This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json) Hash identifier: +YI7EZC1MBZwggGQ1b19W/Rlj2lJQtvoO/17VPkDaAg= Subject key identifier: FC:AF:00:72:3F:D7:15:A0:21:72:DA:49:25:75:B8:44:28:65:F0:90 Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88 Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588 Certificate serial: 019AF98B755B5EBF44890ACB4470D28FB36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft Manifest number: 1773 Signing time: Sun 07 Dec 2025 16:00:57 +0000 Manifest this update: Sun 07 Dec 2025 16:00:57 +0000 Manifest next update: Mon 08 Dec 2025 16:00:57 +0000 Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=) 2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: 5HQZcJ89EfvY1aSeyiN+/uT3bYoFNxyEc/5EjshHCxk=) 3: hSxMBu_igMJgBtfSOfQQ4Pj49pw.roa (hash: bffcp9BhaMHMTNVqsuxgb/xO/YYHeGPregGtKUrYEWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:75:5b:5e:bf:44:89:0a:cb:44:70:d2:8f:b3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588 Validity Not Before: Dec 7 16:00:57 2025 GMT Not After : Dec 8 16:00:57 2025 GMT Subject: CN=fcaf00723fd715a02172da492575b8442865f090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:44:24:aa:4e:20:1e:d5:b5:71:e9:1a:ef: 59:75:91:73:33:f5:89:c8:6d:85:3b:23:6a:55:63: 27:d8:48:80:00:a0:64:52:96:cc:7c:e8:f5:4e:6b: 42:72:a5:85:75:ee:63:74:67:f5:5a:7a:12:62:68: b0:5e:c0:f2:39:21:11:30:e5:6f:4e:89:09:52:70: e0:d2:3c:29:30:44:f0:a1:e8:6c:bd:74:f7:e5:4a: db:71:d6:c0:bd:84:7b:97:9e:83:22:dd:6d:68:f6: ea:e8:4b:4e:af:28:3f:a7:c6:4a:d7:cf:aa:9c:71: 7a:f5:05:f6:54:c5:e3:7f:1d:39:06:5d:5d:6a:49: 14:51:3c:61:5a:e7:df:e3:6e:81:f4:04:db:04:e6: 78:51:f7:2f:30:15:29:63:4b:12:b0:58:0f:e9:1a: 74:48:71:9f:2a:e9:46:66:99:b9:50:23:ec:fa:dd: 39:94:7e:fe:33:58:52:ef:31:79:d8:94:4d:93:74: e7:4d:ba:98:56:76:d8:e8:6e:39:c4:d0:91:58:1c: 1f:40:ab:fe:51:a6:d4:8f:13:13:2f:d1:8e:d8:0a: a0:36:1f:cc:1c:6b:8a:d8:5e:8c:ab:e3:32:81:94: 1d:54:88:15:67:4a:4f:5e:d7:98:20:bd:bb:08:62: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AF:00:72:3F:D7:15:A0:21:72:DA:49:25:75:B8:44:28:65:F0:90 X509v3 Authority Key Identifier: keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e7:bc:b5:c6:80:3b:88:e5:df:1a:4f:43:61:6a:91:d1:a3: fd:6a:06:54:fc:f1:14:a3:1e:bb:64:aa:ab:bd:a7:19:cf:7f: 99:c0:f0:ff:51:27:4e:6d:f6:6a:ce:11:9c:4e:81:e4:85:10: be:d4:b9:26:99:b9:75:9d:bd:f7:31:bd:81:6b:68:79:53:92: 2f:ae:9f:9d:ef:d9:08:ec:f6:0b:06:97:75:8d:34:c3:5a:87: 1d:0a:4d:d5:7d:20:97:b0:11:31:5e:58:d1:37:d1:70:5d:36: 42:d0:be:0f:c3:f2:45:13:3e:a7:e5:a7:3b:7c:2d:8d:e5:30: 43:4d:a3:cc:02:cc:05:e7:10:08:91:2c:c1:1c:84:48:0c:4b: 3b:29:d7:85:f0:4b:01:ce:6d:19:60:a1:2a:fd:77:34:91:89: 7b:76:db:7a:33:93:0e:99:bd:d1:dd:5e:11:b9:80:82:9a:67: b1:80:f8:34:c3:dc:6a:1c:c4:d4:50:d6:a9:df:27:be:82:2f: 65:65:c5:df:c9:7d:0e:42:78:59:dc:ef:ce:c5:36:1e:79:1a: ad:9c:ab:b9:a7:98:73:95:a7:40:a6:22:c5:82:6c:5a:79:07: 2c:34:e4:ac:61:5a:56:f2:52:97:39:d1:65:8f:59:4b:2f:47: 5c:38:c1:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i3VbXr9EiQrLRHDSj7NtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzk0YTEyNWZhM2FjZTBjNDdhNmZlMzRmNDA4NmI0ZDNi YTU1ODgwHhcNMjUxMjA3MTYwMDU3WhcNMjUxMjA4MTYwMDU3WjAzMTEwLwYDVQQD EyhmY2FmMDA3MjNmZDcxNWEwMjE3MmRhNDkyNTc1Yjg0NDI4NjVmMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/NEJKpOIB7VtXHpGu9ZdZFzM/WJ yG2FOyNqVWMn2EiAAKBkUpbMfOj1TmtCcqWFde5jdGf1WnoSYmiwXsDyOSERMOVv TokJUnDg0jwpMETwoehsvXT35UrbcdbAvYR7l56DIt1taPbq6EtOryg/p8ZK18+q nHF69QX2VMXjfx05Bl1dakkUUTxhWuff426B9ATbBOZ4UfcvMBUpY0sSsFgP6Rp0 SHGfKulGZpm5UCPs+t05lH7+M1hS7zF52JRNk3TnTbqYVnbY6G45xNCRWBwfQKv+ UabUjxMTL9GO2AqgNh/MHGuK2F6Mq+MygZQdVIgVZ0pPXteYIL27CGIaBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyvAHI/1xWgIXLaSSV1uEQoZfCQMB8GA1UdIwQY MBaAFCM5ShJfo6zgxHpv409AhrTTulWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2Et ZDQzMjA3ZDYyZGZlLzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2EtZDQzMjA3ZDYyZGZl LzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALue8tcaA O4jl3xpPQ2FqkdGj/WoGVPzxFKMeu2Sqq72nGc9/mcDw/1EnTm32as4RnE6B5IUQ vtS5Jpm5dZ299zG9gWtoeVOSL66fne/ZCOz2CwaXdY00w1qHHQpN1X0gl7ARMV5Y 0TfRcF02QtC+D8PyRRM+p+WnO3wtjeUwQ02jzALMBecQCJEswRyESAxLOynXhfBL Ac5tGWChKv13NJGJe3bbejOTDpm90d1eEbmAgppnsYD4NMPcahzE1FDWqd8nvoIv ZWXF38l9DkJ4WdzvzsU2HnkarZyruaeYc5WnQKYixYJsWnkHLDTkrGFaVvJSlznR ZY9ZSy9HXDjBew== -----END CERTIFICATE-----Generated at Mon Dec 8 01:20:03 2025 by rpki-client