This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json) Hash identifier: 1Ei3oUmqws5wTTUz+8CQf0ZhbRxA+RLiocFJOqVs41Q= Subject key identifier: 1D:70:CB:3E:17:AD:E1:3F:A4:DE:0F:F3:2F:B9:5D:8C:7B:90:E7:4F Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3 Certificate serial: 019B36454F46C133B5127C6A4248663F89C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 11:01:10 +0000 Manifest this update: Fri 19 Dec 2025 11:01:10 +0000 Manifest next update: Sat 20 Dec 2025 11:01:10 +0000 Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: cTDQEerPHXIRYRt2S8A0SrquDzszUsIqqot14b7Wyrs=) 2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:4f:46:c1:33:b5:12:7c:6a:42:48:66:3f:89:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3 Validity Not Before: Dec 19 11:01:10 2025 GMT Not After : Dec 20 11:01:10 2025 GMT Subject: CN=1d70cb3e17ade13fa4de0ff32fb95d8c7b90e74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b5:c2:e5:ea:9f:a7:f4:5a:f5:fe:82:93:74: 31:19:38:33:8f:67:a1:c0:61:13:7c:79:a4:45:77: d9:13:a8:74:bb:45:0b:cc:af:89:cc:a3:4d:39:28: d4:b7:9f:f1:4b:63:e6:c9:e2:9b:8d:69:8f:32:e8: 65:ed:5f:21:7a:39:a2:27:bd:4c:0b:2e:8d:8e:0d: 44:bd:ad:6f:80:16:ee:15:2d:7b:10:e6:f8:ee:a4: 5f:23:b1:fe:80:b6:de:4c:66:b0:29:53:c7:14:3e: df:d5:a3:96:59:48:ce:31:e7:a7:80:d2:78:d6:df: 09:29:ab:11:cd:82:1b:f8:94:ee:90:c1:ce:cd:d6: a6:51:ba:c8:e8:a9:78:fa:08:58:c2:27:75:3d:5a: 8a:5d:d9:e5:25:62:2a:20:74:25:62:37:da:2a:9e: 72:20:9d:55:07:f9:85:63:15:4c:9e:a3:0d:c3:c5: fa:9a:81:f6:f8:36:d0:16:bd:4b:54:f7:6c:f5:d0: 40:3d:14:5f:aa:c0:93:58:63:27:66:2d:08:01:69: 6a:a4:20:23:7d:22:6a:a3:57:ef:34:7d:a5:e8:5d: 16:5e:df:b6:55:ff:42:47:57:c6:d4:0c:d4:8d:8a: 84:bd:4c:05:d4:00:93:31:0d:6b:57:28:1c:60:a6: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:CB:3E:17:AD:E1:3F:A4:DE:0F:F3:2F:B9:5D:8C:7B:90:E7:4F X509v3 Authority Key Identifier: keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:76:1c:78:46:a7:93:2b:a5:c3:24:a8:fc:0b:41:62:39:95: 51:c9:ca:87:ec:9b:46:8d:2c:cf:c3:d9:c5:74:a2:7f:ce:e8: b6:ff:05:12:55:4f:11:b5:9f:56:76:3c:8f:b7:a2:c4:57:f2: 0a:54:bf:c6:54:b3:95:9e:63:e1:69:1d:e1:00:b0:ef:4b:4e: 14:47:a1:51:b0:e3:fc:d5:16:86:d5:cd:15:de:2c:79:50:5c: 55:ca:8c:9b:a4:23:8f:3b:64:d4:39:48:fa:0c:9f:54:24:77: 45:3c:a6:30:f6:08:0a:dd:29:f7:f7:f0:f8:54:3e:87:8a:c0: 5c:86:37:87:d6:44:f3:7b:70:7c:07:57:8c:ac:b4:33:9d:19: f8:ec:8f:4b:64:6a:89:59:e5:97:8c:10:87:ab:98:e6:61:6e: 46:7a:59:a5:ac:a8:a4:a1:a0:39:c0:9e:a1:bc:d5:d1:bb:3a: 47:14:b2:28:77:f2:26:d2:5e:e4:7b:06:f4:26:a4:10:cc:21: 37:ea:fb:1d:f7:44:a9:5f:03:17:17:34:f2:e6:65:61:81:77: b7:da:e6:ee:a1:c5:de:4c:8a:2e:de:ff:90:28:b7:aa:a1:82: c0:71:79:4c:5f:62:12:e0:a8:77:ed:36:21:ea:8f:37:e6:0c: fe:ac:bc:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RU9GwTO1EnxqQkhmP4nFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk NWY1ZjMwHhcNMjUxMjE5MTEwMTEwWhcNMjUxMjIwMTEwMTEwWjAzMTEwLwYDVQQD EygxZDcwY2IzZTE3YWRlMTNmYTRkZTBmZjMyZmI5NWQ4YzdiOTBlNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrXC5eqfp/Ra9f6Ck3QxGTgzj2eh wGETfHmkRXfZE6h0u0ULzK+JzKNNOSjUt5/xS2PmyeKbjWmPMuhl7V8hejmiJ71M Cy6Njg1Eva1vgBbuFS17EOb47qRfI7H+gLbeTGawKVPHFD7f1aOWWUjOMeengNJ4 1t8JKasRzYIb+JTukMHOzdamUbrI6Kl4+ghYwid1PVqKXdnlJWIqIHQlYjfaKp5y IJ1VB/mFYxVMnqMNw8X6moH2+DbQFr1LVPds9dBAPRRfqsCTWGMnZi0IAWlqpCAj fSJqo1fvNH2l6F0WXt+2Vf9CR1fG1AzUjYqEvUwF1ACTMQ1rVygcYKau/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1wyz4XreE/pN4P8y+5XYx7kOdPMB8GA1UdIwQY MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXYceEan kyulwySo/AtBYjmVUcnKh+ybRo0sz8PZxXSif87otv8FElVPEbWfVnY8j7eixFfy ClS/xlSzlZ5j4Wkd4QCw70tOFEehUbDj/NUWhtXNFd4seVBcVcqMm6Qjjztk1DlI +gyfVCR3RTymMPYICt0p9/fw+FQ+h4rAXIY3h9ZE83twfAdXjKy0M50Z+OyPS2Rq iVnll4wQh6uY5mFuRnpZpayopKGgOcCeobzV0bs6RxSyKHfyJtJe5HsG9CakEMwh N+r7HfdEqV8DFxc08uZlYYF3t9rm7qHF3kyKLt7/kCi3qqGCwHF5TF9iEuCod+02 IeqPN+YM/qy8Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:37:20 2025 by rpki-client