This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json) Hash identifier: bYBJnO7nWC7vtAL0tEGkT4qVJqT9cF5He60490j2qiQ= Subject key identifier: ED:53:E6:CB:A8:5E:37:A7:08:BF:24:2D:AC:8B:FE:5E:7A:3C:7E:D1 Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Certificate serial: 019AF2402AAF793509ED434DEB130D8C0434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft Manifest number: 0CDD Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: DOdx/kPeeHBEKOFc945rc15lxTI6WC/nGVYS0BaZtZ8=) 2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=) 3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2a:af:79:35:09:ed:43:4d:eb:13:0d:8c:04:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=ed53e6cba85e37a708bf242dac8bfe5e7a3c7ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:d0:c0:a2:a4:15:63:1f:39:40:23:1f:50: 51:ad:6e:b1:0e:f9:8c:85:f4:7f:e0:9e:1e:26:91: 44:4a:e2:93:a5:b1:d2:0b:a9:9e:5f:7e:62:56:9a: 91:91:2d:01:c2:68:6d:56:97:0d:ea:7b:58:5e:d6: bb:ad:e5:37:c7:38:1e:8a:1d:ae:37:d4:b3:4b:09: 9c:4e:b2:10:e6:ef:25:3d:fb:11:ea:d2:e6:7a:6c: 46:cf:0e:4c:69:3e:5e:0f:ab:90:35:92:4c:8d:92: cd:16:fa:87:10:f5:a6:d7:7b:26:e7:62:1f:98:c0: 6b:3e:86:c3:59:4f:6d:d3:3c:9b:38:0a:f8:22:41: 1a:fd:56:89:f1:5c:be:86:c4:5d:af:60:37:cf:b5: c9:68:fe:49:20:69:59:24:b6:eb:5c:72:1f:58:c8: f8:38:52:bb:43:5a:a2:ca:51:4c:18:94:27:89:13: c4:f0:4c:96:92:51:63:ec:e9:02:9d:24:e5:6d:c7: 26:30:3b:f0:f2:dd:4b:4f:ff:73:dd:48:12:2d:43: cd:aa:93:39:1b:58:2c:f7:45:5f:89:4b:eb:01:79: 75:b8:eb:1a:c1:9a:95:57:7a:d9:42:7c:e4:93:c3: 62:e1:f3:6e:c6:69:8e:93:f4:75:a3:44:1e:78:d9: ae:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:53:E6:CB:A8:5E:37:A7:08:BF:24:2D:AC:8B:FE:5E:7A:3C:7E:D1 X509v3 Authority Key Identifier: keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f2:c6:0c:63:6f:c5:98:51:3f:52:32:53:7e:1e:05:97:8e: d3:12:14:88:ee:96:8e:50:4c:58:70:88:e1:24:5c:e5:16:1b: 4e:e7:68:0a:0b:ec:9d:17:08:0f:94:d4:b7:18:9f:62:1b:af: 55:e6:d6:ae:c3:24:65:6f:76:26:d4:7e:bc:2d:0d:1b:b3:50: 5b:a1:b3:93:3f:b9:50:a9:e0:eb:ee:c2:f5:81:1b:37:1e:09: 3d:9f:be:b3:08:2d:24:f3:df:43:30:e5:71:ff:bc:0f:89:c0: b2:b6:43:2e:70:cd:17:4c:36:db:e7:4f:5d:0a:c8:ee:58:af: 0a:10:36:51:ea:2e:27:31:ba:90:77:79:b1:2f:8d:0b:8d:aa: e4:58:e5:8d:74:e1:9f:43:de:12:ff:9a:32:c7:f2:ea:ef:a2: 5f:0f:57:cf:5b:39:61:5d:87:85:e1:7e:4f:88:e1:7a:a0:4a: b0:a8:12:44:1e:f4:30:10:3f:a0:69:a8:ab:93:8b:d3:77:de: 71:99:2b:0a:ff:cc:53:58:b8:99:62:16:03:45:74:89:c4:d0: 30:45:14:bf:b5:23:de:b9:df:09:05:6c:ec:e3:ae:16:63:d0: d2:d3:0a:ea:31:72:ad:bb:e9:25:94:1a:d8:62:c6:d9:e0:74: b1:65:0a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCqveTUJ7UNN6xMNjAQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzBlMjYwNjA5MTNjNzU4MTM3NDg4YmZkN2FiMWJmZTll MTBhZTIwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD EyhlZDUzZTZjYmE4NWUzN2E3MDhiZjI0MmRhYzhiZmU1ZTdhM2M3ZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO7QwKKkFWMfOUAjH1BRrW6xDvmM hfR/4J4eJpFESuKTpbHSC6meX35iVpqRkS0BwmhtVpcN6ntYXta7reU3xzgeih2u N9SzSwmcTrIQ5u8lPfsR6tLmemxGzw5MaT5eD6uQNZJMjZLNFvqHEPWm13sm52If mMBrPobDWU9t0zybOAr4IkEa/VaJ8Vy+hsRdr2A3z7XJaP5JIGlZJLbrXHIfWMj4 OFK7Q1qiylFMGJQniRPE8EyWklFj7OkCnSTlbccmMDvw8t1LT/9z3UgSLUPNqpM5 G1gs90VfiUvrAXl1uOsawZqVV3rZQnzkk8Ni4fNuxmmOk/R1o0QeeNmumQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1T5suoXjenCL8kLayL/l56PH7RMB8GA1UdIwQY MBaAFCMw4mBgkTx1gTdIi/16sb/p4QriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0Yjkt NzA2NzgyY2ZhMDNiLzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0YjktNzA2NzgyY2ZhMDNi LzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPLGDGNv xZhRP1IyU34eBZeO0xIUiO6WjlBMWHCI4SRc5RYbTudoCgvsnRcID5TUtxifYhuv VebWrsMkZW92JtR+vC0NG7NQW6Gzkz+5UKng6+7C9YEbNx4JPZ++swgtJPPfQzDl cf+8D4nAsrZDLnDNF0w22+dPXQrI7livChA2UeouJzG6kHd5sS+NC42q5FjljXTh n0PeEv+aMsfy6u+iXw9Xz1s5YV2HheF+T4jheqBKsKgSRB70MBA/oGmoq5OL03fe cZkrCv/MU1i4mWIWA0V0icTQMEUUv7Uj3rnfCQVs7OOuFmPQ0tMK6jFyrbvpJZQa 2GLG2eB0sWUKHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:44 2025 by rpki-client