This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json) Hash identifier: CB40KFgpBttHIHPr6nI3wVfmaFR7TkoCw/2Pn5rL2GE= Subject key identifier: BF:0D:B5:16:E5:83:E6:EF:9E:3C:7C:98:0A:11:74:4C:88:49:99:F1 Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61 Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861 Certificate serial: 019AF42DEE0CAFE9B124758803EAD572A758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft Manifest number: 0627 Signing time: Sat 06 Dec 2025 15:00:42 +0000 Manifest this update: Sat 06 Dec 2025 15:00:42 +0000 Manifest next update: Sun 07 Dec 2025 15:00:42 +0000 Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=) 2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: 8Oxvt8nelj3dGKJQ1WqSmnf1MFrL9e3vQBQEeAQWA8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ee:0c:af:e9:b1:24:75:88:03:ea:d5:72:a7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861 Validity Not Before: Dec 6 15:00:42 2025 GMT Not After : Dec 7 15:00:42 2025 GMT Subject: CN=bf0db516e583e6ef9e3c7c980a11744c884999f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:4e:0a:0b:ba:38:a8:4c:9f:4f:11:c5:08: e7:19:cb:7f:9e:40:50:e1:84:a5:89:49:af:37:44: 61:29:94:ca:74:1f:5c:86:eb:4c:86:9d:20:02:69: ad:f8:c1:c8:68:74:ae:47:22:be:9c:b9:8f:61:0d: 40:6c:7f:8f:3d:43:20:f2:cd:d6:c6:98:6b:75:61: b0:8a:bf:b4:ac:c1:7f:10:9d:14:30:b9:48:83:78: 03:32:17:44:47:df:fd:7d:f1:e8:9e:d0:e5:b0:e0: bb:0c:cf:c4:74:ea:1d:12:3d:ef:29:5f:76:bb:c7: 80:5f:42:22:3b:db:1e:ab:fe:61:b6:be:81:79:16: 69:a9:88:1a:aa:6e:0f:2d:66:e8:ff:ac:bc:ad:ce: 2b:8c:54:93:9f:07:5d:6f:8d:95:60:cb:6b:bd:1a: e1:65:87:4a:7a:64:d2:92:5b:68:cd:48:ea:e2:77: b1:90:04:d7:d9:04:86:c6:6f:c2:f3:2e:2e:75:e2: 0a:d5:f8:61:ee:49:4b:a9:98:47:8f:f3:31:b4:d1: e2:c2:87:18:4d:74:bd:b6:61:7e:31:35:08:da:fe: 3f:fe:84:04:b4:cc:6c:42:f7:fe:c1:3d:8b:0a:82: bb:dd:ef:c9:a6:4e:6f:42:47:4d:ea:ae:59:20:63: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0D:B5:16:E5:83:E6:EF:9E:3C:7C:98:0A:11:74:4C:88:49:99:F1 X509v3 Authority Key Identifier: keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e3:07:71:96:e0:f1:47:6a:c6:60:5e:4c:af:a0:55:1f:90: 9a:62:0d:49:e4:86:2b:80:1e:ab:2a:7d:72:14:53:cc:ab:6f: b8:a5:0e:d7:50:02:6c:ec:a1:f9:1a:fe:13:05:4d:5c:22:48: 51:1e:66:5e:44:a5:6d:e2:03:58:57:74:e0:bd:ef:37:1c:14: f2:d9:9e:92:bc:e2:05:5e:39:d7:11:1d:0d:3c:07:7c:ed:a9: 55:8d:5c:75:16:3a:06:29:b8:50:0c:14:76:e4:23:03:ae:70: 7b:61:31:55:7e:7e:59:70:06:b7:35:87:b9:48:66:fa:10:38: 21:65:f4:ba:5f:e0:26:0c:a2:9f:68:e5:91:55:93:44:cd:29: 0a:ad:e1:6e:d2:72:85:bd:22:7d:63:4a:03:e7:d8:5f:e6:58: 91:61:62:96:17:1f:5c:cb:ee:b7:84:44:66:84:50:28:09:69: a0:8e:eb:35:ae:ce:c8:34:31:54:61:5e:3b:bd:3a:33:7d:c1: 66:8b:f0:02:0a:27:ec:83:56:e9:93:13:2a:a6:0b:f2:ca:c0: 55:65:54:6d:81:7b:29:76:2a:d5:c5:97:c8:f6:30:a3:dc:b9: 43:53:36:5b:83:df:fa:80:5e:c3:0b:5d:da:33:5e:39:63:d1: 36:e3:87:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Le4Mr+mxJHWIA+rVcqdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOGFmMjZmOWEzNjY1M2Y0ZDk5NjcxOWQ0YTQxMGZlODRh ZjQ4NjEwHhcNMjUxMjA2MTUwMDQyWhcNMjUxMjA3MTUwMDQyWjAzMTEwLwYDVQQD EyhiZjBkYjUxNmU1ODNlNmVmOWUzYzdjOTgwYTExNzQ0Yzg4NDk5OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1lOCgu6OKhMn08RxQjnGct/nkBQ 4YSliUmvN0RhKZTKdB9chutMhp0gAmmt+MHIaHSuRyK+nLmPYQ1AbH+PPUMg8s3W xphrdWGwir+0rMF/EJ0UMLlIg3gDMhdER9/9ffHontDlsOC7DM/EdOodEj3vKV92 u8eAX0IiO9seq/5htr6BeRZpqYgaqm4PLWbo/6y8rc4rjFSTnwddb42VYMtrvRrh ZYdKemTSkltozUjq4nexkATX2QSGxm/C8y4udeIK1fhh7klLqZhHj/MxtNHiwocY TXS9tmF+MTUI2v4//oQEtMxsQvf+wT2LCoK73e/Jpk5vQkdN6q5ZIGNUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8NtRblg+bvnjx8mAoRdEyISZnxMB8GA1UdIwQY MBaAFCGK8m+aNmU/TZlnGdSkEP6Er0hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAt MTg0NTg2NjAyODg3LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAtMTg0NTg2NjAyODg3 LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+MHcZbg 8UdqxmBeTK+gVR+QmmINSeSGK4Aeqyp9chRTzKtvuKUO11ACbOyh+Rr+EwVNXCJI UR5mXkSlbeIDWFd04L3vNxwU8tmekrziBV451xEdDTwHfO2pVY1cdRY6Bim4UAwU duQjA65we2ExVX5+WXAGtzWHuUhm+hA4IWX0ul/gJgyin2jlkVWTRM0pCq3hbtJy hb0ifWNKA+fYX+ZYkWFilhcfXMvut4REZoRQKAlpoI7rNa7OyDQxVGFeO706M33B ZovwAgon7INW6ZMTKqYL8srAVWVUbYF7KXYq1cWXyPYwo9y5Q1M2W4Pf+oBewwtd 2jNeOWPRNuOHAg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:13:28 2025 by rpki-client