This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json) Hash identifier: qq2FRaoL/bldf0uuRxeoWi1C6QiGOFeebk0xJ5f3ygc= Subject key identifier: C6:4D:6E:F1:1D:9B:3E:C0:B5:27:24:B1:36:25:B6:02:2D:AB:02:80 Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065 Certificate serial: 019B1C85DB4CD00A1F87CA1A482E519C289E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft Manifest number: 1780 Signing time: Sun 14 Dec 2025 11:01:33 +0000 Manifest this update: Sun 14 Dec 2025 11:01:33 +0000 Manifest next update: Mon 15 Dec 2025 11:01:33 +0000 Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=) 2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=) 3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: oiTd1alRSaAN5S/2uNqts1nBZhQ2/iscNnVoPHsd7rY=) 4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=) 5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:db:4c:d0:0a:1f:87:ca:1a:48:2e:51:9c:28:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Validity Not Before: Dec 14 11:01:33 2025 GMT Not After : Dec 15 11:01:33 2025 GMT Subject: CN=c64d6ef11d9b3ec0b52724b13625b6022dab0280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:f0:f3:64:a0:16:63:7a:9e:e1:f0:45:57: 96:96:ab:3d:05:e5:a6:b9:fd:65:f6:a1:e7:b0:c9: a7:36:07:89:34:45:9b:42:a6:4f:90:01:97:19:5e: c8:8a:16:dc:3d:fa:32:da:e2:aa:eb:29:48:d8:3d: 55:48:e0:ad:b3:d3:2b:a7:88:84:1c:71:d6:0c:73: df:9a:2f:01:e1:ae:70:d8:46:ed:24:63:bd:f7:35: 38:42:d2:35:75:c3:1d:3b:e0:3f:67:eb:45:45:e3: 16:3c:d6:51:d8:1d:b3:20:a9:8c:a6:24:aa:20:d7: 1b:8f:49:59:75:e9:dc:50:83:8a:f1:73:5b:14:8a: 4f:ff:24:a0:8a:b4:81:4c:81:d2:d5:55:0d:5a:5d: 3b:81:76:44:46:62:bb:a8:bb:0a:81:91:b6:a9:67: 4d:47:42:38:0d:ff:78:39:67:de:f1:e6:d9:bd:62: 86:1d:cd:de:f3:6d:d4:81:a1:1e:6a:05:6b:f7:06: 22:3e:7d:97:32:e3:5f:5d:20:e2:86:1a:7f:e4:b7: 96:a0:f6:93:db:39:ac:92:b5:e1:5f:5b:26:68:97: a3:e0:ba:e2:00:0a:87:6f:0e:fe:d0:d0:bb:7f:17: af:98:cc:28:39:d8:7b:e8:66:ea:ef:43:00:89:cd: a2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:6E:F1:1D:9B:3E:C0:B5:27:24:B1:36:25:B6:02:2D:AB:02:80 X509v3 Authority Key Identifier: keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a7:22:44:b2:53:27:aa:08:38:fb:e2:dd:25:d0:fb:7e:54: ff:2d:88:0d:2d:e1:5d:a2:4d:37:cc:51:7f:c3:0a:80:ee:7f: 6d:98:a4:de:ac:1e:14:b7:20:e0:22:90:2b:ca:4e:e3:15:bc: f9:51:11:4b:24:4a:77:af:30:47:0c:76:f7:b4:2d:09:f4:38: 4b:cc:03:d9:3b:f7:41:77:ab:1f:b6:7e:4b:c6:97:3a:f8:70: e8:20:f9:1c:bd:cd:70:a7:ae:4c:40:24:a2:5c:28:70:af:07: ff:f3:8c:3d:e3:0d:22:ce:38:a9:7b:4f:f4:74:58:b6:9d:37: 7e:3d:06:b3:28:b1:59:61:37:9b:ec:0b:f7:9f:af:9b:a0:da: c5:26:ff:a8:52:2e:1d:94:a8:34:1e:8b:3d:98:15:a0:2b:6c: 89:91:3b:7e:c5:04:71:9f:36:d6:58:86:15:b8:ae:9f:9b:c2: e5:55:82:10:15:e5:8c:d3:aa:1a:c0:8f:21:67:32:a7:6b:ac: 69:1e:d2:d5:f6:ca:28:ad:fd:0b:39:7a:d3:bf:9b:f2:a4:57: 8a:40:79:7d:ef:99:4f:35:2a:d2:97:fe:aa:9f:0e:9f:b1:3f: a0:b4:28:cc:5e:81:0e:b4:a6:11:5a:ce:ad:30:fc:63:e2:f3: 41:6c:cc:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschdtM0Aofh8oaSC5RnCieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk YjAwNjUwHhcNMjUxMjE0MTEwMTMzWhcNMjUxMjE1MTEwMTMzWjAzMTEwLwYDVQQD EyhjNjRkNmVmMTFkOWIzZWMwYjUyNzI0YjEzNjI1YjYwMjJkYWIwMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8/w82SgFmN6nuHwRVeWlqs9BeWm uf1l9qHnsMmnNgeJNEWbQqZPkAGXGV7IihbcPfoy2uKq6ylI2D1VSOCts9Mrp4iE HHHWDHPfmi8B4a5w2EbtJGO99zU4QtI1dcMdO+A/Z+tFReMWPNZR2B2zIKmMpiSq INcbj0lZdencUIOK8XNbFIpP/ySgirSBTIHS1VUNWl07gXZERmK7qLsKgZG2qWdN R0I4Df94OWfe8ebZvWKGHc3e823UgaEeagVr9wYiPn2XMuNfXSDihhp/5LeWoPaT 2zmskrXhX1smaJej4LriAAqHbw7+0NC7fxevmMwoOdh76Gbq70MAic2i/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZNbvEdmz7AtScksTYltgItqwKAMB8GA1UdIwQY MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKciRLJT J6oIOPvi3SXQ+35U/y2IDS3hXaJNN8xRf8MKgO5/bZik3qweFLcg4CKQK8pO4xW8 +VERSyRKd68wRwx297QtCfQ4S8wD2Tv3QXerH7Z+S8aXOvhw6CD5HL3NcKeuTEAk olwocK8H//OMPeMNIs44qXtP9HRYtp03fj0GsyixWWE3m+wL95+vm6DaxSb/qFIu HZSoNB6LPZgVoCtsiZE7fsUEcZ821liGFbiun5vC5VWCEBXljNOqGsCPIWcyp2us aR7S1fbKKK39Czl607+b8qRXikB5fe+ZTzUq0pf+qp8On7E/oLQozF6BDrSmEVrO rTD8Y+LzQWzM5w== -----END CERTIFICATE-----Generated at Sun Dec 14 18:58:28 2025 by rpki-client