This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json) Hash identifier: UOJhlUUSzxHfWr0J/qJXoc9kabkeLWTXuzjFKOX9qJ0= Subject key identifier: B0:FA:94:ED:10:01:0F:F2:76:2C:DB:AC:B5:18:18:B1:F8:40:E6:10 Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131 Certificate serial: 019AF0BF2A7282F1C9550E8877E2A198FCC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft Manifest number: 0A24 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: OQqFROD1uio5rLsQlikJY979Dtij24pN4+VJnqqRE5s=) 2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2a:72:82:f1:c9:55:0e:88:77:e2:a1:98:fc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131 Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=b0fa94ed10010ff2762cdbacb51818b1f840e610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:79:8d:b7:a7:90:a6:ae:2b:fa:0c:52:ec: 0a:8d:54:67:53:9c:fd:bd:25:7e:91:71:43:83:4c: d6:4c:86:e9:9b:b7:90:08:88:a7:67:c9:55:87:65: 19:19:34:6d:47:2b:f3:51:32:93:0f:e9:0e:bf:5e: e0:a6:84:d4:27:8d:80:12:91:03:aa:3e:63:fb:99: fb:07:15:22:36:08:f4:88:94:47:f8:d6:53:80:df: 5b:ff:63:82:57:d1:fb:1a:32:db:9a:c0:ee:b9:25: a3:3b:fb:be:c8:c2:f6:97:b3:14:76:6c:15:bb:b5: 70:ed:76:24:cc:f8:57:cb:87:82:99:ac:3c:85:14: fb:0c:f7:84:62:c5:dd:d5:15:cf:83:ad:32:c8:81: ae:7e:cb:c7:bd:48:1a:f9:de:6e:68:81:46:f3:e1: 2e:ba:a2:bd:21:8f:a4:0d:29:fa:8d:4f:82:38:db: 3c:38:cf:28:2d:d6:61:64:27:4f:a3:8f:d8:8a:47: 2b:67:7c:a1:f8:f9:d6:57:f8:38:d2:19:9b:aa:99: 2f:b3:5b:23:a3:ed:3e:b1:09:66:7b:c7:31:4d:fc: 2c:03:94:bf:31:3d:95:4c:20:6e:3c:ea:6b:87:ac: 20:0f:c4:5d:76:c5:59:c9:03:75:22:8b:59:b6:78: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FA:94:ED:10:01:0F:F2:76:2C:DB:AC:B5:18:18:B1:F8:40:E6:10 X509v3 Authority Key Identifier: keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:91:c4:6a:c6:87:2c:c5:95:11:c6:8b:06:e0:7c:e0:dd:89: 78:11:47:91:29:eb:d5:85:46:ca:ed:ad:e2:42:7a:da:8a:10: e4:38:4e:74:65:72:48:0e:db:85:32:fe:82:68:5d:89:b8:dd: 1d:e5:67:71:2b:be:ba:c6:09:c0:c7:e2:2e:b3:d2:fb:03:bb: 90:1e:f0:6f:3d:5d:77:ea:2e:bf:5d:2b:47:7a:78:fe:c2:ab: 69:3b:f0:39:b6:be:c5:35:7d:97:2b:30:45:2f:da:5c:71:c9: c0:8a:88:dc:c1:67:cf:ed:96:9c:55:de:0a:2b:ac:a6:a2:51: 22:79:51:92:b7:4f:b1:fc:8d:d5:9d:74:fa:5e:7d:80:1b:40: da:96:f4:73:5b:2b:da:71:d0:cf:47:81:61:7a:1b:e2:8c:6e: 1b:66:79:f0:05:03:f0:ed:30:15:97:f3:10:93:69:dc:7a:b7: 36:79:28:be:33:4a:55:39:f4:e7:0f:0a:5d:06:1c:ba:ad:c9: 15:75:37:f6:a2:5c:69:06:9a:d1:d2:a6:f1:ae:e7:ee:2a:59: ec:df:df:bb:1c:1c:8a:9a:ba:2e:c2:ca:39:20:34:b3:9c:87: 20:24:02:83:b7:2e:f5:ea:94:66:e5:67:cc:e7:ed:a3:95:8c: 5e:47:45:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvypygvHJVQ6Id+KhmPzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTYyYmJmMDI0NmNkYTIyODBhMjkzNDMyYWU2ZjBiZDY4 MjYxMzEwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD EyhiMGZhOTRlZDEwMDEwZmYyNzYyY2RiYWNiNTE4MThiMWY4NDBlNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX95jbenkKauK/oMUuwKjVRnU5z9 vSV+kXFDg0zWTIbpm7eQCIinZ8lVh2UZGTRtRyvzUTKTD+kOv17gpoTUJ42AEpED qj5j+5n7BxUiNgj0iJRH+NZTgN9b/2OCV9H7GjLbmsDuuSWjO/u+yML2l7MUdmwV u7Vw7XYkzPhXy4eCmaw8hRT7DPeEYsXd1RXPg60yyIGufsvHvUga+d5uaIFG8+Eu uqK9IY+kDSn6jU+CONs8OM8oLdZhZCdPo4/YikcrZ3yh+PnWV/g40hmbqpkvs1sj o+0+sQlme8cxTfwsA5S/MT2VTCBuPOprh6wgD8RddsVZyQN1IotZtng6BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD6lO0QAQ/ydizbrLUYGLH4QOYQMB8GA1UdIwQY MBaAFCMWK78CRs2iKAopNDKubwvWgmExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAt ODVjMzA1ZjlmZTZmLzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAtODVjMzA1ZjlmZTZm LzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZHEasaH LMWVEcaLBuB84N2JeBFHkSnr1YVGyu2t4kJ62ooQ5DhOdGVySA7bhTL+gmhdibjd HeVncSu+usYJwMfiLrPS+wO7kB7wbz1dd+ouv10rR3p4/sKraTvwOba+xTV9lysw RS/aXHHJwIqI3MFnz+2WnFXeCiuspqJRInlRkrdPsfyN1Z10+l59gBtA2pb0c1sr 2nHQz0eBYXob4oxuG2Z58AUD8O0wFZfzEJNp3Hq3NnkovjNKVTn05w8KXQYcuq3J FXU39qJcaQaa0dKm8a7n7ipZ7N/fuxwcipq6LsLKOSA0s5yHICQCg7cu9eqUZuVn zOfto5WMXkdFVA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:25 2025 by rpki-client