This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json) Hash identifier: AWPwkIV4EHF9w5N20ixQH7+JeMoQu/RcPUkJQWFhNi8= Subject key identifier: 1A:10:A6:17:AC:E9:ED:20:CC:56:BD:6D:02:9A:FC:31:AD:62:23:A5 Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e Certificate serial: 019AF19AAE01B216F11946C41F3756156D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft Manifest number: 0B8C Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: rH4XdtuyYqZsO9ljUW02SHyEw1cXizUPWG6IyXPenDo=) 2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ae:01:b2:16:f1:19:46:c4:1f:37:56:15:6d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233adc97f9826262007f46286591830df58fc55e Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=1a10a617ace9ed20cc56bd6d029afc31ad6223a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:35:3b:48:0d:44:c7:f4:80:17:75:18:79: 4d:1d:16:f3:fe:c4:80:cc:68:5c:82:55:14:00:a9: e0:d1:8f:2f:c8:f8:d7:2c:10:1e:47:7a:f3:80:72: 12:94:5b:02:db:ab:96:5a:89:f7:0f:91:a3:95:31: 4d:c4:1d:c2:bd:84:90:38:a4:d8:ac:9e:93:66:59: 6a:75:83:e2:bf:20:3a:c7:9f:e8:72:60:39:fd:19: e1:c0:24:2a:d0:24:3f:d8:b1:ee:9c:c0:db:13:0a: 78:ff:13:bc:22:7e:71:d6:ec:99:2a:b0:42:b6:2f: b3:ff:2c:66:f4:ce:17:ea:cd:9b:4a:df:85:05:60: 7a:08:31:d6:dc:87:a8:b9:bb:d7:d1:d3:57:f2:9b: d0:38:82:fc:96:12:0f:0a:16:25:e0:63:ec:ef:92: 12:f1:2e:6d:82:26:4a:84:bf:dc:14:33:a4:dd:07: 7f:23:cf:ea:6f:e9:da:e3:74:24:b6:db:f0:b7:97: 7d:a7:b0:82:85:be:72:dc:87:e0:dc:1a:60:e1:6c: 2e:3b:9b:ee:14:e7:47:97:10:08:fe:2b:0d:85:fe: 48:48:70:29:f4:f6:7e:63:01:c3:5e:92:fe:9c:bd: c7:0c:19:cf:13:29:2d:b4:ee:ac:25:62:70:e8:c2: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:A6:17:AC:E9:ED:20:CC:56:BD:6D:02:9A:FC:31:AD:62:23:A5 X509v3 Authority Key Identifier: keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:00:b3:a2:13:ea:0d:2d:54:de:60:36:52:87:ba:2a:67:47: 07:41:7b:d0:9f:f5:ea:7e:c9:62:06:0f:a6:92:08:3e:08:e0: 21:08:46:0a:be:27:4a:45:6b:17:42:2a:46:0c:5d:28:6b:a7: 66:e9:b4:38:8c:6f:2d:be:56:79:cb:59:02:6b:bc:45:e9:ba: 38:6e:73:d4:cf:fc:04:ac:26:10:5a:7c:70:c3:20:4b:41:d4: 18:33:ed:fa:51:60:fc:14:b8:3f:25:18:7f:b7:b7:66:37:09: b9:5d:75:15:97:af:e5:9a:e6:89:d3:e1:7d:73:74:fe:5e:27: bc:4c:5a:b0:a6:ab:ae:f7:59:de:4f:8c:e6:88:0f:ec:50:a3: 07:76:7c:d9:25:2d:13:5e:29:b1:24:d4:c2:cd:5a:6a:e4:5c: 33:a8:5e:67:97:d4:34:c0:82:67:26:18:20:77:db:24:c9:2b: 65:16:0a:82:9b:ac:a1:b3:6a:fa:6a:15:ef:c3:d4:49:d2:37: 74:c6:ec:bc:31:06:c5:9b:42:03:f9:60:9f:a3:ad:3f:51:19: 82:10:79:83:ef:ea:56:11:21:3a:97:3c:40:39:62:2b:12:87: e3:75:65:f1:da:42:13:f5:ed:aa:1f:98:2b:53:21:b6:ac:d0: 71:01:14:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq4BshbxGUbEHzdWFW1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2FkYzk3Zjk4MjYyNjIwMDdmNDYyODY1OTE4MzBkZjU4 ZmM1NWUwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EygxYTEwYTYxN2FjZTllZDIwY2M1NmJkNmQwMjlhZmMzMWFkNjIyM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvec1O0gNRMf0gBd1GHlNHRbz/sSA zGhcglUUAKng0Y8vyPjXLBAeR3rzgHISlFsC26uWWon3D5GjlTFNxB3CvYSQOKTY rJ6TZllqdYPivyA6x5/ocmA5/RnhwCQq0CQ/2LHunMDbEwp4/xO8In5x1uyZKrBC ti+z/yxm9M4X6s2bSt+FBWB6CDHW3IeoubvX0dNX8pvQOIL8lhIPChYl4GPs75IS 8S5tgiZKhL/cFDOk3Qd/I8/qb+na43Qkttvwt5d9p7CChb5y3Ifg3Bpg4WwuO5vu FOdHlxAI/isNhf5ISHAp9PZ+YwHDXpL+nL3HDBnPEykttO6sJWJw6MLx9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoQphes6e0gzFa9bQKa/DGtYiOlMB8GA1UdIwQY MBaAFCM63Jf5gmJiAH9GKGWRgw31j8VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWIt NDU1YTEyYmM4MzAyLzEvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84ODk2NjctYzVlMi00MzQxLWI1ZWItNDU1YTEyYmM4MzAy LzEvSXpyY2xfbUNZbUlBZjBZb1paR0REZldQeFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwCzohPq DS1U3mA2Uoe6KmdHB0F70J/16n7JYgYPppIIPgjgIQhGCr4nSkVrF0IqRgxdKGun Zum0OIxvLb5WectZAmu8Rem6OG5z1M/8BKwmEFp8cMMgS0HUGDPt+lFg/BS4PyUY f7e3ZjcJuV11FZev5ZrmidPhfXN0/l4nvExasKarrvdZ3k+M5ogP7FCjB3Z82SUt E14psSTUws1aauRcM6heZ5fUNMCCZyYYIHfbJMkrZRYKgpusobNq+moV78PUSdI3 dMbsvDEGxZtCA/lgn6OtP1EZghB5g+/qVhEhOpc8QDliKxKH43Vl8dpCE/Xtqh+Y K1MhtqzQcQEUfw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:46 2025 by rpki-client