This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json) Hash identifier: 0at1H6hVkeP/+wVGtyeIcLEnMbzad+KHnY1+gBSdnpU= Subject key identifier: 87:D3:23:5F:19:1D:74:78:3C:30:AA:E4:E6:0E:E0:22:D3:E3:54:B5 Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08 Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08 Certificate serial: 019B424A9AAEA41D4423C42D701B1B2B86F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft Manifest number: 0574 Signing time: Sun 21 Dec 2025 19:02:23 +0000 Manifest this update: Sun 21 Dec 2025 19:02:23 +0000 Manifest next update: Mon 22 Dec 2025 19:02:23 +0000 Files and hashes: 1: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: uXw4Z2BTbTaj2bmZHDuojBvuT/cZXM1iOEi//TqhfF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:9a:ae:a4:1d:44:23:c4:2d:70:1b:1b:2b:86:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08 Validity Not Before: Dec 21 19:02:23 2025 GMT Not After : Dec 22 19:02:23 2025 GMT Subject: CN=87d3235f191d74783c30aae4e60ee022d3e354b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:d3:a4:c2:a0:58:56:1e:39:18:f1:42:68: e6:45:30:c2:99:d4:a2:e5:35:1e:d7:00:99:52:75: 5e:b6:58:17:56:65:dc:d4:af:ff:02:fb:1d:99:d0: d5:0b:90:bc:22:01:2e:82:ec:ab:3e:40:a0:25:20: 1d:af:db:4e:b4:1c:95:92:3c:e9:dc:0f:7f:ee:fc: 9d:c3:d9:37:a8:e4:89:40:e8:1e:04:37:58:41:55: 4e:a9:46:c7:08:35:81:ff:83:03:f4:63:ab:ee:79: 5d:72:11:5a:a2:d7:ab:e2:cd:74:3d:04:b3:c7:ed: 0f:20:ca:ea:cb:d7:e4:c8:fe:37:47:6b:a2:91:dc: 3c:c3:8d:de:b6:cc:de:92:b8:56:42:3b:e4:3d:ef: 4b:21:51:3c:53:f8:ae:bb:ee:0f:48:1f:3d:91:ae: 5c:ef:10:58:fa:0a:c4:80:67:c5:c1:3b:fd:b9:fe: ed:72:c0:4d:ed:7e:2e:eb:ec:7a:11:57:0b:1a:17: 3f:0d:34:62:b7:e9:f1:75:4a:7e:6d:90:93:5e:15: ca:d2:eb:0a:da:ce:a9:e5:6a:39:41:32:8d:00:a0: 16:04:9b:44:03:56:b3:61:61:30:fb:46:fb:96:af: 36:bb:e6:a1:e6:62:6a:16:94:2a:94:a3:dd:1d:47: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D3:23:5F:19:1D:74:78:3C:30:AA:E4:E6:0E:E0:22:D3:E3:54:B5 X509v3 Authority Key Identifier: keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:92:81:27:2c:b6:6c:e2:aa:66:12:b6:ad:1f:77:ba:cf:11: 76:3c:d4:a2:99:5f:e5:61:d0:31:c0:06:96:bc:09:37:4d:44: 3e:2d:b7:c6:14:93:04:99:7a:ac:2c:5a:af:06:fc:5c:df:cf: ee:95:d0:cf:69:40:73:b6:7c:84:31:9c:2f:01:09:68:be:65: 57:03:fd:75:e1:51:a6:c4:36:36:b7:b4:82:e8:1d:cb:ea:38: ae:2b:1b:73:c4:ba:0c:82:1d:76:e5:5d:5f:34:ea:c0:a7:ff: 2b:9d:fa:97:78:a8:46:b8:99:ae:59:5a:f5:cb:fc:9a:11:a2: eb:1f:3a:a5:ba:4b:09:a7:db:19:79:ed:b2:1a:ee:a9:79:69: d3:0e:16:c6:1b:d1:b8:7b:a8:be:05:5c:18:6c:61:9f:3e:55: 9f:20:42:a8:6f:2c:46:e5:c0:be:b8:c0:51:bb:a5:59:5a:83: 66:06:dc:1b:1b:12:c6:30:e2:31:dd:79:1a:61:47:bc:a7:04: 1b:62:a2:42:3f:c2:59:9e:7f:63:46:98:1c:90:3f:9c:13:cc: b9:36:61:8b:e0:e5:f8:76:8f:70:ad:9b:4b:84:0f:be:57:19: 99:51:1d:f9:2d:86:41:0d:2c:74:58:e2:e5:26:cf:a8:06:0a: e0:18:52:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSpqupB1EI8QtcBsbK4bwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4M2NhZmY4MDdiMzI5NTJkNjhjNzFhYWYwMWI5MTk4NGFk MWVhMDgwHhcNMjUxMjIxMTkwMjIzWhcNMjUxMjIyMTkwMjIzWjAzMTEwLwYDVQQD Eyg4N2QzMjM1ZjE5MWQ3NDc4M2MzMGFhZTRlNjBlZTAyMmQzZTM1NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kjTpMKgWFYeORjxQmjmRTDCmdSi 5TUe1wCZUnVetlgXVmXc1K//AvsdmdDVC5C8IgEuguyrPkCgJSAdr9tOtByVkjzp 3A9/7vydw9k3qOSJQOgeBDdYQVVOqUbHCDWB/4MD9GOr7nldchFaoter4s10PQSz x+0PIMrqy9fkyP43R2uikdw8w43etszekrhWQjvkPe9LIVE8U/iuu+4PSB89ka5c 7xBY+grEgGfFwTv9uf7tcsBN7X4u6+x6EVcLGhc/DTRit+nxdUp+bZCTXhXK0usK 2s6p5Wo5QTKNAKAWBJtEA1azYWEw+0b7lq82u+ah5mJqFpQqlKPdHUfCAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfTI18ZHXR4PDCq5OYO4CLT41S1MB8GA1UdIwQY MBaAFIg8r/gHsylS1oxxqvAbkZhK0eoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEt OWNlZDVlNWVmZjBmLzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEtOWNlZDVlNWVmZjBm LzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpKBJyy2 bOKqZhK2rR93us8RdjzUoplf5WHQMcAGlrwJN01EPi23xhSTBJl6rCxarwb8XN/P 7pXQz2lAc7Z8hDGcLwEJaL5lVwP9deFRpsQ2Nre0gugdy+o4risbc8S6DIIdduVd XzTqwKf/K536l3ioRriZrlla9cv8mhGi6x86pbpLCafbGXntshruqXlp0w4WxhvR uHuovgVcGGxhnz5VnyBCqG8sRuXAvrjAUbulWVqDZgbcGxsSxjDiMd15GmFHvKcE G2KiQj/CWZ5/Y0aYHJA/nBPMuTZhi+Dl+HaPcK2bS4QPvlcZmVEd+S2GQQ0sdFji 5SbPqAYK4BhSNg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:25 2025 by rpki-client