This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json) Hash identifier: bGCOjCZLfCN0IdMKVjH/G+DlbYuO/ZFOpTIaWNaf6X8= Subject key identifier: B1:21:F6:C9:2D:A8:0D:46:7A:47:52:5A:89:96:A3:69:1C:F0:B8:AA Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131 Certificate serial: 019B326878E32B20704B287B27105DCAE61A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft Manifest number: 0A46 Signing time: Thu 18 Dec 2025 17:01:06 +0000 Manifest this update: Thu 18 Dec 2025 17:01:06 +0000 Manifest next update: Fri 19 Dec 2025 17:01:06 +0000 Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: YfxvMRBfPEkjuB8Oht7ZBBaWrjLubjO0fCSPOarn/Yc=) 2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:78:e3:2b:20:70:4b:28:7b:27:10:5d:ca:e6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131 Validity Not Before: Dec 18 17:01:06 2025 GMT Not After : Dec 19 17:01:06 2025 GMT Subject: CN=b121f6c92da80d467a47525a8996a3691cf0b8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cc:8b:f6:83:47:fa:1a:53:0a:74:6f:77:98: f1:d0:02:73:78:47:b0:1f:cb:b2:10:33:59:72:ed: 56:bb:75:ea:46:45:b7:5c:bf:7d:00:fe:58:75:da: 27:12:57:b9:63:aa:e1:c3:40:9f:12:fa:4a:a7:99: 3c:d2:f3:0a:e8:04:6a:b9:b3:e5:39:48:e7:62:2a: 9c:e4:8b:14:88:57:cc:82:0b:a9:62:4f:9f:09:ac: 39:3c:0f:a8:9b:23:84:e1:8a:0b:dc:76:3b:02:8f: de:bd:74:e1:5c:e0:1a:b5:a6:13:0c:81:aa:32:92: f0:de:df:94:90:f5:e7:51:5d:1a:61:ab:9b:5e:84: 2a:c8:47:cc:54:76:ac:b4:b3:16:fe:9a:13:c0:e7: fc:33:33:fa:55:5c:cb:d9:d0:d9:27:d4:f6:fa:7e: cb:ee:29:d2:38:4f:b9:3a:05:e3:47:79:e6:b6:4f: 96:c6:a8:5a:4b:37:77:61:36:31:6a:51:4b:9b:a8: 84:da:fe:85:26:11:36:ed:5b:f7:7f:f2:f4:9e:04: 52:35:7c:01:d1:04:96:f9:0d:86:bc:7c:ca:91:14: 6f:30:55:3b:cd:7a:2d:d9:30:fc:8d:ae:6f:40:6b: 92:53:66:91:89:1e:ef:67:f2:4d:12:dd:aa:37:24: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:F6:C9:2D:A8:0D:46:7A:47:52:5A:89:96:A3:69:1C:F0:B8:AA X509v3 Authority Key Identifier: keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3f:39:71:e4:6e:86:17:ed:62:38:ab:f3:00:d2:2b:49:45: 9c:07:68:d4:e8:50:eb:1e:ed:44:9d:94:a4:6e:cb:c2:89:12: a9:12:18:e2:c5:bf:c4:c0:d7:54:9e:2e:01:18:60:29:3b:34: 6d:ff:8f:df:29:e2:4f:88:b7:c4:2a:6a:36:e1:84:66:44:81: 92:e7:08:f7:c4:da:cc:17:02:a2:98:7d:60:26:38:ba:00:9e: 46:ca:db:6e:11:53:03:89:25:bd:65:b9:36:ff:c2:4d:66:fd: 27:45:0f:64:51:1f:e7:66:3a:09:f0:f7:5a:d9:7a:18:4e:a2: 9b:d8:9d:5a:d1:b4:1d:1c:d3:1b:73:eb:63:55:12:24:a3:fa: f7:88:4d:16:48:cc:a1:0b:2e:72:16:70:2f:31:0d:a6:89:49: e3:cc:94:17:b9:66:d9:db:7c:be:f9:99:cb:8d:55:ed:98:c5: 82:e1:cb:7c:95:5e:5c:fb:d0:ef:69:00:c5:e9:c6:17:f5:65: 0c:12:9d:c2:ca:15:ac:61:f2:58:54:be:50:12:01:cc:94:a7: 2c:59:4d:5b:be:dd:c3:9d:f8:f5:f5:11:1f:47:91:72:ed:8a: 14:8b:23:14:22:ac:4a:3f:fc:6e:38:61:b9:28:5f:cc:1a:3f: bb:d9:b1:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaHjjKyBwSyh7JxBdyuYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTYyYmJmMDI0NmNkYTIyODBhMjkzNDMyYWU2ZjBiZDY4 MjYxMzEwHhcNMjUxMjE4MTcwMTA2WhcNMjUxMjE5MTcwMTA2WjAzMTEwLwYDVQQD EyhiMTIxZjZjOTJkYTgwZDQ2N2E0NzUyNWE4OTk2YTM2OTFjZjBiOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MyL9oNH+hpTCnRvd5jx0AJzeEew H8uyEDNZcu1Wu3XqRkW3XL99AP5YddonEle5Y6rhw0CfEvpKp5k80vMK6ARqubPl OUjnYiqc5IsUiFfMggupYk+fCaw5PA+omyOE4YoL3HY7Ao/evXThXOAataYTDIGq MpLw3t+UkPXnUV0aYaubXoQqyEfMVHastLMW/poTwOf8MzP6VVzL2dDZJ9T2+n7L 7inSOE+5OgXjR3nmtk+WxqhaSzd3YTYxalFLm6iE2v6FJhE27Vv3f/L0ngRSNXwB 0QSW+Q2GvHzKkRRvMFU7zXot2TD8ja5vQGuSU2aRiR7vZ/JNEt2qNyTuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEh9sktqA1GekdSWomWo2kc8LiqMB8GA1UdIwQY MBaAFCMWK78CRs2iKAopNDKubwvWgmExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAt ODVjMzA1ZjlmZTZmLzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAtODVjMzA1ZjlmZTZm LzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdD85ceRu hhftYjir8wDSK0lFnAdo1OhQ6x7tRJ2UpG7LwokSqRIY4sW/xMDXVJ4uARhgKTs0 bf+P3yniT4i3xCpqNuGEZkSBkucI98TazBcCoph9YCY4ugCeRsrbbhFTA4klvWW5 Nv/CTWb9J0UPZFEf52Y6CfD3Wtl6GE6im9idWtG0HRzTG3PrY1USJKP694hNFkjM oQsuchZwLzENpolJ48yUF7lm2dt8vvmZy41V7ZjFguHLfJVeXPvQ72kAxenGF/Vl DBKdwsoVrGHyWFS+UBIBzJSnLFlNW77dw5349fURH0eRcu2KFIsjFCKsSj/8bjhh uShfzBo/u9mxzA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:42 2025 by rpki-client