This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json) Hash identifier: fIRciFxv4v6gNJAn0IzCxLsVMTBh8bMmU1uojL50P/w= Subject key identifier: B2:29:69:90:0E:6E:D4:F8:06:C6:00:9C:85:01:1F:7B:C4:DE:4A:C9 Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62 Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62 Certificate serial: 019AF20981FEE9307CE04375F413693DC708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft Manifest number: 119C Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: lMW67TMyNvDI/+on9+0fluV0A73Xk2Daa+7TB9uFXCw=) 2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:81:fe:e9:30:7c:e0:43:75:f4:13:69:3d:c7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=b22969900e6ed4f806c6009c85011f7bc4de4ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:24:cc:90:41:cf:fc:a3:cf:73:50:d3:77: 67:07:c4:cd:bd:89:a8:f0:84:f9:35:ad:06:2f:b4: 84:86:02:23:8a:8f:ac:3f:4c:ed:51:bb:42:14:ab: d8:92:70:42:4a:ef:63:75:da:45:78:37:eb:f4:32: 5c:d2:3c:b8:cd:ba:ba:b8:be:d6:c3:96:bc:20:2a: 00:37:ef:be:88:95:7c:e3:c3:85:d1:44:16:cb:fa: 46:65:54:97:d1:d3:1d:56:e8:92:34:93:a7:f9:eb: 6a:80:dd:86:ba:50:2c:bf:4b:a3:72:3a:e3:ae:ef: d3:f9:a4:f5:cf:88:cf:09:9a:c2:e5:67:eb:a5:3d: b4:7a:21:77:af:f5:7b:4c:71:df:d6:47:12:55:bc: 45:91:49:ea:a5:a9:6f:4c:91:30:0c:97:e3:5b:17: 51:b5:fa:20:bc:1c:95:d9:3b:6a:e7:7b:e3:cf:22: 2b:c1:8a:ff:01:b1:60:9b:3c:df:13:8b:45:88:9d: b4:91:e0:9d:67:26:d3:fb:18:11:30:b6:51:75:fb: 61:1c:21:65:b8:a1:37:28:e7:6f:6e:41:d1:bb:98: 5c:a6:5d:88:32:5e:9f:f6:c0:5a:d4:3f:b7:f1:da: a4:b3:b5:a8:18:d3:85:88:3f:cd:9a:60:08:cf:f9: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:29:69:90:0E:6E:D4:F8:06:C6:00:9C:85:01:1F:7B:C4:DE:4A:C9 X509v3 Authority Key Identifier: keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ca:c6:58:82:6b:37:e7:c8:af:d7:00:a9:30:68:17:88:0d: 13:3f:5e:03:ee:30:55:da:83:bf:91:78:b7:9a:76:5c:56:5d: 5b:97:f6:a9:9d:db:ad:dc:f2:2c:91:2c:fe:f3:45:4a:2e:03: 7e:55:cb:44:b3:af:03:fa:ba:2d:db:cd:69:d8:3c:57:c0:ff: f1:0a:54:0c:93:b5:b8:68:a9:9c:eb:9a:b8:c9:89:46:b7:68: 77:b5:aa:16:7a:c1:64:8e:e0:a5:cf:b6:10:87:35:67:02:33: 15:86:5b:7f:c1:3d:9d:cc:1e:ad:8c:e2:b5:b5:64:32:f8:80: 03:5e:31:57:39:b6:a0:17:ab:9b:e4:64:32:e3:25:a4:df:f6: d2:9a:c1:72:d9:67:af:a6:51:8b:7b:8f:54:4a:c7:46:3e:ab: 04:63:47:8d:e2:82:2a:5c:6e:68:3a:b4:c8:50:17:5f:a9:dc: 7b:7a:8d:17:ac:57:77:61:0b:c2:33:1c:1a:67:db:34:60:56: 8a:b1:2c:20:9e:36:0f:68:b5:af:d6:f2:89:4d:de:51:cf:f9: 25:d3:d7:23:2b:27:44:23:5b:8f:11:56:6b:d2:eb:c4:06:7b: b2:bc:6b:0b:7e:4c:8c:04:a8:fe:bb:36:61:ad:18:09:8f:99: bc:e0:3e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYH+6TB84EN19BNpPccIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjNlNGYzOWQxYzNjMTRkODMxNjA2YmZjYTE2NjZkZGU5 YmVkNjIwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EyhiMjI5Njk5MDBlNmVkNGY4MDZjNjAwOWM4NTAxMWY3YmM0ZGU0YWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4QkzJBBz/yjz3NQ03dnB8TNvYmo 8IT5Na0GL7SEhgIjio+sP0ztUbtCFKvYknBCSu9jddpFeDfr9DJc0jy4zbq6uL7W w5a8ICoAN+++iJV848OF0UQWy/pGZVSX0dMdVuiSNJOn+etqgN2GulAsv0ujcjrj ru/T+aT1z4jPCZrC5WfrpT20eiF3r/V7THHf1kcSVbxFkUnqpalvTJEwDJfjWxdR tfogvByV2Ttq53vjzyIrwYr/AbFgmzzfE4tFiJ20keCdZybT+xgRMLZRdfthHCFl uKE3KOdvbkHRu5hcpl2IMl6f9sBa1D+38dqks7WoGNOFiD/NmmAIz/kGZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIpaZAObtT4BsYAnIUBH3vE3krJMB8GA1UdIwQY MBaAFCKz5POdHDwU2DFga/yhZm3em+1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQt ZWQ1OTQ3ZjY2YjcwLzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQtZWQ1OTQ3ZjY2Yjcw LzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8rGWIJr N+fIr9cAqTBoF4gNEz9eA+4wVdqDv5F4t5p2XFZdW5f2qZ3brdzyLJEs/vNFSi4D flXLRLOvA/q6LdvNadg8V8D/8QpUDJO1uGipnOuauMmJRrdod7WqFnrBZI7gpc+2 EIc1ZwIzFYZbf8E9ncwerYzitbVkMviAA14xVzm2oBerm+RkMuMlpN/20prBctln r6ZRi3uPVErHRj6rBGNHjeKCKlxuaDq0yFAXX6nce3qNF6xXd2ELwjMcGmfbNGBW irEsIJ42D2i1r9byiU3eUc/5JdPXIysnRCNbjxFWa9LrxAZ7srxrC35MjASo/rs2 Ya0YCY+ZvOA+mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:28 2025 by rpki-client