This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft File: IytwMInjgA2e0pEkcx7LpOmrRU8.mft (raw, json) Hash identifier: f8c97Mm/bxuN11wGD7es0WLPZS+r+DuSB98/hR6xP4A= Subject key identifier: 31:80:74:5F:E4:0E:DB:6E:10:04:AD:81:F7:1F:B9:A3:0F:CD:8D:74 Authority key identifier: 23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F Certificate issuer: /CN=232b703089e3800d9ed29124731ecba4e9ab454f Certificate serial: 019AF12EF843CF255A1E8FE4F3CCDCEAE8FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft Manifest number: 1D Signing time: Sat 06 Dec 2025 01:02:58 +0000 Manifest this update: Sat 06 Dec 2025 01:02:58 +0000 Manifest next update: Sun 07 Dec 2025 01:02:58 +0000 Files and hashes: 1: 1ipyeOR9lPycgxOriGkT6D7Fl7A.roa (hash: QCaaL4rHAtO8X/L/PhI5SAbxY2KRFJXehCD4GCBBkAM=) 2: IytwMInjgA2e0pEkcx7LpOmrRU8.crl (hash: S/pDfYia4XMADHYP4jsOQCfJO1y/dMsTDubZZmnXNPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f8:43:cf:25:5a:1e:8f:e4:f3:cc:dc:ea:e8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232b703089e3800d9ed29124731ecba4e9ab454f Validity Not Before: Dec 6 01:02:58 2025 GMT Not After : Dec 7 01:02:58 2025 GMT Subject: CN=3180745fe40edb6e1004ad81f71fb9a30fcd8d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:4b:a3:92:17:28:72:6d:21:d1:13:45:3f: 66:19:00:6d:81:2d:6f:8c:93:0f:60:aa:c2:b9:62: 7c:b4:89:d8:26:52:ce:01:9f:4c:60:48:11:ec:6e: 62:86:2d:3b:fe:f9:a3:39:fb:f0:0a:f0:3a:c9:d3: 4a:48:57:b6:c2:47:67:4b:10:36:c7:2d:a8:78:d2: 07:df:2c:ac:02:bc:aa:09:6e:e2:e9:56:57:d1:37: 06:83:0c:d2:06:63:76:2e:9b:ce:54:46:cd:a8:aa: 89:f1:a5:7b:cb:0c:9a:97:81:7e:63:d4:d0:76:9c: 34:66:6e:b5:9f:4a:7b:3a:2a:ef:d2:f2:18:51:2f: 35:33:a5:20:57:75:f9:d4:f5:ae:56:6e:1a:78:70: 95:3a:d9:af:33:66:1a:cb:18:be:13:a9:a2:38:b7: 3c:4c:d1:de:fa:81:11:6c:6b:78:b2:d4:59:36:64: a2:14:f1:3a:fa:0a:b8:a2:19:a0:f3:39:df:cc:bd: b9:87:03:5d:80:98:5b:c7:d3:b6:c2:8c:bb:2b:75: c5:32:40:47:f6:de:54:61:b9:f4:6c:c5:41:c7:61: d7:37:3d:3d:6b:72:01:58:5a:96:d8:4f:1a:50:93: 9b:5a:81:84:cc:36:27:8b:40:88:b3:4f:9c:47:45: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:80:74:5F:E4:0E:DB:6E:10:04:AD:81:F7:1F:B9:A3:0F:CD:8D:74 X509v3 Authority Key Identifier: keyid:23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:33:97:28:ca:87:da:fa:ee:d3:5f:d0:f6:43:53:fe:62:b0: 03:1a:70:e0:83:ae:70:11:24:d3:7e:8e:c4:ba:90:95:9c:62: 79:8d:7c:b3:51:2f:5d:c6:f5:2b:70:c5:1e:ac:b3:f1:55:96: c8:0a:61:f1:48:d7:d1:ec:45:c8:2d:fc:3b:4c:8a:49:9b:07: ac:1d:a4:ce:d5:d3:18:37:fa:3a:ef:70:82:3f:15:8c:ef:f5: 39:c6:73:d1:27:79:38:11:c2:68:f4:ab:aa:db:fb:fa:9f:5a: 7b:df:e9:c3:9f:ea:af:bc:0f:39:c8:27:ff:1c:9d:8d:84:7c: 05:49:69:42:74:d5:26:c3:1b:36:81:f9:a5:9d:67:dc:16:c4: 0e:6c:cd:6a:d0:3c:21:b1:50:99:7f:b8:e8:48:0a:53:cf:c1: 88:9b:de:68:d6:99:2d:97:b9:b7:f3:fe:65:ab:57:b8:04:ac: f0:68:d2:5c:2f:e7:01:40:ca:b9:c4:6f:5b:6b:74:16:e3:9d: 56:96:34:d8:41:d9:19:2b:29:19:ea:c5:de:bf:84:0b:b0:9d: 03:37:78:54:29:c7:a8:a7:83:48:b1:bc:b0:b6:0a:1e:9e:ba: 2c:78:f7:08:4e:4b:0c:5f:a5:99:82:24:13:9d:71:67:54:f9: ab:d3:b3:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvhDzyVaHo/k88zc6uj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmI3MDMwODllMzgwMGQ5ZWQyOTEyNDczMWVjYmE0ZTlh YjQ1NGYwHhcNMjUxMjA2MDEwMjU4WhcNMjUxMjA3MDEwMjU4WjAzMTEwLwYDVQQD EygzMTgwNzQ1ZmU0MGVkYjZlMTAwNGFkODFmNzFmYjlhMzBmY2Q4ZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNLo5IXKHJtIdETRT9mGQBtgS1v jJMPYKrCuWJ8tInYJlLOAZ9MYEgR7G5ihi07/vmjOfvwCvA6ydNKSFe2wkdnSxA2 xy2oeNIH3yysAryqCW7i6VZX0TcGgwzSBmN2LpvOVEbNqKqJ8aV7ywyal4F+Y9TQ dpw0Zm61n0p7Oirv0vIYUS81M6UgV3X51PWuVm4aeHCVOtmvM2Yayxi+E6miOLc8 TNHe+oERbGt4stRZNmSiFPE6+gq4ohmg8znfzL25hwNdgJhbx9O2woy7K3XFMkBH 9t5UYbn0bMVBx2HXNz09a3IBWFqW2E8aUJObWoGEzDYni0CIs0+cR0USwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGAdF/kDttuEAStgfcfuaMPzY10MB8GA1UdIwQY MBaAFCMrcDCJ44ANntKRJHMey6Tpq0VPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTct YzA2ZDAzNjBlMTE0LzEvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTctYzA2ZDAzNjBlMTE0 LzEvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDOXKMqH 2vru01/Q9kNT/mKwAxpw4IOucBEk036OxLqQlZxieY18s1EvXcb1K3DFHqyz8VWW yAph8UjX0exFyC38O0yKSZsHrB2kztXTGDf6Ou9wgj8VjO/1OcZz0Sd5OBHCaPSr qtv7+p9ae9/pw5/qr7wPOcgn/xydjYR8BUlpQnTVJsMbNoH5pZ1n3BbEDmzNatA8 IbFQmX+46EgKU8/BiJveaNaZLZe5t/P+ZatXuASs8GjSXC/nAUDKucRvW2t0FuOd VpY02EHZGSspGerF3r+EC7CdAzd4VCnHqKeDSLG8sLYKHp66LHj3CE5LDF+lmYIk E51xZ1T5q9OzJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:21 2025 by rpki-client