This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json) Hash identifier: JTYR9qzRSLck7vS6GXJkhC1BcSu1X55VUqPiG8JlPNk= Subject key identifier: 84:85:0A:92:24:C5:B2:AD:DE:3C:EB:9D:47:11:13:40:B8:84:59:2A Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Certificate serial: 019B6BE9EC1F0206743145570C459F15B060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft Manifest number: 0D1C Signing time: Mon 29 Dec 2025 21:00:50 +0000 Manifest this update: Mon 29 Dec 2025 21:00:50 +0000 Manifest next update: Tue 30 Dec 2025 21:00:50 +0000 Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: skqqtDw7sC+gSfLcPBHblfQABYS6C9DPF9ZmValAvcU=) 2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=) 3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:ec:1f:02:06:74:31:45:57:0c:45:9f:15:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Validity Not Before: Dec 29 21:00:50 2025 GMT Not After : Dec 30 21:00:50 2025 GMT Subject: CN=84850a9224c5b2adde3ceb9d47111340b884592a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:17:d3:2d:6d:67:d2:79:78:11:8f:9f:e8: a8:7f:07:70:1c:4b:ee:7d:6e:fd:7a:16:01:52:e1: 08:87:42:5d:ba:1d:9c:79:b9:ae:b8:50:fd:c1:64: 22:fd:ab:34:83:48:c8:e6:16:bd:0a:88:09:b9:ed: 6f:31:db:af:63:64:c3:fc:69:45:82:de:58:76:f3: c3:1f:ab:45:32:89:e6:bc:0f:4b:53:ac:f1:b5:11: e5:63:bb:36:41:23:53:ed:2d:70:f3:64:1d:3c:fd: ee:1e:a8:a6:bd:d5:f4:05:b1:98:37:ad:9f:08:54: 9e:ce:3b:38:d3:30:d6:d8:ad:b4:99:63:7a:9f:f3: 0c:24:3b:59:d0:9d:06:db:32:62:f6:22:fe:f9:c8: db:58:c3:a9:dd:eb:ed:56:b6:39:61:72:73:5e:c7: 43:eb:a7:7d:dd:19:1c:bc:2c:0f:7d:b6:ef:d8:14: 8d:32:f0:12:2b:d2:ba:c4:18:99:0e:d2:8d:51:13: e0:fe:47:ea:e3:ee:97:88:6c:de:11:36:8b:21:0d: 64:46:39:19:ef:12:c7:41:78:a4:79:c3:9f:bd:4f: 41:01:0d:4c:99:c8:f0:69:33:3d:d9:10:01:d2:b7: a8:e9:55:b7:23:1f:66:a3:68:e1:a8:af:56:b3:40: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:85:0A:92:24:C5:B2:AD:DE:3C:EB:9D:47:11:13:40:B8:84:59:2A X509v3 Authority Key Identifier: keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c0:00:e3:bf:a5:c3:d0:9f:6a:e0:7e:7c:82:b0:4f:b9:2f: 48:66:d6:a2:e0:7d:e3:9c:d5:6c:3b:54:27:49:f5:3b:99:de: 4c:76:ed:a0:74:7f:e8:c2:96:d0:31:3e:2c:38:59:1e:91:68: ee:35:01:a1:ee:6a:b8:fd:fe:1d:44:19:b0:86:db:3a:c5:d3: 8f:83:50:cf:4b:36:4a:f5:78:15:22:90:1b:52:af:3f:a9:fb: a8:4c:99:6d:c5:94:1d:b0:f5:0d:d6:46:39:eb:28:2a:4c:9c: 0d:a2:98:25:fe:04:e9:cb:65:fb:ab:9d:82:a9:a9:b1:09:e7: 90:eb:7b:eb:16:38:99:0b:61:5d:95:ad:e3:89:7e:c1:23:f2: 6b:8e:04:b0:5c:b7:de:cf:72:09:cd:57:ef:66:6e:46:04:cc: 0f:70:92:6a:5b:17:bd:cc:09:ab:4a:1a:98:03:1e:e1:e4:34: 3f:67:5a:c5:6c:34:02:ce:1a:1d:ca:7e:0c:7c:e9:55:95:ec: a0:fa:95:ac:e9:a6:a9:c1:f7:17:f4:41:b7:fc:27:0f:ae:9d: 33:ff:da:62:d0:1f:88:4e:b9:d4:ce:a1:b6:36:9a:82:29:b2: 0d:a7:73:6e:84:5d:6e:8b:b3:ec:c3:a9:da:0e:cd:55:15:ab: 0e:7a:00:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6ewfAgZ0MUVXDEWfFbBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzBlMjYwNjA5MTNjNzU4MTM3NDg4YmZkN2FiMWJmZTll MTBhZTIwHhcNMjUxMjI5MjEwMDUwWhcNMjUxMjMwMjEwMDUwWjAzMTEwLwYDVQQD Eyg4NDg1MGE5MjI0YzViMmFkZGUzY2ViOWQ0NzExMTM0MGI4ODQ1OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud0X0y1tZ9J5eBGPn+iofwdwHEvu fW79ehYBUuEIh0Jduh2cebmuuFD9wWQi/as0g0jI5ha9CogJue1vMduvY2TD/GlF gt5YdvPDH6tFMonmvA9LU6zxtRHlY7s2QSNT7S1w82QdPP3uHqimvdX0BbGYN62f CFSezjs40zDW2K20mWN6n/MMJDtZ0J0G2zJi9iL++cjbWMOp3evtVrY5YXJzXsdD 66d93RkcvCwPfbbv2BSNMvASK9K6xBiZDtKNURPg/kfq4+6XiGzeETaLIQ1kRjkZ 7xLHQXikecOfvU9BAQ1MmcjwaTM92RAB0reo6VW3Ix9mo2jhqK9Ws0Cq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISFCpIkxbKt3jzrnUcRE0C4hFkqMB8GA1UdIwQY MBaAFCMw4mBgkTx1gTdIi/16sb/p4QriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0Yjkt NzA2NzgyY2ZhMDNiLzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0YjktNzA2NzgyY2ZhMDNi LzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcAA47+l w9CfauB+fIKwT7kvSGbWouB945zVbDtUJ0n1O5neTHbtoHR/6MKW0DE+LDhZHpFo 7jUBoe5quP3+HUQZsIbbOsXTj4NQz0s2SvV4FSKQG1KvP6n7qEyZbcWUHbD1DdZG OesoKkycDaKYJf4E6ctl+6udgqmpsQnnkOt76xY4mQthXZWt44l+wSPya44EsFy3 3s9yCc1X72ZuRgTMD3CSalsXvcwJq0oamAMe4eQ0P2daxWw0As4aHcp+DHzpVZXs oPqVrOmmqcH3F/RBt/wnD66dM//aYtAfiE651M6htjaagimyDadzboRdbouz7MOp 2g7NVRWrDnoACQ== -----END CERTIFICATE-----Generated at Tue Dec 30 02:15:38 2025 by rpki-client