This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft File: IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft (raw, json) Hash identifier: tIJP0mil7mPCMUJps8cDIjeooikyRfflLDSpUo2b86o= Subject key identifier: 59:11:CE:1B:8F:75:6B:0A:7A:A4:03:AD:67:E4:40:7B:67:BA:EF:B9 Authority key identifier: 23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05 Certificate issuer: /CN=2307652144c9127dd626796056c9ec2932a4f205 Certificate serial: 019AF12D870F4C70F8D173475017C87C1F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft Manifest number: 0240 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl (hash: lIXe73aqd0VOCJ1leIqbWVrKnSWSWrQ/KPgl9eiD3wM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:87:0f:4c:70:f8:d1:73:47:50:17:c8:7c:1f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2307652144c9127dd626796056c9ec2932a4f205 Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=5911ce1b8f756b0a7aa403ad67e4407b67baefb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:2d:65:b2:3d:51:e2:37:27:36:ca:cd:cc: 1b:6d:42:54:88:e8:a7:a3:ba:74:24:50:39:e5:24: fc:22:bb:c1:3c:e7:04:2d:67:b3:0c:f7:18:75:08: 29:fa:8f:59:d8:ae:d1:d5:1d:f5:75:7c:4a:9c:85: 8f:9c:8b:be:a4:19:67:7f:34:0d:ba:cf:a4:cb:a2: d8:10:55:92:c9:10:74:a7:b6:65:35:18:0a:98:b6: bc:4f:6d:d6:c9:e4:0f:02:c1:74:5e:6b:ea:20:cc: 78:c2:a2:04:13:e0:1e:1d:d6:56:15:02:36:09:6e: a4:d1:fc:ab:50:da:e7:9c:34:19:68:d2:52:ef:0b: d3:41:2c:57:27:9b:d6:b2:7c:06:3f:77:55:f7:91: 94:48:e4:0d:31:02:1b:88:50:00:61:64:5a:3b:df: 9b:e1:33:ab:20:f2:ce:96:60:c2:ef:ba:a7:33:98: 38:29:34:33:1f:5c:9d:25:5c:59:53:72:99:d7:82: 48:3a:6a:fa:ab:08:32:c4:17:c2:53:ed:2d:7c:ae: ec:a0:f7:fb:5b:24:01:95:20:c0:e1:e8:fe:9f:18: 7b:3c:14:40:83:0c:fd:23:32:ed:48:ba:27:e7:27: 21:2a:44:23:ac:fd:4a:9a:cc:d2:94:5b:61:bb:c7: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:11:CE:1B:8F:75:6B:0A:7A:A4:03:AD:67:E4:40:7B:67:BA:EF:B9 X509v3 Authority Key Identifier: keyid:23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ef:4f:3f:32:a3:a0:d7:7b:21:49:2c:02:dd:5a:64:0b:64: 9d:99:d5:ac:51:25:8f:4c:51:21:95:f7:d6:ec:f6:98:63:54: fa:82:6e:60:07:d4:a9:3c:72:76:30:15:47:c5:e6:5f:e2:30: 15:cc:2b:5b:fc:11:60:98:8b:7e:3f:61:08:0a:09:7c:ce:0b: 0f:dd:5a:4a:d6:df:89:04:2c:36:06:1a:1a:26:f6:83:50:e6: 21:cd:1b:64:34:3f:5b:2f:24:66:c7:2c:2d:c5:5d:ed:ec:21: ac:99:7b:ea:db:50:2f:db:32:9f:7a:a3:97:5b:e7:67:be:21: d4:57:d6:7d:9f:d4:e6:1a:f2:dd:83:54:68:43:d6:0e:c8:3d: 9e:37:2a:91:35:50:8b:22:44:28:0c:31:9c:c3:48:ff:d9:91: 0a:23:ba:10:df:2e:bf:95:20:2b:58:43:63:6a:39:8f:38:7c: b1:1a:5c:5f:3b:04:72:5e:1d:72:3c:08:40:61:81:34:0f:ff: 1f:5b:fa:fd:0d:71:88:1a:6e:9f:f9:b2:32:e6:fc:49:8e:cf: ef:a9:86:ff:3e:00:7e:cf:89:b7:82:a1:7a:c1:9e:6a:2e:28: f7:6a:3a:ac:e9:24:2a:2f:9d:66:13:52:ac:4c:fd:08:de:96: 11:bc:33:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYcPTHD40XNHUBfIfB9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDc2NTIxNDRjOTEyN2RkNjI2Nzk2MDU2YzllYzI5MzJh NGYyMDUwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD Eyg1OTExY2UxYjhmNzU2YjBhN2FhNDAzYWQ2N2U0NDA3YjY3YmFlZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziUtZbI9UeI3JzbKzcwbbUJUiOin o7p0JFA55ST8IrvBPOcELWezDPcYdQgp+o9Z2K7R1R31dXxKnIWPnIu+pBlnfzQN us+ky6LYEFWSyRB0p7ZlNRgKmLa8T23WyeQPAsF0XmvqIMx4wqIEE+AeHdZWFQI2 CW6k0fyrUNrnnDQZaNJS7wvTQSxXJ5vWsnwGP3dV95GUSOQNMQIbiFAAYWRaO9+b 4TOrIPLOlmDC77qnM5g4KTQzH1ydJVxZU3KZ14JIOmr6qwgyxBfCU+0tfK7soPf7 WyQBlSDA4ej+nxh7PBRAgwz9IzLtSLon5ychKkQjrP1KmszSlFthu8c1SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkRzhuPdWsKeqQDrWfkQHtnuu+5MB8GA1UdIwQY MBaAFCMHZSFEyRJ91iZ5YFbJ7CkypPIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85OWQxNzctOGMwMy00OThmLWIyMDIt N2E3OGFlMDU0YjRjLzEvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85OWQxNzctOGMwMy00OThmLWIyMDItN2E3OGFlMDU0YjRj LzEvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+9PPzKj oNd7IUksAt1aZAtknZnVrFElj0xRIZX31uz2mGNU+oJuYAfUqTxydjAVR8XmX+Iw FcwrW/wRYJiLfj9hCAoJfM4LD91aStbfiQQsNgYaGib2g1DmIc0bZDQ/Wy8kZscs LcVd7ewhrJl76ttQL9syn3qjl1vnZ74h1FfWfZ/U5hry3YNUaEPWDsg9njcqkTVQ iyJEKAwxnMNI/9mRCiO6EN8uv5UgK1hDY2o5jzh8sRpcXzsEcl4dcjwIQGGBNA// H1v6/Q1xiBpun/myMub8SY7P76mG/z4Afs+Jt4KhesGeai4o92o6rOkkKi+dZhNS rEz9CN6WEbwz7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:27 2025 by rpki-client