This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json) Hash identifier: ziYOPY54Q6Ed/cppaJKaMxIJud6KS0D1VgzdQI9avoY= Subject key identifier: E5:D3:EC:F2:71:22:EB:CD:35:91:21:B0:43:4C:79:AF:27:24:CC:0A Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301 Certificate serial: 019AF19B63940C62430C0ED2438702D0A427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft Manifest number: 06FD Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: 54Lf98+tEj5ZSKyAKCqRbbuhD+CfFL/ZG1qlx7RWDtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:63:94:0c:62:43:0c:0e:d2:43:87:02:d0:a4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=e5d3ecf27122ebcd359121b0434c79af2724cc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:f0:7e:7c:ac:3d:ef:29:7d:9d:f7:13:ab: 14:1a:7b:40:7f:15:d0:b8:9f:88:19:40:65:0a:66: d2:2d:26:b0:33:cd:59:04:70:67:62:82:35:58:f0: 16:f0:96:68:e6:86:c9:48:38:44:3d:8e:c1:72:ea: ae:8e:1b:19:15:99:b1:94:75:d3:81:82:34:af:29: 2a:e5:6a:b9:0c:1b:02:9c:e6:89:ff:3c:d5:30:d3: 22:97:c1:4b:d7:34:35:8b:0a:4b:d0:ad:10:51:d5: ea:ac:ff:19:e3:55:8f:fb:5b:6a:07:ca:9c:41:1f: ba:aa:81:62:e5:ff:81:94:2a:eb:97:6e:1f:80:2d: 58:56:b6:f0:50:3a:a9:72:c9:0c:73:8d:39:1b:63: f1:0a:73:3d:d1:39:ed:20:71:05:e7:27:bc:04:cd: 1a:46:09:dc:02:8e:3d:91:cb:68:39:93:69:65:10: 38:fd:4a:6e:ed:ef:6d:e3:a6:2f:3c:36:f8:e1:1e: f1:62:13:d3:34:50:01:55:29:45:b4:45:20:92:08: 75:54:f3:3f:26:35:6b:88:8e:63:6a:99:ba:32:90: c7:b9:25:aa:c2:0b:57:0c:21:58:8b:d9:76:b5:09: e1:cc:50:06:84:5e:2e:33:f6:8c:e0:f5:1e:9c:18: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D3:EC:F2:71:22:EB:CD:35:91:21:B0:43:4C:79:AF:27:24:CC:0A X509v3 Authority Key Identifier: keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3c:60:76:42:99:8b:0b:6b:22:ce:33:ff:19:93:4d:bf:9b: 59:03:e4:36:44:28:b9:c5:f0:91:87:18:be:ba:cc:3b:5b:44: f0:5c:bc:bc:9b:d3:52:b7:b1:1b:da:da:a6:87:27:e4:b9:c7: 9e:fc:6f:55:4a:f1:10:75:90:f7:4d:c5:83:83:8d:80:2f:ca: bb:7d:c6:9a:c1:59:22:98:8c:32:78:47:2b:15:d5:60:a3:a0: 7e:33:28:99:21:1c:1b:26:4a:09:66:12:f7:a4:a8:12:ae:11: 19:4e:14:a5:e3:f0:6c:c4:29:99:8a:11:4e:27:a2:38:72:f3: 83:f8:4c:85:0d:e9:bd:b2:14:3f:a9:67:ec:0d:35:7c:8f:29: af:98:82:f5:32:a1:d8:a0:88:d7:9a:31:ba:3e:da:1e:1d:f1: 6c:39:13:2f:47:53:e1:b1:b9:e3:0e:59:14:f2:df:72:62:c9: a6:8c:33:3d:76:6e:13:ac:c1:7c:c9:c7:4b:0d:b9:95:4c:54: ba:c7:0d:c7:11:02:f3:10:c9:75:91:88:6c:cf:2c:5f:da:84: 57:bb:1f:59:68:38:e1:f4:08:71:de:7f:dd:82:39:05:33:90: 6d:3d:de:ac:ce:82:b3:9f:31:ad:46:ce:e0:8f:eb:b3:c6:d5: cd:0d:4a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2OUDGJDDA7SQ4cC0KQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYWMzOGZlODEwNWZiNTlhMmNkMjU3ZjUxOWY4NTg1OTU4 NDAzMDEwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhlNWQzZWNmMjcxMjJlYmNkMzU5MTIxYjA0MzRjNzlhZjI3MjRjYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO3wfnysPe8pfZ33E6sUGntAfxXQ uJ+IGUBlCmbSLSawM81ZBHBnYoI1WPAW8JZo5obJSDhEPY7BcuqujhsZFZmxlHXT gYI0rykq5Wq5DBsCnOaJ/zzVMNMil8FL1zQ1iwpL0K0QUdXqrP8Z41WP+1tqB8qc QR+6qoFi5f+BlCrrl24fgC1YVrbwUDqpcskMc405G2PxCnM90TntIHEF5ye8BM0a RgncAo49kctoOZNpZRA4/Upu7e9t46YvPDb44R7xYhPTNFABVSlFtEUgkgh1VPM/ JjVriI5japm6MpDHuSWqwgtXDCFYi9l2tQnhzFAGhF4uM/aM4PUenBgFWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXT7PJxIuvNNZEhsENMea8nJMwKMB8GA1UdIwQY MBaAFCGsOP6BBftZos0lf1GfhYWVhAMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmIt MGNmNTRjZmE4ZGExLzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmItMGNmNTRjZmE4ZGEx LzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzxgdkKZ iwtrIs4z/xmTTb+bWQPkNkQoucXwkYcYvrrMO1tE8Fy8vJvTUrexG9rapocn5LnH nvxvVUrxEHWQ903Fg4ONgC/Ku33GmsFZIpiMMnhHKxXVYKOgfjMomSEcGyZKCWYS 96SoEq4RGU4UpePwbMQpmYoRTieiOHLzg/hMhQ3pvbIUP6ln7A01fI8pr5iC9TKh 2KCI15oxuj7aHh3xbDkTL0dT4bG54w5ZFPLfcmLJpowzPXZuE6zBfMnHSw25lUxU uscNxxEC8xDJdZGIbM8sX9qEV7sfWWg44fQIcd5/3YI5BTOQbT3erM6Cs58xrUbO 4I/rs8bVzQ1Kfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:07 2025 by rpki-client