This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json) Hash identifier: wX947jfrXf0AYsREBHqsQag5eQfd63ErEvZutbVMF68= Subject key identifier: F1:B2:4C:7F:F6:D6:3B:A8:B5:7D:BF:92:49:FA:D8:B9:3B:0B:CF:64 Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62 Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062 Certificate serial: 019AF2765713F16F67F33F4536E57C7CCA4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft Manifest number: 089A Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: OgrsuvKJnLXNu9L/XCVERd+qU6YNhDQJkhg93Ysonfo=) 2: Ljs9MQhWok74BFhLvX5tnc2erSo.roa (hash: +v8jaS8N6bSTt1OSxaSBvN/IEBx5vNtqPM0L9If78cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:57:13:f1:6f:67:f3:3f:45:36:e5:7c:7c:ca:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062 Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=f1b24c7ff6d63ba8b57dbf9249fad8b93b0bcf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:ec:c9:5c:c8:43:db:02:a5:c1:d2:5d:0e: 3b:b6:42:1e:09:93:8c:91:0c:e7:f2:c8:f4:c3:29: cf:bb:1d:cf:1d:b8:24:52:f9:ab:fa:84:36:2f:69: 13:55:da:d6:8c:cf:ed:04:63:32:e0:06:46:ea:b1: dd:12:3c:d5:02:8b:df:87:15:fd:68:e9:e1:e8:86: 3c:82:4c:42:b6:08:4e:74:32:52:f8:85:3f:27:d1: aa:ac:ba:ef:23:a4:b9:dc:c6:69:e5:0a:cd:06:e8: 1a:70:95:1c:e2:25:63:40:2a:3a:63:ed:1b:a3:e1: 8d:b2:f6:81:ee:a9:e0:af:b7:86:9e:4f:54:c8:f7: 47:7f:ad:14:2f:e7:f8:05:84:48:d8:b8:56:ef:43: 3c:4e:06:d4:51:38:bb:f7:ae:c2:67:91:49:d1:03: ab:e1:f4:95:9f:7c:84:27:f2:11:c8:bb:3a:04:78: 5a:02:fb:fe:3f:d2:d2:fc:61:18:b6:41:86:a9:6b: e2:21:60:1c:94:11:d2:37:a1:84:a3:2f:dd:20:dc: 13:89:4a:8e:06:da:ef:59:67:10:c5:3d:bf:98:48: 9a:51:16:ec:fa:f0:38:89:51:7e:12:7c:3b:33:86: e6:d0:ae:64:5d:5a:4c:af:12:b8:ca:7e:41:d6:55: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:4C:7F:F6:D6:3B:A8:B5:7D:BF:92:49:FA:D8:B9:3B:0B:CF:64 X509v3 Authority Key Identifier: keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:19:59:a4:fe:e4:54:f7:2c:07:f5:2f:0b:81:11:6c:73:fb: ad:9c:e6:86:b7:ca:9b:ec:4c:db:c2:0d:dc:5c:c9:ce:7c:80: 1d:e2:a7:08:ff:43:6e:83:a1:d6:12:d6:07:6e:66:a5:3a:66: e6:91:ed:b7:2c:46:c5:61:98:2f:34:ec:23:58:2b:c0:63:34: 44:82:af:f4:45:1d:49:51:b4:d3:f0:39:34:81:c4:51:46:eb: 12:05:e2:46:79:a4:cc:5b:50:f1:4f:21:ff:32:6c:e0:7b:24: b2:85:f1:47:22:57:5a:0a:94:b0:54:d6:d6:5d:b4:4b:12:1c: fd:e7:4e:cb:16:f6:ca:fd:71:b7:d5:2f:d2:3a:a8:27:ec:83: 8c:dd:e3:67:ff:5f:02:69:5c:35:84:83:5f:fa:92:09:4a:5e: a5:95:7e:70:15:86:57:f1:2d:62:26:54:75:7b:da:9d:96:d6: 8b:e2:8d:97:36:bd:4e:b5:04:5d:e3:aa:af:16:94:4b:d8:95: 43:7a:ca:da:ea:64:c5:21:15:41:f3:96:ee:94:ee:37:74:76: cb:73:2f:5d:48:c5:0c:c6:de:ee:79:a0:b8:3c:38:59:c0:58: cd:84:e4:bb:3d:ac:8e:7f:01:9d:de:f5:50:5e:fd:cd:aa:7b: f3:d8:ad:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlcT8W9n8z9FNuV8fMpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmIxNzc4ZDYzNjIzNzQzZWQ4OWM4N2RlODBjMmE2NDA5 M2EwNjIwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD EyhmMWIyNGM3ZmY2ZDYzYmE4YjU3ZGJmOTI0OWZhZDhiOTNiMGJjZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4zsyVzIQ9sCpcHSXQ47tkIeCZOM kQzn8sj0wynPux3PHbgkUvmr+oQ2L2kTVdrWjM/tBGMy4AZG6rHdEjzVAovfhxX9 aOnh6IY8gkxCtghOdDJS+IU/J9GqrLrvI6S53MZp5QrNBugacJUc4iVjQCo6Y+0b o+GNsvaB7qngr7eGnk9UyPdHf60UL+f4BYRI2LhW70M8TgbUUTi7967CZ5FJ0QOr 4fSVn3yEJ/IRyLs6BHhaAvv+P9LS/GEYtkGGqWviIWAclBHSN6GEoy/dINwTiUqO BtrvWWcQxT2/mEiaURbs+vA4iVF+Enw7M4bm0K5kXVpMrxK4yn5B1lUeewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGyTH/21juotX2/kkn62Lk7C89kMB8GA1UdIwQY MBaAFCMrF3jWNiN0Ptich96AwqZAk6BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYt OTBkMzViMjQ1Y2VkLzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYtOTBkMzViMjQ1Y2Vk LzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehlZpP7k VPcsB/UvC4ERbHP7rZzmhrfKm+xM28IN3FzJznyAHeKnCP9DboOh1hLWB25mpTpm 5pHttyxGxWGYLzTsI1grwGM0RIKv9EUdSVG00/A5NIHEUUbrEgXiRnmkzFtQ8U8h /zJs4HsksoXxRyJXWgqUsFTW1l20SxIc/edOyxb2yv1xt9Uv0jqoJ+yDjN3jZ/9f AmlcNYSDX/qSCUpepZV+cBWGV/EtYiZUdXvanZbWi+KNlza9TrUEXeOqrxaUS9iV Q3rK2upkxSEVQfOW7pTuN3R2y3MvXUjFDMbe7nmguDw4WcBYzYTkuz2sjn8Bnd71 UF79zap789itbw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:20 2025 by rpki-client