This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json) Hash identifier: pqIOnraWmIBMhixVXgXDnBb3e+hCYhAXTFg+oyytl2s= Subject key identifier: FE:4A:86:5B:6E:20:75:39:1E:AF:1E:EB:62:83:B4:AE:80:63:B8:E7 Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301 Certificate serial: 019B1FF505AE2B5ADC27F007D781EFCFEA69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft Manifest number: 0715 Signing time: Mon 15 Dec 2025 03:01:50 +0000 Manifest this update: Mon 15 Dec 2025 03:01:50 +0000 Manifest next update: Tue 16 Dec 2025 03:01:50 +0000 Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: F02cUffwUP/FViDZ0bXivKLKEepwQa8RpnfiDAaoQXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f5:05:ae:2b:5a:dc:27:f0:07:d7:81:ef:cf:ea:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301 Validity Not Before: Dec 15 03:01:50 2025 GMT Not After : Dec 16 03:01:50 2025 GMT Subject: CN=fe4a865b6e2075391eaf1eeb6283b4ae8063b8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:f4:c5:c1:67:58:71:f2:5e:fc:28:6f:8c: a6:7c:99:db:a3:3b:6b:4c:6b:86:84:a1:77:df:aa: f3:98:ad:d4:61:93:7f:b5:53:f4:4d:c7:2a:e2:c9: 08:6d:a9:67:d9:24:40:47:e7:6d:14:3f:04:55:fd: 7a:04:af:53:4f:d2:8d:80:c2:57:d7:96:3c:01:7c: 6a:83:37:46:75:ea:a4:96:1c:1d:7b:cd:38:0a:c3: f1:b4:29:00:33:e5:7c:6e:26:5f:9f:f1:bc:8d:92: b0:fb:be:2e:f5:80:cc:2d:7a:79:f6:f8:fa:ed:04: 67:31:9e:f1:d7:d6:e8:40:de:66:05:a2:d0:b0:6d: d7:e6:ff:30:19:57:8c:ff:6e:65:ea:6a:a3:0c:9a: 64:bc:db:2c:90:0d:46:a0:26:92:7e:4c:d3:11:3d: 20:a2:30:2a:b4:9b:8e:fb:b3:bc:e5:f3:db:05:aa: 70:95:5f:69:e7:7d:01:3a:09:60:72:ff:a7:bf:f2: 4a:0f:dd:ad:c9:c5:4e:4d:9e:1a:f9:67:cf:62:98: 67:67:28:9e:3c:b8:68:ad:85:43:61:9a:1b:ca:14: 58:42:83:ed:bd:43:21:c4:53:b7:01:6e:7f:7f:a2: 07:d1:e2:a5:71:8c:7f:71:91:0f:e5:d0:a7:b0:80: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:86:5B:6E:20:75:39:1E:AF:1E:EB:62:83:B4:AE:80:63:B8:E7 X509v3 Authority Key Identifier: keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:26:ce:6c:d0:c4:74:5c:89:91:6c:fd:1f:f8:28:0d:93:a7: 83:10:48:7c:bc:51:90:29:bf:e6:f8:7d:61:c8:8f:18:f7:eb: 0f:f7:f6:93:54:54:11:c3:bc:90:1e:60:17:cf:05:6c:e8:96: f9:d1:36:f9:08:b0:60:b2:83:1e:88:42:7b:4a:a4:30:b5:b7: ff:30:a6:d8:a4:a3:7e:60:c2:1f:a2:32:1a:aa:60:be:64:fb: bb:79:64:bf:c5:62:f3:85:b5:5a:f5:f4:a5:f7:b8:ba:da:25: c4:18:1d:ca:c4:f5:f9:d7:cb:25:b1:1e:19:29:c1:ed:30:70: 6e:95:8f:8a:f0:df:a0:cb:71:b3:ab:11:1b:9f:e5:64:30:67: df:8b:ea:a7:e1:b4:78:ca:35:91:31:28:4b:e3:85:79:5f:c8: cd:56:d7:a8:71:85:33:49:7c:38:c0:01:66:ab:af:f7:1a:d4: ac:08:2b:cf:53:46:67:d1:a2:c2:56:28:d8:85:b8:84:d1:c8: b4:76:49:29:fb:d6:d9:63:0e:a4:7d:98:9b:b5:15:8c:d7:eb: 90:df:5d:db:ca:58:3c:8b:3a:ac:cc:6c:de:12:5c:5f:c4:dd: 5e:b8:af:3d:c8:3a:e1:ba:a2:06:ce:9d:00:f8:8e:59:f5:d8: 62:87:37:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9QWuK1rcJ/AH14Hvz+ppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYWMzOGZlODEwNWZiNTlhMmNkMjU3ZjUxOWY4NTg1OTU4 NDAzMDEwHhcNMjUxMjE1MDMwMTUwWhcNMjUxMjE2MDMwMTUwWjAzMTEwLwYDVQQD EyhmZTRhODY1YjZlMjA3NTM5MWVhZjFlZWI2MjgzYjRhZTgwNjNiOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9D0xcFnWHHyXvwob4ymfJnboztr TGuGhKF336rzmK3UYZN/tVP0Tccq4skIbaln2SRAR+dtFD8EVf16BK9TT9KNgMJX 15Y8AXxqgzdGdeqklhwde804CsPxtCkAM+V8biZfn/G8jZKw+74u9YDMLXp59vj6 7QRnMZ7x19boQN5mBaLQsG3X5v8wGVeM/25l6mqjDJpkvNsskA1GoCaSfkzTET0g ojAqtJuO+7O85fPbBapwlV9p530BOglgcv+nv/JKD92tycVOTZ4a+WfPYphnZyie PLhorYVDYZobyhRYQoPtvUMhxFO3AW5/f6IH0eKlcYx/cZEP5dCnsIA0IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5KhltuIHU5Hq8e62KDtK6AY7jnMB8GA1UdIwQY MBaAFCGsOP6BBftZos0lf1GfhYWVhAMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmIt MGNmNTRjZmE4ZGExLzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNDVjNjItMmUwYS00Y2UxLWJlZmItMGNmNTRjZmE4ZGEx LzEvSWF3NF9vRUYtMW1pelNWX1VaLUZoWldFQXdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACybObNDE dFyJkWz9H/goDZOngxBIfLxRkCm/5vh9YciPGPfrD/f2k1RUEcO8kB5gF88FbOiW +dE2+QiwYLKDHohCe0qkMLW3/zCm2KSjfmDCH6IyGqpgvmT7u3lkv8Vi84W1WvX0 pfe4utolxBgdysT1+dfLJbEeGSnB7TBwbpWPivDfoMtxs6sRG5/lZDBn34vqp+G0 eMo1kTEoS+OFeV/IzVbXqHGFM0l8OMABZquv9xrUrAgrz1NGZ9GiwlYo2IW4hNHI tHZJKfvW2WMOpH2Ym7UVjNfrkN9d28pYPIs6rMxs3hJcX8TdXrivPcg64bqiBs6d APiOWfXYYoc3Bw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:53 2025 by rpki-client