This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft File: Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json) Hash identifier: WPCFdvERnIMangVwSj4kTb1cJKM90wzvYfM/9zIQpf0= Subject key identifier: 91:28:34:0E:16:0E:0B:42:1A:7E:16:A3:83:21:7E:ED:58:52:1C:C3 Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F Certificate issuer: /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f Certificate serial: 019B2EF908DEED2320DDDA9CC14FC303F694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft Manifest number: 0F81 Signing time: Thu 18 Dec 2025 01:00:31 +0000 Manifest this update: Thu 18 Dec 2025 01:00:31 +0000 Manifest next update: Fri 19 Dec 2025 01:00:31 +0000 Files and hashes: 1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: 9usUdlcFDbhbxdSFmODpcc1F3BXUYlMPJLYIfoNeKaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:08:de:ed:23:20:dd:da:9c:c1:4f:c3:03:f6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f Validity Not Before: Dec 18 01:00:31 2025 GMT Not After : Dec 19 01:00:31 2025 GMT Subject: CN=9128340e160e0b421a7e16a383217eed58521cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:62:e6:83:85:88:37:c0:5f:49:91:8d:1d:55: 27:f8:a2:3c:08:51:26:96:c8:ef:03:71:9a:41:2c: 23:c0:9b:32:9f:44:ef:8b:6f:02:4c:c6:df:eb:c2: 59:ed:39:95:6a:4a:b8:ea:5c:db:6e:de:37:47:5a: 6c:9f:04:dd:a4:6f:e0:8d:ab:0b:d6:be:20:f2:26: a2:9e:28:8c:f5:7c:76:2d:fa:fd:d3:85:59:a6:af: e8:ba:e8:09:e4:c3:93:75:c8:3c:c7:42:0a:e3:cd: ef:6a:1f:7b:3a:12:18:79:25:2a:b3:d6:54:ba:65: 73:d3:6c:3a:6a:e0:d0:22:94:52:3c:aa:5c:12:a6: 89:a0:0e:d2:c0:81:dc:af:13:1f:92:45:e1:9a:89: 3a:dd:b2:f6:8e:8d:8d:31:48:c3:2c:12:ab:bc:d2: cd:9c:23:9d:75:ac:9c:16:c6:c0:52:d8:e2:92:84: ea:b6:ce:fe:ca:e0:59:99:df:91:72:0a:0b:d9:06: b3:70:f4:c1:c7:65:18:4d:3c:cf:e4:d6:d6:03:42: 97:57:e6:70:55:cf:09:c3:e7:74:db:43:29:d0:20: b4:f6:eb:f4:82:45:c2:93:cb:27:a2:dc:68:c7:17: 06:4b:81:9e:90:ac:98:e5:99:4f:c3:06:1b:2d:f1: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:34:0E:16:0E:0B:42:1A:7E:16:A3:83:21:7E:ED:58:52:1C:C3 X509v3 Authority Key Identifier: keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f0:ff:e9:ac:43:0b:84:3a:0b:0a:f0:12:18:2a:35:12:a0: aa:e8:2b:fa:b8:48:a6:aa:d0:ec:bc:19:9c:94:b4:7f:f2:de: c7:ce:71:f8:41:ff:9e:02:ca:57:d0:17:52:13:51:8e:b1:5c: e4:b1:c4:c1:6d:a8:7f:bb:75:2d:9c:12:57:65:c1:c5:5a:de: 95:cb:3d:30:55:1a:77:7e:3b:ac:9f:36:83:23:e6:81:09:c5: c4:97:b4:84:cb:bc:6a:b5:e6:5d:b0:2f:8a:8a:7d:f8:78:0d: 0f:e0:c0:e2:14:31:c9:57:18:ff:0a:23:f7:f8:ad:f3:b7:a7: 75:b0:e4:69:20:52:e1:f2:0a:3e:da:62:f5:04:b4:35:b6:33: 81:ed:9c:3a:e0:cc:77:80:64:8f:57:7a:28:72:75:01:6d:da: a0:10:6c:d9:60:91:44:ff:d9:e3:95:e7:77:fa:93:0b:71:bf: ec:da:49:05:3f:f5:67:cc:1f:c9:70:1a:91:6f:a0:00:70:ec: 41:28:39:ee:2a:1a:b1:98:8b:6b:16:57:83:0d:a8:29:2c:b8: 55:24:74:68:dc:ab:ff:05:f3:43:f0:59:46:88:46:7d:0d:0c: dc:c7:60:4b:be:b6:ce:e6:7f:55:60:85:5e:82:87:43:1b:18: d9:cf:da:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Qje7SMg3dqcwU/DA/aUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjcxZGUzZTAxMDU5YWJlNmQxYTU5M2M0YTI0ZmY2ZTE4 OGQ2NGYwHhcNMjUxMjE4MDEwMDMxWhcNMjUxMjE5MDEwMDMxWjAzMTEwLwYDVQQD Eyg5MTI4MzQwZTE2MGUwYjQyMWE3ZTE2YTM4MzIxN2VlZDU4NTIxY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Lmg4WIN8BfSZGNHVUn+KI8CFEm lsjvA3GaQSwjwJsyn0Tvi28CTMbf68JZ7TmVakq46lzbbt43R1psnwTdpG/gjasL 1r4g8iainiiM9Xx2Lfr904VZpq/ouugJ5MOTdcg8x0IK483vah97OhIYeSUqs9ZU umVz02w6auDQIpRSPKpcEqaJoA7SwIHcrxMfkkXhmok63bL2jo2NMUjDLBKrvNLN nCOddaycFsbAUtjikoTqts7+yuBZmd+RcgoL2QazcPTBx2UYTTzP5NbWA0KXV+Zw Vc8Jw+d020Mp0CC09uv0gkXCk8snotxoxxcGS4GekKyY5ZlPwwYbLfFQJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEoNA4WDgtCGn4Wo4Mhfu1YUhzDMB8GA1UdIwQY MBaAFCMnHePgEFmr5tGlk8SiT/bhiNZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zZjdhMDYtMmI0NS00YTBiLWJhNmMt OTU4YzM3NjUwNmVkLzEvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zZjdhMDYtMmI0NS00YTBiLWJhNmMtOTU4YzM3NjUwNmVk LzEvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvD/6axD C4Q6CwrwEhgqNRKgqugr+rhIpqrQ7LwZnJS0f/Lex85x+EH/ngLKV9AXUhNRjrFc 5LHEwW2of7t1LZwSV2XBxVrelcs9MFUad347rJ82gyPmgQnFxJe0hMu8arXmXbAv iop9+HgND+DA4hQxyVcY/woj9/it87endbDkaSBS4fIKPtpi9QS0NbYzge2cOuDM d4Bkj1d6KHJ1AW3aoBBs2WCRRP/Z45Xnd/qTC3G/7NpJBT/1Z8wfyXAakW+gAHDs QSg57ioasZiLaxZXgw2oKSy4VSR0aNyr/wXzQ/BZRohGfQ0M3MdgS762zuZ/VWCF XoKHQxsY2c/aPg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:57:21 2025 by rpki-client