This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json) Hash identifier: ZJBPq4Cn7u/QyZT00rhAMs6GG7rk7sMLWjYDGnC92CI= Subject key identifier: D4:95:F2:E7:14:57:CA:A9:88:B0:B1:DF:42:0C:53:82:28:BF:6F:CE Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9 Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9 Certificate serial: 019AF352154C883AF25C7D9D4B485EC4F924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft Manifest number: 1385 Signing time: Sat 06 Dec 2025 11:00:33 +0000 Manifest this update: Sat 06 Dec 2025 11:00:33 +0000 Manifest next update: Sun 07 Dec 2025 11:00:33 +0000 Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: soPwX7lmTxCp2MqtIUFdGyfq5VTKJ/M93/R/CFg0bnw=) 2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:15:4c:88:3a:f2:5c:7d:9d:4b:48:5e:c4:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9 Validity Not Before: Dec 6 11:00:33 2025 GMT Not After : Dec 7 11:00:33 2025 GMT Subject: CN=d495f2e71457caa988b0b1df420c538228bf6fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:67:4c:cf:0d:c4:de:66:65:cd:bc:98:aa: db:c4:3e:d4:7c:8b:66:15:3c:03:35:9c:e7:58:aa: 0d:14:2b:b4:8b:35:e0:29:aa:14:94:29:62:fb:c4: 59:32:24:92:3c:63:32:aa:37:9b:92:ce:30:3d:d9: fa:be:b3:b3:a5:8e:40:6d:5b:8a:fe:06:ae:f3:76: 6e:5d:da:f7:3f:84:a8:05:e2:da:c9:b0:05:d1:74: 0e:f5:2d:2c:68:34:de:9a:25:b4:76:db:42:d3:fe: b2:f6:57:43:d2:fc:96:41:11:26:96:2c:fb:ac:32: 0e:67:22:19:23:31:8c:4c:99:59:8f:6c:d4:3e:1e: a4:b8:6a:fd:65:ac:11:8b:14:c4:d2:f6:3c:db:5c: ac:60:4e:ed:13:d7:f6:bc:53:e1:e4:ef:4f:0b:6d: 87:bb:67:fe:39:9c:74:49:7e:26:ec:7f:4e:0f:a8: 3f:de:90:0c:c5:da:26:77:9a:c7:93:ca:24:08:d7: 51:22:17:c7:55:a9:81:c7:f8:df:9a:31:fc:68:36: 59:61:89:a0:80:82:c0:74:31:09:0a:ce:07:b7:02: 6c:5f:bc:7a:ce:22:80:3c:a7:4a:66:a9:8f:55:f6: 16:76:a5:64:52:2b:8a:da:06:c0:0e:4e:26:51:fc: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:95:F2:E7:14:57:CA:A9:88:B0:B1:DF:42:0C:53:82:28:BF:6F:CE X509v3 Authority Key Identifier: keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ca:9c:cf:24:af:19:96:d3:d1:05:96:4b:c6:f6:7a:8c:d6: 2d:99:42:81:00:ee:4c:3d:43:f2:b8:a2:0f:f4:25:7b:e6:54: da:a5:fd:a3:51:06:43:4c:a1:a2:04:39:4b:6e:c1:44:ff:2c: 17:df:58:4a:64:73:52:70:e8:50:c4:13:fa:ce:c8:53:87:bc: 3c:bc:b9:11:de:6c:6d:bd:35:f3:80:4a:5d:7a:ca:d5:10:3f: cc:f4:58:2c:ef:e6:4c:8c:2a:2f:72:c4:38:69:cd:f9:51:d4: 0c:27:6a:62:0b:36:7e:55:f1:e3:c3:12:0d:6d:ca:4e:f7:19: 45:da:e3:13:0b:bb:fe:5c:e7:7a:64:63:3c:33:88:f1:ca:7a: 02:ac:f5:f3:73:1f:89:ce:1f:1c:80:05:8f:a2:41:2f:79:23: 08:8a:1e:52:a5:fc:ce:a2:f0:34:79:b1:3b:35:7b:63:6d:64: 6f:9f:05:28:93:1b:5e:c5:4b:06:b1:cd:e5:81:e6:cc:14:64: b1:d9:32:6a:be:b5:15:3d:44:7d:aa:a3:10:a3:b9:5f:12:c4: de:9a:0b:fe:22:e7:90:7d:25:5c:a5:10:8b:20:90:cd:b0:1b: 32:d5:1c:b6:08:0e:ff:9c:67:00:99:4d:f3:d3:75:d3:c5:a0: 28:11:f2:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhVMiDryXH2dS0hexPkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOGRhN2ZmNTc2ZTc4ZGMyMzRlYjc0Y2JmMDczMDc2YzFm N2ViYzkwHhcNMjUxMjA2MTEwMDMzWhcNMjUxMjA3MTEwMDMzWjAzMTEwLwYDVQQD EyhkNDk1ZjJlNzE0NTdjYWE5ODhiMGIxZGY0MjBjNTM4MjI4YmY2ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikRnTM8NxN5mZc28mKrbxD7UfItm FTwDNZznWKoNFCu0izXgKaoUlCli+8RZMiSSPGMyqjebks4wPdn6vrOzpY5AbVuK /gau83ZuXdr3P4SoBeLaybAF0XQO9S0saDTemiW0dttC0/6y9ldD0vyWQREmliz7 rDIOZyIZIzGMTJlZj2zUPh6kuGr9ZawRixTE0vY821ysYE7tE9f2vFPh5O9PC22H u2f+OZx0SX4m7H9OD6g/3pAMxdomd5rHk8okCNdRIhfHVamBx/jfmjH8aDZZYYmg gILAdDEJCs4HtwJsX7x6ziKAPKdKZqmPVfYWdqVkUiuK2gbADk4mUfxMOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSV8ucUV8qpiLCx30IMU4Iov2/OMB8GA1UdIwQY MBaAFCGNp/9XbnjcI063TL8HMHbB9+vJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4Zjkt ZjhhZWQzMGQ1NGMzLzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4ZjktZjhhZWQzMGQ1NGMz LzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcqczySv GZbT0QWWS8b2eozWLZlCgQDuTD1D8riiD/Qle+ZU2qX9o1EGQ0yhogQ5S27BRP8s F99YSmRzUnDoUMQT+s7IU4e8PLy5Ed5sbb0184BKXXrK1RA/zPRYLO/mTIwqL3LE OGnN+VHUDCdqYgs2flXx48MSDW3KTvcZRdrjEwu7/lznemRjPDOI8cp6Aqz183Mf ic4fHIAFj6JBL3kjCIoeUqX8zqLwNHmxOzV7Y21kb58FKJMbXsVLBrHN5YHmzBRk sdkyar61FT1EfaqjEKO5XxLE3poL/iLnkH0lXKUQiyCQzbAbMtUctggO/5xnAJlN 89N108WgKBHydg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:42:58 2025 by rpki-client