This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json) Hash identifier: eBbb4+was68LsnofD9EgLKHPEgFjxjZmVJYOxp1W1iY= Subject key identifier: C7:87:E3:D4:E2:FC:CF:AB:32:63:81:9D:38:57:65:6B:7E:32:1C:F7 Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Certificate serial: 019AF1D1841541072145E32FE8819E317718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft Manifest number: 145D Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: iaZ36QgBzukcVCuTG868F21WhNz3QOFG7LMt+byyJEE=) 2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:84:15:41:07:21:45:e3:2f:e8:81:9e:31:77:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=c787e3d4e2fccfab3263819d3857656b7e321cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:93:08:90:a3:49:a9:c2:92:62:77:75:35: 86:1d:43:ba:23:18:b0:06:ef:56:1e:26:5a:28:b0: c9:43:cd:39:27:74:18:44:64:7b:eb:42:be:ac:8b: 1c:6b:7e:4e:86:6b:a1:44:69:2a:65:da:4f:ff:6f: e2:9e:0e:a8:72:e5:cd:ef:74:ae:05:5e:2b:ca:84: 54:7e:ee:3f:35:22:6a:b2:2e:0e:81:14:3d:aa:9c: e1:00:77:14:7f:45:0d:40:e2:6c:84:58:74:eb:b8: 4b:fe:6e:70:25:b7:6c:17:d0:d5:23:88:c4:81:b9: b7:75:a1:5c:9e:95:18:e2:68:b5:a7:8b:79:a4:e7: 7d:f8:06:2a:f8:48:98:62:0f:c9:c9:df:a2:81:ab: ff:63:3b:2a:78:bd:28:fa:03:f2:54:9d:dc:a0:e0: 4d:fc:92:b3:77:62:ab:88:92:af:a7:7f:00:97:16: 44:b9:df:57:1e:c1:8f:28:c9:6d:30:df:84:fa:11: 3e:9e:ca:b9:74:c4:a8:4c:b6:f0:b4:4b:15:03:e0: 90:10:1a:fa:2e:86:7f:06:ad:cf:7e:0b:7b:44:b0: 1d:4a:44:29:cb:fa:ef:78:f3:57:30:c5:6c:4e:c6: 35:ce:69:ce:ba:71:25:f1:59:6c:4a:62:4c:de:2f: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:87:E3:D4:E2:FC:CF:AB:32:63:81:9D:38:57:65:6B:7E:32:1C:F7 X509v3 Authority Key Identifier: keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c7:66:0c:a6:61:43:d1:4f:cf:e7:29:07:23:dd:47:ad:0a: 1e:f6:6c:4f:23:f3:57:26:f7:0d:ac:c5:49:dd:d1:58:e3:e9: 65:cf:23:ce:bb:9a:00:ba:93:30:34:b6:ba:81:ad:a5:e8:9b: df:2d:56:be:b5:7c:3b:6c:d6:45:0e:c6:ed:6e:7b:e6:5e:14: 58:2d:9c:4b:49:13:31:e2:11:f3:1a:da:ab:94:6a:9f:e5:3f: 0a:76:70:82:3b:08:a9:53:79:14:88:04:b8:85:e7:1a:3f:58: 56:e8:d7:9b:f3:65:72:1e:4a:78:1d:d6:9e:8d:63:86:42:64: 5f:b8:70:dd:fe:1d:dc:b9:fb:ab:49:5c:27:20:a1:63:f2:d8: 4f:8c:a3:37:c7:b1:93:e3:53:8e:6a:0f:af:64:d3:18:8d:55: 90:6f:f7:de:60:14:27:48:85:c5:c2:85:e4:6a:0d:47:9f:65: 65:fd:bc:af:ea:11:99:82:15:7d:2d:99:39:d6:1f:98:f3:5c: 9a:ce:02:23:67:c7:f7:e0:4b:7c:e0:be:45:ae:46:71:bb:d2: 92:69:37:d1:6e:e8:23:ca:b5:8a:ed:4c:ca:be:0e:a4:c9:39: 27:13:92:4a:63:f0:3b:8e:7b:d5:40:e4:e8:bc:e7:4f:0d:d3: 40:5f:91:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YQVQQchReMv6IGeMXcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzE5NjcxMTBjYWJlZWM0YTY2Yjc4MDM3ZTUyYTg3YjJi YzhmNWQwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD EyhjNzg3ZTNkNGUyZmNjZmFiMzI2MzgxOWQzODU3NjU2YjdlMzIxY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0aTCJCjSanCkmJ3dTWGHUO6Ixiw Bu9WHiZaKLDJQ805J3QYRGR760K+rIsca35OhmuhRGkqZdpP/2/ing6ocuXN73Su BV4ryoRUfu4/NSJqsi4OgRQ9qpzhAHcUf0UNQOJshFh067hL/m5wJbdsF9DVI4jE gbm3daFcnpUY4mi1p4t5pOd9+AYq+EiYYg/Jyd+igav/YzsqeL0o+gPyVJ3coOBN /JKzd2KriJKvp38AlxZEud9XHsGPKMltMN+E+hE+nsq5dMSoTLbwtEsVA+CQEBr6 LoZ/Bq3Pfgt7RLAdSkQpy/rvePNXMMVsTsY1zmnOunEl8VlsSmJM3i80HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeH49Ti/M+rMmOBnThXZWt+Mhz3MB8GA1UdIwQY MBaAFIsxlnEQyr7sSma3gDflKoeyvI9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQt YTAxN2MzNjg0NjZkLzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQtYTAxN2MzNjg0NjZk LzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8dmDKZh Q9FPz+cpByPdR60KHvZsTyPzVyb3DazFSd3RWOPpZc8jzruaALqTMDS2uoGtpeib 3y1WvrV8O2zWRQ7G7W575l4UWC2cS0kTMeIR8xraq5Rqn+U/CnZwgjsIqVN5FIgE uIXnGj9YVujXm/Nlch5KeB3Wno1jhkJkX7hw3f4d3Ln7q0lcJyChY/LYT4yjN8ex k+NTjmoPr2TTGI1VkG/33mAUJ0iFxcKF5GoNR59lZf28r+oRmYIVfS2ZOdYfmPNc ms4CI2fH9+BLfOC+Ra5GcbvSkmk30W7oI8q1iu1Myr4OpMk5JxOSSmPwO4571UDk 6LznTw3TQF+RDg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:06 2025 by rpki-client