This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json) Hash identifier: /ruTwhsLsfdoh9Wzmy7Z8RQDJn0fc3B9DXXZKL4ps4M= Subject key identifier: 28:86:9C:85:DA:03:93:8E:FF:7D:DE:86:C1:C2:48:A4:AF:8A:F3:8C Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3 Certificate serial: 019AF49C60F84FA5DCBFEFE38672F897CD00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:20 +0000 Manifest this update: Sat 06 Dec 2025 17:01:20 +0000 Manifest next update: Sun 07 Dec 2025 17:01:20 +0000 Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: H9Px24sW/6MvNS3UOIPKYFszKU2p4+Kjhq4vIFDFv6I=) 2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:60:f8:4f:a5:dc:bf:ef:e3:86:72:f8:97:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3 Validity Not Before: Dec 6 17:01:20 2025 GMT Not After : Dec 7 17:01:20 2025 GMT Subject: CN=28869c85da03938eff7dde86c1c248a4af8af38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f0:d9:a1:70:46:de:36:cf:c4:b9:7d:a0:14: 7f:f8:c8:01:b6:42:cd:b4:df:3e:ed:6e:96:76:88: f3:07:df:68:91:d5:5f:b3:1c:44:aa:32:ba:a1:65: d0:27:7c:96:c8:e1:b6:24:43:4c:43:c3:b7:7b:cf: 90:30:76:fc:1b:39:e7:73:43:81:82:d7:20:96:62: 5e:1a:ad:bd:f5:94:2a:63:2c:2d:b4:cc:57:63:20: 30:79:de:d8:c7:86:03:5d:18:15:10:26:9c:b5:2e: dd:0b:61:41:55:55:3c:67:56:20:58:57:7e:33:f7: d2:61:b7:e1:b8:42:f0:74:44:aa:1c:a5:a8:60:20: 7b:c3:c1:70:bd:b2:a3:a5:16:7d:ee:3a:a4:2f:cf: 66:d7:94:51:e0:72:2d:a1:41:b0:6c:2c:dc:db:ee: 40:d8:01:a2:31:b9:5b:83:00:40:35:37:24:70:93: d9:96:a7:97:e1:e4:8d:8e:6d:dc:eb:51:c2:10:a9: d0:6b:a0:3f:6b:14:d1:0c:e7:71:4c:2a:aa:91:83: cc:22:fc:4d:41:4c:10:80:93:14:b9:a3:f2:10:c2: 9e:a6:e1:ea:99:1d:de:76:e3:0e:89:2e:fe:9b:99: d0:f2:7f:ec:50:f6:10:3a:d8:4d:92:11:d8:f0:2f: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:86:9C:85:DA:03:93:8E:FF:7D:DE:86:C1:C2:48:A4:AF:8A:F3:8C X509v3 Authority Key Identifier: keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:17:08:7a:d9:d4:2a:ed:5a:bf:2b:9b:85:69:74:6f:fa:82: 2a:96:56:ab:91:01:70:73:de:27:5a:75:f1:3f:62:16:be:4a: c5:d1:ed:bc:3d:73:af:e9:8a:f0:24:2f:81:8e:a9:16:23:23: 8f:77:e7:f0:42:8d:1a:a8:89:dc:dd:a1:71:f0:21:42:d8:af: 12:94:ed:79:99:5f:bc:c2:8b:06:93:af:11:5b:18:6e:d5:8d: b0:52:f6:da:3b:51:52:ed:f7:47:7d:22:eb:5f:e3:de:37:b4: 46:b8:62:20:85:ad:b0:54:42:95:9a:b1:5a:74:3f:93:df:82: 60:23:e2:a2:91:1a:29:60:b5:3a:3d:62:22:da:69:41:06:f0: e1:ef:33:29:4c:f3:55:2c:de:61:91:d0:95:bc:9d:c5:11:d6: f2:62:20:9e:13:05:a9:77:8c:ef:11:ad:1c:84:18:ad:80:5a: 84:cb:ab:45:ff:5e:ce:d1:59:2f:e4:cf:5f:0b:d3:dc:e9:85: 6c:d3:b1:96:f2:84:b1:13:c2:3d:b0:96:05:36:e8:0b:3f:58: 87:5d:5d:d4:08:cf:ce:4d:1c:da:a3:d0:48:b7:f5:04:6c:3e: 8c:f2:29:1f:d2:30:47:5b:07:d4:79:09:da:6d:0a:6d:2e:c0: 7d:32:fc:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGD4T6Xcv+/jhnL4l80AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk NWY1ZjMwHhcNMjUxMjA2MTcwMTIwWhcNMjUxMjA3MTcwMTIwWjAzMTEwLwYDVQQD EygyODg2OWM4NWRhMDM5MzhlZmY3ZGRlODZjMWMyNDhhNGFmOGFmMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/DZoXBG3jbPxLl9oBR/+MgBtkLN tN8+7W6WdojzB99okdVfsxxEqjK6oWXQJ3yWyOG2JENMQ8O3e8+QMHb8Gznnc0OB gtcglmJeGq299ZQqYywttMxXYyAwed7Yx4YDXRgVECactS7dC2FBVVU8Z1YgWFd+ M/fSYbfhuELwdESqHKWoYCB7w8FwvbKjpRZ97jqkL89m15RR4HItoUGwbCzc2+5A 2AGiMblbgwBANTckcJPZlqeX4eSNjm3c61HCEKnQa6A/axTRDOdxTCqqkYPMIvxN QUwQgJMUuaPyEMKepuHqmR3eduMOiS7+m5nQ8n/sUPYQOthNkhHY8C9LzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiGnIXaA5OO/33ehsHCSKSvivOMMB8GA1UdIwQY MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBcIetnU Ku1avyubhWl0b/qCKpZWq5EBcHPeJ1p18T9iFr5KxdHtvD1zr+mK8CQvgY6pFiMj j3fn8EKNGqiJ3N2hcfAhQtivEpTteZlfvMKLBpOvEVsYbtWNsFL22jtRUu33R30i 61/j3je0RrhiIIWtsFRClZqxWnQ/k9+CYCPiopEaKWC1Oj1iItppQQbw4e8zKUzz VSzeYZHQlbydxRHW8mIgnhMFqXeM7xGtHIQYrYBahMurRf9eztFZL+TPXwvT3OmF bNOxlvKEsRPCPbCWBTboCz9Yh11d1AjPzk0c2qPQSLf1BGw+jPIpH9IwR1sH1HkJ 2m0KbS7AfTL8cQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:18:25 2025 by rpki-client