This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json) Hash identifier: 7T9JntG1o4oMImx4QSk/5p8qHDl+Hlpwlz37a/tiDsI= Subject key identifier: 66:68:F1:A8:A0:E2:E8:2E:69:9E:16:5B:8F:1D:73:DC:CE:AC:3A:18 Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065 Certificate serial: 019B4CCD68DFEF5BBD5E1B2B8CF7E86A3ACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft Manifest number: 1799 Signing time: Tue 23 Dec 2025 20:01:28 +0000 Manifest this update: Tue 23 Dec 2025 20:01:28 +0000 Manifest next update: Wed 24 Dec 2025 20:01:28 +0000 Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=) 2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=) 3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: wtOK0IS/UfZpqxnFME9VtIoZwJ5ZPhfPFEkGnBTXz+s=) 4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=) 5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:68:df:ef:5b:bd:5e:1b:2b:8c:f7:e8:6a:3a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Validity Not Before: Dec 23 20:01:28 2025 GMT Not After : Dec 24 20:01:28 2025 GMT Subject: CN=6668f1a8a0e2e82e699e165b8f1d73dcceac3a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:0b:bf:c0:57:39:67:57:d8:e4:06:d3:46: 8e:2f:df:22:7e:f3:59:92:bd:9e:4e:84:e0:6b:5f: f6:a0:bc:3c:b2:91:30:08:8f:fe:e5:0e:23:da:1a: 03:59:03:ae:72:1d:13:19:dd:a8:3d:18:04:e1:ea: 6e:e7:75:17:c7:64:05:19:32:8d:d3:b7:e0:66:6f: 68:55:b8:f3:fc:cd:8d:6b:42:09:a3:2c:2e:18:ba: 9a:9c:54:6d:ac:23:a1:0a:3f:99:56:05:75:c3:7a: db:1b:08:7e:5a:e4:6a:1f:ce:4f:27:60:be:15:50: e6:23:bb:fc:b2:f6:d9:e9:a9:88:c4:93:d5:84:bb: 4e:3a:e4:1b:9e:ff:e6:ad:46:55:45:bf:b1:b1:5f: d9:4e:64:be:42:5c:25:57:b0:c8:9b:7a:e0:1b:ab: 14:80:b9:69:5f:38:8e:51:65:97:1e:56:f4:ae:66: 4c:32:f2:de:d6:ee:7e:c1:3f:82:09:82:2a:d0:9c: f3:a2:14:52:3c:81:0e:10:29:4a:08:89:7e:1f:cf: 51:65:08:a9:aa:07:1a:48:ec:8a:09:98:91:be:87: 11:d6:a9:98:82:29:be:d7:a3:8c:31:63:ff:e2:eb: 21:4f:81:10:3a:08:39:6b:01:3b:f7:50:37:54:64: a1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:F1:A8:A0:E2:E8:2E:69:9E:16:5B:8F:1D:73:DC:CE:AC:3A:18 X509v3 Authority Key Identifier: keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:52:e5:6f:a3:5d:04:02:d4:12:64:5c:2d:3d:2b:be:cd:dd: b7:27:95:3e:62:c6:dc:e2:21:db:5e:d9:cf:00:9d:be:47:0c: f1:d8:b0:08:4f:ef:e3:ec:fe:1b:84:7f:fc:09:f6:c0:a5:03: ce:c2:0f:fb:a8:b7:84:f9:20:0f:d9:1d:73:bf:03:df:c5:48: a1:43:67:87:75:c7:87:3d:2f:5f:69:19:4b:27:55:18:eb:ef: 82:3b:11:f5:61:c3:14:2a:9f:ed:89:86:c2:6d:2f:39:29:b3: fc:04:36:8c:4a:50:25:77:9b:f8:07:ba:4c:fb:8d:42:b9:ad: 4c:4c:30:77:b3:e8:8b:70:61:5d:b5:1e:fc:f3:92:a5:31:1b: e9:aa:ab:07:b2:cc:30:e2:c1:78:0a:c2:59:75:b0:40:ba:73: bd:f1:fc:f6:b5:df:68:88:9e:5e:46:08:12:27:a2:9e:0f:a0: ea:15:3b:c8:4c:7a:7a:b7:d4:85:be:a9:dd:4b:41:2b:cc:a7: ca:9a:49:0d:73:25:b6:7c:0c:d0:b4:7c:74:36:c8:f3:51:b9: 3a:f0:1f:d2:1e:6c:5c:71:6c:9f:8e:99:c1:3f:50:20:fd:ce: 51:e3:d8:80:c2:38:98:3c:47:75:05:92:93:49:d4:8c:1b:e5: bb:cf:f8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzWjf71u9XhsrjPfoajrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk YjAwNjUwHhcNMjUxMjIzMjAwMTI4WhcNMjUxMjI0MjAwMTI4WjAzMTEwLwYDVQQD Eyg2NjY4ZjFhOGEwZTJlODJlNjk5ZTE2NWI4ZjFkNzNkY2NlYWMzYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+8Lv8BXOWdX2OQG00aOL98ifvNZ kr2eToTga1/2oLw8spEwCI/+5Q4j2hoDWQOuch0TGd2oPRgE4epu53UXx2QFGTKN 07fgZm9oVbjz/M2Na0IJoywuGLqanFRtrCOhCj+ZVgV1w3rbGwh+WuRqH85PJ2C+ FVDmI7v8svbZ6amIxJPVhLtOOuQbnv/mrUZVRb+xsV/ZTmS+QlwlV7DIm3rgG6sU gLlpXziOUWWXHlb0rmZMMvLe1u5+wT+CCYIq0JzzohRSPIEOEClKCIl+H89RZQip qgcaSOyKCZiRvocR1qmYgim+16OMMWP/4ushT4EQOgg5awE791A3VGSh/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZo8aig4uguaZ4WW48dc9zOrDoYMB8GA1UdIwQY MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVLlb6Nd BALUEmRcLT0rvs3dtyeVPmLG3OIh217ZzwCdvkcM8diwCE/v4+z+G4R//An2wKUD zsIP+6i3hPkgD9kdc78D38VIoUNnh3XHhz0vX2kZSydVGOvvgjsR9WHDFCqf7YmG wm0vOSmz/AQ2jEpQJXeb+Ae6TPuNQrmtTEwwd7Poi3BhXbUe/POSpTEb6aqrB7LM MOLBeArCWXWwQLpzvfH89rXfaIieXkYIEieing+g6hU7yEx6erfUhb6p3UtBK8yn yppJDXMltnwM0LR8dDbI81G5OvAf0h5sXHFsn46ZwT9QIP3OUePYgMI4mDxHdQWS k0nUjBvlu8/4TQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:03:07 2025 by rpki-client