This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json) Hash identifier: 9cbStYgYaKi5/uWi2AMgYEzi/gES16LUZNuJad1JUmM= Subject key identifier: 3C:DB:0D:CD:DD:DB:9D:37:5B:56:F5:28:0A:3C:9A:0B:F5:F8:04:3E Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8 Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8 Certificate serial: 019B3DC78140354639A803CAC44A3D91945C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 22:00:43 +0000 Manifest this update: Sat 20 Dec 2025 22:00:43 +0000 Manifest next update: Sun 21 Dec 2025 22:00:43 +0000 Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: KZHCZuK9ApVJKDskj2NusdXyjmgOfaIhjqPj3T3Avtw=) 2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:81:40:35:46:39:a8:03:ca:c4:4a:3d:91:94:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8 Validity Not Before: Dec 20 22:00:43 2025 GMT Not After : Dec 21 22:00:43 2025 GMT Subject: CN=3cdb0dcddddb9d375b56f5280a3c9a0bf5f8043e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:73:d5:09:0a:a2:ef:92:00:9b:f4:e6:f6:b8: c4:d5:a8:0a:58:79:c7:3f:89:73:b3:c1:b9:45:ec: 4a:e4:65:30:ba:30:8b:2e:16:8f:cb:47:45:33:6c: b7:97:d9:59:75:8d:c8:8d:86:61:c6:69:36:e8:0d: 92:ae:c1:a9:d8:e7:c3:fd:dc:56:ad:c5:39:65:6f: f5:72:3f:71:e5:64:02:1f:4e:9f:7c:78:73:27:89: 3a:2b:3a:5c:e3:bc:1f:7a:35:d6:e3:30:0e:4c:49: 93:c9:b5:19:c7:25:7d:a2:86:6a:96:c4:a0:4e:8b: ce:46:50:ef:b6:04:97:90:ce:af:d1:5f:f9:b2:ea: 05:cd:6f:e8:e0:38:7d:6c:0a:fd:af:a1:7a:31:75: 2f:48:8f:a6:13:e0:c1:ba:43:96:06:a3:48:84:a3: a1:65:58:da:32:e0:66:5b:f5:d1:22:6f:28:53:b6: 1b:65:18:25:c2:81:c0:12:ac:c3:19:43:4e:67:57: 31:7f:ed:0a:11:15:f3:79:54:7b:ac:a2:8f:f5:4b: 12:25:60:a8:71:84:7a:3c:78:25:1b:ce:53:85:bb: bd:f7:cb:c5:35:fa:02:d8:12:15:ba:66:80:ce:7a: 7e:f1:50:e5:96:89:79:ab:76:8d:fe:1c:f0:24:60: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DB:0D:CD:DD:DB:9D:37:5B:56:F5:28:0A:3C:9A:0B:F5:F8:04:3E X509v3 Authority Key Identifier: keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a4:53:75:6d:2f:88:ae:4c:45:37:68:0c:ea:50:44:ec:64: b8:2d:38:a3:82:d6:7d:82:6e:a6:ce:ab:16:c6:df:80:ea:12: fa:27:f3:1a:eb:79:e6:ed:e6:2c:88:c1:58:9f:f0:ea:90:f2: b8:f3:04:e5:61:c1:57:4b:31:28:3a:0a:ed:e2:ee:e7:11:b6: a6:8d:17:40:26:d1:ff:f0:7f:4b:37:c1:72:17:15:16:cc:0b: 58:dc:e1:c4:bf:ba:80:6e:31:d5:77:84:45:b6:30:bc:a5:4a: 78:2d:b5:13:36:89:6e:23:ed:b1:e8:a9:ee:98:20:31:ac:1d: dd:9c:35:9f:77:96:61:7f:6e:32:92:2d:b2:ca:b9:85:88:63: 6e:3f:47:4e:ee:7b:0c:33:11:de:a2:0d:d9:62:4c:26:1b:39: 6b:95:0b:be:ec:03:15:5a:5b:f1:d0:07:cf:40:a3:78:a0:a8: c2:83:22:02:41:c1:e1:57:93:a4:7c:d6:f1:71:85:46:25:62: 3f:c8:fc:35:e0:83:c2:32:3d:39:07:14:79:56:bc:7d:0a:6f: 88:04:e8:22:7f:07:02:80:56:1f:9d:c7:13:cd:31:c9:a0:f8: 0f:f7:45:50:83:ff:3c:35:a3:15:c8:0f:e4:31:c2:40:7c:c5: a6:30:99:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4FANUY5qAPKxEo9kZRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj ZjU3YzgwHhcNMjUxMjIwMjIwMDQzWhcNMjUxMjIxMjIwMDQzWjAzMTEwLwYDVQQD EygzY2RiMGRjZGRkZGI5ZDM3NWI1NmY1MjgwYTNjOWEwYmY1ZjgwNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HPVCQqi75IAm/Tm9rjE1agKWHnH P4lzs8G5RexK5GUwujCLLhaPy0dFM2y3l9lZdY3IjYZhxmk26A2SrsGp2OfD/dxW rcU5ZW/1cj9x5WQCH06ffHhzJ4k6Kzpc47wfejXW4zAOTEmTybUZxyV9ooZqlsSg TovORlDvtgSXkM6v0V/5suoFzW/o4Dh9bAr9r6F6MXUvSI+mE+DBukOWBqNIhKOh ZVjaMuBmW/XRIm8oU7YbZRglwoHAEqzDGUNOZ1cxf+0KERXzeVR7rKKP9UsSJWCo cYR6PHglG85Thbu998vFNfoC2BIVumaAznp+8VDllol5q3aN/hzwJGB6xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzbDc3d2503W1b1KAo8mgv1+AQ+MB8GA1UdIwQY MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt YjkwYTk0MWVhNTFhLzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKRTdW0v iK5MRTdoDOpQROxkuC04o4LWfYJups6rFsbfgOoS+ifzGut55u3mLIjBWJ/w6pDy uPME5WHBV0sxKDoK7eLu5xG2po0XQCbR//B/SzfBchcVFswLWNzhxL+6gG4x1XeE RbYwvKVKeC21EzaJbiPtseip7pggMawd3Zw1n3eWYX9uMpItssq5hYhjbj9HTu57 DDMR3qIN2WJMJhs5a5ULvuwDFVpb8dAHz0CjeKCowoMiAkHB4VeTpHzW8XGFRiVi P8j8NeCDwjI9OQcUeVa8fQpviAToIn8HAoBWH53HE80xyaD4D/dFUIP/PDWjFcgP 5DHCQHzFpjCZWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:52:53 2025 by rpki-client