This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json) Hash identifier: lT2ldKDzHvq0DNJ8D1gNBqk1EV87Et+LzMN7SeeGWDY= Subject key identifier: 92:76:41:38:69:33:FC:B0:51:63:EF:02:8E:E1:A6:E0:FE:78:0C:E7 Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042 Certificate serial: 019B3DFEA6B6593DA8C59A7EBCE75BC1B348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft Manifest number: 0687 Signing time: Sat 20 Dec 2025 23:00:57 +0000 Manifest this update: Sat 20 Dec 2025 23:00:57 +0000 Manifest next update: Sun 21 Dec 2025 23:00:57 +0000 Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: zNIMGn2SktvluARhgXhHD3q2V9AM07PzmkxPCW3U2+U=) 2: cP3ZObpESgmIwVeoeUilsXbe7dU.roa (hash: x1z5oGuQZIc9RbQHr2zNPztkI2YQUxkkGtsbysCQzFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a6:b6:59:3d:a8:c5:9a:7e:bc:e7:5b:c1:b3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042 Validity Not Before: Dec 20 23:00:57 2025 GMT Not After : Dec 21 23:00:57 2025 GMT Subject: CN=927641386933fcb05163ef028ee1a6e0fe780ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e7:ab:ef:7d:5f:b9:76:31:80:ac:ab:f8:62: 7b:3f:2c:33:a2:f9:eb:d8:6e:3f:f0:89:88:ec:84: 59:e7:f6:02:c3:fd:d6:bd:6e:3d:70:34:d7:9f:fb: 7a:e3:54:8c:f9:c4:cf:11:bc:0b:40:cb:3d:65:da: 65:d2:0e:3b:d1:a7:c7:ab:47:9a:00:7e:3b:a6:8b: f4:ea:e1:b4:be:e4:1b:f6:47:99:3c:b3:25:bd:4b: f7:bd:39:1e:0d:84:c7:08:4e:1e:fb:b5:22:77:2a: ef:08:d0:6d:78:d8:c8:f1:57:b2:90:d8:cd:c4:e4: 47:c8:a6:44:58:6f:c6:02:68:53:ba:2f:fe:27:6e: 2b:98:b3:da:60:95:c6:3d:ec:e9:7e:1c:73:1f:01: bc:35:93:2b:ea:42:4f:5e:5a:2a:25:9c:7f:f2:dd: b5:86:8d:8d:5b:eb:e1:13:9f:e5:68:80:51:d6:48: c9:93:d7:83:c3:70:66:43:95:61:05:e2:80:61:87: 1c:fe:45:5b:03:30:19:02:d4:12:ca:bd:a0:0b:06: 83:6d:09:7f:fd:eb:be:19:de:52:ca:cb:17:ee:06: 05:4e:48:14:fc:7e:0c:17:90:20:8c:c2:97:60:38: 72:e3:76:84:47:cc:cc:88:3b:3b:bb:27:02:09:d7: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:76:41:38:69:33:FC:B0:51:63:EF:02:8E:E1:A6:E0:FE:78:0C:E7 X509v3 Authority Key Identifier: keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:03:23:70:9a:0e:96:f8:8b:8d:18:10:16:7a:ed:c0:2d:45: 61:c3:cc:d5:d1:68:33:20:be:bf:27:c9:0d:25:ae:02:b5:e1: 70:f2:fa:26:22:5c:f6:c8:fa:4a:45:c6:a9:11:2c:8c:16:af: 85:fc:ce:cd:ae:19:ad:40:8a:06:46:5f:06:57:7b:8b:59:eb: fc:44:39:45:86:09:ad:be:ba:7a:88:ba:ae:a0:8e:6e:41:a1: 66:1f:9f:be:2e:7b:a2:1a:af:1b:28:3a:da:c8:26:ad:e1:f2: 71:47:a3:1f:dd:44:f5:6f:8f:96:18:1b:02:d3:c7:e2:ee:f0: cc:59:63:a3:16:e0:70:eb:32:43:ba:b1:45:c9:d0:50:7f:49: de:09:19:be:47:45:35:fc:7a:73:ea:83:4b:81:2a:21:63:d6: c1:94:db:37:0f:b7:25:12:88:91:47:d3:94:b8:4a:06:31:98: a7:d3:d9:e1:f7:af:6e:26:0b:e1:84:97:e7:df:52:24:48:63: a7:41:cd:2f:8b:39:1d:80:d8:58:7f:af:78:7f:c2:cd:f3:0e: f1:32:f8:47:5b:7d:18:6f:56:ab:b1:da:53:ec:4b:b1:84:76: 59:c7:21:c5:2a:aa:f8:22:53:77:ea:0b:bb:0b:11:7a:bd:2b: 46:2c:e8:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qa2WT2oxZp+vOdbwbNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2NiMmEyMTgxYTdkMzZmNDBlNDE3NThkNjI3ZjcwMWE2 MDIwNDIwHhcNMjUxMjIwMjMwMDU3WhcNMjUxMjIxMjMwMDU3WjAzMTEwLwYDVQQD Eyg5Mjc2NDEzODY5MzNmY2IwNTE2M2VmMDI4ZWUxYTZlMGZlNzgwY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Oer731fuXYxgKyr+GJ7Pywzovnr 2G4/8ImI7IRZ5/YCw/3WvW49cDTXn/t641SM+cTPEbwLQMs9Zdpl0g470afHq0ea AH47pov06uG0vuQb9keZPLMlvUv3vTkeDYTHCE4e+7UidyrvCNBteNjI8VeykNjN xORHyKZEWG/GAmhTui/+J24rmLPaYJXGPezpfhxzHwG8NZMr6kJPXloqJZx/8t21 ho2NW+vhE5/laIBR1kjJk9eDw3BmQ5VhBeKAYYcc/kVbAzAZAtQSyr2gCwaDbQl/ /eu+Gd5SyssX7gYFTkgU/H4MF5AgjMKXYDhy43aER8zMiDs7uycCCdcEcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ2QThpM/ywUWPvAo7hpuD+eAznMB8GA1UdIwQY MBaAFCE8sqIYGn029A5BdY1if3AaYCBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUt M2U1MWJjZDE0NzM2LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUtM2U1MWJjZDE0NzM2 LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQMjcJoO lviLjRgQFnrtwC1FYcPM1dFoMyC+vyfJDSWuArXhcPL6JiJc9sj6SkXGqREsjBav hfzOza4ZrUCKBkZfBld7i1nr/EQ5RYYJrb66eoi6rqCObkGhZh+fvi57ohqvGyg6 2sgmreHycUejH91E9W+PlhgbAtPH4u7wzFljoxbgcOsyQ7qxRcnQUH9J3gkZvkdF Nfx6c+qDS4EqIWPWwZTbNw+3JRKIkUfTlLhKBjGYp9PZ4fevbiYL4YSX599SJEhj p0HNL4s5HYDYWH+veH/CzfMO8TL4R1t9GG9Wq7HaU+xLsYR2WcchxSqq+CJTd+oL uwsRer0rRizojw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:30 2025 by rpki-client