This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json) Hash identifier: RFZb/6fqz05Kvel4M5E92pL+EgYfLlufG6iQ/7JWpGo= Subject key identifier: D0:C0:6C:1A:58:C1:BA:08:0B:E5:06:61:2B:A1:63:EE:88:76:AA:40 Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93 Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93 Certificate serial: 019AF23FC6000834A3267A88B968458ACCC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: kLqOf4u6XT5KdYZurBbXyOq9y8AGMpxpUtkVQOileRE=) 2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c6:00:08:34:a3:26:7a:88:b9:68:45:8a:cc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=d0c06c1a58c1ba080be506612ba163ee8876aa40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:89:35:dd:69:6f:c2:b3:f1:43:27:48:60: 1d:5a:f3:0d:66:23:37:6f:26:d7:70:37:eb:4d:2e: 7a:80:ae:2c:ec:e3:c9:ab:0f:52:a4:af:a1:b6:bb: 5c:fc:e7:4a:f7:57:b7:78:9d:1a:31:a6:2c:43:56: e7:3d:00:f6:5e:6b:82:b4:f9:ff:f4:7f:10:d0:cf: ab:e0:db:fe:b7:13:d2:c3:72:e3:95:79:0b:c8:3c: f6:4e:8d:bb:d2:2d:84:b9:d5:04:48:e0:91:f4:10: b3:f2:d4:e9:d8:53:f9:15:d4:75:46:a4:1a:fe:7b: c7:93:33:15:0e:72:af:09:49:0b:53:db:30:4a:bc: 1f:1f:51:a1:36:f9:e2:a0:72:4b:9d:9d:17:2d:6d: 5b:c0:78:2a:82:9d:46:17:48:28:75:c9:a6:4b:82: 76:78:e8:dc:63:27:5f:15:0a:a8:a0:b1:70:bc:96: 7a:c3:70:08:03:55:9f:f0:18:da:b2:6b:03:d7:dc: 25:3b:63:93:be:ba:8b:d8:e4:50:fb:c0:c4:ce:32: 47:83:f4:bf:19:3d:e1:75:ac:f3:9c:33:a7:25:41: bc:66:91:2a:97:b5:98:61:fb:e4:77:03:ce:4c:ea: d9:9c:cc:d8:3c:68:52:a5:a9:b0:b7:85:05:03:e6: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C0:6C:1A:58:C1:BA:08:0B:E5:06:61:2B:A1:63:EE:88:76:AA:40 X509v3 Authority Key Identifier: keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7d:d4:33:b9:eb:db:dc:37:2a:d3:c5:b1:b2:9f:43:2a:5f: fb:53:e4:d0:87:86:82:6f:e2:8f:fd:81:8a:e9:62:1e:ab:f2: 23:53:1d:f6:bc:52:71:12:dc:c4:24:b2:74:2b:0f:26:65:88: 21:d2:2f:18:3d:4e:7b:80:6f:74:51:58:b0:f4:8f:21:b9:01: 02:79:bc:4e:71:67:15:dc:5d:b1:94:89:cb:ee:58:d5:f3:58: 17:a4:44:8f:b8:89:79:aa:aa:f9:ff:29:11:9b:b4:26:4c:69: 94:a0:16:14:b6:08:79:d9:03:eb:3e:cc:f3:39:e8:97:4e:d2: 94:b6:7e:07:7d:e6:23:7c:60:c1:40:e4:f2:2b:f2:24:d6:4f: 4c:87:2e:ea:d4:b0:59:5a:d0:4e:d6:c7:1c:eb:a3:46:69:ab: 0c:05:78:97:6c:02:55:b1:57:4c:73:07:60:0f:2a:ab:57:46: 5b:54:ad:bc:2d:49:50:27:0d:a6:4c:7f:e2:21:c3:7e:54:57: c4:31:fa:2b:dc:ac:cd:85:34:40:94:e3:2d:d8:80:c5:03:e6: e2:72:95:7f:1e:33:67:3c:33:68:97:60:04:68:49:ec:4d:ea: 62:b7:4c:03:2c:40:51:45:9b:62:71:a9:9f:fc:f9:47:91:8e: da:54:ea:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8YACDSjJnqIuWhFiszJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmJiYzZmNTFjY2UwMWFlYWFjYmE4MGYyZDBkMjY0MTJl NDdmOTMwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhkMGMwNmMxYTU4YzFiYTA4MGJlNTA2NjEyYmExNjNlZTg4NzZhYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMyJNd1pb8Kz8UMnSGAdWvMNZiM3 bybXcDfrTS56gK4s7OPJqw9SpK+htrtc/OdK91e3eJ0aMaYsQ1bnPQD2XmuCtPn/ 9H8Q0M+r4Nv+txPSw3LjlXkLyDz2To270i2EudUESOCR9BCz8tTp2FP5FdR1RqQa /nvHkzMVDnKvCUkLU9swSrwfH1GhNvnioHJLnZ0XLW1bwHgqgp1GF0godcmmS4J2 eOjcYydfFQqooLFwvJZ6w3AIA1Wf8BjasmsD19wlO2OTvrqL2ORQ+8DEzjJHg/S/ GT3hdazznDOnJUG8ZpEql7WYYfvkdwPOTOrZnMzYPGhSpamwt4UFA+Z+aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDAbBpYwboIC+UGYSuhY+6IdqpAMB8GA1UdIwQY MBaAFCMrvG9RzOAa6qy6gPLQ0mQS5H+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQt NTMxNGFjY2IwNjEyLzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQtNTMxNGFjY2IwNjEy LzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH3UM7nr 29w3KtPFsbKfQypf+1Pk0IeGgm/ij/2BiuliHqvyI1Md9rxScRLcxCSydCsPJmWI IdIvGD1Oe4BvdFFYsPSPIbkBAnm8TnFnFdxdsZSJy+5Y1fNYF6REj7iJeaqq+f8p EZu0JkxplKAWFLYIedkD6z7M8znol07SlLZ+B33mI3xgwUDk8ivyJNZPTIcu6tSw WVrQTtbHHOujRmmrDAV4l2wCVbFXTHMHYA8qq1dGW1StvC1JUCcNpkx/4iHDflRX xDH6K9yszYU0QJTjLdiAxQPm4nKVfx4zZzwzaJdgBGhJ7E3qYrdMAyxAUUWbYnGp n/z5R5GO2lTqSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:43 2025 by rpki-client