This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft File: irxd5yn5l1idW-dpw3gkL3VFu4o.mft (raw, json) Hash identifier: ouyGBJmbkJQg2kgsbxmzgWVj737XdjoIC7MG8eGxzYA= Subject key identifier: 26:14:5C:92:AE:FC:2B:08:3B:91:4D:04:F3:19:05:11:41:E0:6B:7C Authority key identifier: 8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A Certificate issuer: /CN=8abc5de729f997589d5be769c378242f7545bb8a Certificate serial: 019AF31D1C36A74A492ADD95B828337D3953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft Manifest number: A0 Signing time: Sat 06 Dec 2025 10:02:42 +0000 Manifest this update: Sat 06 Dec 2025 10:02:42 +0000 Manifest next update: Sun 07 Dec 2025 10:02:42 +0000 Files and hashes: 1: irxd5yn5l1idW-dpw3gkL3VFu4o.crl (hash: meQhxvlM7Byw7C85h3Prxh+IYRFGCOW3C9Uv28Bp5Iw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:1c:36:a7:4a:49:2a:dd:95:b8:28:33:7d:39:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8abc5de729f997589d5be769c378242f7545bb8a Validity Not Before: Dec 6 10:02:42 2025 GMT Not After : Dec 7 10:02:42 2025 GMT Subject: CN=26145c92aefc2b083b914d04f319051141e06b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:3f:76:39:7f:00:f7:62:e0:02:4a:c2:d1: 99:00:29:19:9e:a5:27:e0:43:88:ac:a6:f3:10:30: 9d:2e:e1:0d:d5:73:d6:35:cb:2d:18:a9:f7:8f:66: de:0e:70:7d:03:21:c0:bd:5c:c8:dd:f0:5e:f1:30: d3:11:e6:8a:3a:52:26:1b:27:7c:47:9e:f4:56:c9: ce:8a:35:ea:7f:d9:ad:e3:b6:5d:bf:10:60:06:62: d9:b5:9f:68:f7:b5:a1:07:70:b4:02:3c:e8:f6:aa: aa:08:bd:3a:b4:b5:41:87:31:4c:fb:b5:d0:31:4b: a4:27:4a:8d:d0:5b:76:91:be:99:1f:8b:20:f5:6c: bb:41:ba:b9:03:be:a5:a6:b3:79:81:48:8e:7b:60: f8:ba:15:c7:5b:44:67:2f:4c:2c:07:b6:7b:d8:b1: c8:73:11:49:a1:ec:b8:9a:5b:d3:cf:9e:39:27:fc: 95:37:50:c3:4c:45:de:db:f4:2d:f2:fc:6b:0a:e8: 39:cd:83:cc:9b:a8:1d:b3:81:c3:b2:52:35:63:ea: 29:88:e0:cd:47:a9:b7:80:bf:c5:83:1f:62:99:63: a1:38:8f:f2:24:a5:65:5b:b2:c7:87:15:ad:4d:23: 75:16:a6:d6:d4:bc:21:29:52:38:07:a7:d0:d7:56: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:14:5C:92:AE:FC:2B:08:3B:91:4D:04:F3:19:05:11:41:E0:6B:7C X509v3 Authority Key Identifier: keyid:8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f9:11:e3:25:04:8b:3a:79:e7:4f:5b:2a:39:73:64:75:db: fe:74:69:a2:ab:28:5f:0e:6c:2e:8e:af:a5:23:11:9a:4c:3a: a2:17:78:2c:eb:76:bf:16:37:6c:8c:6d:24:aa:b5:97:cf:44: 05:2e:e7:b9:43:23:ae:c6:03:49:2c:71:9d:c2:b4:e3:47:25: 74:2a:1c:74:19:5b:9d:06:48:98:17:7b:55:0e:f2:e1:c8:67: 1c:09:7e:77:1e:9b:d8:e2:7b:d5:aa:42:95:ab:ff:68:82:d6: 63:22:e9:5d:41:74:96:94:ee:87:a0:76:75:df:76:dd:dd:b1: c0:5d:c5:ba:04:51:ac:42:7f:ac:fa:9a:c4:5e:fe:1a:ee:9a: 6d:84:54:d4:cf:95:8a:b0:34:57:bf:b2:dd:d3:dc:cb:4e:69: 53:57:ac:37:e5:e9:1e:70:f0:33:54:fa:b9:8f:ee:08:88:cf: a7:37:3c:4f:28:ae:39:f3:02:4b:63:07:ae:a1:c6:a0:25:ab: 9c:95:ea:db:48:02:af:03:e2:95:7e:b5:c9:c4:47:f8:a8:14: 01:62:61:33:ac:3c:55:02:96:e6:e1:d6:34:aa:32:b2:29:e5: 21:e7:90:76:3a:48:e5:5f:de:ed:41:b0:6a:74:20:4a:7a:a3: 3f:8b:51:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRw2p0pJKt2VuCgzfTlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYmM1ZGU3MjlmOTk3NTg5ZDViZTc2OWMzNzgyNDJmNzU0 NWJiOGEwHhcNMjUxMjA2MTAwMjQyWhcNMjUxMjA3MTAwMjQyWjAzMTEwLwYDVQQD EygyNjE0NWM5MmFlZmMyYjA4M2I5MTRkMDRmMzE5MDUxMTQxZTA2YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqM/djl/APdi4AJKwtGZACkZnqUn 4EOIrKbzEDCdLuEN1XPWNcstGKn3j2beDnB9AyHAvVzI3fBe8TDTEeaKOlImGyd8 R570VsnOijXqf9mt47ZdvxBgBmLZtZ9o97WhB3C0Ajzo9qqqCL06tLVBhzFM+7XQ MUukJ0qN0Ft2kb6ZH4sg9Wy7Qbq5A76lprN5gUiOe2D4uhXHW0RnL0wsB7Z72LHI cxFJoey4mlvTz545J/yVN1DDTEXe2/Qt8vxrCug5zYPMm6gds4HDslI1Y+opiODN R6m3gL/Fgx9imWOhOI/yJKVlW7LHhxWtTSN1FqbW1LwhKVI4B6fQ11bGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYUXJKu/CsIO5FNBPMZBRFB4Gt8MB8GA1UdIwQY MBaAFIq8Xecp+ZdYnVvnacN4JC91RbuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZDY1NWYtZTA3Zi00MGNiLWEwMDct N2VkM2I5MTg1OTkwLzEvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZDY1NWYtZTA3Zi00MGNiLWEwMDctN2VkM2I5MTg1OTkw LzEvaXJ4ZDV5bjVsMWlkVy1kcHczZ2tMM1ZGdTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/kR4yUE izp5509bKjlzZHXb/nRpoqsoXw5sLo6vpSMRmkw6ohd4LOt2vxY3bIxtJKq1l89E BS7nuUMjrsYDSSxxncK040cldCocdBlbnQZImBd7VQ7y4chnHAl+dx6b2OJ71apC lav/aILWYyLpXUF0lpTuh6B2dd923d2xwF3FugRRrEJ/rPqaxF7+Gu6abYRU1M+V irA0V7+y3dPcy05pU1esN+XpHnDwM1T6uY/uCIjPpzc8TyiuOfMCS2MHrqHGoCWr nJXq20gCrwPilX61ycRH+KgUAWJhM6w8VQKW5uHWNKoysinlIeeQdjpI5V/e7UGw anQgSnqjP4tRvw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:48 2025 by rpki-client