This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json) Hash identifier: /msi2ggdI0Yz3hecG3rLzhXRDqTDkqhkDes+C3RFiQs= Subject key identifier: 7A:37:0B:7B:FA:B3:AB:A0:50:E1:2A:90:09:6A:DC:F3:C5:55:E4:78 Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042 Certificate serial: 019B3C0FE8573B0FF764321316FBFE5A51EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft Manifest number: 0686 Signing time: Sat 20 Dec 2025 14:00:34 +0000 Manifest this update: Sat 20 Dec 2025 14:00:34 +0000 Manifest next update: Sun 21 Dec 2025 14:00:34 +0000 Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: oK5QoCPnWjcgf/1i+StiFSJY5eNSMYN9lo7zhXaBzSs=) 2: cP3ZObpESgmIwVeoeUilsXbe7dU.roa (hash: x1z5oGuQZIc9RbQHr2zNPztkI2YQUxkkGtsbysCQzFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:e8:57:3b:0f:f7:64:32:13:16:fb:fe:5a:51:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042 Validity Not Before: Dec 20 14:00:34 2025 GMT Not After : Dec 21 14:00:34 2025 GMT Subject: CN=7a370b7bfab3aba050e12a90096adcf3c555e478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:3f:a6:00:8d:61:4f:69:fd:6e:31:df:7f: d4:d8:00:b3:09:30:73:5e:71:5a:7e:0f:5f:23:f7: b7:32:4b:47:d7:48:24:d8:f5:94:23:9d:64:eb:5c: 1f:8d:94:aa:3b:e7:f7:69:92:96:d6:40:74:4c:a6: 63:b8:c8:1a:c6:16:39:f3:4d:a2:6c:1b:c5:3f:71: 36:f7:d2:a4:4e:f3:35:7b:6b:d4:a3:dc:0c:47:ad: 12:91:de:69:85:78:05:64:59:65:4e:49:c5:1c:b1: cd:86:2a:36:b1:b1:42:a8:00:9b:d3:f8:d2:9f:f1: 5a:09:49:65:1b:f1:09:bf:49:8a:cc:cc:64:f7:0f: de:90:f0:ff:cf:6e:c9:a0:f4:50:36:ec:39:fb:46: 00:45:16:e3:cf:6d:6f:31:e6:0d:24:08:0c:ff:31: 95:4a:b7:77:6a:7f:31:44:3d:1f:01:ad:bc:8f:0d: 33:29:ca:e2:bf:de:24:40:41:6e:a3:56:a0:7b:f8: bc:f5:8c:c8:66:08:d0:1d:18:8b:84:fb:56:06:39: 48:78:a8:00:14:54:ef:6a:4f:ec:d2:67:53:e5:a9: 54:6e:11:04:19:5a:dd:9a:1d:18:d4:2d:52:93:d9: 56:bd:76:ba:f8:81:4c:10:77:cf:d6:90:34:8c:6b: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:37:0B:7B:FA:B3:AB:A0:50:E1:2A:90:09:6A:DC:F3:C5:55:E4:78 X509v3 Authority Key Identifier: keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:04:63:b4:74:bc:8f:b4:7c:1f:bd:72:fa:f0:65:f5:3b:17: e6:69:7e:5f:50:e5:65:c4:74:f0:a4:15:11:6a:6e:98:7a:5c: 99:42:dd:52:f4:36:b4:66:91:53:4b:b3:62:92:11:73:eb:fb: 7f:bb:28:e6:8f:34:7d:4f:32:1c:e9:7d:db:9a:bd:56:10:88: 8b:b7:75:b4:ab:50:8c:bb:c5:4d:3f:a8:f7:2a:4e:b8:28:7a: fb:74:3b:e1:f6:37:fd:e0:81:20:fc:a3:41:a7:c7:6f:3f:57: c2:db:09:63:9b:49:a3:5b:fb:2d:58:d3:68:8b:0e:7c:78:69: 41:fb:40:30:0a:ab:57:08:74:16:32:09:37:2c:9e:6d:81:3b: ed:57:1d:8d:0d:c8:d8:ef:76:5d:ba:a2:38:e9:8e:c0:13:df: b3:fd:fc:fc:8a:19:0b:7c:dc:0a:58:2d:9a:85:52:47:77:4b: 4d:69:ba:ca:ae:0a:12:51:c1:04:9c:02:65:b0:ee:06:7b:27: 4d:40:1b:6b:7b:93:24:a0:d1:a1:0f:1c:da:d2:e0:90:3b:bc: ca:51:ca:18:80:d2:17:93:a6:38:6a:48:98:8c:1d:68:f8:1b: c9:86:16:eb:9e:75:3e:e5:57:5b:55:9d:47:e4:59:e3:a9:d2: 0e:ca:5b:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+hXOw/3ZDITFvv+WlHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2NiMmEyMTgxYTdkMzZmNDBlNDE3NThkNjI3ZjcwMWE2 MDIwNDIwHhcNMjUxMjIwMTQwMDM0WhcNMjUxMjIxMTQwMDM0WjAzMTEwLwYDVQQD Eyg3YTM3MGI3YmZhYjNhYmEwNTBlMTJhOTAwOTZhZGNmM2M1NTVlNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbo/pgCNYU9p/W4x33/U2ACzCTBz XnFafg9fI/e3MktH10gk2PWUI51k61wfjZSqO+f3aZKW1kB0TKZjuMgaxhY5802i bBvFP3E299KkTvM1e2vUo9wMR60Skd5phXgFZFllTknFHLHNhio2sbFCqACb0/jS n/FaCUllG/EJv0mKzMxk9w/ekPD/z27JoPRQNuw5+0YARRbjz21vMeYNJAgM/zGV Srd3an8xRD0fAa28jw0zKcriv94kQEFuo1age/i89YzIZgjQHRiLhPtWBjlIeKgA FFTvak/s0mdT5alUbhEEGVrdmh0Y1C1Sk9lWvXa6+IFMEHfP1pA0jGt+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo3C3v6s6ugUOEqkAlq3PPFVeR4MB8GA1UdIwQY MBaAFCE8sqIYGn029A5BdY1if3AaYCBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUt M2U1MWJjZDE0NzM2LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUtM2U1MWJjZDE0NzM2 LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwRjtHS8 j7R8H71y+vBl9TsX5ml+X1DlZcR08KQVEWpumHpcmULdUvQ2tGaRU0uzYpIRc+v7 f7so5o80fU8yHOl925q9VhCIi7d1tKtQjLvFTT+o9ypOuCh6+3Q74fY3/eCBIPyj QafHbz9XwtsJY5tJo1v7LVjTaIsOfHhpQftAMAqrVwh0FjIJNyyebYE77VcdjQ3I 2O92XbqiOOmOwBPfs/38/IoZC3zcClgtmoVSR3dLTWm6yq4KElHBBJwCZbDuBnsn TUAba3uTJKDRoQ8c2tLgkDu8ylHKGIDSF5OmOGpImIwdaPgbyYYW6551PuVXW1Wd R+RZ46nSDspb3g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:45 2025 by rpki-client