This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json) Hash identifier: DtoGVhorB4/ZdvJFY1UKde54H4lxxFneB69sT3Zri5g= Subject key identifier: 78:81:59:08:1C:00:DE:AA:55:FF:49:D9:2C:4C:20:77:51:85:5D:87 Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Certificate serial: 019B1A5FA9A8993792826BCE8F6F1E1EFDA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft Manifest number: 1472 Signing time: Sun 14 Dec 2025 01:00:35 +0000 Manifest this update: Sun 14 Dec 2025 01:00:35 +0000 Manifest next update: Mon 15 Dec 2025 01:00:35 +0000 Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: D8x31VJAyHaFNMeRBgxnGihNZghTAdCPPxnhjB8QW5c=) 2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:a9:a8:99:37:92:82:6b:ce:8f:6f:1e:1e:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Validity Not Before: Dec 14 01:00:35 2025 GMT Not After : Dec 15 01:00:35 2025 GMT Subject: CN=788159081c00deaa55ff49d92c4c207751855d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9e:e8:04:38:fb:b8:8a:fd:0e:8f:fb:d4:ce: 22:8f:c1:e9:ff:6a:cf:a9:45:d4:63:92:a9:7a:10: 66:89:85:6c:9c:82:39:b8:35:94:39:f3:b9:8f:2c: 99:ae:0b:ee:ef:09:20:90:5c:0c:f5:32:de:b7:db: cc:b6:27:54:11:b5:ac:97:a3:df:7f:97:b6:1f:23: 4f:4e:15:e3:f2:ad:37:1a:9f:42:ed:21:39:60:d2: 19:83:bd:ea:11:26:25:d3:93:20:1d:3c:3d:6f:8e: 10:f4:71:0f:9a:dc:d3:62:4f:68:21:db:ea:36:f1: bb:c7:16:13:e5:3b:48:ed:c7:68:9f:55:1c:e2:5e: 53:82:5a:5d:f3:66:ae:65:e6:ce:68:02:6b:97:b6: 9a:ad:44:50:c1:3e:51:4f:b7:62:f2:bd:59:d1:64: 57:7b:f4:cc:1f:21:f5:5c:42:db:03:e3:19:25:a3: 88:19:83:ac:a2:e7:58:e8:d1:18:07:60:91:dd:ee: 6f:90:c1:fb:d1:18:cf:c4:36:22:40:d8:e6:27:40: ac:0c:cc:77:53:d7:cd:9f:9d:4d:30:b6:61:9c:af: 58:fb:f7:b7:a3:56:c0:62:56:ed:af:66:90:05:41: ea:a1:98:77:61:6f:3a:4a:c3:a0:70:70:eb:45:6c: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:81:59:08:1C:00:DE:AA:55:FF:49:D9:2C:4C:20:77:51:85:5D:87 X509v3 Authority Key Identifier: keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:28:13:be:f9:d8:ac:5c:62:a7:0c:b9:1f:ec:38:51:19:e9: d3:da:0c:aa:4a:f7:05:03:7a:a6:66:7b:e0:3c:d9:dc:e3:d3: 71:ef:7e:2f:54:b3:12:fd:1b:64:94:7d:13:ba:97:a9:51:e9: 78:31:76:51:ae:8b:c8:8c:bb:82:d6:98:1f:f0:10:d7:90:98: ed:16:15:b8:e9:40:4b:23:1a:58:e4:d8:db:6a:24:5f:21:08: 9a:21:1b:3c:8a:2a:2b:65:2f:c6:1a:af:5a:f4:a2:a3:1c:42: 3f:1a:7d:ba:4d:58:2c:75:45:ed:73:56:e1:cb:23:08:79:79: a1:10:99:3b:6b:9f:2a:19:d9:83:34:fb:74:b7:89:fb:61:c3: 73:ad:a9:f8:17:81:f1:41:7b:0c:6a:d3:06:69:6b:22:73:ea: 16:d2:e0:b0:87:dc:7d:d4:67:9f:e5:dc:c6:c9:cf:84:c0:45: 9a:f3:f0:63:db:2a:b0:9a:92:4b:3d:c0:34:83:18:9c:42:8c: ac:20:84:b7:b7:17:84:18:37:67:08:97:18:4d:ad:f8:b2:23: 41:ee:d0:f2:4d:34:7a:2e:7a:13:a6:ce:46:25:4e:fd:cd:b1: 77:65:a1:71:a7:64:72:cf:64:a5:bf:44:79:4c:9c:3e:bd:06: 0d:c8:4a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX6momTeSgmvOj28eHv2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzE5NjcxMTBjYWJlZWM0YTY2Yjc4MDM3ZTUyYTg3YjJi YzhmNWQwHhcNMjUxMjE0MDEwMDM1WhcNMjUxMjE1MDEwMDM1WjAzMTEwLwYDVQQD Eyg3ODgxNTkwODFjMDBkZWFhNTVmZjQ5ZDkyYzRjMjA3NzUxODU1ZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ7oBDj7uIr9Do/71M4ij8Hp/2rP qUXUY5KpehBmiYVsnII5uDWUOfO5jyyZrgvu7wkgkFwM9TLet9vMtidUEbWsl6Pf f5e2HyNPThXj8q03Gp9C7SE5YNIZg73qESYl05MgHTw9b44Q9HEPmtzTYk9oIdvq NvG7xxYT5TtI7cdon1Uc4l5Tglpd82auZebOaAJrl7aarURQwT5RT7di8r1Z0WRX e/TMHyH1XELbA+MZJaOIGYOsoudY6NEYB2CR3e5vkMH70RjPxDYiQNjmJ0CsDMx3 U9fNn51NMLZhnK9Y+/e3o1bAYlbtr2aQBUHqoZh3YW86SsOgcHDrRWwrUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiBWQgcAN6qVf9J2SxMIHdRhV2HMB8GA1UdIwQY MBaAFIsxlnEQyr7sSma3gDflKoeyvI9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQt YTAxN2MzNjg0NjZkLzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQtYTAxN2MzNjg0NjZk LzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACygTvvnY rFxipwy5H+w4URnp09oMqkr3BQN6pmZ74DzZ3OPTce9+L1SzEv0bZJR9E7qXqVHp eDF2Ua6LyIy7gtaYH/AQ15CY7RYVuOlASyMaWOTY22okXyEImiEbPIoqK2Uvxhqv WvSioxxCPxp9uk1YLHVF7XNW4csjCHl5oRCZO2ufKhnZgzT7dLeJ+2HDc62p+BeB 8UF7DGrTBmlrInPqFtLgsIfcfdRnn+XcxsnPhMBFmvPwY9sqsJqSSz3ANIMYnEKM rCCEt7cXhBg3ZwiXGE2t+LIjQe7Q8k00ei56E6bORiVO/c2xd2Whcadkcs9kpb9E eUycPr0GDchKOQ== -----END CERTIFICATE-----Generated at Sun Dec 14 06:12:10 2025 by rpki-client