This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json) Hash identifier: L/5lD5vSGwyxXDv61fjclwAKqmysWmd2bAxryH4BjqI= Subject key identifier: A9:A8:AC:F6:1B:7F:36:61:09:DF:A2:23:60:34:57:6B:22:0D:90:57 Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2 Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2 Certificate serial: 019B2287EF8D43C76058299A22D4A11F6C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 15:01:32 +0000 Manifest this update: Mon 15 Dec 2025 15:01:32 +0000 Manifest next update: Tue 16 Dec 2025 15:01:32 +0000 Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: yutiWTtIkdXI2Cs1w+geqRRIKEFapgyg6muz75yBD+U=) 2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=) 3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:ef:8d:43:c7:60:58:29:9a:22:d4:a1:1f:6c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2 Validity Not Before: Dec 15 15:01:32 2025 GMT Not After : Dec 16 15:01:32 2025 GMT Subject: CN=a9a8acf61b7f366109dfa2236034576b220d9057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:48:ad:c1:aa:bb:44:a7:e9:d0:3f:70:3c: ac:04:62:2a:7c:71:fb:df:51:87:e1:45:29:b1:07: 68:68:50:69:81:1d:b3:37:bb:90:9e:21:ea:be:ca: e7:87:e0:85:3f:c9:2c:3c:5b:38:13:f6:81:a2:84: cc:b6:c1:4f:03:b6:d3:90:05:ca:91:0d:8d:77:14: 09:01:74:9e:47:49:0e:27:51:59:9c:47:9b:25:bd: c4:dc:e0:c1:82:ef:37:8c:ae:dc:0b:71:62:ac:3c: 86:86:8f:17:ab:e3:89:c4:9f:48:df:8b:49:78:b5: 81:86:f4:84:01:0c:c8:b0:60:02:de:e8:8d:ff:c9: 23:88:66:30:8b:40:18:f1:c7:dd:b4:02:98:41:0a: 88:b5:33:53:ff:c3:0f:77:b5:81:bf:66:0e:0e:14: 60:7f:f1:8a:4d:4f:f8:62:46:76:08:99:cb:f8:e7: 50:1c:89:b3:32:18:b9:31:8b:38:78:ad:4e:a0:50: 96:88:c7:0a:82:98:fa:a0:c5:26:38:cd:a6:1c:1c: 0c:c5:cf:a2:aa:a8:0d:b9:6a:c1:4e:26:a6:0c:e8: 1b:d1:70:f6:49:ee:f8:04:ec:b9:f0:1a:3c:aa:30: 5d:32:0b:dd:5f:5d:dc:81:40:4e:83:30:6d:09:34: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:AC:F6:1B:7F:36:61:09:DF:A2:23:60:34:57:6B:22:0D:90:57 X509v3 Authority Key Identifier: keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9b:42:66:a4:51:49:0b:b9:8d:c4:ec:8b:54:54:08:b8:30: b1:6b:20:5f:35:98:16:d6:45:fd:c7:ed:86:07:cf:20:e5:ef: 75:ec:16:fc:bc:4c:83:3f:f9:25:a5:c4:a1:af:eb:d8:d6:55: 62:af:2f:28:eb:e6:ec:58:8d:21:5d:3c:78:86:d9:40:53:e6: 47:41:c4:97:26:00:19:ea:9e:23:02:61:dc:50:2d:21:05:64: 3e:1f:e2:f9:a7:92:15:d1:6c:1e:d0:fa:0f:79:5e:cc:dd:13: 20:36:1e:11:18:51:c1:b4:ba:05:b9:fd:67:f6:27:0e:87:af: 5c:f6:eb:04:7b:e8:55:44:ca:bc:f5:3d:3e:3d:9b:db:8e:04: 36:5d:3f:60:bb:77:9c:7a:4d:31:b0:04:ab:88:3b:07:ca:81: 35:88:5c:7c:d3:fe:87:a6:a5:21:92:be:13:d7:c3:d8:70:60: 67:92:1f:89:06:b7:04:66:ba:d4:4e:7b:b8:6f:3f:3a:95:1e: a0:07:b1:7b:94:0e:85:2f:bd:c8:48:6e:e6:4a:fe:4d:d5:65: 9c:a3:84:3a:95:61:ba:14:84:30:7f:2c:4f:52:60:b2:6d:88: be:cb:b8:49:fd:b7:59:a3:63:f6:59:00:7f:49:5e:c8:f6:45: 76:93:9c:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih++NQ8dgWCmaItShH2wqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4 MGM0ZjIwHhcNMjUxMjE1MTUwMTMyWhcNMjUxMjE2MTUwMTMyWjAzMTEwLwYDVQQD EyhhOWE4YWNmNjFiN2YzNjYxMDlkZmEyMjM2MDM0NTc2YjIyMGQ5MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE1IrcGqu0Sn6dA/cDysBGIqfHH7 31GH4UUpsQdoaFBpgR2zN7uQniHqvsrnh+CFP8ksPFs4E/aBooTMtsFPA7bTkAXK kQ2NdxQJAXSeR0kOJ1FZnEebJb3E3ODBgu83jK7cC3FirDyGho8Xq+OJxJ9I34tJ eLWBhvSEAQzIsGAC3uiN/8kjiGYwi0AY8cfdtAKYQQqItTNT/8MPd7WBv2YODhRg f/GKTU/4YkZ2CJnL+OdQHImzMhi5MYs4eK1OoFCWiMcKgpj6oMUmOM2mHBwMxc+i qqgNuWrBTiamDOgb0XD2Se74BOy58Bo8qjBdMgvdX13cgUBOgzBtCTRqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmorPYbfzZhCd+iI2A0V2siDZBXMB8GA1UdIwQY MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt OGI1ZWY0MWQ4YzI1LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1 LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJtCZqRR SQu5jcTsi1RUCLgwsWsgXzWYFtZF/cfthgfPIOXvdewW/LxMgz/5JaXEoa/r2NZV Yq8vKOvm7FiNIV08eIbZQFPmR0HElyYAGeqeIwJh3FAtIQVkPh/i+aeSFdFsHtD6 D3lezN0TIDYeERhRwbS6Bbn9Z/YnDoevXPbrBHvoVUTKvPU9Pj2b244ENl0/YLt3 nHpNMbAEq4g7B8qBNYhcfNP+h6alIZK+E9fD2HBgZ5IfiQa3BGa61E57uG8/OpUe oAexe5QOhS+9yEhu5kr+TdVlnKOEOpVhuhSEMH8sT1Jgsm2Ivsu4Sf23WaNj9lkA f0leyPZFdpOcuA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:30:16 2025 by rpki-client