This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft File: Iu8SfmGVSrmJNlydukuMBkzu2fA.mft (raw, json) Hash identifier: kNp8rCSta1hCHPM3eHTOT9gV7wuOCXu6VycQXTu2ln4= Subject key identifier: 29:9C:59:3E:1F:12:DD:7C:1E:2A:50:F0:2C:96:9F:53:61:A3:95:14 Authority key identifier: 22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0 Certificate issuer: /CN=22ef127e61954ab989365c9dba4b8c064ceed9f0 Certificate serial: 019B3231B1FBD952CD437CF5B5DA9FBE0BB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft Manifest number: 05DA Signing time: Thu 18 Dec 2025 16:01:16 +0000 Manifest this update: Thu 18 Dec 2025 16:01:16 +0000 Manifest next update: Fri 19 Dec 2025 16:01:16 +0000 Files and hashes: 1: Iu8SfmGVSrmJNlydukuMBkzu2fA.crl (hash: sfaDxjePNccYNDuEFbCH0JsOo9wPnS7ogpR2G1/IxCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:b1:fb:d9:52:cd:43:7c:f5:b5:da:9f:be:0b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ef127e61954ab989365c9dba4b8c064ceed9f0 Validity Not Before: Dec 18 16:01:16 2025 GMT Not After : Dec 19 16:01:16 2025 GMT Subject: CN=299c593e1f12dd7c1e2a50f02c969f5361a39514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:c7:0e:f1:db:2d:09:33:3d:28:fc:e1:ad: 49:ed:79:ad:d2:40:03:50:fd:f7:ec:47:53:99:46: 85:be:67:cc:1a:da:d8:51:01:4b:60:1b:a1:8a:b2: f3:a8:56:b7:b0:b4:67:8e:f1:79:ed:63:da:8b:87: 8b:c9:ef:d8:81:9b:c6:3f:91:2f:6c:7d:7f:4f:6b: 12:d7:e8:9b:66:e5:a2:e6:65:13:d4:b2:b1:50:a4: 92:ea:80:28:40:bb:f5:67:65:76:aa:2f:58:49:7f: ee:1c:a2:2a:f3:7b:9f:7e:e3:54:bc:ff:5a:3d:b1: 17:68:54:11:20:d1:82:42:2b:cf:33:6c:4f:78:28: 2c:f9:a3:48:77:49:13:d7:dc:cf:94:7e:3e:1f:0d: 3b:3b:12:db:76:40:7e:01:18:10:da:07:a2:84:98: 0c:ac:83:65:8a:0d:06:64:a4:2f:75:69:27:9f:26: d0:d2:6f:eb:73:cb:59:f8:6e:95:45:a5:40:10:ef: 3c:c1:71:8f:d2:c1:2b:65:24:26:09:09:47:3c:fb: 57:11:71:bc:f2:d0:28:05:e1:74:4b:db:1a:94:fb: 91:82:ef:af:85:d8:04:58:01:f6:8d:13:a7:a4:59: 79:c1:8c:a9:65:39:2b:fe:74:08:cb:31:a4:9d:c3: 2f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:59:3E:1F:12:DD:7C:1E:2A:50:F0:2C:96:9F:53:61:A3:95:14 X509v3 Authority Key Identifier: keyid:22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8e:dd:c9:b2:66:be:9c:33:78:25:7a:22:d9:0b:87:d9:17: a4:4d:ff:17:9d:17:41:0f:f4:d4:aa:6f:3d:36:d1:05:fa:63: 78:8f:77:8e:db:74:ef:b3:d7:0d:39:18:a4:ab:3c:54:7a:84: