This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft File: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft (raw, json) Hash identifier: 4NCTvH9Zf08rIPkhzoEE0qdk7SFGShMseE2Qsb4WOXI= Subject key identifier: D6:D2:75:04:A5:72:14:D6:F9:B4:B8:1B:A5:A3:17:AA:E1:8D:8A:67 Authority key identifier: 23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98 Certificate issuer: /CN=232872f431ada9b6826c5f0897ec4e5342092e98 Certificate serial: 019AF0BF05F584510CC62F82F4F1AB25338D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft Manifest number: 04C1 Signing time: Fri 05 Dec 2025 23:00:41 +0000 Manifest this update: Fri 05 Dec 2025 23:00:41 +0000 Manifest next update: Sat 06 Dec 2025 23:00:41 +0000 Files and hashes: 1: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl (hash: aJDo+vk9wGFR4TrADB/HJAmyTGrgAXqApLCtEe4+1Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:05:f5:84:51:0c:c6:2f:82:f4:f1:ab:25:33:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232872f431ada9b6826c5f0897ec4e5342092e98 Validity Not Before: Dec 5 23:00:41 2025 GMT Not After : Dec 6 23:00:41 2025 GMT Subject: CN=d6d27504a57214d6f9b4b81ba5a317aae18d8a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:9a:13:00:0c:2c:0d:9d:8f:c5:7b:6d:1d: ad:ac:3f:f7:e1:d9:be:83:94:1d:4e:3c:ba:51:58: 8a:27:51:ec:d4:6b:1d:e7:61:12:87:95:4f:7a:a7: ab:c2:f8:34:4c:a1:4b:c7:b0:6c:45:80:64:fb:35: a9:f5:4e:88:97:75:59:ab:8f:ed:9a:b9:40:81:3c: c3:32:ee:fb:25:1b:ef:ec:6b:f2:c0:6e:f6:34:35: 67:8a:e7:58:06:aa:96:fa:ba:a6:1f:b9:49:eb:15: 22:f6:84:9b:2d:b2:23:55:4b:c6:0b:d6:70:94:d6: 89:84:b6:02:31:45:ee:ad:26:b7:90:f5:95:22:75: 52:ef:fa:0f:55:dc:9d:2f:6e:07:52:04:de:ff:46: 52:f9:a0:88:b5:e2:ae:53:01:20:d9:02:ec:1e:9c: d0:29:a2:89:af:96:63:42:f4:04:dc:ec:73:56:85: 1f:10:7a:f2:d6:18:1b:b6:5d:19:df:21:3c:c1:67: 71:f7:51:4a:33:ee:85:6b:82:ad:27:8d:f9:30:07: d6:0a:5c:59:36:e3:e1:0c:bc:52:2c:7d:b2:c3:72: 82:50:26:89:36:f6:f2:d6:ea:85:cf:1e:53:8e:9a: b7:9b:9e:f5:c1:1b:d6:40:20:88:a6:48:dd:30:20: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D2:75:04:A5:72:14:D6:F9:B4:B8:1B:A5:A3:17:AA:E1:8D:8A:67 X509v3 Authority Key Identifier: keyid:23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6d:a4:9e:57:14:90:43:fe:b4:54:15:4c:8c:fe:9f:62:98: 9f:72:63:26:fe:17:98:78:b0:17:12:e1:7e:89:a5:38:23:1e: d6:66:3f:7e:1f:35:c2:53:c3:0b:f8:51:00:e1:14:6c:b5:57: 02:45:b9:7d:89:46:b2:57:61:3b:b2:7f:45:6b:c8:e6:94:9f: ed:d0:70:4c:5e:94:64:48:e1:5b:e4:54:32:df:b9:1e:50:5b: f2:ee:0a:94:c0:f3:09:44:6a:bd:1b:b8:d8:a7:b8:01:de:e7: 06:ef:ce:17:b5:0a:5b:84:de:58:48:23:46:8d:1f:29:aa:e5: 1e:45:82:35:8b:98:c7:8c:c9:48:76:38:b2:c0:93:f0:a4:c2: 92:33:ae:9b:9e:51:19:5c:a7:50:32:8d:fa:ce:c3:1f:f3:90: 99:fd:3c:a8:56:b9:93:3d:09:64:69:20:e4:bb:2e:8f:69:78: 04:d1:c3:47:17:62:e5:e0:e9:17:88:50:39:8c:45:d1:63:35: 43:ca:08:13:70:5f:71:0c:cc:2b:e1:f2:92:7e:36:5b:fc:38: 8b:31:33:a5:76:57:8c:c4:ee:66:9c:d5:a8:a9:ad:25:b8:a7: 1f:98:38:f1:d9:84:e2:b0:b6:a5:65:6c:b4:24:8d:cb:c4:e4: 69:b9:5b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwX1hFEMxi+C9PGrJTONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjg3MmY0MzFhZGE5YjY4MjZjNWYwODk3ZWM0ZTUzNDIw OTJlOTgwHhcNMjUxMjA1MjMwMDQxWhcNMjUxMjA2MjMwMDQxWjAzMTEwLwYDVQQD EyhkNmQyNzUwNGE1NzIxNGQ2ZjliNGI4MWJhNWEzMTdhYWUxOGQ4YTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoaaEwAMLA2dj8V7bR2trD/34dm+ g5QdTjy6UViKJ1Hs1Gsd52ESh5VPeqerwvg0TKFLx7BsRYBk+zWp9U6Il3VZq4/t mrlAgTzDMu77JRvv7GvywG72NDVniudYBqqW+rqmH7lJ6xUi9oSbLbIjVUvGC9Zw lNaJhLYCMUXurSa3kPWVInVS7/oPVdydL24HUgTe/0ZS+aCIteKuUwEg2QLsHpzQ KaKJr5ZjQvQE3OxzVoUfEHry1hgbtl0Z3yE8wWdx91FKM+6Fa4KtJ435MAfWClxZ NuPhDLxSLH2yw3KCUCaJNvby1uqFzx5Tjpq3m571wRvWQCCIpkjdMCA+BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbSdQSlchTW+bS4G6WjF6rhjYpnMB8GA1UdIwQY MBaAFCMocvQxram2gmxfCJfsTlNCCS6YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXloeTlER3RxYmFDYkY4SWwteE9VMElKTHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NDcyZjktYjQwMy00MmUwLWIzMDYt NzFhYTYzMTI1MTI4LzEvSXloeTlER3RxYmFDYkY4SWwteE9VMElKTHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83NDcyZjktYjQwMy00MmUwLWIzMDYtNzFhYTYzMTI1MTI4 LzEvSXloeTlER3RxYmFDYkY4SWwteE9VMElKTHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG2knlcU kEP+tFQVTIz+n2KYn3JjJv4XmHiwFxLhfomlOCMe1mY/fh81wlPDC/hRAOEUbLVX AkW5fYlGsldhO7J/RWvI5pSf7dBwTF6UZEjhW+RUMt+5HlBb8u4KlMDzCURqvRu4 2Ke4Ad7nBu/OF7UKW4TeWEgjRo0fKarlHkWCNYuYx4zJSHY4ssCT8KTCkjOum55R GVynUDKN+s7DH/OQmf08qFa5kz0JZGkg5Lsuj2l4BNHDRxdi5eDpF4hQOYxF0WM1 Q8oIE3BfcQzMK+Hykn42W/w4izEzpXZXjMTuZpzVqKmtJbinH5g48dmE4rC2pWVs tCSNy8Tkablbag== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:23 2025 by rpki-client