This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json) Hash identifier: Ic69BxdvVewvYjBtUrzviVLOJXz7T+FBOLmOda5JyJc= Subject key identifier: 09:AC:1F:CB:94:87:13:53:DF:8E:D2:23:4E:89:39:0E:4B:B7:5B:06 Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065 Certificate serial: 019B3D59CE161A1A818AF38060BC98F34453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 20:00:54 +0000 Manifest this update: Sat 20 Dec 2025 20:00:54 +0000 Manifest next update: Sun 21 Dec 2025 20:00:54 +0000 Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=) 2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=) 3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: eUbFcbGwgCS2Xiwh4W4qHzoHSc2q2xiA/zMkqmBG66w=) 4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=) 5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ce:16:1a:1a:81:8a:f3:80:60:bc:98:f3:44:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Validity Not Before: Dec 20 20:00:54 2025 GMT Not After : Dec 21 20:00:54 2025 GMT Subject: CN=09ac1fcb94871353df8ed2234e89390e4bb75b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:c6:39:0f:9c:88:0f:ae:ce:d5:2a:20:89: 6b:96:02:81:0c:e8:db:de:5f:77:64:a0:79:86:a3: 4b:cd:1d:79:5e:55:63:6b:a0:1c:c8:9e:2b:ae:7e: 1e:64:61:91:24:eb:ae:d4:5f:01:64:10:aa:7b:bf: 80:81:5b:bb:a9:c1:66:ff:fe:a9:03:4b:7a:ce:40: 11:30:14:1c:64:03:4f:2b:e7:2b:a3:4e:05:6a:19: c6:5c:66:0a:49:a8:8c:4c:55:0c:71:b1:0f:3f:94: 68:73:10:e1:5e:32:be:23:ff:ab:ac:0e:66:f5:b7: 0d:40:d8:07:db:6a:5e:36:37:95:52:3f:86:c6:97: ba:b7:82:40:c2:38:33:34:e6:c0:f4:89:7a:53:18: 97:e3:f4:04:d5:72:62:ee:44:c6:79:82:c6:c4:0a: a9:6f:82:8d:2b:1c:59:c2:37:8c:66:7c:3f:dc:ed: 86:d2:b9:50:b0:b2:a4:d9:a3:3e:90:d9:57:92:1d: 18:72:16:2c:35:fe:4a:e7:3f:fa:b6:a8:5c:de:65: 64:87:6d:90:e1:b8:8b:1c:bc:a9:93:f8:f2:18:bb: fc:0a:cc:04:c4:05:f6:25:d5:b9:07:89:2b:a6:14: 11:77:74:9c:b9:c9:df:47:5a:81:c3:55:6f:9c:e4: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AC:1F:CB:94:87:13:53:DF:8E:D2:23:4E:89:39:0E:4B:B7:5B:06 X509v3 Authority Key Identifier: keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ff:c8:29:0d:2b:26:3b:fe:be:39:38:db:ce:09:8d:12:dd: 52:91:60:71:17:80:60:be:74:cf:c1:bc:f7:a7:31:ca:09:e1: de:a2:a7:88:0f:9d:eb:c2:a0:8b:83:1f:f8:7d:e3:ef:7b:d4: 47:6b:a2:5d:53:f4:e3:2a:8d:16:42:0c:cd:a8:c0:7c:cb:57: 0c:ea:96:d7:68:c0:dc:77:7d:89:65:e2:d2:24:eb:c0:3a:09: 4d:c5:42:64:b6:3f:70:05:83:80:e1:07:9d:28:fc:b4:ba:ba: 9e:1d:e2:89:55:eb:fe:47:9e:e4:62:2d:89:19:94:ca:c8:ec: 8e:1e:93:a7:c6:eb:e7:69:99:fe:47:c6:fa:c2:d6:62:16:cb: 0a:ce:85:1a:4a:12:f9:28:3d:b9:56:a4:de:9f:e7:fb:b5:5b: 6e:fc:9d:22:75:d7:bd:a2:4c:e9:61:9a:fc:86:ee:d4:82:db: 1b:20:6a:4a:76:97:05:a7:ff:6f:80:8b:4d:9d:1e:9e:4e:48: ea:72:86:2f:f3:65:e4:a3:f5:28:c7:be:a8:cb:61:71:ba:5f: 1c:f4:1b:0d:09:22:a7:a0:5c:f5:fa:27:41:a6:eb:a4:a4:43: 4f:d0:1f:de:f7:3a:22:a4:e9:8d:3a:68:4b:28:08:3c:7c:e0: f1:65:c0:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wc4WGhqBivOAYLyY80RTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk YjAwNjUwHhcNMjUxMjIwMjAwMDU0WhcNMjUxMjIxMjAwMDU0WjAzMTEwLwYDVQQD EygwOWFjMWZjYjk0ODcxMzUzZGY4ZWQyMjM0ZTg5MzkwZTRiYjc1YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqajGOQ+ciA+uztUqIIlrlgKBDOjb 3l93ZKB5hqNLzR15XlVja6AcyJ4rrn4eZGGRJOuu1F8BZBCqe7+AgVu7qcFm//6p A0t6zkARMBQcZANPK+cro04FahnGXGYKSaiMTFUMcbEPP5RocxDhXjK+I/+rrA5m 9bcNQNgH22peNjeVUj+Gxpe6t4JAwjgzNObA9Il6UxiX4/QE1XJi7kTGeYLGxAqp b4KNKxxZwjeMZnw/3O2G0rlQsLKk2aM+kNlXkh0YchYsNf5K5z/6tqhc3mVkh22Q 4biLHLypk/jyGLv8CswExAX2JdW5B4krphQRd3ScucnfR1qBw1VvnOSErwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmsH8uUhxNT347SI06JOQ5Lt1sGMB8GA1UdIwQY MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf/IKQ0r Jjv+vjk4284JjRLdUpFgcReAYL50z8G896cxygnh3qKniA+d68Kgi4Mf+H3j73vU R2uiXVP04yqNFkIMzajAfMtXDOqW12jA3Hd9iWXi0iTrwDoJTcVCZLY/cAWDgOEH nSj8tLq6nh3iiVXr/kee5GItiRmUysjsjh6Tp8br52mZ/kfG+sLWYhbLCs6FGkoS +Sg9uVak3p/n+7VbbvydInXXvaJM6WGa/Ibu1ILbGyBqSnaXBaf/b4CLTZ0enk5I 6nKGL/Nl5KP1KMe+qMthcbpfHPQbDQkip6Bc9fonQabrpKRDT9Af3vc6IqTpjTpo SygIPHzg8WXAdg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:40 2025 by rpki-client