This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft File: iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft (raw, json) Hash identifier: v69hUsaNKeyRtngu2J3dDPD9WmiqbuguUMVjF4vjBn4= Subject key identifier: C3:EC:D3:A4:A2:35:1A:5D:4D:76:33:31:5E:A1:B2:9C:D3:0D:0D:04 Authority key identifier: 89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3 Certificate issuer: /CN=898825d2f064989b38c781f2a8535189a26928c3 Certificate serial: 019B59768D2690F7417B6B884A17E5DE6F4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft Manifest number: 1619 Signing time: Fri 26 Dec 2025 07:01:40 +0000 Manifest this update: Fri 26 Dec 2025 07:01:40 +0000 Manifest next update: Sat 27 Dec 2025 07:01:40 +0000 Files and hashes: 1: iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl (hash: fUWKsGZhHoj8jt1x5+7WvW2i+UtBZ1BraN+a0+s+P+k=) 2: zbnBRUeVPnEEwLI2vvj0r39FPtE.roa (hash: 4AvpkRySedv9+g3/SFfJUIRAayJwpWmaa1FdREtJu9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:8d:26:90:f7:41:7b:6b:88:4a:17:e5:de:6f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=898825d2f064989b38c781f2a8535189a26928c3 Validity Not Before: Dec 26 07:01:40 2025 GMT Not After : Dec 27 07:01:40 2025 GMT Subject: CN=c3ecd3a4a2351a5d4d7633315ea1b29cd30d0d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:7f:37:0c:e3:e6:e1:e0:c1:08:2e:7d:9f: 4b:6f:0b:7d:67:8c:0e:86:3d:be:d7:bb:e3:d5:a6: 0a:0e:55:7f:2c:bb:9e:72:c0:d4:35:98:c4:33:54: 59:4b:19:97:d9:4d:54:76:1f:de:4e:ec:8d:b3:54: b0:5d:9b:7e:9c:18:5b:3c:3b:22:d6:2a:bb:fe:f2: 1f:a9:e7:39:d2:b6:ac:1e:d7:ef:18:a3:c4:23:c9: ae:93:86:fc:99:f8:a4:35:75:04:a7:bf:f7:78:16: ce:a7:ab:ce:62:3c:dd:85:44:88:9f:da:97:d5:97: 0f:c9:ca:aa:bb:14:a0:60:d6:b0:2c:63:d1:b0:09: 7e:d3:ae:14:b7:9a:f6:c0:84:c5:1e:85:28:87:e4: 33:67:43:b9:09:e5:81:6a:2c:51:26:12:e9:d0:2d: 1a:04:b3:b1:8a:6b:a3:61:b5:7d:1f:98:0c:03:86: 3e:6d:d4:97:15:ed:54:fe:57:0a:17:55:4a:5f:7f: 0d:dd:ee:68:95:5c:45:bd:a2:5f:5b:7d:9e:04:f3: 1e:8a:c5:92:b1:50:7f:14:e7:c8:31:c2:e1:91:43: 54:45:fb:5a:e0:e7:b5:22:a0:b5:8a:43:6b:49:00: 8b:86:43:fc:0d:ce:e4:dc:c7:d8:ce:c3:a8:08:1b: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EC:D3:A4:A2:35:1A:5D:4D:76:33:31:5E:A1:B2:9C:D3:0D:0D:04 X509v3 Authority Key Identifier: keyid:89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:d4:0d:4d:55:99:be:8d:11:fa:ea:b6:7b:66:a9:1d:96: 4c:01:5c:ab:62:d9:1f:49:22:4d:40:ca:e7:f2:d9:5d:af:69: ba:45:24:5c:44:f8:38:bc:ba:0b:cf:5e:df:d5:d0:fe:ff:5e: f5:44:5e:de:71:86:50:5b:6e:f0:ba:34:7b:8b:d4:e1:6f:09: 8a:49:0a:49:67:08:27:9e:48:32:14:d0:16:72:82:fb:e8:61: f3:93:01:3f:20:13:da:25:52:cd:63:97:ff:9b:54:10:16:30: 10:4d:ca:c1:c8:e1:f1:b2:8c:29:f9:41:22:69:45:e9:d4:86: 33:65:30:42:d3:1b:20:e1:83:a3:36:57:fe:42:1c:b3:d9:a4: 58:19:23:86:d9:b2:16:4a:6d:ba:21:ed:8e:9f:2e:87:f1:2a: 0b:de:c5:49:7d:db:de:08:f8:d6:f9:a0:8d:80:ec:b8:0d:87: 64:5f:2d:a4:67:e7:1f:a9:59:f4:bf:f9:c2:47:07:ab:ff:8b: 87:15:24:2d:08:b5:68:50:01:48:c6:d7:bb:a3:e2:af:55:45: 24:a2:a0:0c:e5:ea:58:94:b3:da:b5:4f:86:43:69:fd:55:c8: f2:29:b6:38:e1:ac:4f:6e:fb:8c:a1:7c:34:82:ca:b9:8e:60: b4:36:eb:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdo0mkPdBe2uIShfl3m9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODgyNWQyZjA2NDk4OWIzOGM3ODFmMmE4NTM1MTg5YTI2 OTI4YzMwHhcNMjUxMjI2MDcwMTQwWhcNMjUxMjI3MDcwMTQwWjAzMTEwLwYDVQQD EyhjM2VjZDNhNGEyMzUxYTVkNGQ3NjMzMzE1ZWExYjI5Y2QzMGQwZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgl/Nwzj5uHgwQgufZ9Lbwt9Z4wO hj2+17vj1aYKDlV/LLuecsDUNZjEM1RZSxmX2U1Udh/eTuyNs1SwXZt+nBhbPDsi 1iq7/vIfqec50rasHtfvGKPEI8muk4b8mfikNXUEp7/3eBbOp6vOYjzdhUSIn9qX 1ZcPycqquxSgYNawLGPRsAl+064Ut5r2wITFHoUoh+QzZ0O5CeWBaixRJhLp0C0a BLOximujYbV9H5gMA4Y+bdSXFe1U/lcKF1VKX38N3e5olVxFvaJfW32eBPMeisWS sVB/FOfIMcLhkUNURfta4Oe1IqC1ikNrSQCLhkP8Dc7k3MfYzsOoCBvrCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPs06SiNRpdTXYzMV6hspzTDQ0EMB8GA1UdIwQY MBaAFImIJdLwZJibOMeB8qhTUYmiaSjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYWE0ZDAtMDVlNC00ODAyLTk5ZDgt ZWNhZTQxNDQ2Yjc3LzEvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wYWE0ZDAtMDVlNC00ODAyLTk5ZDgtZWNhZTQxNDQ2Yjc3 LzEvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlvUDU1V mb6NEfrqtntmqR2WTAFcq2LZH0kiTUDK5/LZXa9pukUkXET4OLy6C89e39XQ/v9e 9URe3nGGUFtu8Lo0e4vU4W8JikkKSWcIJ55IMhTQFnKC++hh85MBPyAT2iVSzWOX /5tUEBYwEE3Kwcjh8bKMKflBImlF6dSGM2UwQtMbIOGDozZX/kIcs9mkWBkjhtmy FkptuiHtjp8uh/EqC97FSX3b3gj41vmgjYDsuA2HZF8tpGfnH6lZ9L/5wkcHq/+L hxUkLQi1aFABSMbXu6Pir1VFJKKgDOXqWJSz2rVPhkNp/VXI8im2OOGsT277jKF8 NILKuY5gtDbrSQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:58 2025 by rpki-client