This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json) Hash identifier: ZXdtUUvWLgxGadB1zvwM68hNuoH5AOQFx/ON1fSVshM= Subject key identifier: 41:5A:A0:05:A7:D0:69:D3:5C:DF:35:EB:64:2D:B1:5B:AB:8E:AF:6F Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042 Certificate serial: 019AF2AD965B4705A4D18363F85401AB9BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft Manifest number: 0660 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: XPEHuUmNE9MZYt83ufMG9q0VnyRazdTdFKt/Z6ACeiI=) 2: cP3ZObpESgmIwVeoeUilsXbe7dU.roa (hash: x1z5oGuQZIc9RbQHr2zNPztkI2YQUxkkGtsbysCQzFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:96:5b:47:05:a4:d1:83:63:f8:54:01:ab:9b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=415aa005a7d069d35cdf35eb642db15bab8eaf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:16:c7:05:c8:66:5c:00:70:74:c3:de:c6: c7:2f:58:63:0d:59:4f:ea:cb:a6:b3:46:2a:50:a5: 01:36:8e:65:a8:21:c6:28:3a:86:e6:c3:1f:4d:8b: 4f:81:c8:f2:65:58:d4:f0:9b:df:82:61:ff:78:c9: 0f:1b:55:b7:3e:1d:42:e0:d5:e1:92:c1:f9:5d:b1: 1d:d3:80:17:be:da:9f:2d:7d:9c:01:11:ad:43:0c: 67:9f:5a:5f:0d:13:98:70:c6:24:5b:a6:39:6c:32: 91:4e:1e:8b:5d:75:a6:d4:ca:b3:8b:94:df:d8:b2: dd:a2:a3:40:f1:8a:8c:44:a5:1d:87:eb:e8:72:d1: d8:57:d8:aa:0e:4a:19:65:8c:3e:57:6f:b8:27:2f: fc:34:e1:33:ee:8c:19:95:f1:8d:a0:16:9f:77:33: fb:88:29:53:38:c5:e3:e6:59:fc:61:9e:a9:cc:79: 75:e7:fc:59:02:f8:32:84:c3:1f:89:37:5a:8e:a9: 28:b7:bc:f5:f1:96:ed:a6:bf:34:86:1a:a3:fc:b1: a0:2c:33:8d:b3:e9:ca:96:19:93:37:9c:f9:e2:a2: 77:ec:0b:8e:2e:47:11:f0:41:26:4f:80:78:c4:bc: 3e:da:ed:5c:54:61:21:c2:09:c8:93:07:f5:51:1a: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5A:A0:05:A7:D0:69:D3:5C:DF:35:EB:64:2D:B1:5B:AB:8E:AF:6F X509v3 Authority Key Identifier: keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2f:5c:a9:02:cf:21:13:a7:12:bf:75:dd:bd:d7:ac:42:62: 30:fb:39:85:68:a3:f7:1a:cb:f6:19:2e:14:02:13:c1:0e:d6: 78:68:8b:28:f7:7e:41:96:6f:20:05:73:fa:cd:33:bc:37:30: 54:93:f5:36:61:3f:ba:d1:36:67:3c:0f:b5:4c:fb:8f:f6:45: 3f:d8:14:c3:8a:2e:20:04:54:c6:cf:c1:31:e7:e8:78:6e:dc: 34:94:31:7a:07:1e:5a:28:b9:78:11:e5:62:62:e8:7d:e8:d3: c6:91:48:8a:c9:3e:63:f6:03:0e:eb:81:23:51:76:51:09:4d: 6f:1b:12:8d:cd:58:ab:c8:97:ca:e3:bf:10:7e:ea:2d:3b:4a: 1c:b0:e6:ef:4f:c7:87:75:4b:46:34:31:c3:e1:1f:87:54:51: 9f:16:dd:a6:50:3a:42:ba:27:16:46:bd:21:0e:1e:61:28:7c: 08:31:e1:fd:d4:84:64:81:c1:27:c1:1b:f4:b5:42:3d:45:b1: 61:fc:a7:86:e8:5f:a3:a5:66:88:48:6f:f3:5c:01:7e:da:ee: df:bf:62:57:fc:71:ef:43:4e:48:28:2e:7d:32:34:42:1b:b3: 52:bf:4d:bc:49:e9:0b:d3:43:9a:62:6c:e1:79:f6:8b:d7:76: c3:4d:fc:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZZbRwWk0YNj+FQBq5vkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2NiMmEyMTgxYTdkMzZmNDBlNDE3NThkNjI3ZjcwMWE2 MDIwNDIwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg0MTVhYTAwNWE3ZDA2OWQzNWNkZjM1ZWI2NDJkYjE1YmFiOGVhZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBoWxwXIZlwAcHTD3sbHL1hjDVlP 6sums0YqUKUBNo5lqCHGKDqG5sMfTYtPgcjyZVjU8JvfgmH/eMkPG1W3Ph1C4NXh ksH5XbEd04AXvtqfLX2cARGtQwxnn1pfDROYcMYkW6Y5bDKRTh6LXXWm1Mqzi5Tf 2LLdoqNA8YqMRKUdh+voctHYV9iqDkoZZYw+V2+4Jy/8NOEz7owZlfGNoBafdzP7 iClTOMXj5ln8YZ6pzHl15/xZAvgyhMMfiTdajqkot7z18Zbtpr80hhqj/LGgLDON s+nKlhmTN5z54qJ37AuOLkcR8EEmT4B4xLw+2u1cVGEhwgnIkwf1URqP3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFaoAWn0GnTXN8162QtsVurjq9vMB8GA1UdIwQY MBaAFCE8sqIYGn029A5BdY1if3AaYCBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUt M2U1MWJjZDE0NzM2LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUtM2U1MWJjZDE0NzM2 LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy9cqQLP IROnEr913b3XrEJiMPs5hWij9xrL9hkuFAITwQ7WeGiLKPd+QZZvIAVz+s0zvDcw VJP1NmE/utE2ZzwPtUz7j/ZFP9gUw4ouIARUxs/BMefoeG7cNJQxegceWii5eBHl YmLofejTxpFIisk+Y/YDDuuBI1F2UQlNbxsSjc1Yq8iXyuO/EH7qLTtKHLDm70/H h3VLRjQxw+Efh1RRnxbdplA6QronFka9IQ4eYSh8CDHh/dSEZIHBJ8Eb9LVCPUWx Yfynhuhfo6VmiEhv81wBftru379iV/xx70NOSCgufTI0QhuzUr9NvEnpC9NDmmJs 4Xn2i9d2w0384A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:08 2025 by rpki-client