This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft File: iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json) Hash identifier: jgpCj8J4y92U7bI9MY6iS5QK+XpA1pBrlMDuVgE87AQ= Subject key identifier: 4C:BE:74:FF:5F:3D:A4:08:A7:C2:B5:34:77:38:33:BE:51:5C:7C:41 Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91 Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91 Certificate serial: 019B2BF8CBDF20E64F7CFDDE31EB944F52C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft Manifest number: 0ADF Signing time: Wed 17 Dec 2025 11:01:23 +0000 Manifest this update: Wed 17 Dec 2025 11:01:23 +0000 Manifest next update: Thu 18 Dec 2025 11:01:23 +0000 Files and hashes: 1: WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa (hash: /RcbZ2ujStzbSPjPDGEz6Qg57WsDieIVmjOcowRraSQ=) 2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: uh36RsP0U+AQbLWsuZBE09GK2Cf6+IujHPgYldFPY40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:cb:df:20:e6:4f:7c:fd:de:31:eb:94:4f:52:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91 Validity Not Before: Dec 17 11:01:23 2025 GMT Not After : Dec 18 11:01:23 2025 GMT Subject: CN=4cbe74ff5f3da408a7c2b534773833be515c7c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:77:57:b7:21:1a:e0:e8:d2:55:22:aa:31: 8c:a0:1f:49:c8:66:76:c4:74:d0:e5:12:eb:5e:4e: de:0b:90:12:28:cc:8e:3a:65:41:6f:c4:ac:fe:10: 70:d3:ea:b7:9d:f4:a3:8d:e1:b5:ee:12:9e:7e:51: 2b:f2:61:8c:47:bd:fd:1e:5f:70:3b:8c:11:f5:73: cc:c5:f6:3c:ff:12:40:2b:46:9a:5c:76:10:e8:a6: b1:78:81:4d:08:36:b5:6e:c7:71:3c:e1:fc:0d:4d: 46:6d:b4:3a:e4:bf:21:b4:2a:58:7d:ce:d2:a7:97: 3e:4c:d0:78:49:84:68:de:6f:a1:52:e8:63:c4:24: 54:81:d2:dd:c8:78:58:5f:20:34:4a:dc:a6:44:86: 11:6a:45:c5:36:df:f9:18:45:84:10:98:19:8f:6a: e6:59:3a:59:aa:78:22:8b:b5:ff:3d:a3:32:aa:82: 82:5e:dc:38:09:1b:18:0c:53:47:aa:cc:12:09:35: b0:6f:c2:7f:fe:17:a6:14:a8:59:c9:74:0a:fc:e7: 49:7b:d7:35:9f:24:f5:35:5e:66:7d:c4:8d:91:f0: ab:d9:24:c3:ce:b0:14:60:8d:24:ea:3c:8c:5f:95: b0:aa:b3:da:19:99:54:29:79:15:a1:b1:4e:77:26: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BE:74:FF:5F:3D:A4:08:A7:C2:B5:34:77:38:33:BE:51:5C:7C:41 X509v3 Authority Key Identifier: keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1a:68:b2:0e:a5:27:5b:8e:ff:a6:84:c7:54:ae:0f:9e:ad: 66:25:b6:4a:94:b5:80:89:15:ed:b1:08:0b:69:8f:e1:e9:10: ef:27:42:b9:bc:77:b2:76:fc:6d:f0:cb:6e:a8:f9:bf:35:6d: 8c:34:f6:9a:d3:ff:b2:53:9a:ac:91:96:e1:c6:6b:72:9c:90: 5f:ed:b6:29:2a:f4:a9:9d:b6:71:59:a0:3f:d8:88:d6:d3:83: 56:b8:6e:ed:44:77:ab:77:0e:d0:ee:3e:db:cc:24:ee:52:cb: 4a:0a:f0:d3:eb:32:17:66:0c:6f:33:ac:58:c0:24:8b:46:29: 03:7e:97:f2:a0:3b:bd:74:25:43:db:e5:54:1e:fc:7f:67:e6: 61:04:96:5c:95:7d:46:b1:10:80:d3:61:70:75:f8:5a:da:6c: e2:23:87:9e:70:19:09:7c:51:70:c3:8d:57:6b:21:28:70:84: 7c:60:91:28:ed:fe:a7:37:f0:95:fa:65:36:82:66:30:5c:81: 86:6f:93:6b:5a:92:d9:fe:83:c4:67:7b:3b:3a:77:23:9e:dc: 86:74:95:9b:d2:af:1a:24:02:06:9a:22:9c:63:b4:dc:28:b0: 13:81:de:da:e6:45:65:58:23:30:4d:e0:6f:85:5c:6a:02:a7: 43:92:c2:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+MvfIOZPfP3eMeuUT1LBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMjc0ODNkYzE2YzMxOGU1YWZmZjgzMjI5MzBjODE3ZmQx OTJjOTEwHhcNMjUxMjE3MTEwMTIzWhcNMjUxMjE4MTEwMTIzWjAzMTEwLwYDVQQD Eyg0Y2JlNzRmZjVmM2RhNDA4YTdjMmI1MzQ3NzM4MzNiZTUxNWM3YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGx3V7chGuDo0lUiqjGMoB9JyGZ2 xHTQ5RLrXk7eC5ASKMyOOmVBb8Ss/hBw0+q3nfSjjeG17hKeflEr8mGMR739Hl9w O4wR9XPMxfY8/xJAK0aaXHYQ6KaxeIFNCDa1bsdxPOH8DU1GbbQ65L8htCpYfc7S p5c+TNB4SYRo3m+hUuhjxCRUgdLdyHhYXyA0StymRIYRakXFNt/5GEWEEJgZj2rm WTpZqngii7X/PaMyqoKCXtw4CRsYDFNHqswSCTWwb8J//hemFKhZyXQK/OdJe9c1 nyT1NV5mfcSNkfCr2STDzrAUYI0k6jyMX5WwqrPaGZlUKXkVobFOdyaMNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEy+dP9fPaQIp8K1NHc4M75RXHxBMB8GA1UdIwQY MBaAFIsnSD3BbDGOWv/4MikwyBf9GSyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4Yzct ZmI4OTNlMzkwOGQyLzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4YzctZmI4OTNlMzkwOGQy LzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBposg6l J1uO/6aEx1SuD56tZiW2SpS1gIkV7bEIC2mP4ekQ7ydCubx3snb8bfDLbqj5vzVt jDT2mtP/slOarJGW4cZrcpyQX+22KSr0qZ22cVmgP9iI1tODVrhu7UR3q3cO0O4+ 28wk7lLLSgrw0+syF2YMbzOsWMAki0YpA36X8qA7vXQlQ9vlVB78f2fmYQSWXJV9 RrEQgNNhcHX4Wtps4iOHnnAZCXxRcMONV2shKHCEfGCRKO3+pzfwlfplNoJmMFyB hm+Ta1qS2f6DxGd7Ozp3I57chnSVm9KvGiQCBpoinGO03CiwE4He2uZFZVgjME3g b4VcagKnQ5LCQg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:19:01 2025 by rpki-client