This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json) Hash identifier: uMpcC12VHj7U8hWigeO56N3cohGjiqXqU2ECqWut+GQ= Subject key identifier: 0C:22:42:1D:F5:DB:33:5C:72:94:25:C0:21:9C:D8:AD:92:07:A1:D4 Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88 Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188 Certificate serial: 019B4438BB9A16B92D3A525F0977BACA8203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft Manifest number: 05D5 Signing time: Mon 22 Dec 2025 04:02:07 +0000 Manifest this update: Mon 22 Dec 2025 04:02:07 +0000 Manifest next update: Tue 23 Dec 2025 04:02:07 +0000 Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: CVeoUumhP4PNUlYvH3RFaffk2vTsb4gNHF9iHL0AGAA=) 2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:bb:9a:16:b9:2d:3a:52:5f:09:77:ba:ca:82:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188 Validity Not Before: Dec 22 04:02:07 2025 GMT Not After : Dec 23 04:02:07 2025 GMT Subject: CN=0c22421df5db335c729425c0219cd8ad9207a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:1d:b5:9d:00:41:79:a7:ac:36:93:6e:52: a6:43:bc:9f:52:00:1a:2b:18:37:53:e1:1a:52:8a: 98:ea:a9:3c:c0:9c:f5:0d:86:85:8b:dc:4e:bd:22: 70:8d:2b:4f:bf:55:1e:b2:9a:b3:b0:4e:62:9a:06: fe:19:9b:a5:6b:e9:c1:18:1b:23:13:7c:83:21:a8: 5f:9a:69:36:e7:2c:28:a1:3e:0d:cb:f8:5a:a7:01: 28:3e:ba:f8:e1:44:bf:81:d0:bd:e5:05:56:2b:99: 30:3b:60:fb:7c:b4:dd:ca:a5:01:e3:49:14:71:38: cb:e6:8b:94:ca:34:73:9a:54:48:6b:90:72:3f:50: 96:b1:6d:7d:b3:d3:a2:45:2e:5f:59:3d:11:bd:93: 56:86:a5:e0:f5:43:be:a3:6c:cb:14:8f:f8:5f:9d: 51:e9:3a:4f:8e:a3:56:25:d2:ec:1e:85:96:e9:b7: 20:3f:9b:80:7a:d8:9c:b0:36:06:8c:97:e4:f4:37: d2:59:12:ec:03:b9:8c:8a:e6:38:0f:14:bd:27:4a: df:3c:c8:fe:83:d2:1b:4c:27:02:db:c4:6d:58:3a: fa:3b:0d:d4:1c:1b:2e:58:ba:75:f5:5a:c3:bc:c7: f5:df:8b:64:4d:01:5a:97:49:99:52:9d:1b:2e:a2: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:22:42:1D:F5:DB:33:5C:72:94:25:C0:21:9C:D8:AD:92:07:A1:D4 X509v3 Authority Key Identifier: keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:dc:e6:21:54:fd:70:f5:d6:3c:50:09:32:0b:90:62:e8:c0: ac:55:81:1e:dc:b3:95:19:46:7b:8d:b5:d8:f4:32:8f:af:73: 03:d6:7d:26:6a:d4:2b:03:45:16:ac:66:f2:e2:4b:dd:18:0e: 24:75:11:51:03:6c:1f:34:73:61:32:8f:7c:a1:94:d0:6f:51: 56:20:fb:4d:78:ba:14:d4:c8:ab:a7:40:02:4e:0d:fe:ff:c3: b2:dd:57:61:2e:19:6a:d3:22:7a:c6:91:14:50:a7:4c:9e:34: 4a:90:fd:78:ee:f8:e4:0e:19:53:2f:8e:56:e2:61:4b:df:6c: 72:ac:31:a1:f2:da:30:49:09:d5:29:cb:ad:56:67:83:79:33: e4:4a:8d:8e:85:93:30:6b:80:b7:25:cc:cf:73:8f:e9:a4:3d: 66:7b:50:ac:b9:68:e1:3e:48:3b:1f:59:b1:46:f0:7b:a9:18: 43:d3:2b:24:52:c3:bf:f0:ab:0a:d9:e4:35:d4:c9:af:6b:d2: aa:93:6f:bf:3d:2f:85:b4:e9:7f:9d:bb:38:17:db:e5:a1:3e: 71:10:24:18:be:30:ea:38:a9:ae:85:7a:e9:31:8d:14:72:00: 29:a0:93:7a:70:4c:22:dc:61:7a:0e:ab:62:e3:ba:99:49:94: 5b:02:30:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLuaFrktOlJfCXe6yoIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOGRkNmMwNjE4YmJmZWZmMWE4NGM5NGZkNjQxODllMTg0 NWIxODgwHhcNMjUxMjIyMDQwMjA3WhcNMjUxMjIzMDQwMjA3WjAzMTEwLwYDVQQD EygwYzIyNDIxZGY1ZGIzMzVjNzI5NDI1YzAyMTljZDhhZDkyMDdhMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXAdtZ0AQXmnrDaTblKmQ7yfUgAa Kxg3U+EaUoqY6qk8wJz1DYaFi9xOvSJwjStPv1UespqzsE5imgb+GZula+nBGBsj E3yDIahfmmk25ywooT4Ny/hapwEoPrr44US/gdC95QVWK5kwO2D7fLTdyqUB40kU cTjL5ouUyjRzmlRIa5ByP1CWsW19s9OiRS5fWT0RvZNWhqXg9UO+o2zLFI/4X51R 6TpPjqNWJdLsHoWW6bcgP5uAeticsDYGjJfk9DfSWRLsA7mMiuY4DxS9J0rfPMj+ g9IbTCcC28RtWDr6Ow3UHBsuWLp19VrDvMf134tkTQFal0mZUp0bLqJtIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwiQh312zNccpQlwCGc2K2SB6HUMB8GA1UdIwQY MBaAFCGN1sBhi7/v8ahMlP1kGJ4YRbGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEt OWJiNmJiMjgxZWE3LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEtOWJiNmJiMjgxZWE3 LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdzmIVT9 cPXWPFAJMguQYujArFWBHtyzlRlGe4212PQyj69zA9Z9JmrUKwNFFqxm8uJL3RgO JHURUQNsHzRzYTKPfKGU0G9RViD7TXi6FNTIq6dAAk4N/v/Dst1XYS4ZatMiesaR FFCnTJ40SpD9eO745A4ZUy+OVuJhS99scqwxofLaMEkJ1SnLrVZng3kz5EqNjoWT MGuAtyXMz3OP6aQ9ZntQrLlo4T5IOx9ZsUbwe6kYQ9MrJFLDv/CrCtnkNdTJr2vS qpNvvz0vhbTpf527OBfb5aE+cRAkGL4w6jiproV66TGNFHIAKaCTenBMItxheg6r YuO6mUmUWwIwhA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:45:46 2025 by rpki-client