This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft File: IytwMInjgA2e0pEkcx7LpOmrRU8.mft (raw, json) Hash identifier: RGfkjLz7kEUZtka5Yr3Xk+7ulE5Jiusk+ixt6YnS4uk= Subject key identifier: ED:C0:D3:C6:10:74:5B:D6:F6:69:7C:9A:CD:8A:22:48:BF:EC:09:02 Authority key identifier: 23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F Certificate issuer: /CN=232b703089e3800d9ed29124731ecba4e9ab454f Certificate serial: 019B59E41C92EDD3A5C100DF4E94AD1B5AF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft Manifest number: 54 Signing time: Fri 26 Dec 2025 09:01:20 +0000 Manifest this update: Fri 26 Dec 2025 09:01:20 +0000 Manifest next update: Sat 27 Dec 2025 09:01:20 +0000 Files and hashes: 1: IytwMInjgA2e0pEkcx7LpOmrRU8.crl (hash: d/puOS5LXw249NBjUivP8J/sTT7YjMEC4S2JP8fanUY=) 2: bbBG2rue9lHstySItrWfZ8Okk2k.roa (hash: Lp3myBhOizyAmwsAgb6LWTVDSU9pHimrZnlM2WFEifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:1c:92:ed:d3:a5:c1:00:df:4e:94:ad:1b:5a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232b703089e3800d9ed29124731ecba4e9ab454f Validity Not Before: Dec 26 09:01:20 2025 GMT Not After : Dec 27 09:01:20 2025 GMT Subject: CN=edc0d3c610745bd6f6697c9acd8a2248bfec0902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:70:b8:34:31:80:a4:c2:1d:70:23:e8:fd: 35:40:2c:42:59:4c:22:42:6c:46:34:2a:9d:2d:d1: c8:2e:1f:d8:ac:ec:d6:03:6a:0d:43:66:3a:c4:21: 2e:d6:f8:bc:16:36:2b:17:43:04:9b:fb:74:04:f9: 4d:42:77:8e:d8:ee:3a:ab:aa:64:00:d4:8b:22:e3: 68:6e:32:14:f5:1e:41:1e:40:28:2f:05:1e:d4:c5: 19:52:24:c4:20:b6:e3:11:4a:d6:d6:0c:83:12:7e: 3a:ad:b0:bd:07:55:8c:c3:f0:c5:c6:92:ce:08:31: 0c:31:f1:85:99:8e:1e:14:b7:ce:c9:77:c2:87:e0: d8:68:0b:12:60:bc:0a:a1:72:8e:23:2f:90:57:9a: 75:ea:b8:b1:30:f8:23:f6:0d:36:ab:db:96:e2:06: e6:ad:90:b9:3f:dd:65:92:8f:c4:4e:15:bb:fe:b4: ea:96:f3:f3:43:09:8a:ea:bd:23:03:3e:bd:3f:7a: fe:9a:9f:1c:52:ad:c5:cc:41:c5:21:95:67:91:d1: 30:ce:98:9b:c9:f2:fa:66:ce:68:a8:3d:2f:45:4b: 93:a8:d6:52:7d:40:88:04:6e:c9:54:48:0e:ea:51: 0d:bf:36:db:67:37:2d:bd:0c:65:3e:73:02:80:c3: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C0:D3:C6:10:74:5B:D6:F6:69:7C:9A:CD:8A:22:48:BF:EC:09:02 X509v3 Authority Key Identifier: keyid:23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:04:8c:f5:0e:26:c2:a3:14:e7:2e:b0:33:08:a6:c0:4d:b2: 5e:06:74:8a:2b:69:bb:94:45:a8:b9:dc:25:39:75:16:d8:21: 46:f7:82:ac:bb:65:95:4d:2a:f4:9f:f1:9b:59:8b:54:68:ff: 6b:f8:fa:9e:4d:9a:27:6d:ab:dc:34:85:8f:48:7d:76:6e:a8: 2e:6b:0a:e7:3e:31:78:42:ef:5c:fa:24:5e:2c:d1:a8:32:e5: 8a:f4:37:0f:47:b3:e6:c6:60:43:2d:c6:db:72:21:d6:0a:50: 7f:45:a3:de:5d:8b:c8:90:4a:c0:56:28:be:40:fa:a6:eb:21: 10:79:80:bc:d3:be:f2:82:4e:01:c7:d9:95:5f:98:3e:37:7f: 6f:99:77:86:28:83:c8:b0:de:59:a9:df:91:c7:03:07:ff:07: a4:f5:80:61:05:f1:63:c2:5f:6f:a1:5d:6d:27:6d:10:3a:e1: e2:5c:51:34:67:a7:d4:8a:84:55:d8:75:77:94:8e:cb:41:9a: 78:85:aa:c6:05:dc:81:3b:ee:b1:a3:63:84:b7:30:8b:2b:b1: c7:81:28:6d:69:80:48:32:a0:7c:0a:25:f3:3e:60:41:52:aa: 7b:0c:26:d5:58:f2:5e:8f:9f:d8:c4:89:c3:38:57:d8:82:8b: 8f:f2:14:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5ByS7dOlwQDfTpStG1rwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmI3MDMwODllMzgwMGQ5ZWQyOTEyNDczMWVjYmE0ZTlh YjQ1NGYwHhcNMjUxMjI2MDkwMTIwWhcNMjUxMjI3MDkwMTIwWjAzMTEwLwYDVQQD EyhlZGMwZDNjNjEwNzQ1YmQ2ZjY2OTdjOWFjZDhhMjI0OGJmZWMwOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveFwuDQxgKTCHXAj6P01QCxCWUwi QmxGNCqdLdHILh/YrOzWA2oNQ2Y6xCEu1vi8FjYrF0MEm/t0BPlNQneO2O46q6pk ANSLIuNobjIU9R5BHkAoLwUe1MUZUiTEILbjEUrW1gyDEn46rbC9B1WMw/DFxpLO CDEMMfGFmY4eFLfOyXfCh+DYaAsSYLwKoXKOIy+QV5p16rixMPgj9g02q9uW4gbm rZC5P91lko/EThW7/rTqlvPzQwmK6r0jAz69P3r+mp8cUq3FzEHFIZVnkdEwzpib yfL6Zs5oqD0vRUuTqNZSfUCIBG7JVEgO6lENvzbbZzctvQxlPnMCgMMlQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3A08YQdFvW9ml8ms2KIki/7AkCMB8GA1UdIwQY MBaAFCMrcDCJ44ANntKRJHMey6Tpq0VPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTct YzA2ZDAzNjBlMTE0LzEvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTctYzA2ZDAzNjBlMTE0 LzEvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwSM9Q4m wqMU5y6wMwimwE2yXgZ0iitpu5RFqLncJTl1FtghRveCrLtllU0q9J/xm1mLVGj/ a/j6nk2aJ22r3DSFj0h9dm6oLmsK5z4xeELvXPokXizRqDLlivQ3D0ez5sZgQy3G 23Ih1gpQf0Wj3l2LyJBKwFYovkD6pushEHmAvNO+8oJOAcfZlV+YPjd/b5l3hiiD yLDeWanfkccDB/8HpPWAYQXxY8Jfb6FdbSdtEDrh4lxRNGen1IqEVdh1d5SOy0Ga eIWqxgXcgTvusaNjhLcwiyuxx4EobWmASDKgfAol8z5gQVKqewwm1VjyXo+f2MSJ wzhX2IKLj/IU9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:15 2025 by rpki-client