This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft (raw, json) Hash identifier: 6/z+kX9duItPOPxftKv82ng2pr/wW9Hsf/D8+mTM4YQ= Subject key identifier: 95:BB:22:E9:20:C9:EC:82:29:CD:04:EE:C4:53:3C:E1:84:79:13:ED Authority key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6 Certificate issuer: /CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6 Certificate serial: 019AF4652195352B78B1AD5E6766C13EB750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft Manifest number: EF Signing time: Sat 06 Dec 2025 16:00:59 +0000 Manifest this update: Sat 06 Dec 2025 16:00:59 +0000 Manifest next update: Sun 07 Dec 2025 16:00:59 +0000 Files and hashes: 1: IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl (hash: fb4JbXTk/SVwVxwBEVTMf5X3QSus4PeHHUe8ixvmkU0=) 2: Tq4R9IdG22N3vnBq8Qo-UFuJbpQ.roa (hash: af3sYHdNbdlvdprU3qi9kp0Nrk2mSxcsF15s0Xd+YhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:21:95:35:2b:78:b1:ad:5e:67:66:c1:3e:b7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6 Validity Not Before: Dec 6 16:00:59 2025 GMT Not After : Dec 7 16:00:59 2025 GMT Subject: CN=95bb22e920c9ec8229cd04eec4533ce1847913ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3b:cd:af:e2:06:92:94:c2:b8:3e:17:db:9a: b4:9d:9a:c6:9d:9c:23:27:4d:e2:a4:5e:eb:b2:d3: 74:cd:a3:7f:91:37:ec:ab:24:00:01:93:a1:16:b8: 75:74:0f:59:16:01:4f:c7:91:fa:7f:60:e8:41:02: 64:d6:46:a9:de:21:b9:5b:50:ab:17:09:df:19:ac: 09:e1:ed:02:f8:3d:fe:ab:39:81:22:b7:ad:66:ee: 3a:78:b5:bc:03:c9:8e:75:62:72:cb:1c:83:ab:20: b0:ba:5b:3e:3b:d0:c2:6d:68:76:e5:e4:96:98:f2: 6a:3c:aa:c6:34:6d:39:24:b8:61:0f:ff:86:c8:e1: 04:ea:c9:e5:a2:00:78:82:a5:91:dc:ce:a9:08:4a: 7a:38:f6:d9:81:46:01:ad:38:2c:c4:a9:37:31:95: e8:3f:8f:25:43:be:29:17:37:15:5a:81:0d:ec:25: 09:9e:62:e0:e9:83:5e:d0:27:d7:79:5e:3d:56:6f: a2:e5:5c:88:5b:27:5c:8f:fe:b5:87:aa:93:6b:0f: 97:c3:24:97:ca:b9:43:7f:58:e0:17:aa:b9:4b:7f: 30:43:ef:57:c5:83:6c:c2:4f:63:4b:3c:12:32:10: 05:45:41:13:e2:ad:e3:66:a7:17:9b:21:5c:33:9e: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:22:E9:20:C9:EC:82:29:CD:04:EE:C4:53:3C:E1:84:79:13:ED X509v3 Authority Key Identifier: keyid:21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:cf:95:cb:69:af:2b:f8:c4:b8:44:38:90:66:83:96:b2:d6: 80:e0:eb:23:32:48:e1:ec:b4:78:2f:f9:a4:19:6b:85:2a:e6: 9d:c7:c1:fd:51:39:53:ff:b2:0a:bb:5b:98:0a:2b:fe:45:05: 48:62:5a:bc:06:ed:bd:46:27:a9:bd:b3:7e:5a:3f:f4:17:2e: e4:02:74:12:95:db:a1:59:c5:07:22:5d:d0:8b:fe:ae:60:cb: 02:fa:5a:9f:c2:dd:7a:98:32:cb:a5:ce:a3:08:a0:68:11:78: 42:cc:8c:2c:ac:e3:78:04:ad:96:65:b6:95:b1:57:a7:d9:7d: bc:59:d9:2d:91:be:dd:7e:38:e5:c1:e6:b1:31:97:c1:3b:7d: cf:be:39:27:84:5a:8f:f6:70:eb:13:d8:ab:99:8c:f2:e0:ad: ee:58:8f:8f:35:8d:ea:b2:51:d7:71:e6:8c:fb:89:c8:bf:b5: 9a:0e:94:f9:9d:61:03:29:98:72:7a:5f:77:5b:8a:c8:c5:a6: a9:70:64:24:89:f8:fc:0f:08:34:e7:55:ce:6f:aa:50:d2:56: 8b:3e:98:b8:d2:41:e7:83:38:8b:15:54:07:62:20:6d:16:61: bf:bf:d9:ef:79:89:ab:9a:11:24:18:72:61:c7:ca:ac:8c:64: 68:d2:52:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSGVNSt4sa1eZ2bBPrdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxODFjNWIzY2I3ZWViMWU0OTU4MjE1NWExOTE4ZWM2MTJm OTVhYzYwHhcNMjUxMjA2MTYwMDU5WhcNMjUxMjA3MTYwMDU5WjAzMTEwLwYDVQQD Eyg5NWJiMjJlOTIwYzllYzgyMjljZDA0ZWVjNDUzM2NlMTg0NzkxM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTvNr+IGkpTCuD4X25q0nZrGnZwj J03ipF7rstN0zaN/kTfsqyQAAZOhFrh1dA9ZFgFPx5H6f2DoQQJk1kap3iG5W1Cr FwnfGawJ4e0C+D3+qzmBIretZu46eLW8A8mOdWJyyxyDqyCwuls+O9DCbWh25eSW mPJqPKrGNG05JLhhD/+GyOEE6snlogB4gqWR3M6pCEp6OPbZgUYBrTgsxKk3MZXo P48lQ74pFzcVWoEN7CUJnmLg6YNe0CfXeV49Vm+i5VyIWydcj/61h6qTaw+XwySX yrlDf1jgF6q5S38wQ+9XxYNswk9jSzwSMhAFRUET4q3jZqcXmyFcM55y3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW7IukgyeyCKc0E7sRTPOGEeRPtMB8GA1UdIwQY MBaAFCGBxbPLfuseSVghVaGRjsYS+VrGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVlIRnM4dC02eDVKV0NGVm9aR094aEw1V3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kY2QxNWUtZWIxMi00NjMxLWIyMjAt MDIyNmQ0NWE3NTMyLzEvSVlIRnM4dC02eDVKV0NGVm9aR094aEw1V3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kY2QxNWUtZWIxMi00NjMxLWIyMjAtMDIyNmQ0NWE3NTMy LzEvSVlIRnM4dC02eDVKV0NGVm9aR094aEw1V3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1s+Vy2mv K/jEuEQ4kGaDlrLWgODrIzJI4ey0eC/5pBlrhSrmncfB/VE5U/+yCrtbmAor/kUF SGJavAbtvUYnqb2zflo/9Bcu5AJ0EpXboVnFByJd0Iv+rmDLAvpan8Ldepgyy6XO owigaBF4QsyMLKzjeAStlmW2lbFXp9l9vFnZLZG+3X445cHmsTGXwTt9z745J4Ra j/Zw6xPYq5mM8uCt7liPjzWN6rJR13HmjPuJyL+1mg6U+Z1hAymYcnpfd1uKyMWm qXBkJIn4/A8INOdVzm+qUNJWiz6YuNJB54M4ixVUB2IgbRZhv7/Z73mJq5oRJBhy YcfKrIxkaNJS/w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:18 2025 by rpki-client