This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json) Hash identifier: PMrMmv0qM0oieQ3wwwl6/jdm5JvSVSIuOpgNHlE2qRA= Subject key identifier: C5:DE:62:36:80:02:98:6E:FE:AA:1B:75:20:EC:43:42:4C:21:BA:77 Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c Certificate serial: 019AF0F5C89AEAAB247D052A1F105111F489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft Manifest number: 11C8 Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: e3Q39HCfkkNKDsiwlauWUsdylfEQLqeWnahrlKEiVs8=) 2: zZFMBY-vtS-_iOLRNRnhU51Vas8.roa (hash: s23taZmL6D/J5bfrJpfCP1J8Y6gIlBQ0Q9KqDNbhx3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c8:9a:ea:ab:24:7d:05:2a:1f:10:51:11:f4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=c5de62368002986efeaa1b7520ec43424c21ba77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:20:b3:e3:75:4b:2e:37:9b:25:10:70:1e: 2b:0e:64:a2:8f:f7:22:30:70:a7:6e:95:3a:32:2d: 98:b4:6c:57:f8:bd:46:a4:a1:97:ca:02:f9:2d:c7: e9:71:d2:19:55:2f:c6:26:0b:d6:7e:64:35:3b:5f: 77:3b:79:0b:f1:3d:80:fc:cf:03:81:8c:be:d8:10: af:54:68:ae:57:38:09:24:a6:3b:54:89:85:6a:94: 91:93:a1:17:9d:a1:6b:95:f1:82:3e:e5:23:a1:fb: a2:4e:3f:5f:d4:10:04:55:e8:18:83:65:39:22:29: 0c:60:75:af:5b:1c:22:6e:1c:2f:c5:db:7a:6b:b6: 09:96:6d:cc:24:6f:36:57:d2:35:a9:05:3e:a5:b4: bf:cf:59:65:f3:60:a4:bf:ef:1f:87:55:09:f5:5e: 4d:36:ef:f3:b3:77:b4:7f:35:0e:ee:79:2f:4c:c6: 81:ed:fa:97:b0:cb:66:fd:2f:91:c2:9a:70:22:30: 46:7d:8a:c2:13:97:8f:cc:8a:9f:9f:97:1a:cf:52: 3b:1e:53:87:3f:55:41:94:c2:a7:ee:67:dc:87:ee: 89:c6:48:1f:c0:5f:84:d3:93:0c:01:e5:4d:14:ab: 90:6b:b5:90:e7:96:0c:de:84:db:24:b8:e5:8f:db: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DE:62:36:80:02:98:6E:FE:AA:1B:75:20:EC:43:42:4C:21:BA:77 X509v3 Authority Key Identifier: keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:18:c8:fc:ab:ee:3c:bc:0c:72:3f:05:ae:18:c8:f3:c8:55: 0f:50:eb:a1:c5:d2:d8:cc:c6:e3:86:de:95:f1:17:54:dd:69: 8c:dd:f2:fe:11:27:f6:73:c5:45:3c:65:69:a9:bb:f0:fc:98: 32:6e:4c:8b:94:8a:4c:81:ef:1a:eb:a1:ec:4a:07:f2:ca:94: d7:26:b2:44:9c:08:e8:fa:d6:2a:1f:b0:f8:6b:1c:d0:39:ba: b6:e1:de:4a:6d:5e:ed:11:ee:8e:81:8d:49:13:86:0e:b8:10: 25:4b:37:ea:22:a6:8c:fe:e7:93:c7:0a:9f:e8:a9:14:ea:64: 1d:44:19:00:07:a3:15:a7:ac:ad:33:41:e5:e5:8f:8e:30:78: 9f:45:fd:59:7b:cb:12:18:0b:3c:61:08:95:24:7c:67:8c:6e: 50:f5:3e:94:61:9c:43:a0:7c:1c:00:92:4c:82:17:47:24:2e: 75:b3:a6:49:d1:9c:95:52:7b:7c:30:9e:f8:ab:d3:51:2a:37: 63:d3:72:5d:29:ce:48:8e:a6:60:6a:e1:c8:88:d3:74:14:94: 5a:56:36:60:8e:fb:49:45:c2:8d:c7:8d:04:de:99:59:ff:b9: 73:92:0f:73:63:76:2f:0e:80:2e:a5:e1:8d:83:b6:92:37:a5: 54:32:92:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cia6qskfQUqHxBREfSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxODJjZDNhYzVjNGRiNjdlYTczMWE2YjcxOThiN2Q2ZTRm ZjExNWMwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD EyhjNWRlNjIzNjgwMDI5ODZlZmVhYTFiNzUyMGVjNDM0MjRjMjFiYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr0gs+N1Sy43myUQcB4rDmSij/ci MHCnbpU6Mi2YtGxX+L1GpKGXygL5LcfpcdIZVS/GJgvWfmQ1O193O3kL8T2A/M8D gYy+2BCvVGiuVzgJJKY7VImFapSRk6EXnaFrlfGCPuUjofuiTj9f1BAEVegYg2U5 IikMYHWvWxwibhwvxdt6a7YJlm3MJG82V9I1qQU+pbS/z1ll82Ckv+8fh1UJ9V5N Nu/zs3e0fzUO7nkvTMaB7fqXsMtm/S+RwppwIjBGfYrCE5ePzIqfn5caz1I7HlOH P1VBlMKn7mfch+6JxkgfwF+E05MMAeVNFKuQa7WQ55YM3oTbJLjlj9vCQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXeYjaAAphu/qobdSDsQ0JMIbp3MB8GA1UdIwQY MBaAFCGCzTrFxNtn6nMaa3GYt9bk/xFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYt NDY2M2JjOWRhOTY0LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYtNDY2M2JjOWRhOTY0 LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRjI/Kvu PLwMcj8FrhjI88hVD1DrocXS2MzG44belfEXVN1pjN3y/hEn9nPFRTxlaam78PyY Mm5Mi5SKTIHvGuuh7EoH8sqU1yayRJwI6PrWKh+w+Gsc0Dm6tuHeSm1e7RHujoGN SROGDrgQJUs36iKmjP7nk8cKn+ipFOpkHUQZAAejFaesrTNB5eWPjjB4n0X9WXvL EhgLPGEIlSR8Z4xuUPU+lGGcQ6B8HACSTIIXRyQudbOmSdGclVJ7fDCe+KvTUSo3 Y9NyXSnOSI6mYGrhyIjTdBSUWlY2YI77SUXCjceNBN6ZWf+5c5IPc2N2Lw6ALqXh jYO2kjelVDKSVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:54 2025 by rpki-client