e2:13:5a:f8:a6:b7:15:89:75:c0:18:04:b9:03:cd:cf:48:a2: 23:9b:dc:e6:14:6d:97:0d:78:c2:f2:59:fa:49:f5:16:16:8a: a1:57:9b:ba:8a:50:85:a6:06:d3:a1:2d:c3:b2:9c:02:07:55: dd:ea:59:4e:03:ec:22:57:98:7d:5d:d3:c4:e5:29:51:6e:e1: e1:73:8b:40:56:87:c1:97:6e:d5:d4:77:e5:f9:93:f3:3a:d0: c7:b5:6e:f7:62:fe:de:c0:8c:82:df:5a:01:1c:41:45:19:af: c2:83:12:0d:92:bb:cd:7d:e1:f3:5b:fb:11:bc:3e:5f:92:4b: b1:b8:4c:f6:e2:e4:2b:5f:81:e2:5e:bf:ab:c8:fd:78:7d:5c: ab:ea:97:09:84:e7:ad:62:37:4d:72:b3:25:8a:9e:92:e7:1e: ce:d8:c7:de:13:ff:e6:6e:90:e4:3b:81:24:55:d1:46:2b:a7: a1:8d:c5:f1:cd:39:7b:72:32:1a:22:a5:ad:0c:66:cb:f8:01: b0:aa:bc:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMbH72VLNQ3z1tdqfvguxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZWYxMjdlNjE5NTRhYjk4OTM2NWM5ZGJhNGI4YzA2NGNl ZWQ5ZjAwHhcNMjUxMjE4MTYwMTE2WhcNMjUxMjE5MTYwMTE2WjAzMTEwLwYDVQQD EygyOTljNTkzZTFmMTJkZDdjMWUyYTUwZjAyYzk2OWY1MzYxYTM5NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxPHDvHbLQkzPSj84a1J7Xmt0kAD UP337EdTmUaFvmfMGtrYUQFLYBuhirLzqFa3sLRnjvF57WPai4eLye/YgZvGP5Ev bH1/T2sS1+ibZuWi5mUT1LKxUKSS6oAoQLv1Z2V2qi9YSX/uHKIq83uffuNUvP9a PbEXaFQRINGCQivPM2xPeCgs+aNId0kT19zPlH4+Hw07OxLbdkB+ARgQ2geihJgM rINlig0GZKQvdWknnybQ0m/rc8tZ+G6VRaVAEO88wXGP0sErZSQmCQlHPPtXEXG8 8tAoBeF0S9salPuRgu+vhdgEWAH2jROnpFl5wYypZTkr/nQIyzGkncMvUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmcWT4fEt18HipQ8CyWn1Nho5UUMB8GA1UdIwQY MBaAFCLvEn5hlUq5iTZcnbpLjAZM7tnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXU4U2ZtR1ZTcm1KTmx5ZHVrdU1Ca3p1MmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84Mzk4MjgtY2U1OS00ZDIyLWE2MjEt OGM2YWExMDY5NWIyLzEvSXU4U2ZtR1ZTcm1KTmx5ZHVrdU1Ca3p1MmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84Mzk4MjgtY2U1OS00ZDIyLWE2MjEtOGM2YWExMDY5NWIy LzEvSXU4U2ZtR1ZTcm1KTmx5ZHVrdU1Ca3p1MmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVY7dybJm vpwzeCV6ItkLh9kXpE3/F50XQQ/01KpvPTbRBfpjeI93jtt077PXDTkYpKs8VHqE 4hNa+Ka3FYl1wBgEuQPNz0iiI5vc5hRtlw14wvJZ+kn1FhaKoVebuopQhaYG06Et w7KcAgdV3epZTgPsIleYfV3TxOUpUW7h4XOLQFaHwZdu1dR35fmT8zrQx7Vu92L+ 3sCMgt9aARxBRRmvwoMSDZK7zX3h81v7Ebw+X5JLsbhM9uLkK1+B4l6/q8j9eH1c q+qXCYTnrWI3TXKzJYqekuceztjH3hP/5m6Q5DuBJFXRRiunoY3F8c05e3IyGiKl rQxmy/gBsKq8KQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:48 2025 by rpki-client