This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft File: Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json) Hash identifier: 065cjU0GOzPZ0LLbfOgVjx+a3rUH8On5oM0EP4qfE+c= Subject key identifier: 84:A8:61:E4:24:F2:62:69:16:7A:86:DF:C7:B8:B6:6A:21:B7:D4:ED Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F Certificate issuer: /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f Certificate serial: 019AF50BD92009BB3AF40CCA1AE279DC6038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft Manifest number: 0F63 Signing time: Sat 06 Dec 2025 19:03:05 +0000 Manifest this update: Sat 06 Dec 2025 19:03:05 +0000 Manifest next update: Sun 07 Dec 2025 19:03:05 +0000 Files and hashes: 1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: pfrGQdPe8n9elHp59VqYKVCCzHgYM5+Oc/jeeFHJe64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d9:20:09:bb:3a:f4:0c:ca:1a:e2:79:dc:60:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f Validity Not Before: Dec 6 19:03:05 2025 GMT Not After : Dec 7 19:03:05 2025 GMT Subject: CN=84a861e424f26269167a86dfc7b8b66a21b7d4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:b9:6c:be:34:dc:e1:20:5a:20:2a:3b:1e: 1e:b3:21:2b:ff:21:d1:18:64:a3:1d:18:4d:24:24: 78:27:39:26:0b:15:27:e4:a1:f2:07:81:d9:e2:9c: f6:c4:77:17:11:e3:90:41:01:d5:7b:98:94:47:ce: 33:b8:cd:90:01:3e:58:c9:68:9b:b2:16:00:0b:30: c1:7b:88:8a:6d:e2:02:29:92:af:9b:0f:e5:7d:0b: c3:46:d3:09:8c:8e:db:62:fe:ff:5f:14:80:4f:6c: 18:69:33:20:6a:7d:9e:e1:2f:6e:41:c0:0d:db:5a: 5f:c8:5d:e9:7f:c0:64:ed:44:01:fd:eb:da:e0:5e: be:99:e8:b2:a9:e4:d2:92:b4:08:9b:e7:fb:7d:bd: 54:3c:cb:0a:b0:db:91:a4:7f:2f:5d:b1:2a:27:93: 13:54:71:50:4d:44:b4:a3:a2:99:92:cc:7c:37:6b: e5:1d:45:e1:ea:45:6f:d9:08:12:e1:21:81:8f:0a: b6:d2:ee:41:af:2f:24:b7:00:9b:f7:87:ef:07:30: 19:89:30:e2:37:1d:6c:1a:b9:12:75:e6:59:83:7a: 70:74:75:ff:f0:bb:4c:1b:ca:67:be:f1:ab:2c:60: 9f:a1:99:ae:0f:74:5b:e8:c8:d8:46:65:31:55:73: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A8:61:E4:24:F2:62:69:16:7A:86:DF:C7:B8:B6:6A:21:B7:D4:ED X509v3 Authority Key Identifier: keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f0:71:90:fb:d9:ef:08:04:2c:d0:cf:1b:1a:d4:de:94:0c: 81:3d:64:03:96:3e:38:e6:3d:4b:c7:9c:b1:a7:64:14:b3:fa: 0e:64:a9:92:7c:c7:b9:82:12:62:35:81:3c:49:ec:d3:48:e5: 0a:00:a8:1f:84:28:3b:79:c5:7f:df:c3:20:62:23:00:f0:0c: 1a:f6:b5:2b:fa:46:3e:3f:0a:d6:2d:e0:ac:aa:30:97:97:1d: 36:b7:2c:b6:98:6d:ef:4f:56:63:6e:e3:72:b4:a0:fc:ea:25: 70:6f:d9:bd:b0:aa:67:4f:12:b3:64:96:37:1e:7e:68:63:d1: 21:a4:01:82:6a:1e:6b:47:02:88:94:5f:78:6b:ca:f8:4e:02: e8:26:5f:13:37:26:08:68:9d:52:33:ef:40:4d:98:7c:2a:6d: cc:25:92:a4:67:2c:b3:cb:d7:df:d2:bd:a1:b6:73:b9:74:bc: c7:88:c7:f1:e3:c7:1b:1e:3e:df:e9:00:ef:96:ac:db:2e:48: e6:3f:70:17:ff:43:80:da:46:47:fd:8a:ea:e0:22:b1:e7:76: 46:54:92:1f:e3:4b:48:c1:31:9c:24:9d:14:83:58:11:46:c1: 1e:c5:59:42:5c:ff:60:79:4a:7e:df:08:ec:4e:d0:f1:aa:93: 2d:a2:3a:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9kgCbs69AzKGuJ53GA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjcxZGUzZTAxMDU5YWJlNmQxYTU5M2M0YTI0ZmY2ZTE4 OGQ2NGYwHhcNMjUxMjA2MTkwMzA1WhcNMjUxMjA3MTkwMzA1WjAzMTEwLwYDVQQD Eyg4NGE4NjFlNDI0ZjI2MjY5MTY3YTg2ZGZjN2I4YjY2YTIxYjdkNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfa5bL403OEgWiAqOx4esyEr/yHR GGSjHRhNJCR4JzkmCxUn5KHyB4HZ4pz2xHcXEeOQQQHVe5iUR84zuM2QAT5YyWib shYACzDBe4iKbeICKZKvmw/lfQvDRtMJjI7bYv7/XxSAT2wYaTMgan2e4S9uQcAN 21pfyF3pf8Bk7UQB/eva4F6+meiyqeTSkrQIm+f7fb1UPMsKsNuRpH8vXbEqJ5MT VHFQTUS0o6KZksx8N2vlHUXh6kVv2QgS4SGBjwq20u5Bry8ktwCb94fvBzAZiTDi Nx1sGrkSdeZZg3pwdHX/8LtMG8pnvvGrLGCfoZmuD3Rb6MjYRmUxVXPlyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISoYeQk8mJpFnqG38e4tmoht9TtMB8GA1UdIwQY MBaAFCMnHePgEFmr5tGlk8SiT/bhiNZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zZjdhMDYtMmI0NS00YTBiLWJhNmMt OTU4YzM3NjUwNmVkLzEvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zZjdhMDYtMmI0NS00YTBiLWJhNmMtOTU4YzM3NjUwNmVk LzEvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvBxkPvZ 7wgELNDPGxrU3pQMgT1kA5Y+OOY9S8ecsadkFLP6DmSpknzHuYISYjWBPEns00jl CgCoH4QoO3nFf9/DIGIjAPAMGva1K/pGPj8K1i3grKowl5cdNrcstpht709WY27j crSg/OolcG/ZvbCqZ08Ss2SWNx5+aGPRIaQBgmoea0cCiJRfeGvK+E4C6CZfEzcm CGidUjPvQE2YfCptzCWSpGcss8vX39K9obZzuXS8x4jH8ePHGx4+3+kA75as2y5I 5j9wF/9DgNpGR/2K6uAised2RlSSH+NLSMExnCSdFINYEUbBHsVZQlz/YHlKft8I 7E7Q8aqTLaI6Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:19 2025 by rpki-client