This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json) Hash identifier: Ih8j0mckND7WiMScJyT9zy3UJ3lWzF64/RtYd9a+zew= Subject key identifier: 7D:FD:A2:93:46:FC:B2:6C:66:1C:CE:84:9B:75:41:BA:CC:38:0F:55 Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62 Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62 Certificate serial: 019B31C349C60D143AB6A65C5CA44956C0CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft Manifest number: 11BD Signing time: Thu 18 Dec 2025 14:00:40 +0000 Manifest this update: Thu 18 Dec 2025 14:00:40 +0000 Manifest next update: Fri 19 Dec 2025 14:00:40 +0000 Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: PhAb0ocOf1vsOdi0iwgDwGrc9gBD2b/NhQwV8tAgVTA=) 2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:49:c6:0d:14:3a:b6:a6:5c:5c:a4:49:56:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62 Validity Not Before: Dec 18 14:00:40 2025 GMT Not After : Dec 19 14:00:40 2025 GMT Subject: CN=7dfda29346fcb26c661cce849b7541bacc380f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:50:09:73:94:e3:c9:dc:5b:e7:b0:16:7f: 14:e1:3f:60:bf:57:7a:28:05:98:34:c6:41:96:17: de:2d:28:d7:d1:68:21:81:2e:46:58:c2:8d:ea:df: 97:32:57:77:c5:44:2f:71:e5:7a:30:b7:11:f6:79: 9e:36:50:f9:6f:10:a7:0c:db:db:bd:25:b2:0c:e0: 0d:1d:5f:0d:0f:10:8e:aa:60:9b:59:c9:3b:03:c7: 90:87:99:e5:66:4d:cf:1f:9c:82:98:c9:8d:54:d9: 13:a2:e7:d7:50:97:23:67:0c:eb:16:70:05:8c:3d: 28:84:93:97:59:87:90:38:71:44:eb:15:96:46:ff: 9c:47:1e:9b:c3:fe:79:cc:37:0d:e0:90:84:e1:1d: b1:0c:4a:b5:ee:60:81:46:02:73:92:6f:4f:2e:c0: 18:6d:3a:7f:a3:59:db:97:c5:fe:19:06:53:e9:1b: 52:96:6c:cd:05:fe:84:cb:ec:06:80:86:f1:50:4a: fd:76:13:51:ea:82:6d:c1:d5:ae:f3:dd:19:8e:cb: 64:bf:d0:16:f7:7c:f3:59:51:63:db:67:cb:8b:b0: e0:70:04:10:38:07:f9:38:9f:26:74:80:9d:99:1e: c2:c8:cf:0c:9a:c4:47:49:66:af:8e:bc:f0:85:c0: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FD:A2:93:46:FC:B2:6C:66:1C:CE:84:9B:75:41:BA:CC:38:0F:55 X509v3 Authority Key Identifier: keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f7:61:86:c4:3a:13:4d:2a:0f:3d:49:05:84:2b:89:6e:d9: 9f:af:be:d0:7c:b2:51:10:65:ce:c2:ee:75:02:73:21:e2:5b: f8:2c:10:a3:60:ae:62:81:46:b6:86:a3:7f:51:ce:87:17:af: f2:c7:e3:00:24:95:e5:c1:e0:ec:e4:5b:05:0e:65:b9:e3:9f: 3e:7b:d5:db:ad:e9:27:b5:1d:e8:31:5e:b8:7b:70:16:88:20: cb:4f:0a:d2:9b:13:ce:0f:e5:48:2b:75:26:d4:03:32:51:b6: 65:f6:48:f4:4b:ce:a1:9c:35:ab:18:e1:68:37:8f:17:6f:7f: 76:06:d2:c2:5f:ee:b1:ef:84:40:04:fd:41:55:0e:f0:90:f8: b3:d6:d1:08:f2:a5:4e:eb:b1:b2:da:17:95:1c:bb:2b:f4:1d: 78:b9:c1:1b:35:7d:8f:c3:22:3b:dc:76:4f:aa:98:dc:55:e6: e9:0c:e6:1b:7c:97:17:3c:db:1a:13:f6:5d:f9:49:52:5c:f4: 80:b0:d7:fe:cd:02:42:82:43:c5:ce:cc:27:35:86:da:d4:46: 2e:d6:3c:09:d8:d5:ec:3a:f6:cb:df:56:08:c3:65:8a:34:7a: 1e:37:ce:18:4e:32:ce:82:27:49:35:5e:6d:1d:88:ca:fe:0b: 21:dd:4c:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw0nGDRQ6tqZcXKRJVsDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjNlNGYzOWQxYzNjMTRkODMxNjA2YmZjYTE2NjZkZGU5 YmVkNjIwHhcNMjUxMjE4MTQwMDQwWhcNMjUxMjE5MTQwMDQwWjAzMTEwLwYDVQQD Eyg3ZGZkYTI5MzQ2ZmNiMjZjNjYxY2NlODQ5Yjc1NDFiYWNjMzgwZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp81QCXOU48ncW+ewFn8U4T9gv1d6 KAWYNMZBlhfeLSjX0WghgS5GWMKN6t+XMld3xUQvceV6MLcR9nmeNlD5bxCnDNvb vSWyDOANHV8NDxCOqmCbWck7A8eQh5nlZk3PH5yCmMmNVNkToufXUJcjZwzrFnAF jD0ohJOXWYeQOHFE6xWWRv+cRx6bw/55zDcN4JCE4R2xDEq17mCBRgJzkm9PLsAY bTp/o1nbl8X+GQZT6RtSlmzNBf6Ey+wGgIbxUEr9dhNR6oJtwdWu890Zjstkv9AW 93zzWVFj22fLi7DgcAQQOAf5OJ8mdICdmR7CyM8MmsRHSWavjrzwhcA7oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH39opNG/LJsZhzOhJt1QbrMOA9VMB8GA1UdIwQY MBaAFCKz5POdHDwU2DFga/yhZm3em+1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQt ZWQ1OTQ3ZjY2YjcwLzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQtZWQ1OTQ3ZjY2Yjcw LzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfdhhsQ6 E00qDz1JBYQriW7Zn6++0HyyURBlzsLudQJzIeJb+CwQo2CuYoFGtoajf1HOhxev 8sfjACSV5cHg7ORbBQ5lueOfPnvV263pJ7Ud6DFeuHtwFoggy08K0psTzg/lSCt1 JtQDMlG2ZfZI9EvOoZw1qxjhaDePF29/dgbSwl/use+EQAT9QVUO8JD4s9bRCPKl TuuxstoXlRy7K/QdeLnBGzV9j8MiO9x2T6qY3FXm6QzmG3yXFzzbGhP2XflJUlz0 gLDX/s0CQoJDxc7MJzWG2tRGLtY8CdjV7Dr2y99WCMNlijR6HjfOGE4yzoInSTVe bR2Iyv4LId1MJA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:27:16 2025 by rpki-client