This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json) Hash identifier: ryI+sOnS+zfmITrPgep7h7dFK8ZZGJHsCqiE9JbRUoc= Subject key identifier: C2:AF:9D:2A:D8:C7:6C:98:38:7D:92:00:1B:58:C1:50:D2:9C:37:59 Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df Certificate serial: 019B2741411D68535DC6B7A2B5E3897E4BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft Manifest number: 0824 Signing time: Tue 16 Dec 2025 13:02:26 +0000 Manifest this update: Tue 16 Dec 2025 13:02:26 +0000 Manifest next update: Wed 17 Dec 2025 13:02:26 +0000 Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: /6H/f8/PPBNgiWzY+UGL0skBVHTRJQLVbr8iF/xDrLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:41:1d:68:53:5d:c6:b7:a2:b5:e3:89:7e:4b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df Validity Not Before: Dec 16 13:02:26 2025 GMT Not After : Dec 17 13:02:26 2025 GMT Subject: CN=c2af9d2ad8c76c98387d92001b58c150d29c3759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:04:71:e5:88:ee:26:52:a6:5a:af:ee:d6: c6:9d:31:ab:c7:7c:14:00:5d:7b:ba:61:be:d2:d9: 21:a1:30:9c:a8:94:97:d2:5c:2c:63:47:28:a1:4c: c2:ee:42:68:31:e3:ce:16:ad:b1:e3:ef:70:4c:eb: 21:84:ff:ee:55:08:93:76:4c:e3:1a:63:dd:9d:94: da:0e:1c:67:a5:31:6c:17:bc:3f:49:fd:42:bd:63: 1e:1d:60:8d:83:61:b2:3e:b1:cf:1d:a2:e2:8b:52: ea:7e:aa:64:db:90:cf:b1:4b:6f:f8:3b:77:ab:95: a0:fb:d8:92:51:d5:ba:7a:d8:14:b6:6c:0f:fd:38: f8:78:df:bb:93:c9:b1:70:2e:5b:e5:10:f4:1d:91: 1f:08:3d:9d:c6:5f:a7:64:c5:a1:41:3e:2a:47:70: 5a:d0:53:c3:ad:ec:df:61:04:52:17:69:72:7b:40: 95:b2:32:43:d3:ee:c5:1a:f5:82:64:e3:6d:f1:0f: cb:f7:ba:4f:e8:30:c7:45:6b:83:1b:3b:79:76:b1: 48:52:67:78:d3:5f:8d:13:f8:47:4c:b9:c0:d8:06: c2:c8:e5:89:b2:03:82:a6:23:1a:4c:a5:55:a9:f4: 6b:83:41:5a:92:90:05:b7:e7:a9:8e:62:9d:41:94: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AF:9D:2A:D8:C7:6C:98:38:7D:92:00:1B:58:C1:50:D2:9C:37:59 X509v3 Authority Key Identifier: keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:95:2e:20:6a:89:36:5a:f8:35:bb:ca:92:4e:55:84:53:d9: 65:6e:e6:25:3b:61:fa:98:16:1e:a3:e4:c8:27:c8:79:28:8a: b7:28:c0:28:e1:2d:45:4e:95:7a:fe:27:35:8b:33:dc:08:4b: 54:4d:94:ac:2c:55:01:38:6b:f1:44:b9:1a:92:f4:c9:60:21: 82:cf:5c:e1:03:a6:be:88:ce:9d:5e:3d:79:e9:bf:78:7e:af: 05:0e:82:48:88:2f:35:6c:53:18:df:29:5f:9d:cd:10:d2:74: 72:ca:17:d0:30:7c:ba:01:8b:60:27:76:24:37:e8:ab:06:2d: fe:0e:f6:e8:a2:e6:0b:07:83:2e:a5:6a:dd:18:5c:e8:4d:b3: 28:23:99:0f:e6:13:7d:36:d4:4c:0b:1a:b5:62:b6:38:6f:72: fb:59:8e:80:df:0c:dc:e9:77:37:88:a3:f6:4a:c8:09:8c:94: ec:31:4f:6b:d0:a6:13:c4:a8:fa:3a:4e:82:db:6f:47:e2:5e: 81:ad:a1:0c:8c:5d:46:36:52:27:6e:bf:ba:7b:ac:f8:da:8d: 71:2f:5a:49:3d:7d:08:13:6a:f6:e2:78:f8:92:82:a0:34:e5: 3e:28:f1:ff:00:60:a1:68:c8:b4:40:12:4a:e4:3a:82:5a:97: 7c:9a:1d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQUEdaFNdxreiteOJfkvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMGFmOTZmOTU5ODkyMTMxNzhkMzNkNjVmMDcwZThmYjJm ZTM3ZGYwHhcNMjUxMjE2MTMwMjI2WhcNMjUxMjE3MTMwMjI2WjAzMTEwLwYDVQQD EyhjMmFmOWQyYWQ4Yzc2Yzk4Mzg3ZDkyMDAxYjU4YzE1MGQyOWMzNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CsEceWI7iZSplqv7tbGnTGrx3wU AF17umG+0tkhoTCcqJSX0lwsY0cooUzC7kJoMePOFq2x4+9wTOshhP/uVQiTdkzj GmPdnZTaDhxnpTFsF7w/Sf1CvWMeHWCNg2GyPrHPHaLii1Lqfqpk25DPsUtv+Dt3 q5Wg+9iSUdW6etgUtmwP/Tj4eN+7k8mxcC5b5RD0HZEfCD2dxl+nZMWhQT4qR3Ba 0FPDrezfYQRSF2lye0CVsjJD0+7FGvWCZONt8Q/L97pP6DDHRWuDGzt5drFIUmd4 01+NE/hHTLnA2AbCyOWJsgOCpiMaTKVVqfRrg0FakpAFt+epjmKdQZSlbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKvnSrYx2yYOH2SABtYwVDSnDdZMB8GA1UdIwQY MBaAFIoK+W+VmJITF40z1l8HDo+y/jffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2Et Yjc3YzFmOTcyOWZmLzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2EtYjc3YzFmOTcyOWZm LzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5UuIGqJ Nlr4NbvKkk5VhFPZZW7mJTth+pgWHqPkyCfIeSiKtyjAKOEtRU6Vev4nNYsz3AhL VE2UrCxVAThr8US5GpL0yWAhgs9c4QOmvojOnV49eem/eH6vBQ6CSIgvNWxTGN8p X53NENJ0csoX0DB8ugGLYCd2JDfoqwYt/g726KLmCweDLqVq3Rhc6E2zKCOZD+YT fTbUTAsatWK2OG9y+1mOgN8M3Ol3N4ij9krICYyU7DFPa9CmE8So+jpOgttvR+Je ga2hDIxdRjZSJ26/unus+NqNcS9aST19CBNq9uJ4+JKCoDTlPijx/wBgoWjItEAS SuQ6glqXfJodSQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:38 2025 by rpki-client