This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json) Hash identifier: X9W9Moh8vk8hv23HJbCS1hHl9C5hCw755wh3Xuuf/fA= Subject key identifier: 44:3D:A9:6A:D3:8F:57:7E:3C:26:D2:16:50:10:89:8A:0F:83:81:92 Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47 Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47 Certificate serial: 019AF23FF1FB13DD3B617D7E506E7A97EA05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft Manifest number: 0BCE Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=) 2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: EQMEf7fHUFq904IMOr1q0sZJBM2LQhoJVC5IOpKiEQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f1:fb:13:dd:3b:61:7d:7e:50:6e:7a:97:ea:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=443da96ad38f577e3c26d2165010898a0f838192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:8c:d6:46:11:25:46:cf:8c:a4:32:b8:55: 22:4a:05:a7:20:2e:f6:6a:74:66:fc:a4:6c:02:4c: 79:32:db:fb:c6:b5:0a:99:af:37:5e:7c:b1:78:54: ff:91:e3:df:a5:c8:95:40:0d:56:de:7c:f9:b7:11: 68:d1:41:45:9c:bd:16:1c:62:c5:15:33:b9:4a:b5: d6:93:2b:4c:0f:ee:71:45:21:26:e8:9c:67:00:0e: 52:03:d5:6a:ef:25:4f:25:f8:2c:0b:51:85:64:72: 0a:2d:74:a0:6a:e3:72:45:ad:61:24:f6:5b:0f:00: ca:1a:84:9d:82:49:4b:fc:f5:1d:c7:f7:d8:64:65: b6:82:34:69:e0:8f:8b:f2:28:50:b5:28:27:54:ec: 1b:bc:5b:ee:1b:54:31:a3:7e:37:ea:de:24:0c:93: c8:70:fb:d8:5c:1e:e3:26:ca:d6:66:79:58:22:d4: 7a:20:4c:60:22:ca:e4:b6:c5:f1:95:32:0a:2c:19: 9a:79:90:9a:dc:f3:35:ee:b9:c5:d3:5b:8d:20:ac: 08:89:ef:47:ba:dd:78:f0:e0:3f:72:4b:2c:e2:28: 76:87:f8:7e:7a:5e:89:65:8b:6c:16:29:db:27:64: 03:18:78:ac:75:8b:29:a3:88:d8:4d:f7:8d:f3:0c: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3D:A9:6A:D3:8F:57:7E:3C:26:D2:16:50:10:89:8A:0F:83:81:92 X509v3 Authority Key Identifier: keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2f:0b:fc:55:b0:0f:53:d1:7c:b8:0f:9e:9d:56:99:0b:01: 61:f1:dc:33:11:85:25:23:af:a0:47:10:2f:8a:6e:fc:7b:b7: 8b:d4:19:65:c2:d7:43:b2:f4:38:72:74:d0:af:92:5f:a2:14: 2a:6d:0c:73:31:67:10:66:2a:c8:6c:29:03:01:82:54:33:29: 22:49:ed:52:0b:70:8f:81:63:b3:36:c3:a9:7e:3c:7e:33:c5: 95:ee:67:da:29:30:c1:56:88:e4:60:74:4d:e9:15:ef:8e:c3: 91:5a:6c:c2:79:55:7a:30:42:5b:b7:24:59:67:6f:90:8a:b8: dc:18:9c:0e:fe:ea:70:7c:23:b2:c0:c3:6c:53:2d:a5:ec:32: b8:31:95:1a:04:9a:60:b0:9e:f6:8a:20:49:30:ad:bd:1a:29: bf:09:bb:c0:ed:84:40:fe:3a:6d:56:ba:46:f5:a3:2c:ab:00: 0b:2a:76:73:1a:db:6c:18:bd:d5:f2:d5:66:2f:02:a6:8a:3a: 44:d8:c0:bd:34:a0:85:c0:ae:9a:b6:4f:e3:45:56:23:0f:a4: e9:b5:87:bb:32:c8:80:1f:8a:06:3c:af:9d:05:21:d8:ab:60: 46:fa:1f:ff:2a:c5:3f:c9:83:e5:5d:e1:cc:15:fd:1a:bd:b3: af:ab:b8:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/H7E907YX1+UG56l+oFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzRmMGY5Mjc1ZDk4MDY2MmFmYmI2Y2FmZmZlNGRiOWM5 YzlkNDcwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD Eyg0NDNkYTk2YWQzOGY1NzdlM2MyNmQyMTY1MDEwODk4YTBmODM4MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP2M1kYRJUbPjKQyuFUiSgWnIC72 anRm/KRsAkx5Mtv7xrUKma83XnyxeFT/kePfpciVQA1W3nz5txFo0UFFnL0WHGLF FTO5SrXWkytMD+5xRSEm6JxnAA5SA9Vq7yVPJfgsC1GFZHIKLXSgauNyRa1hJPZb DwDKGoSdgklL/PUdx/fYZGW2gjRp4I+L8ihQtSgnVOwbvFvuG1Qxo3436t4kDJPI cPvYXB7jJsrWZnlYItR6IExgIsrktsXxlTIKLBmaeZCa3PM17rnF01uNIKwIie9H ut148OA/ckss4ih2h/h+el6JZYtsFinbJ2QDGHisdYspo4jYTfeN8wwvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ9qWrTj1d+PCbSFlAQiYoPg4GSMB8GA1UdIwQY MBaAFIs08PknXZgGYq+7bK//5NucnJ1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpUdy1TZGRtQVppcjd0c3JfX2syNXljblVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kYzkzMDktY2EwOC00MThlLWI1MTgt MWFhMDE2NmUzN2U0LzEvaXpUdy1TZGRtQVppcjd0c3JfX2syNXljblVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9kYzkzMDktY2EwOC00MThlLWI1MTgtMWFhMDE2NmUzN2U0 LzEvaXpUdy1TZGRtQVppcjd0c3JfX2syNXljblVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS8L/FWw D1PRfLgPnp1WmQsBYfHcMxGFJSOvoEcQL4pu/Hu3i9QZZcLXQ7L0OHJ00K+SX6IU Km0MczFnEGYqyGwpAwGCVDMpIkntUgtwj4FjszbDqX48fjPFle5n2ikwwVaI5GB0 TekV747DkVpswnlVejBCW7ckWWdvkIq43BicDv7qcHwjssDDbFMtpewyuDGVGgSa YLCe9oogSTCtvRopvwm7wO2EQP46bVa6RvWjLKsACyp2cxrbbBi91fLVZi8Cpoo6 RNjAvTSghcCumrZP40VWIw+k6bWHuzLIgB+KBjyvnQUh2KtgRvof/yrFP8mD5V3h zBX9Gr2zr6u4pw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:14 2025 by rpki-client