This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json) Hash identifier: Oj6PESKroqTM+3U9d/QSxLjKDBVa2GzcKzriJ1DPb68= Subject key identifier: 37:E6:B1:58:FF:4E:E9:C8:FF:05:EF:3B:FE:C7:6B:D9:99:AF:96:DF Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f Certificate serial: 019B3F11383DB87B82971C74DC0EDBD11FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft Manifest number: 070A Signing time: Sun 21 Dec 2025 04:00:51 +0000 Manifest this update: Sun 21 Dec 2025 04:00:51 +0000 Manifest next update: Mon 22 Dec 2025 04:00:51 +0000 Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: u4l91PbyCMWh1ywcXVMPrMbBdvXJgpOnJaxLnlGTlwg=) 2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:38:3d:b8:7b:82:97:1c:74:dc:0e:db:d1:1f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f Validity Not Before: Dec 21 04:00:51 2025 GMT Not After : Dec 22 04:00:51 2025 GMT Subject: CN=37e6b158ff4ee9c8ff05ef3bfec76bd999af96df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:f6:57:d0:72:72:41:79:70:25:d5:94:19: d8:a1:e2:48:c0:8a:d2:70:ef:73:ea:81:88:0f:f1: 88:2a:57:91:42:15:a6:d0:d6:94:41:23:2d:e4:f8: e8:e6:c0:ae:18:c0:24:b4:c1:2a:35:0d:25:5e:f6: f1:5f:a7:f2:eb:af:78:0c:96:10:10:7c:93:48:aa: 62:a7:b7:28:3e:7f:d1:83:93:73:44:71:40:fa:bd: 74:41:28:0d:9c:7d:08:53:f5:66:1a:fe:90:55:8b: 18:93:ba:eb:96:39:90:a2:32:e0:23:bf:31:9d:e7: fc:4c:42:da:8b:4a:d6:31:87:53:01:b9:fc:48:c7: ea:67:41:3b:d1:eb:6c:58:06:ae:7a:39:c7:99:5b: 32:a2:86:ef:82:56:ff:fa:59:dc:2a:fb:44:e4:b4: b4:10:88:77:1a:18:b1:de:f0:1c:19:ee:cc:6f:70: 2f:6c:53:27:7b:aa:03:6c:de:07:82:1f:76:e3:e2: 30:84:93:f5:fa:e2:e8:92:bb:00:7a:82:d6:2a:39: b1:d2:86:09:40:7d:07:82:50:c3:5a:e6:3c:de:2c: d7:23:a4:55:ed:04:f7:5d:0c:5a:a2:e8:c9:0b:db: cb:46:9b:c2:d3:57:0a:d5:ad:1c:fa:93:0b:39:9f: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E6:B1:58:FF:4E:E9:C8:FF:05:EF:3B:FE:C7:6B:D9:99:AF:96:DF X509v3 Authority Key Identifier: keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ad:60:23:49:fd:5e:f8:48:f2:ea:16:80:d7:0b:38:85:90: f6:76:7a:82:f3:53:14:87:32:90:90:17:84:db:41:99:60:e9: b8:ee:f4:3e:f3:3d:e1:33:c0:9c:f8:d9:72:69:1e:a0:6d:96: 03:16:a0:2f:71:29:41:5a:d4:00:a8:f3:cd:57:0b:9d:f0:0c: da:a5:9c:d7:65:fa:87:26:54:01:8b:78:6c:2e:a3:bf:c4:a8: 4c:b2:fc:b9:1d:6f:51:be:d6:8a:b6:77:84:82:0b:be:0e:b4: db:0a:a6:24:c4:d9:7d:97:d8:49:b5:60:15:b0:1a:f1:02:f7: 51:b5:d3:61:63:76:41:65:15:d6:f2:92:f9:39:ec:9b:d9:d5: c3:f9:f7:8c:93:01:66:c8:90:8f:1d:24:ee:e5:57:11:59:e6: bd:8c:6c:55:01:2c:17:e6:1d:e9:15:76:33:97:d3:3b:20:e8: 06:b0:14:ee:93:4b:cb:f4:32:1b:02:17:20:94:4b:6c:9b:b8: fa:c5:57:72:a6:34:24:0f:06:d5:2b:8a:07:df:28:80:05:88: 1d:31:f2:ed:16:26:2f:41:90:63:96:d6:42:a2:35:31:10:9b: d0:8f:9f:c7:07:4d:9e:d8:12:2c:98:4a:d9:a0:c0:c6:9d:c0: b1:3f:d9:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETg9uHuClxx03A7b0R/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjI3YWIwZDU1ZjhhZTBkZGE4NmZkZWYxYzM1NzI0ZTE4 ODVlNGYwHhcNMjUxMjIxMDQwMDUxWhcNMjUxMjIyMDQwMDUxWjAzMTEwLwYDVQQD EygzN2U2YjE1OGZmNGVlOWM4ZmYwNWVmM2JmZWM3NmJkOTk5YWY5NmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L32V9ByckF5cCXVlBnYoeJIwIrS cO9z6oGID/GIKleRQhWm0NaUQSMt5Pjo5sCuGMAktMEqNQ0lXvbxX6fy6694DJYQ EHyTSKpip7coPn/Rg5NzRHFA+r10QSgNnH0IU/VmGv6QVYsYk7rrljmQojLgI78x nef8TELai0rWMYdTAbn8SMfqZ0E70etsWAauejnHmVsyoobvglb/+lncKvtE5LS0 EIh3Ghix3vAcGe7Mb3AvbFMne6oDbN4Hgh924+IwhJP1+uLokrsAeoLWKjmx0oYJ QH0HglDDWuY83izXI6RV7QT3XQxaoujJC9vLRpvC01cK1a0c+pMLOZ/CiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfmsVj/TunI/wXvO/7Ha9mZr5bfMB8GA1UdIwQY MBaAFCKyerDVX4rg3ahv3vHDVyThiF5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgt ZGU2NjQ0YzNkYWVkLzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgtZGU2NjQ0YzNkYWVk LzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr61gI0n9 XvhI8uoWgNcLOIWQ9nZ6gvNTFIcykJAXhNtBmWDpuO70PvM94TPAnPjZcmkeoG2W AxagL3EpQVrUAKjzzVcLnfAM2qWc12X6hyZUAYt4bC6jv8SoTLL8uR1vUb7WirZ3 hIILvg602wqmJMTZfZfYSbVgFbAa8QL3UbXTYWN2QWUV1vKS+Tnsm9nVw/n3jJMB ZsiQjx0k7uVXEVnmvYxsVQEsF+Yd6RV2M5fTOyDoBrAU7pNLy/QyGwIXIJRLbJu4 +sVXcqY0JA8G1SuKB98ogAWIHTHy7RYmL0GQY5bWQqI1MRCb0I+fxwdNntgSLJhK 2aDAxp3AsT/ZuQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:23 2025 by rpki-client