This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json) Hash identifier: un4xZa61mDri9/vQLJXRe4CvmqflBra2Cvy/EJHJGwY= Subject key identifier: 3C:29:9B:40:95:0B:C2:EA:E1:6B:CF:6A:40:F2:E9:FA:92:98:61:F5 Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9 Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9 Certificate serial: 019B5D893EDCA6B924188721DCE968EFA8FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft Manifest number: 13BC Signing time: Sat 27 Dec 2025 02:00:34 +0000 Manifest this update: Sat 27 Dec 2025 02:00:34 +0000 Manifest next update: Sun 28 Dec 2025 02:00:34 +0000 Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: G20zRL3n/pfjoys4IplrbF9yXLMer7sjULIZDs8ZeGA=) 2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:3e:dc:a6:b9:24:18:87:21:dc:e9:68:ef:a8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9 Validity Not Before: Dec 27 02:00:34 2025 GMT Not After : Dec 28 02:00:34 2025 GMT Subject: CN=3c299b40950bc2eae16bcf6a40f2e9fa929861f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:ff:28:7b:26:a6:c4:c9:04:88:a2:fc:b4: 93:ef:6a:dd:e5:0b:19:6e:88:2b:5f:31:ff:a4:a4: fb:28:7b:4e:29:bb:80:c5:4f:6f:8f:72:b6:38:9d: 41:d5:90:ad:eb:ae:03:c2:d8:7f:5e:1d:f2:80:71: 11:e8:c8:af:0d:b8:b4:54:18:57:89:47:61:27:75: 0f:d0:98:00:ce:fd:e8:5c:be:8c:fe:53:a6:1b:1b: b4:76:cc:36:bc:41:24:71:c7:23:6f:35:1a:4c:24: a2:4f:63:f0:a5:af:27:c3:e0:08:0c:b3:f9:86:7c: 58:5e:14:ea:2d:49:87:bf:62:01:1c:dd:e8:96:20: 7f:b3:3d:c7:f0:72:e5:cf:df:0f:e7:e4:3a:ea:2e: 23:3d:e3:57:72:29:2d:5d:15:f3:b6:f1:9f:e3:6d: 95:e3:58:46:15:f3:98:34:ca:55:a4:4d:9e:d7:97: 4f:6a:9f:f0:79:13:cd:09:2e:e3:ba:0b:de:23:57: 4e:4c:a9:b6:b1:c3:9b:af:78:4c:25:4c:fd:59:e0: cf:c3:d3:6b:60:ab:1a:ef:df:ba:dd:c6:c3:32:2e: 10:59:00:85:bb:8d:5b:f7:02:3b:56:9f:a8:d6:0a: bb:ca:b7:cb:60:09:9a:6e:ac:02:0a:05:80:78:28: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:29:9B:40:95:0B:C2:EA:E1:6B:CF:6A:40:F2:E9:FA:92:98:61:F5 X509v3 Authority Key Identifier: keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:82:9d:1a:78:61:4b:70:61:9f:60:da:31:c6:ed:7b:bf:57: 7e:bb:66:5a:ae:5e:4d:07:b8:ca:2b:ae:34:14:36:5b:57:b7: 87:b1:20:aa:83:08:d0:e3:c0:6e:a4:b5:5d:e7:70:d1:ed:89: e9:58:88:01:1b:10:7c:f6:be:bd:54:43:2b:c8:5b:1b:ee:bf: e8:35:cb:67:ae:bf:8b:38:ab:03:83:7d:ce:75:a8:e9:6e:89: 41:4d:d5:8f:14:29:00:1a:01:62:7d:52:ea:56:11:56:ee:b0: bf:d2:3e:7f:4c:10:d2:9b:91:4d:ea:85:da:7e:c0:ef:bb:63: 78:fe:ca:df:d7:22:18:46:09:da:9c:ce:1d:b0:da:03:96:69: 26:90:ad:44:01:e4:59:79:8b:71:9a:72:8f:3c:83:13:06:d9: 37:59:2e:84:21:dd:99:1e:88:2f:3f:d7:57:05:41:88:20:0a: ad:66:bb:14:ef:dc:17:0d:bb:bc:ee:44:60:ae:17:50:08:1f: 49:8f:2c:85:1f:b9:99:60:0b:e1:7c:09:f6:fa:51:8a:3d:5c: 4d:2d:ae:29:a4:75:f5:8b:ce:05:0c:f4:2f:f6:8c:2b:d6:35: db:57:ef:0b:57:de:67:69:cb:cc:c5:8e:1c:33:bc:99:ec:a9: b2:2c:44:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiT7cprkkGIch3Olo76j/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOGRhN2ZmNTc2ZTc4ZGMyMzRlYjc0Y2JmMDczMDc2YzFm N2ViYzkwHhcNMjUxMjI3MDIwMDM0WhcNMjUxMjI4MDIwMDM0WjAzMTEwLwYDVQQD EygzYzI5OWI0MDk1MGJjMmVhZTE2YmNmNmE0MGYyZTlmYTkyOTg2MWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs67/KHsmpsTJBIii/LST72rd5QsZ bogrXzH/pKT7KHtOKbuAxU9vj3K2OJ1B1ZCt664Dwth/Xh3ygHER6MivDbi0VBhX iUdhJ3UP0JgAzv3oXL6M/lOmGxu0dsw2vEEkcccjbzUaTCSiT2Pwpa8nw+AIDLP5 hnxYXhTqLUmHv2IBHN3oliB/sz3H8HLlz98P5+Q66i4jPeNXciktXRXztvGf422V 41hGFfOYNMpVpE2e15dPap/weRPNCS7jugveI1dOTKm2scObr3hMJUz9WeDPw9Nr YKsa79+63cbDMi4QWQCFu41b9wI7Vp+o1gq7yrfLYAmabqwCCgWAeChKQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwpm0CVC8Lq4WvPakDy6fqSmGH1MB8GA1UdIwQY MBaAFCGNp/9XbnjcI063TL8HMHbB9+vJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4Zjkt ZjhhZWQzMGQ1NGMzLzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4ZjktZjhhZWQzMGQ1NGMz LzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIKdGnhh S3Bhn2DaMcbte79XfrtmWq5eTQe4yiuuNBQ2W1e3h7EgqoMI0OPAbqS1Xedw0e2J 6ViIARsQfPa+vVRDK8hbG+6/6DXLZ66/izirA4N9znWo6W6JQU3VjxQpABoBYn1S 6lYRVu6wv9I+f0wQ0puRTeqF2n7A77tjeP7K39ciGEYJ2pzOHbDaA5ZpJpCtRAHk WXmLcZpyjzyDEwbZN1kuhCHdmR6ILz/XVwVBiCAKrWa7FO/cFw27vO5EYK4XUAgf SY8shR+5mWAL4XwJ9vpRij1cTS2uKaR19YvOBQz0L/aMK9Y121fvC1feZ2nLzMWO HDO8meypsixEkw== -----END CERTIFICATE-----Generated at Sat Dec 27 09:13:56 2025 by rpki-client