This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft File: IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft (raw, json) Hash identifier: 0SmzCVPFFu8ApklR9sZnb/te+hrwbNwHvLFxZJVY3OE= Subject key identifier: 71:87:05:97:5E:83:47:58:3B:89:3B:6A:7A:E7:9F:0A:DE:82:D2:54 Authority key identifier: 21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F Certificate issuer: /CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f Certificate serial: 019AF0BF9CC531B937BBBC5FB4B78BA60F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft Manifest number: 9D Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl (hash: xSr5I0sdWKQOnKEaplEmBUumZf+UFeaYg+8kK6fjdCw=) 2: apIk3T0uW96QniURNfkrJpo6bx0.roa (hash: lnybSVbj9b/iDsuE6W4oGYnfxclTTGDOOhv6E7X00Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9c:c5:31:b9:37:bb:bc:5f:b4:b7:8b:a6:0f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=718705975e8347583b893b6a7ae79f0ade82d254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:8d:aa:44:ae:32:3c:b2:54:b4:e5:73:ff: 91:7f:a1:18:10:82:aa:59:b4:49:c6:a2:8a:df:f9: 07:53:cb:34:1f:19:0a:35:03:65:13:ed:ff:d5:29: 80:d2:e5:2c:31:cf:79:a7:cc:d5:89:b3:fa:32:63: 6a:15:d7:fa:c2:f5:c6:69:da:c0:cb:f8:4b:48:ab: 18:a2:21:ed:4b:f6:f5:ea:c9:ce:a4:e9:7d:55:d5: 2e:29:3a:e5:a6:79:78:f9:02:c1:e8:48:79:4c:2b: a3:59:2f:03:83:73:b2:b4:f7:d8:d0:9b:8a:94:a7: 5a:b8:d7:81:1f:d0:b4:79:56:ee:a9:07:33:98:08: 4b:d4:ad:b3:c7:00:83:c2:34:a9:43:11:75:a6:ac: 78:12:2b:83:5c:55:57:e1:30:a5:89:cd:9d:99:47: 37:4a:e9:12:15:69:d3:a6:3d:d8:8a:c8:44:dd:af: 9b:3b:62:bb:49:9d:3a:61:0d:87:05:15:95:59:ca: f4:ce:1c:84:fe:f6:cd:6f:12:06:a9:05:f7:5e:b2: 7a:85:d7:09:08:df:fa:f1:53:e6:ca:6a:d0:e5:86: d4:88:dd:64:b2:00:b5:c2:4f:66:eb:00:96:91:f2: ef:43:b5:b0:d1:f1:3e:73:12:f5:ca:07:3b:4a:12: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:05:97:5E:83:47:58:3B:89:3B:6A:7A:E7:9F:0A:DE:82:D2:54 X509v3 Authority Key Identifier: keyid:21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bd:74:96:e3:da:f4:83:1c:71:61:93:fd:27:96:2f:56:ef: fe:9c:79:7f:c2:46:ea:65:0b:27:a8:98:16:c6:80:ac:c3:b5: f1:df:e5:91:ae:6d:e1:f6:69:b5:ad:d3:b3:e2:6f:be:33:c5: 71:89:ae:7b:c5:e6:36:41:30:fd:97:f3:0e:64:40:65:70:08: ac:3c:94:b3:16:e5:1b:25:5d:91:c2:29:20:5d:41:67:ef:89: 14:24:40:b5:85:0c:37:1c:d8:ad:a6:d3:f0:50:d1:c8:87:dd: 5b:9a:ab:40:35:43:7f:6e:5e:cc:af:1d:54:b9:fb:df:49:7b: 0c:1b:17:25:e3:f0:79:9e:3c:5b:fe:35:ec:d5:64:8e:44:ec: 54:92:23:62:af:ed:10:ca:16:4a:c6:c4:ed:e6:5b:e1:bd:bf: f9:9a:03:23:cb:98:9d:b0:4d:58:ad:0f:4e:07:8f:df:1d:ef: 4d:2d:41:bd:f9:e7:44:81:68:80:3a:c0:47:7c:63:5e:ef:65: 16:0f:ba:00:8d:b9:df:2c:16:68:9d:ec:f9:fe:c0:89:4e:27: dc:53:ff:13:91:6b:75:e6:89:c0:b8:43:fd:6a:56:71:27:ea: 47:33:26:d5:63:9d:4a:52:f5:13:62:47:43:80:bb:18:50:f5: f7:a6:e3:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5zFMbk3u7xftLeLpg+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMTI4OTllM2IwOGMxN2Y1YzMzNWI1Y2JjNzhkYTVhZGZl ZjliMWYwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD Eyg3MTg3MDU5NzVlODM0NzU4M2I4OTNiNmE3YWU3OWYwYWRlODJkMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwmNqkSuMjyyVLTlc/+Rf6EYEIKq WbRJxqKK3/kHU8s0HxkKNQNlE+3/1SmA0uUsMc95p8zVibP6MmNqFdf6wvXGadrA y/hLSKsYoiHtS/b16snOpOl9VdUuKTrlpnl4+QLB6Eh5TCujWS8Dg3OytPfY0JuK lKdauNeBH9C0eVbuqQczmAhL1K2zxwCDwjSpQxF1pqx4EiuDXFVX4TClic2dmUc3 SukSFWnTpj3YishE3a+bO2K7SZ06YQ2HBRWVWcr0zhyE/vbNbxIGqQX3XrJ6hdcJ CN/68VPmymrQ5YbUiN1ksgC1wk9m6wCWkfLvQ7Ww0fE+cxL1ygc7ShKKrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGHBZdeg0dYO4k7anrnnwregtJUMB8GA1UdIwQY MBaAFCESiZ47CMF/XDNbXLx42lrf75sfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVJLSm5qc0l3WDljTTF0Y3ZIamFXdF92bXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni81NDE3ZjQtNGQ2Ni00ZGU5LTkzNWQt OTdhZDIzNzRhNTk3LzEvSVJLSm5qc0l3WDljTTF0Y3ZIamFXdF92bXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni81NDE3ZjQtNGQ2Ni00ZGU5LTkzNWQtOTdhZDIzNzRhNTk3 LzEvSVJLSm5qc0l3WDljTTF0Y3ZIamFXdF92bXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb10luPa 9IMccWGT/SeWL1bv/px5f8JG6mULJ6iYFsaArMO18d/lka5t4fZpta3Ts+JvvjPF cYmue8XmNkEw/ZfzDmRAZXAIrDyUsxblGyVdkcIpIF1BZ++JFCRAtYUMNxzYrabT 8FDRyIfdW5qrQDVDf25ezK8dVLn730l7DBsXJePweZ48W/417NVkjkTsVJIjYq/t EMoWSsbE7eZb4b2/+ZoDI8uYnbBNWK0PTgeP3x3vTS1BvfnnRIFogDrAR3xjXu9l Fg+6AI253ywWaJ3s+f7AiU4n3FP/E5FrdeaJwLhD/WpWcSfqRzMm1WOdSlL1E2JH Q4C7GFD196bjlw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:34 2025 by rpki-client