This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json) Hash identifier: qzK5FKZfuJyQ1tTuIMawUm0AGpISkQtOgx8kHT7B70M= Subject key identifier: 23:14:BB:96:BE:82:C1:21:54:6F:56:F0:E8:C1:89:7F:A7:73:3C:D4 Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Certificate serial: 019B3DC7A18B7F9E6CF893C4DA9BB4DF6D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft Manifest number: 075D Signing time: Sat 20 Dec 2025 22:00:51 +0000 Manifest this update: Sat 20 Dec 2025 22:00:51 +0000 Manifest next update: Sun 21 Dec 2025 22:00:51 +0000 Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: 1WE3yF8xpHJGHtQ85Fb6Q3EYi8/nnNpca9GHQDb7nZQ=) 2: xQirsaiZ-HOMXJs3cfu910IL9Do.roa (hash: l1ex6Iykh1HBp5nbi2qzE8pp6Urs1SdDzWGI7oHWqys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a1:8b:7f:9e:6c:f8:93:c4:da:9b:b4:df:6d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Validity Not Before: Dec 20 22:00:51 2025 GMT Not After : Dec 21 22:00:51 2025 GMT Subject: CN=2314bb96be82c121546f56f0e8c1897fa7733cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:f9:00:88:73:72:cd:ee:16:28:70:e7:4a: 0f:c0:e3:5c:d9:d1:68:0f:c8:a8:52:86:f6:b4:e4: 53:8e:5e:75:96:06:17:80:b8:47:05:3c:19:04:80: 9b:58:86:e2:48:84:5b:00:ab:14:a3:6c:08:35:92: aa:62:c2:d5:62:73:18:63:fa:e2:88:80:0c:4f:c8: 5d:f4:46:05:77:62:1e:44:71:9e:68:ff:42:8f:68: 09:05:a5:8f:a7:ac:88:b5:fc:c3:d7:e7:52:3d:37: 1f:3c:db:5d:c6:e0:db:9e:24:d1:0a:ba:f5:eb:31: fb:82:3e:a2:9f:d2:b6:f7:4f:b9:6c:56:d5:db:ca: 85:85:64:3d:4f:0b:0e:23:80:70:fe:8b:d8:6a:db: 64:d3:e6:28:c2:c7:1a:30:cf:95:a5:38:0e:61:18: b8:0b:c8:d8:87:85:b5:52:1c:8e:69:e3:2f:54:0c: 38:5e:30:91:b0:7e:9b:39:2d:7b:1f:bb:b0:90:4a: c1:97:74:ee:34:2b:5e:f2:2c:e4:94:49:17:1e:53: 2d:11:ad:8b:6d:4f:e6:51:91:98:d2:76:03:6f:c0: 23:c2:55:33:8a:58:8c:6a:c9:57:ad:d3:47:4a:73: 2e:01:7b:fb:a3:8c:53:39:d6:96:d0:51:f4:80:76: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:14:BB:96:BE:82:C1:21:54:6F:56:F0:E8:C1:89:7F:A7:73:3C:D4 X509v3 Authority Key Identifier: keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e5:27:76:b8:b6:82:ea:61:e3:51:e4:f7:2e:2f:63:32:c7: a9:58:cc:b3:87:94:39:7f:02:32:61:b4:59:e1:c5:3e:48:cd: 04:d2:a7:86:06:54:85:2a:6f:a3:40:33:73:58:bb:3e:2a:b5: 44:c6:40:2f:36:ec:e6:87:a2:2c:30:74:6f:01:dc:fe:c5:87: a9:75:8e:9d:ab:19:15:59:41:60:43:ee:29:55:70:ec:8d:c1: 53:01:65:5a:79:2e:06:36:3f:d9:3d:f9:e5:49:5d:fa:e9:73: 1c:56:e2:5f:ae:5a:db:97:51:36:42:86:1d:5b:ba:e1:3b:87: 2b:08:d7:40:07:ce:e6:14:ff:c8:16:66:ad:31:10:cc:9f:17: 60:3c:3a:f8:5f:78:03:8c:aa:e7:80:11:c5:77:fb:b1:70:2d: 70:71:87:b2:67:ce:58:59:25:92:fa:68:97:9b:52:c1:cb:95: ab:1e:4e:e5:c7:b0:12:35:04:9d:2a:ae:7a:fc:8e:b5:f6:a8: d3:8f:83:25:7c:f8:4a:e0:8b:09:5b:22:d2:cc:1c:71:1f:8f: 89:f4:0b:ab:fa:3b:4b:db:04:ae:f9:0f:a3:de:fd:ab:9c:ce: 82:f9:af:0a:26:95:f5:d4:ac:89:5d:d9:14:f2:97:93:00:d5: b0:37:23:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6GLf55s+JPE2pu03218MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj MjgzMjkwHhcNMjUxMjIwMjIwMDUxWhcNMjUxMjIxMjIwMDUxWjAzMTEwLwYDVQQD EygyMzE0YmI5NmJlODJjMTIxNTQ2ZjU2ZjBlOGMxODk3ZmE3NzMzY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmP5AIhzcs3uFihw50oPwONc2dFo D8ioUob2tORTjl51lgYXgLhHBTwZBICbWIbiSIRbAKsUo2wINZKqYsLVYnMYY/ri iIAMT8hd9EYFd2IeRHGeaP9Cj2gJBaWPp6yItfzD1+dSPTcfPNtdxuDbniTRCrr1 6zH7gj6in9K290+5bFbV28qFhWQ9TwsOI4Bw/ovYattk0+YowscaMM+VpTgOYRi4 C8jYh4W1UhyOaeMvVAw4XjCRsH6bOS17H7uwkErBl3TuNCte8izklEkXHlMtEa2L bU/mUZGY0nYDb8AjwlUziliMaslXrdNHSnMuAXv7o4xTOdaW0FH0gHaKaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMUu5a+gsEhVG9W8OjBiX+nczzUMB8GA1UdIwQY MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleUndri2 guph41Hk9y4vYzLHqVjMs4eUOX8CMmG0WeHFPkjNBNKnhgZUhSpvo0Azc1i7Piq1 RMZALzbs5oeiLDB0bwHc/sWHqXWOnasZFVlBYEPuKVVw7I3BUwFlWnkuBjY/2T35 5Uld+ulzHFbiX65a25dRNkKGHVu64TuHKwjXQAfO5hT/yBZmrTEQzJ8XYDw6+F94 A4yq54ARxXf7sXAtcHGHsmfOWFklkvpol5tSwcuVqx5O5cewEjUEnSquevyOtfao 04+DJXz4SuCLCVsi0swccR+PifQLq/o7S9sErvkPo979q5zOgvmvCiaV9dSsiV3Z FPKXkwDVsDcj8g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:41:19 2025 by rpki-client