This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json) Hash identifier: zCdbmQngcixuu+nLfuqJnTEGuWvCj1GS97e2WveZ3Yo= Subject key identifier: A7:7F:AA:92:B0:C8:2B:64:08:5A:23:3D:72:12:11:0D:04:1D:EC:0F Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e Certificate serial: 019B522A40624D93713B040800BC3635F648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft Manifest number: 0BBE Signing time: Wed 24 Dec 2025 21:00:59 +0000 Manifest this update: Wed 24 Dec 2025 21:00:59 +0000 Manifest next update: Thu 25 Dec 2025 21:00:59 +0000 Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: k/g0V9h0T1Gm3W7zV1HgQ4N0q/blFrYvb6UdFRBhRXo=) 2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:40:62:4d:93:71:3b:04:08:00:bc:36:35:f6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233adc97f9826262007f46286591830df58fc55e Validity Not Before: Dec 24 21:00:59 2025 GMT Not After : Dec 25 21:00:59 2025 GMT Subject: CN=a77faa92b0c82b64085a233d7212110d041dec0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:0f:ab:91:b7:32:99:2c:e3:20:d6:2b:68: 11:16:70:84:83:b4:b3:70:e9:d3:1e:e9:61:ef:30: 9d:47:03:f0:73:3b:09:bb:c6:c5:3e:2f:79:e7:fe: 51:9f:13:e5:4a:1d:cb:c4:4c:2f:e5:d2:b7:33:01: 11:8a:a8:42:dd:45:95:5c:56:e1:98:28:33:29:1a: 73:32:f3:ec:3d:9f:b4:ea:31:13:87:9e:23:45:c3: 0e:70:44:cb:ad:73:58:ef:86:66:39:14:36:b0:5c: b7:1a:aa:9b:ef:40:1d:b1:96:4f:b2:2b:0a:2d:0f: 03:fd:c7:cd:12:e8:5a:d5:c3:d5:09:02:86:aa:64: f6:1f:b3:e2:ee:fb:eb:ea:2f:13:19:dc:a5:d4:63: f1:1e:cc:ed:9a:19:34:0a:48:ec:65:5a:05:a7:6b: dc:ed:00:9b:8b:e0:58:13:20:e6:6b:89:6d:ae:dc: fb:0c:c5:46:e4:c6:f0:aa:bb:81:92:4b:b1:62:74: 39:51:52:10:8c:f5:bf:d0:f1:73:e9:a9:04:1f:72: 7d:12:9b:76:c9:e7:44:fe:89:18:63:85:d9:1b:dd: 4d:10:14:de:36:43:7d:79:4e:9a:4c:21:31:07:55: 23:ee:28:03:d3:42:e7:9c:7d:57:52:02:39:14:e2: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7F:AA:92:B0:C8:2B:64:08:5A:23:3D:72:12:11:0D:04:1D:EC:0F X509v3 Authority Key Identifier: keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:18:8e:cb:86:d0:db:e0:05:8b:0e:97:df:e1:70:18:31:61: 22:93:05:e5:db:21:22:9c:b4:b2:10:86:6b:22:ee:68:a2:19: a9:56:10:f2:91:d3:bf:ea:47:fc:ae:c2:7b:8a:c6:63:5d:c2: 6e:0c:87:8a:92:be:dd:70:26:67:32:2f:2c:c1:4c:59:40:c5: 4c:ea:0c:b3:1d:5f:00:bb:bf:00:bc:bb:de:2e:9c:5d:8b:21: 4b:06:31:d7:af:03:03:4c:91:2a:75:84:97:4e:0a:d0:0a:d7: 53:34:72:77:af:9d:21:49:55:11:56:39:b7:b1:25:38:41:70: 1a:12:aa:ab:54:65:f6:bf:89:18:f8:ce:8f:63:2f:17:93:40: 59:e8:4e:5b:3b:1e:a3:39:4d:e5:d6:27:db:35:97:59:7a:f3: 81:70:b3:f3:0f:fb:43:27:2b:83:d1:25:9f:50:80:58:38:92: f8:cf:68:f5:72:5e:c6:5c:2f:a3:06:d9:91:18:cf:e1:82:b3: 25:26:45:dd:1a:12:1f:88:9f:02:dd:2d:41:5f:40:cf:62:78: 98:b8:00:62:1e:6b:4c:24:c8:3a:cc:07:19:ed:71:6f:74:91: 75:46:da:70:cb:eb:c9:b4:70:a9:82:16:26:06:6a:87:c6:e1: 53:4f:f6:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKkBiTZNxOwQIALw2NfZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2FkYzk3Zjk4MjYyNjIwMDdmNDYyODY1OTE4MzBkZjU4 ZmM1NWUwHhcNMjUxMjI0MjEwMDU5WhcNMjUxMjI1MjEwMDU5WjAzMTEwLwYDVQQD EyhhNzdmYWE5MmIwYzgyYjY0MDg1YTIzM2Q3MjEyMTEwZDA0MWRlYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXMPq5G3Mpks4yDWK2gRFnCEg7Sz cOnTHulh7zCdRwPwczsJu8bFPi955/5RnxPlSh3LxEwv5dK3MwERiqhC3UWVXFbh mCgzKRpzMvPsPZ+06jETh54jRcMOcETLrXNY74ZmORQ2sFy3Gqqb70AdsZZPsisK LQ8D/cfNEuha1cPVCQKGqmT2H7Pi7vvr6i8TGdyl1GPxHsztmhk0CkjsZVoFp2vc 7QCbi+BYEyDma4ltrtz7DMVG5MbwqruBkkuxYnQ5UVIQjPW/0PFz6akEH3J9Ept2 yedE/okYY4XZG91NEBTeNkN9eU6aTCExB1Uj7igD00LnnH1XUgI5FOIYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd/qpKwyCtkCFojPXISEQ0EHewPMB8GA1UdIwQY MBaAFCM63Jf5gmJiAH9GKGWRgw31j8VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWIt NDU1YTEyYmM4MzAyLzEvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWItNDU1YTEyYmM4MzAy LzEvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxiOy4bQ 2+AFiw6X3+FwGDFhIpMF5dshIpy0shCGayLuaKIZqVYQ8pHTv+pH/K7Ce4rGY13C bgyHipK+3XAmZzIvLMFMWUDFTOoMsx1fALu/ALy73i6cXYshSwYx168DA0yRKnWE l04K0ArXUzRyd6+dIUlVEVY5t7ElOEFwGhKqq1Rl9r+JGPjOj2MvF5NAWehOWzse ozlN5dYn2zWXWXrzgXCz8w/7Qycrg9Eln1CAWDiS+M9o9XJexlwvowbZkRjP4YKz JSZF3RoSH4ifAt0tQV9Az2J4mLgAYh5rTCTIOswHGe1xb3SRdUbacMvrybRwqYIW JgZqh8bhU0/23A== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:51 2025 by rpki-client