This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft File: IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json) Hash identifier: 6CdE+t3UXijJ8He2FMhgywEnNix6CLSxGenkl0a+/s0= Subject key identifier: FE:5D:1C:72:DC:83:17:7D:AE:6C:C1:93:45:EA:B9:BC:E0:98:0E:0D Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4 Certificate issuer: /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4 Certificate serial: 019AF541366A60718D410504026DADE2E10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 20:01:22 +0000 Manifest this update: Sat 06 Dec 2025 20:01:22 +0000 Manifest next update: Sun 07 Dec 2025 20:01:22 +0000 Files and hashes: 1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: Ow0Gz8PzLq0XaAnZkPXecIBCtaTSN5izF3v64yKN4pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:36:6a:60:71:8d:41:05:04:02:6d:ad:e2:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4 Validity Not Before: Dec 6 20:01:22 2025 GMT Not After : Dec 7 20:01:22 2025 GMT Subject: CN=fe5d1c72dc83177dae6cc19345eab9bce0980e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:0f:3b:18:ed:56:af:a7:79:5d:f7:26:89: 6d:38:36:4d:23:cc:e8:ea:de:45:e0:23:61:85:ce: c0:4d:5c:a7:a8:fe:6a:91:10:c3:a3:e9:9e:de:47: 3e:75:3f:bd:27:6c:95:10:11:51:4c:cb:0c:86:94: 2a:d4:fd:62:69:ab:68:cb:6c:d6:02:d2:0a:6b:72: af:2a:eb:7d:e0:5c:55:d8:a9:51:0d:38:94:82:0f: 5a:f2:c6:d9:46:73:c7:9e:d2:5a:2e:92:6b:b9:2a: c6:66:1c:d0:87:54:0e:96:73:d7:59:c3:f6:3d:ee: bb:d5:69:68:8c:42:23:48:09:b9:dc:3c:e0:70:f5: a9:6e:a0:d6:21:ac:e9:11:cf:6e:a7:3f:a0:6a:aa: 97:62:49:b1:ef:9e:87:7b:7d:92:97:d8:be:ee:52: 80:b2:f6:51:f4:5a:c9:1b:53:de:47:c2:ac:aa:1a: 91:4c:77:31:81:3d:01:e9:5d:b5:52:80:61:bf:bc: 8d:c8:30:54:38:58:21:55:13:cc:18:33:45:d2:6c: b7:5c:35:b4:73:1b:05:b8:e4:19:63:3e:e7:95:a5: 41:32:2b:5b:33:6a:36:a5:94:89:7c:a8:aa:52:54: 87:be:a8:92:ad:89:82:f3:a2:45:39:a5:f8:40:6d: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5D:1C:72:DC:83:17:7D:AE:6C:C1:93:45:EA:B9:BC:E0:98:0E:0D X509v3 Authority Key Identifier: keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fe:48:36:5d:8f:e2:5c:94:1b:e3:7c:d2:ab:af:6f:a8:24: 51:f9:a6:a2:f8:f3:82:fa:95:d1:c7:a8:cd:24:e8:2e:50:13: 0f:3f:d6:3b:99:3e:44:e3:b5:28:c7:64:d4:f7:24:79:c5:51: 36:13:7c:50:66:d1:37:e9:48:ca:c7:ba:e0:80:f4:86:f0:db: c1:89:34:ee:b4:4d:63:65:a9:e4:ed:81:06:c3:a8:2a:59:c6: a6:74:53:48:4d:f6:4c:aa:97:a9:54:b3:0f:bc:99:50:ea:78: db:15:19:e1:15:c8:60:1f:a6:df:cc:4e:88:4e:72:a5:af:28: 21:9f:a3:f6:f7:4f:28:db:c2:9b:e9:53:88:41:2f:d7:da:34: 1f:e1:32:90:35:5c:2c:8e:43:7a:5b:00:15:73:ae:b6:3c:99: d8:f9:df:b5:53:ed:1b:18:ad:75:db:8d:d6:7b:e4:c6:09:cf: df:66:18:4b:59:2d:b2:c7:c7:23:2b:e9:22:ae:65:ef:8a:f9: d7:30:65:95:35:7e:b4:f4:24:e6:3a:d5:21:80:7d:6f:64:9c: dc:38:46:00:fb:87:27:a9:93:03:fd:59:1c:1e:1a:4c:9b:1e: 17:ca:36:c4:2c:51:d1:28:83:08:7b:fa:c0:fe:3f:1b:2b:1d: 91:97:94:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QTZqYHGNQQUEAm2t4uEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjI2ZDU1OWZlZGM1MGQ3YTU1YzA2ZWY0OGZkM2EyZDJk M2ZkZjQwHhcNMjUxMjA2MjAwMTIyWhcNMjUxMjA3MjAwMTIyWjAzMTEwLwYDVQQD EyhmZTVkMWM3MmRjODMxNzdkYWU2Y2MxOTM0NWVhYjliY2UwOTgwZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAwPOxjtVq+neV33JoltODZNI8zo 6t5F4CNhhc7ATVynqP5qkRDDo+me3kc+dT+9J2yVEBFRTMsMhpQq1P1iaatoy2zW AtIKa3KvKut94FxV2KlRDTiUgg9a8sbZRnPHntJaLpJruSrGZhzQh1QOlnPXWcP2 Pe671WlojEIjSAm53DzgcPWpbqDWIazpEc9upz+gaqqXYkmx756He32Sl9i+7lKA svZR9FrJG1PeR8KsqhqRTHcxgT0B6V21UoBhv7yNyDBUOFghVRPMGDNF0my3XDW0 cxsFuOQZYz7nlaVBMitbM2o2pZSJfKiqUlSHvqiSrYmC86JFOaX4QG28NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5dHHLcgxd9rmzBk0XqubzgmA4NMB8GA1UdIwQY MBaAFCMibVWf7cUNelXAbvSP06LS0/30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlKdFZaX3R4UTE2VmNCdTlJX1RvdExUX2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84ZWQ0MzMtYmE4ZC00Y2ZhLWE4ZjAt ZDdhNGU2MjA3MzNjLzEvSXlKdFZaX3R4UTE2VmNCdTlJX1RvdExUX2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84ZWQ0MzMtYmE4ZC00Y2ZhLWE4ZjAtZDdhNGU2MjA3MzNj LzEvSXlKdFZaX3R4UTE2VmNCdTlJX1RvdExUX2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv5INl2P 4lyUG+N80quvb6gkUfmmovjzgvqV0ceozSToLlATDz/WO5k+ROO1KMdk1PckecVR NhN8UGbRN+lIyse64ID0hvDbwYk07rRNY2Wp5O2BBsOoKlnGpnRTSE32TKqXqVSz D7yZUOp42xUZ4RXIYB+m38xOiE5ypa8oIZ+j9vdPKNvCm+lTiEEv19o0H+EykDVc LI5DelsAFXOutjyZ2PnftVPtGxitdduN1nvkxgnP32YYS1ktssfHIyvpIq5l74r5 1zBllTV+tPQk5jrVIYB9b2Sc3DhGAPuHJ6mTA/1ZHB4aTJseF8o2xCxR0SiDCHv6 wP4/GysdkZeUrA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:02 2025 by rpki-client