ba:f1:ed:19:b4:99:51:ae:db:95:a6:61:19:34:69:71:f6: 09:cc:dc:2d:2c:e0:c0:3a:ab:cd:aa:fe:48:df:9a:8c:b3:ae: ea:31:f8:14:c9:ec:82:d4:6f:17:3d:c4:2e:51:4b:2f:ec:fa: 96:35:64:41:40:68:59:55:17:90:90:c5:d2:16:b2:0a:9f:be: 40:90:f6:98:02:cc:5d:88:7c:e9:e6:27:6c:c4:2e:de:4f:d6: 31:e1:0d:20:c2:ee:23:e6:0d:58:be:57:7e:3c:2d:93:9e:30: 3e:80:76:4d:0c:97:03:1f:c2:46:82:0b:b7:39:e2:d9:7f:66: 98:2a:c0:f1:21:21:a0:e9:08:a3:ac:56:fd:36:60:dd:9c:7e: 0d:a9:27:5d:54:7c:72:f6:99:85:15:b6:c7:99:9e:09:36:be: ed:6e:37:7d:78:6f:55:5f:d6:e7:3c:53:0e:67:84:e4:41:83: af:f1:b6:60:b2:b2:82:40:af:87:d1:eb:b8:06:2c:c1:be:25: b6:15:cf:fb:94:a0:e8:b1:7e:a0:a3:87:21:fc:3c:f6:5f:3e: 74:20:fd:26:e2:68:fc:82:ee:47:65:8e:cf:6d:2c:62:99:6e: e8:7f:cf:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUgJL0H4qMJPegEYnNHzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjhjOTk5YjMwY2UyNDhlNmM0NjhjNzg0ZDY0ZDcyZjk2 M2U5MzgwHhcNMjUxMjE2MDQwMTMwWhcNMjUxMjE3MDQwMTMwWjAzMTEwLwYDVQQD Eyg3NWU1YjlkZjJiNDkwMjEwN2EzNmIyZmJlMmI3Njc1YzlmNjkxMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHYieutUjDbKT+tMNuHEu1xmEXm k28pVX9zXO7a0h/HGcpo7V458jSzeedzcFu+ObXfV0q79LfzYsN8yJVAHdihO+PJ syXTIX2RD4GnYB6vOz09EpkseVARCR9jB/CjDK6M3aDbiSlMLnyYKNJA5GT2i/AI D26xqPEni0rgOV+AVvg/2DypDwgga86PnWvHqU1u+I4wX7ifny9e2kbjrkKvTdqU MPIKGz7RTvLYA+srn3uiTBecVlbQHsvTAvyD4U9/+x3pR1oyccbuzwNS5sLVcPwo mZmR5qYOTq9STFyhGMCMsOlpkfizYctezFR4Q2bMVfh9sOob0fj19moYXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXlud8rSQIQejay++K3Z1yfaREXMB8GA1UdIwQY MBaAFCP4yZmzDOJI5sRox4TWTXL5Y+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTkt M2RmNTQ5YTA2ZDViLzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84NTMyMTgtYWM2ZS00ZjljLWE5NTktM2RmNTQ5YTA2ZDVi LzEvSV9qSm1iTU00a2pteEdqSGhOWk5jdmxqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreoqdRHR iUQsGUkrA9Z/O9hfoLrx7Rm0mVGu25WmYRk0aXH2CczcLSzgwDqrzar+SN+ajLOu 6jH4FMnsgtRvFz3ELlFLL+z6ljVkQUBoWVUXkJDF0hayCp++QJD2mALMXYh86eYn bMQu3k/WMeENIMLuI+YNWL5Xfjwtk54wPoB2TQyXAx/CRoILtzni2X9mmCrA8SEh oOkIo6xW/TZg3Zx+DaknXVR8cvaZhRW2x5meCTa+7W43fXhvVV/W5zxTDmeE5EGD r/G2YLKygkCvh9HruAYswb4lthXP+5Sg6LF+oKOHIfw89l8+dCD9JuJo/ILuR2WO z20sYplu6H/PPg== -----END CERTIFICATE-----Generated at Tue Dec 16 10:40:02 2025 by rpki-client