This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json) Hash identifier: gixGmIgipJkXxZrlZ0gG9GIVEI/zR3xoSbBrCmkgT94= Subject key identifier: 41:3E:4F:F2:BE:32:BA:C2:37:28:BD:DB:1C:06:66:9B:D0:20:AF:6A Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62 Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062 Certificate serial: 019B39EB10CCA28D77ED1F205788401844E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft Manifest number: 08BF Signing time: Sat 20 Dec 2025 04:01:05 +0000 Manifest this update: Sat 20 Dec 2025 04:01:05 +0000 Manifest next update: Sun 21 Dec 2025 04:01:05 +0000 Files and hashes: 1: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: wzmq/GWM9IfHqka/o+EbeubF4QhpF+g5mXX4EIQjAEI=) 2: Ljs9MQhWok74BFhLvX5tnc2erSo.roa (hash: +v8jaS8N6bSTt1OSxaSBvN/IEBx5vNtqPM0L9If78cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:10:cc:a2:8d:77:ed:1f:20:57:88:40:18:44:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062 Validity Not Before: Dec 20 04:01:05 2025 GMT Not After : Dec 21 04:01:05 2025 GMT Subject: CN=413e4ff2be32bac23728bddb1c06669bd020af6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:79:8d:6e:ba:38:18:e2:e8:92:23:3d:94: e8:fb:bf:fa:c9:b6:bc:9d:8b:ba:bc:b0:b1:07:16: 0a:e9:16:d7:9f:bf:23:28:b1:1e:31:aa:de:ab:9c: 65:55:f7:2c:85:78:80:97:82:2d:a4:4e:d5:1b:c9: 4a:e9:69:ce:ef:52:ed:86:7b:47:11:7e:10:89:02: 20:96:63:ff:e2:81:5f:4e:43:11:fd:ce:7f:c2:c9: 1b:7a:96:1a:d5:09:6e:03:3e:a1:65:a3:3f:49:a2: 0f:7b:0d:93:0d:5d:5e:88:ea:fe:43:6a:02:33:83: e0:20:5a:e8:7f:67:eb:2a:97:9e:8f:70:72:e4:79: 2c:75:7b:34:30:e0:70:19:9a:1d:71:67:7d:4f:f1: f9:1f:53:60:ac:57:a5:ba:83:f5:71:f3:bc:a9:f8: d1:01:0e:34:ab:0e:c8:48:21:1b:00:b9:ad:0f:17: 3f:eb:fe:36:59:c8:0b:27:36:4b:ac:c2:f9:a2:a6: 27:40:9e:17:f5:ca:ec:bb:50:d4:0a:80:8a:4d:52: 35:87:93:cd:a7:24:ca:f0:1b:30:73:f9:67:f0:42: 45:fc:cc:78:f8:c5:02:a6:80:15:e0:65:71:3f:1b: 3c:c5:66:0e:61:2b:05:5f:0b:b5:a9:9e:24:f7:f0: e5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3E:4F:F2:BE:32:BA:C2:37:28:BD:DB:1C:06:66:9B:D0:20:AF:6A X509v3 Authority Key Identifier: keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b7:35:4c:3d:93:a2:81:5d:a7:02:4f:f0:f9:b3:ce:e1:69: 6f:ed:05:45:ec:48:4e:59:9e:2c:2b:db:75:38:8a:33:44:b9: bb:ae:fd:1e:4f:6d:d9:cb:3b:7d:fc:57:22:c7:02:cb:bb:ef: 7e:8b:61:2f:6d:04:eb:2d:2e:f9:af:e7:03:eb:7f:b8:04:1b: 11:34:c5:20:9d:4e:e6:da:2b:92:2e:f6:bb:fc:d3:61:65:e4: d5:10:72:32:40:de:a8:a8:3b:ea:b2:b9:70:0d:fd:36:65:c9: b8:dd:92:e3:d9:74:15:4c:f4:9b:e1:95:f9:b8:a2:d7:27:1c: 96:ff:e1:d8:b1:45:cc:40:8b:ee:21:20:02:a5:ae:f9:46:f4: 64:da:ae:4a:0a:1b:4d:e9:88:e2:95:0b:1b:dc:e7:83:3e:30: 43:14:0d:5e:df:c8:86:a4:5e:94:08:0e:07:9f:bc:a9:f3:ef: e3:d3:5e:e0:62:f4:22:01:3b:44:75:84:1b:55:69:19:cc:a8: 24:07:5a:b5:d9:36:7a:ef:5f:18:75:95:9a:30:83:a9:03:4c: 3b:7c:40:9f:63:9b:af:73:e2:eb:bd:c4:de:7a:7b:f9:f5:c1: 85:26:ab:da:c4:07:34:41:0d:30:59:7c:dc:77:4b:a0:01:d6: 74:c1:d7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xDMoo137R8gV4hAGEToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmIxNzc4ZDYzNjIzNzQzZWQ4OWM4N2RlODBjMmE2NDA5 M2EwNjIwHhcNMjUxMjIwMDQwMTA1WhcNMjUxMjIxMDQwMTA1WjAzMTEwLwYDVQQD Eyg0MTNlNGZmMmJlMzJiYWMyMzcyOGJkZGIxYzA2NjY5YmQwMjBhZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX55jW66OBji6JIjPZTo+7/6yba8 nYu6vLCxBxYK6RbXn78jKLEeMareq5xlVfcshXiAl4ItpE7VG8lK6WnO71LthntH EX4QiQIglmP/4oFfTkMR/c5/wskbepYa1QluAz6hZaM/SaIPew2TDV1eiOr+Q2oC M4PgIFrof2frKpeej3By5HksdXs0MOBwGZodcWd9T/H5H1NgrFeluoP1cfO8qfjR AQ40qw7ISCEbALmtDxc/6/42WcgLJzZLrML5oqYnQJ4X9crsu1DUCoCKTVI1h5PN pyTK8Bswc/ln8EJF/Mx4+MUCpoAV4GVxPxs8xWYOYSsFXwu1qZ4k9/DlBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE+T/K+MrrCNyi92xwGZpvQIK9qMB8GA1UdIwQY MBaAFCMrF3jWNiN0Ptich96AwqZAk6BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYt OTBkMzViMjQ1Y2VkLzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYtOTBkMzViMjQ1Y2Vk LzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbc1TD2T ooFdpwJP8PmzzuFpb+0FRexITlmeLCvbdTiKM0S5u679Hk9t2cs7ffxXIscCy7vv fothL20E6y0u+a/nA+t/uAQbETTFIJ1O5torki72u/zTYWXk1RByMkDeqKg76rK5 cA39NmXJuN2S49l0FUz0m+GV+bii1ycclv/h2LFFzECL7iEgAqWu+Ub0ZNquSgob TemI4pULG9zngz4wQxQNXt/IhqRelAgOB5+8qfPv49Ne4GL0IgE7RHWEG1VpGcyo JAdatdk2eu9fGHWVmjCDqQNMO3xAn2Obr3Pi673E3np7+fXBhSar2sQHNEENMFl8 3HdLoAHWdMHXnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:46:53 2025 by rpki-client