This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json) Hash identifier: Xbg6rZye91/DhaTi0PQJVwe1phtJuCvsceXUEx4Anl8= Subject key identifier: 57:21:9A:7B:99:E8:6F:57:58:07:77:AF:51:A8:82:D1:E1:BE:A4:CA Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301 Certificate serial: 019B2F67B86557452B3946C874356326FF8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft Manifest number: 071D Signing time: Thu 18 Dec 2025 03:01:25 +0000 Manifest this update: Thu 18 Dec 2025 03:01:25 +0000 Manifest next update: Fri 19 Dec 2025 03:01:25 +0000 Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: Xbeoui5zcB3woKUl1u/W5COdUwJBPCBYir7eT3WI9Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:b8:65:57:45:2b:39:46:c8:74:35:63:26:ff:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301 Validity Not Before: Dec 18 03:01:25 2025 GMT Not After : Dec 19 03:01:25 2025 GMT Subject: CN=57219a7b99e86f57580777af51a882d1e1bea4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:60:0c:1d:8e:ed:66:11:ce:56:39:22:b9: 9b:24:f0:0a:fd:39:0e:71:80:e7:c1:fb:99:99:9c: 17:46:21:96:18:0c:b8:a2:78:af:6f:29:c6:ed:27: b9:64:b5:fa:2d:c6:a4:2d:49:8e:50:e8:7f:99:48: 3c:fb:8e:98:b7:cb:9b:27:7a:bc:41:64:89:17:b5: 6a:31:c5:1e:99:8f:ad:95:f8:31:0a:c6:ec:3d:e5: 17:37:22:fd:d4:c5:9c:3a:7e:ee:5e:69:42:41:0b: 14:c3:a6:38:b3:db:34:ba:e9:43:cb:17:e9:6c:9c: 00:98:1f:24:3b:52:1c:a7:48:ac:11:72:79:70:9d: 9c:a2:c4:77:42:95:f3:1d:6f:39:70:f0:e0:5a:5b: f9:c1:95:3f:4d:cb:6f:2a:0f:42:ec:aa:9e:11:f9: d6:d2:a6:e4:4c:18:66:a3:37:0b:f8:a4:7d:f2:77: 36:a0:ff:4e:39:0f:b4:45:09:b1:ee:b8:7b:10:dc: ac:3a:46:e9:8c:97:28:a9:5d:cb:e7:22:7e:ce:b7: a5:5a:ac:11:44:10:cd:4d:16:97:c8:04:02:29:05: 47:91:4f:cb:1b:b8:05:69:2e:4a:6a:a9:e8:c3:10: dc:0b:cc:6d:96:19:d9:02:12:dc:b6:26:86:a4:65: b0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:21:9A:7B:99:E8:6F:57:58:07:77:AF:51:A8:82:D1:E1:BE:A4:CA X509v3 Authority Key Identifier: keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:50:25:f6:82:72:b7:c2:68:af:54:c8:75:67:9e:e8:32:8b: c8:cf:e4:f4:73:87:2a:bb:06:21:51:f0:ae:07:de:f2:ba:39: 30:b3:a7:51:e6:d2:e6:2f:cc:20:af:f0:74:5a:93:eb:03:2f: b3:6a:37:cc:c1:b0:7d:52:f4:7a:70:69:a3:12:e3:a1:69:4e: 18:2f:ba:a4:77:9c:ea:6d:51:56:4c:9d:04:00:ce:05:32:47: a8:c6:5a:7e:54:bc:b7:27:2e:0c:0e:83:26:11:2c:4e:3d:2f: c6:d3:e3:60:a1:21:86:53:46:69:6e:77:9b:cc:10:b2:8a:17: 4f:48:e7:34:42:17:d3:c5:b8:f6:b6:62:22:ad:cc:8a:80:85: 41:a1:be:0b:80:04:d1:85:6f:8d:ef:24:25:90:fe:d8:d3:9c: de:68:6c:8e:3b:46:46:c1:40:82:3b:e5:ab:b1:62:dd:97:70: 6f:95:03:36:05:ac:40:5c:54:0c:15:1f:55:e1:f0:c4:c5:22: 66:da:2f:23:37:56:99:24:d3:db:6c:46:21:dd:ec:5d:cc:c3: 13:d2:62:4f:01:2f:fc:09:b8:ec:39:36:a3:c2:2a:67:64:74: 3a:8f:21:fc:c0:5a:d6:d1:8f:48:b3:c4:8d:9d:d8:5e:3f:ad: 5c:f7:4b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ7hlV0UrOUbIdDVjJv+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYWMzOGZlODEwNWZiNTlhMmNkMjU3ZjUxOWY4NTg1OTU4 NDAzMDEwHhcNMjUxMjE4MDMwMTI1WhcNMjUxMjE5MDMwMTI1WjAzMTEwLwYDVQQD Eyg1NzIxOWE3Yjk5ZTg2ZjU3NTgwNzc3YWY1MWE4ODJkMWUxYmVhNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UNgDB2O7WYRzlY5IrmbJPAK/TkO cYDnwfuZmZwXRiGWGAy4onivbynG7Se5ZLX6LcakLUmOUOh/mUg8+46Yt8ubJ3q8 QWSJF7VqMcUemY+tlfgxCsbsPeUXNyL91MWcOn7uXmlCQQsUw6Y4s9s0uulDyxfp bJwAmB8kO1Icp0isEXJ5cJ2cosR3QpXzHW85cPDgWlv5wZU/TctvKg9C7KqeEfnW 0qbkTBhmozcL+KR98nc2oP9OOQ+0RQmx7rh7ENysOkbpjJcoqV3L5yJ+zrelWqwR RBDNTRaXyAQCKQVHkU/LG7gFaS5KaqnowxDcC8xtlhnZAhLctiaGpGWwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFchmnuZ6G9XWAd3r1GogtHhvqTKMB8GA1UdIwQY MBaAFCGsOP6BBftZos0lf1GfhYWVhAMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmIt MGNmNTRjZmE4ZGExLzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmItMGNmNTRjZmE4ZGEx LzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVAl9oJy t8Jor1TIdWee6DKLyM/k9HOHKrsGIVHwrgfe8ro5MLOnUebS5i/MIK/wdFqT6wMv s2o3zMGwfVL0enBpoxLjoWlOGC+6pHec6m1RVkydBADOBTJHqMZaflS8tycuDA6D JhEsTj0vxtPjYKEhhlNGaW53m8wQsooXT0jnNEIX08W49rZiIq3MioCFQaG+C4AE 0YVvje8kJZD+2NOc3mhsjjtGRsFAgjvlq7Fi3Zdwb5UDNgWsQFxUDBUfVeHwxMUi ZtovIzdWmSTT22xGId3sXczDE9JiTwEv/Am47Dk2o8IqZ2R0Oo8h/MBa1tGPSLPE jZ3YXj+tXPdLPg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:35:47 2025 by rpki-client