This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json) Hash identifier: af/r3yWfNDc2+Cwr6ZuJljlEzgHVSsA750/tLQdufN8= Subject key identifier: 23:93:9C:3B:4F:8D:8E:72:7B:DD:81:55:B4:FB:D1:5A:D4:F5:B3:E7 Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3 Certificate serial: 019B1B3B977689F53D100D3ECD02436E7E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 05:00:48 +0000 Manifest this update: Sun 14 Dec 2025 05:00:48 +0000 Manifest next update: Mon 15 Dec 2025 05:00:48 +0000 Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: 58/o1sRVg1lLLuX96pXmOFTxrnr1vIKFkwxM0SgPN/A=) 2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:97:76:89:f5:3d:10:0d:3e:cd:02:43:6e:7e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3 Validity Not Before: Dec 14 05:00:48 2025 GMT Not After : Dec 15 05:00:48 2025 GMT Subject: CN=23939c3b4f8d8e727bdd8155b4fbd15ad4f5b3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:6b:cd:cb:f6:4a:55:b0:83:11:8e:82:fb: 92:93:45:b2:fe:8a:ac:ca:3f:00:98:52:1c:eb:0f: 92:c6:59:a4:13:e0:54:b1:7c:51:f2:9e:e1:e2:43: 05:95:49:19:ff:ec:02:dd:4d:88:6b:cd:20:be:ab: 81:76:95:bb:92:bd:f6:d9:1c:0d:e2:72:bb:eb:5c: 18:ec:a2:be:21:ce:89:a7:24:0e:c6:8d:14:02:13: 85:33:5c:8f:78:d9:a1:18:a5:a4:56:72:e9:6d:48: 2d:70:b1:6d:5d:15:26:b2:8d:80:a3:6a:47:3a:a4: 10:6c:62:78:46:8a:f3:d4:63:57:92:2b:0e:24:f8: 49:9c:38:1b:d3:bb:04:c0:9f:1b:32:6b:af:01:b5: cb:1b:a0:f3:24:e8:83:e0:4e:46:bc:b9:97:f2:80: 39:a9:8e:a2:3d:82:a9:14:50:06:be:4e:ac:42:54: c4:76:0c:1d:d0:0a:7e:b2:e7:22:61:a3:ed:65:f6: fb:fe:6a:2d:f9:08:fd:c2:09:46:ab:42:87:fe:6a: 7b:4e:03:3f:95:2b:dd:17:3e:7b:d2:a1:ba:53:48: 80:29:97:a4:50:84:7b:0b:3e:8c:71:37:23:cd:3a: f5:ad:44:87:0d:1b:04:03:2a:f3:f2:a9:ce:94:fa: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:93:9C:3B:4F:8D:8E:72:7B:DD:81:55:B4:FB:D1:5A:D4:F5:B3:E7 X509v3 Authority Key Identifier: keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2a:e8:9c:fe:86:23:9b:73:25:d1:cb:4c:79:4a:e8:cd:fa: 97:c3:91:da:26:cf:22:45:28:d3:18:8a:12:88:9f:2b:b0:0c: a8:57:f5:41:fa:24:fa:ca:94:15:53:8b:af:5e:3c:0b:a8:15: b4:5a:b4:35:ea:0a:6b:ef:00:c9:3e:3e:db:a4:58:c3:79:7c: 09:44:d1:46:e8:35:48:d1:58:28:d3:76:c7:b9:f2:c0:67:3a: f9:a5:d2:36:68:06:c3:b4:9d:aa:a0:44:c3:88:72:86:34:d5: 97:58:97:b4:81:e9:11:05:eb:ed:d4:75:ac:e9:62:f3:e7:7f: b9:8d:cb:ab:58:a4:cb:8a:1c:54:90:9c:c2:39:05:29:ab:b2: 5d:bd:7d:5c:19:d5:98:22:8f:11:9f:1b:ae:97:e4:b7:01:dd: 25:fa:f7:3c:77:08:7c:bf:f2:e3:5d:a0:c3:50:50:c2:8d:b4: 81:c4:03:d8:2b:43:9a:f9:88:4b:05:7d:60:f3:1c:7a:4a:d7: 63:c8:34:57:57:9d:d3:c9:f7:1d:3b:2e:c6:bb:dc:c0:14:6c: d6:d7:f3:66:70:23:b4:33:3d:0a:9b:c4:c1:84:5e:c7:8c:68: 23:b5:cb:d6:61:89:c7:22:7f:9e:8c:af:06:15:ff:9a:bc:29: f2:bd:c7:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO5d2ifU9EA0+zQJDbn5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk NWY1ZjMwHhcNMjUxMjE0MDUwMDQ4WhcNMjUxMjE1MDUwMDQ4WjAzMTEwLwYDVQQD EygyMzkzOWMzYjRmOGQ4ZTcyN2JkZDgxNTViNGZiZDE1YWQ0ZjViM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusNrzcv2SlWwgxGOgvuSk0Wy/oqs yj8AmFIc6w+SxlmkE+BUsXxR8p7h4kMFlUkZ/+wC3U2Ia80gvquBdpW7kr322RwN 4nK761wY7KK+Ic6JpyQOxo0UAhOFM1yPeNmhGKWkVnLpbUgtcLFtXRUmso2Ao2pH OqQQbGJ4Rorz1GNXkisOJPhJnDgb07sEwJ8bMmuvAbXLG6DzJOiD4E5GvLmX8oA5 qY6iPYKpFFAGvk6sQlTEdgwd0Ap+suciYaPtZfb7/mot+Qj9wglGq0KH/mp7TgM/ lSvdFz570qG6U0iAKZekUIR7Cz6McTcjzTr1rUSHDRsEAyrz8qnOlPop3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOTnDtPjY5ye92BVbT70VrU9bPnMB8GA1UdIwQY MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCronP6G I5tzJdHLTHlK6M36l8OR2ibPIkUo0xiKEoifK7AMqFf1Qfok+sqUFVOLr148C6gV tFq0NeoKa+8AyT4+26RYw3l8CUTRRug1SNFYKNN2x7nywGc6+aXSNmgGw7SdqqBE w4hyhjTVl1iXtIHpEQXr7dR1rOli8+d/uY3Lq1iky4ocVJCcwjkFKauyXb19XBnV mCKPEZ8brpfktwHdJfr3PHcIfL/y412gw1BQwo20gcQD2CtDmvmISwV9YPMcekrX Y8g0V1ed08n3HTsuxrvcwBRs1tfzZnAjtDM9CpvEwYRex4xoI7XL1mGJxyJ/noyv BhX/mrwp8r3HzQ== -----END CERTIFICATE-----Generated at Sun Dec 14 12:24:41 2025 by rpki-client