This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json) Hash identifier: tlCfmakC5/8uLe1OzAjRwF07wbIyLkvxk32UZakdFpQ= Subject key identifier: F7:53:3D:05:72:E0:36:56:4E:5C:8A:9B:C4:11:A7:1C:8A:AA:FD:2E Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8 Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8 Certificate serial: 019AF276F5D55AA96E98C0EC9BBF0868C31F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: za9BnlRXQmE6ymo31CUZngC/6cc4ZP3VuKJnoXJdJJs=) 2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f5:d5:5a:a9:6e:98:c0:ec:9b:bf:08:68:c3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=f7533d0572e036564e5c8a9bc411a71c8aaafd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:f4:98:4f:ad:11:8e:cd:34:61:3b:f6:48: 22:7f:0a:1c:98:79:41:93:8b:13:0a:c1:75:34:58: d7:de:31:4e:db:e7:31:b1:af:4d:be:c9:02:bf:7f: 21:45:3c:5c:2f:3b:22:07:6d:8b:ad:01:5e:86:01: 3b:46:8d:fc:f6:12:55:4e:28:81:e3:82:4f:ef:58: a1:c4:15:bb:55:a2:84:eb:e4:fe:7a:e9:c4:85:b7: 1c:b0:d0:37:03:eb:f8:18:e3:fb:54:7f:6f:9f:94: ab:92:93:b4:8f:ae:e5:d1:90:70:7c:76:36:a6:b9: 56:35:ec:2f:aa:9f:dc:d6:e3:35:5e:a7:2b:ae:ad: 5b:53:32:f0:a4:c9:23:f2:a0:c3:5c:ea:09:c1:ad: 51:df:60:69:33:dc:78:5f:77:fc:76:97:c3:47:7c: 1f:aa:fe:72:73:9a:57:f8:0c:e9:4f:db:9c:0a:50: a8:cc:7c:dd:e4:63:a0:da:a9:ce:0d:09:5b:d5:a3: 22:bb:4b:3d:ef:19:66:10:a5:63:a6:49:8b:de:e5: 82:b4:e2:c2:1b:4b:6c:97:c0:30:af:37:67:08:af: f2:77:78:6c:cb:ef:24:1f:31:fe:2a:41:f6:47:f0: a5:be:c1:1d:be:30:20:d7:51:25:43:ef:a4:73:b0: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:53:3D:05:72:E0:36:56:4E:5C:8A:9B:C4:11:A7:1C:8A:AA:FD:2E X509v3 Authority Key Identifier: keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:65:bf:22:82:ad:9d:2d:45:10:62:52:6a:3c:2c:ab:d2:aa: d5:30:68:6c:67:95:30:18:b5:25:45:74:e2:9d:8f:9b:24:5a: 44:8c:e4:2a:ce:76:2c:70:ac:c7:f3:e6:84:07:09:1c:cf:92: 66:29:4a:5c:6a:c3:e9:c2:c4:50:47:04:33:79:fd:89:f9:eb: fb:fc:2a:dd:2e:ff:e9:7e:3d:8d:c6:44:f8:68:5b:0c:1d:24: f9:65:8c:32:e0:73:65:b9:98:ef:45:25:80:db:5e:d3:0d:76: 62:02:f5:15:38:5d:ad:a9:51:9d:49:76:57:af:63:28:62:48: 36:c0:27:2c:25:3c:59:05:df:b4:b6:3b:70:30:46:90:94:7e: ec:ac:37:19:62:4c:f1:ef:5e:23:45:ef:3f:b2:68:4b:90:5b: 46:ed:9e:b7:f6:20:78:52:22:21:51:b0:54:4b:69:a8:6b:b6: 17:24:36:64:b1:1e:b4:38:c3:d6:9a:8b:86:bf:01:c7:69:7c: 15:a3:67:d4:fe:38:3b:88:7b:f8:87:74:63:4b:dc:23:04:6f: 20:c6:2f:55:a9:f0:32:6b:a1:f5:62:3e:13:a7:96:de:bb:ed: d3:b1:38:53:7a:a2:a3:eb:8c:5c:f4:a2:9c:e0:db:41:e5:13: fa:ad:93:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvXVWqlumMDsm78IaMMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj ZjU3YzgwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EyhmNzUzM2QwNTcyZTAzNjU2NGU1YzhhOWJjNDExYTcxYzhhYWFmZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw970mE+tEY7NNGE79kgifwocmHlB k4sTCsF1NFjX3jFO2+cxsa9NvskCv38hRTxcLzsiB22LrQFehgE7Ro389hJVTiiB 44JP71ihxBW7VaKE6+T+eunEhbccsNA3A+v4GOP7VH9vn5SrkpO0j67l0ZBwfHY2 prlWNewvqp/c1uM1Xqcrrq1bUzLwpMkj8qDDXOoJwa1R32BpM9x4X3f8dpfDR3wf qv5yc5pX+AzpT9ucClCozHzd5GOg2qnODQlb1aMiu0s97xlmEKVjpkmL3uWCtOLC G0tsl8AwrzdnCK/yd3hsy+8kHzH+KkH2R/ClvsEdvjAg11ElQ++kc7DXKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdTPQVy4DZWTlyKm8QRpxyKqv0uMB8GA1UdIwQY MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt YjkwYTk0MWVhNTFhLzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGW/IoKt nS1FEGJSajwsq9Kq1TBobGeVMBi1JUV04p2PmyRaRIzkKs52LHCsx/PmhAcJHM+S ZilKXGrD6cLEUEcEM3n9ifnr+/wq3S7/6X49jcZE+GhbDB0k+WWMMuBzZbmY70Ul gNte0w12YgL1FThdralRnUl2V69jKGJINsAnLCU8WQXftLY7cDBGkJR+7Kw3GWJM 8e9eI0XvP7JoS5BbRu2et/YgeFIiIVGwVEtpqGu2FyQ2ZLEetDjD1pqLhr8Bx2l8 FaNn1P44O4h7+Id0Y0vcIwRvIMYvVanwMmuh9WI+E6eW3rvt07E4U3qio+uMXPSi nODbQeUT+q2Tow== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:25 2025 by rpki-client