This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json) Hash identifier: GV9hkMhwtwYSuz94f9YOiyoH9nYneS76QUWhyeLg/5Q= Subject key identifier: 38:5D:34:F3:32:7C:26:96:EA:14:7B:32:18:9C:F7:69:D4:34:95:B3 Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3 Certificate serial: 019B552B045BE68F88580B37F151039F9311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 11:00:41 +0000 Manifest this update: Thu 25 Dec 2025 11:00:41 +0000 Manifest next update: Fri 26 Dec 2025 11:00:41 +0000 Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: +3MSHbuwHaPWzvKc55FRJ5S3q++9BQsl80n8L9NEjbc=) 2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:04:5b:e6:8f:88:58:0b:37:f1:51:03:9f:93:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3 Validity Not Before: Dec 25 11:00:41 2025 GMT Not After : Dec 26 11:00:41 2025 GMT Subject: CN=385d34f3327c2696ea147b32189cf769d43495b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:85:12:09:37:56:65:dd:32:7f:fc:4b:89: fe:02:b8:79:63:71:22:67:08:46:57:79:8c:0a:88: 69:e1:20:ca:95:53:84:b4:bb:78:86:3c:3e:e7:9e: f3:60:37:73:89:d5:1a:a1:b5:15:df:d9:13:bd:a7: 49:94:c4:14:e3:13:65:fd:a6:d0:fd:0f:02:30:66: 87:d7:47:7b:dd:af:4b:9e:fc:9c:13:4d:4a:bf:ee: 3d:e0:78:8b:ce:be:83:2e:bf:4a:49:3f:b0:cd:b4: c5:35:2c:9c:3b:20:11:a5:d5:27:f3:f1:00:a1:2a: b2:b9:1a:34:9b:67:ae:8b:06:df:26:6d:05:09:7b: af:14:91:f9:3e:27:84:f4:1a:ed:f3:68:fe:8c:92: 32:cf:b0:79:84:b7:2c:4b:85:dd:e4:ed:de:65:16: 12:72:ae:80:34:d4:1a:72:d5:e9:d5:eb:cc:8b:24: 2c:33:38:ff:d1:fa:5b:97:8d:e9:71:c2:7f:72:4a: 69:21:a7:88:d5:6c:18:da:12:f3:f4:e0:57:31:bc: e7:6d:ef:c6:41:08:2c:63:f1:2e:d3:3e:20:b4:9b: 8d:39:8d:d0:26:19:a7:f5:ad:21:1b:13:a9:aa:f8: 56:3b:91:0d:2b:70:c1:cf:8d:0c:17:4c:77:5b:e6: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5D:34:F3:32:7C:26:96:EA:14:7B:32:18:9C:F7:69:D4:34:95:B3 X509v3 Authority Key Identifier: keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5f:3a:f7:4e:1e:9b:9f:bf:86:ca:b6:da:fd:0f:f1:39:cf: 62:b4:3c:17:d7:9f:6a:58:60:cc:7c:2c:c0:5c:46:c2:b1:bf: 1e:2b:db:65:7e:6b:18:c5:ed:ed:5c:a8:b1:b7:2d:fb:5c:8c: 07:3b:e2:be:5b:3b:bd:98:b0:1d:2d:59:fe:dd:d3:c2:50:95: 5e:e1:f5:77:0d:f4:00:f3:1f:dc:6a:d4:01:b1:6a:b8:37:09: ef:94:8a:4a:80:f7:6b:1a:ba:c2:98:fc:31:60:e4:6e:e0:8e: f8:d2:e0:19:a2:b0:29:49:8b:e0:80:a5:b8:ff:a7:15:53:47: b6:9c:cd:e8:84:34:e6:7f:ae:a2:ba:9d:98:96:e6:ac:b3:cc: e9:94:4e:a5:c3:7e:91:06:05:65:5c:24:86:43:1c:93:1a:93: a3:78:5a:67:cd:6a:8e:e2:d2:03:28:69:7d:e2:f0:1e:2d:d8: 1c:fa:a6:7a:3f:e9:1a:30:72:4f:9b:f5:bb:a4:4e:e3:b1:83: 01:d3:a4:7c:90:20:ae:61:fe:2f:69:b0:2d:aa:c7:1f:0a:b6: fd:bb:fc:a1:4f:bf:ee:2b:ff:f4:45:c1:84:80:ce:d2:20:bb: 0f:f8:ea:1c:ce:06:f2:36:19:78:cc:f0:8b:e3:36:c2:26:e1: 18:b5:44:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKwRb5o+IWAs38VEDn5MRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk NWY1ZjMwHhcNMjUxMjI1MTEwMDQxWhcNMjUxMjI2MTEwMDQxWjAzMTEwLwYDVQQD EygzODVkMzRmMzMyN2MyNjk2ZWExNDdiMzIxODljZjc2OWQ0MzQ5NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNKFEgk3VmXdMn/8S4n+Arh5Y3Ei ZwhGV3mMCohp4SDKlVOEtLt4hjw+557zYDdzidUaobUV39kTvadJlMQU4xNl/abQ /Q8CMGaH10d73a9LnvycE01Kv+494HiLzr6DLr9KST+wzbTFNSycOyARpdUn8/EA oSqyuRo0m2euiwbfJm0FCXuvFJH5PieE9Brt82j+jJIyz7B5hLcsS4Xd5O3eZRYS cq6ANNQactXp1evMiyQsMzj/0fpbl43pccJ/ckppIaeI1WwY2hLz9OBXMbznbe/G QQgsY/Eu0z4gtJuNOY3QJhmn9a0hGxOpqvhWO5ENK3DBz40MF0x3W+YBZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhdNPMyfCaW6hR7Mhic92nUNJWzMB8GA1UdIwQY MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe186904e m5+/hsq22v0P8TnPYrQ8F9efalhgzHwswFxGwrG/HivbZX5rGMXt7Vyosbct+1yM Bzvivls7vZiwHS1Z/t3TwlCVXuH1dw30APMf3GrUAbFquDcJ75SKSoD3axq6wpj8 MWDkbuCO+NLgGaKwKUmL4ICluP+nFVNHtpzN6IQ05n+uorqdmJbmrLPM6ZROpcN+ kQYFZVwkhkMckxqTo3haZ81qjuLSAyhpfeLwHi3YHPqmej/pGjByT5v1u6RO47GD AdOkfJAgrmH+L2mwLarHHwq2/bv8oU+/7iv/9EXBhIDO0iC7D/jqHM4G8jYZeMzw i+M2wibhGLVENA== -----END CERTIFICATE-----Generated at Thu Dec 25 12:30:34 2025 by rpki-client