This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json) Hash identifier: 6qWRw992Zp1b4YCEEUsGJw1i9ObcJCgzYLGrwWy4e1c= Subject key identifier: BF:7C:1D:62:3D:E7:BB:E2:FB:4F:8B:08:0B:68:A5:15:68:E3:99:A0 Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df Certificate serial: 019AF31CCC3C5D0C6AE0CC23D9B9CA47EC2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft Manifest number: 0809 Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: sttem+NMz1/xc/MqbqNYF1zrILoE7+YEnEF99J1KFX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cc:3c:5d:0c:6a:e0:cc:23:d9:b9:ca:47:ec:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=bf7c1d623de7bbe2fb4f8b080b68a51568e399a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:b9:3c:94:cf:f3:c6:5f:17:b5:c3:13:6a: 5a:e1:79:70:fc:91:79:60:10:0e:62:43:9c:3a:4f: 01:6b:56:f2:1d:ec:85:99:8b:43:dd:6d:4f:1a:db: 7d:c6:9f:57:91:be:25:5e:40:8e:35:fe:b8:77:e4: b2:81:a6:f6:9a:2a:05:78:41:2a:7a:c7:46:a4:52: c6:f7:50:7f:67:13:f7:69:d6:3a:96:e2:5e:e5:13: a7:ad:e3:e8:65:8f:ba:98:2d:0b:14:7d:cd:22:4d: e0:9a:5c:7b:34:d3:16:8c:b5:be:af:28:aa:c1:e4: ae:b4:99:58:ad:7c:9a:a2:4c:d2:c8:46:16:44:e8: 38:76:89:bb:c4:97:f1:19:bd:94:5a:74:7f:37:2f: f4:22:c3:e6:9f:05:cc:5b:a3:c1:34:4b:3b:d9:92: 95:17:40:46:82:a1:e4:60:c3:fa:60:b0:ee:da:5a: ae:d0:5a:06:ff:36:9c:28:80:5a:79:14:db:e5:ea: 01:fa:56:05:f4:c9:60:66:0c:4d:b1:26:c3:3b:f7: d8:e3:db:a7:45:78:c1:2d:46:9b:cf:31:01:99:18: d8:b3:97:b7:14:1e:dc:a9:d1:74:0d:17:dc:80:73: 82:98:05:32:35:55:e6:cd:42:b3:fc:d6:05:ed:5b: 96:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7C:1D:62:3D:E7:BB:E2:FB:4F:8B:08:0B:68:A5:15:68:E3:99:A0 X509v3 Authority Key Identifier: keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e5:c1:af:4e:6f:2b:18:b3:ec:2a:46:26:e6:8b:5b:1c:b0: 0d:fd:50:a7:03:1b:1d:7f:d6:20:75:3f:67:09:98:ce:bb:05: 07:3f:e4:f5:9f:49:ee:21:85:a8:2e:a8:c1:64:f9:c9:41:4c: c4:bb:5b:1d:e5:03:63:16:24:fb:37:c5:31:17:42:36:e8:38: 50:eb:ca:b3:33:b2:21:3d:bb:81:bd:37:23:4f:b5:5b:e0:07: 7e:6b:2e:e6:1b:a2:29:dd:7b:5e:36:23:fa:fc:9e:fa:09:48: 0d:43:02:f4:bd:1e:3a:ea:49:35:29:c6:2e:bd:5b:5f:f5:22: 71:73:4a:2e:ec:40:1c:ce:1f:3d:ac:79:26:f1:4e:cc:b4:82: 59:c6:16:12:31:f5:fe:17:87:0a:e3:38:5c:43:be:3b:98:20: c2:c1:89:e0:80:dd:93:5b:45:fa:0d:c1:82:33:46:c6:02:57: 1b:d9:63:b6:6d:78:6a:dd:29:bd:37:cd:34:66:ec:c5:cc:6e: 8f:50:67:47:28:4f:a5:42:b8:ca:05:b4:c5:54:8d:7a:20:6c: 79:58:5c:ca:59:66:55:cc:b0:be:99:bd:22:0b:2d:b9:fb:94: 0c:02:b5:31:90:f3:41:18:60:56:8b:16:6b:94:2c:c9:f8:c8: 49:b7:a1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMw8XQxq4Mwj2bnKR+wuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMGFmOTZmOTU5ODkyMTMxNzhkMzNkNjVmMDcwZThmYjJm ZTM3ZGYwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD EyhiZjdjMWQ2MjNkZTdiYmUyZmI0ZjhiMDgwYjY4YTUxNTY4ZTM5OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsi5PJTP88ZfF7XDE2pa4Xlw/JF5 YBAOYkOcOk8Ba1byHeyFmYtD3W1PGtt9xp9Xkb4lXkCONf64d+Sygab2mioFeEEq esdGpFLG91B/ZxP3adY6luJe5ROnrePoZY+6mC0LFH3NIk3gmlx7NNMWjLW+ryiq weSutJlYrXyaokzSyEYWROg4dom7xJfxGb2UWnR/Ny/0IsPmnwXMW6PBNEs72ZKV F0BGgqHkYMP6YLDu2lqu0FoG/zacKIBaeRTb5eoB+lYF9MlgZgxNsSbDO/fY49un RXjBLUabzzEBmRjYs5e3FB7cqdF0DRfcgHOCmAUyNVXmzUKz/NYF7VuWMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL98HWI957vi+0+LCAtopRVo45mgMB8GA1UdIwQY MBaAFIoK+W+VmJITF40z1l8HDo+y/jffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2Et Yjc3YzFmOTcyOWZmLzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2EtYjc3YzFmOTcyOWZm LzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduXBr05v Kxiz7CpGJuaLWxywDf1QpwMbHX/WIHU/ZwmYzrsFBz/k9Z9J7iGFqC6owWT5yUFM xLtbHeUDYxYk+zfFMRdCNug4UOvKszOyIT27gb03I0+1W+AHfmsu5huiKd17XjYj +vye+glIDUMC9L0eOupJNSnGLr1bX/UicXNKLuxAHM4fPax5JvFOzLSCWcYWEjH1 /heHCuM4XEO+O5ggwsGJ4IDdk1tF+g3BgjNGxgJXG9ljtm14at0pvTfNNGbsxcxu j1BnRyhPpUK4ygW0xVSNeiBseVhcyllmVcywvpm9IgstufuUDAK1MZDzQRhgVosW a5QsyfjISbeh1g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:59 2025 by rpki-client