This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json) Hash identifier: FfLwimIwNmJPLZMFQOYU9GzMboN8LP5iLP22t8aaqy4= Subject key identifier: 6A:3C:EC:35:5D:05:9D:33:B1:E7:AC:BB:4C:2F:EF:64:F7:E4:1F:C7 Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95 Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95 Certificate serial: 019B39EB2C32B5F5A52B562A26968910968B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft Manifest number: 094D Signing time: Sat 20 Dec 2025 04:01:11 +0000 Manifest this update: Sat 20 Dec 2025 04:01:11 +0000 Manifest next update: Sun 21 Dec 2025 04:01:11 +0000 Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: F0uMK9bFxJ2WjxoJ0NmwN1HUzmwlYr1bZPWS36L8f6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:2c:32:b5:f5:a5:2b:56:2a:26:96:89:10:96:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad60676432f68723662c932579a849352014b95 Validity Not Before: Dec 20 04:01:11 2025 GMT Not After : Dec 21 04:01:11 2025 GMT Subject: CN=6a3cec355d059d33b1e7acbb4c2fef64f7e41fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:69:50:cc:73:30:94:9b:ed:f1:2e:7e:cc: 58:c8:20:17:3f:6a:47:42:7c:bb:ce:4d:21:2e:01: 2e:54:e7:66:47:f6:cc:57:dc:29:45:05:80:3e:35: 5f:8d:24:c1:ca:82:ab:fa:10:99:cf:51:0d:2d:63: 22:66:25:58:01:09:40:3b:5f:fc:29:28:30:9b:fe: 47:07:6f:bd:1b:d8:5e:30:99:76:af:4d:fc:4f:1b: 4c:ab:4d:fc:d3:c2:9f:0e:1b:80:79:ac:03:72:bf: 11:c2:2b:08:68:14:92:05:cb:71:1a:fe:b0:a1:94: fc:00:8c:bf:eb:aa:7b:14:29:76:81:f3:58:ae:f4: 68:06:b8:12:30:c9:80:a3:44:4e:b8:f0:86:47:bf: 74:10:fe:02:e5:d4:09:1f:cb:75:3d:c7:01:e4:94: d4:a8:30:2d:be:c1:c3:b1:f9:91:9a:2b:13:06:b3: 97:00:79:77:9a:36:5f:9c:ad:3b:05:8e:ec:c5:ee: 15:08:f4:95:1c:85:96:6e:49:67:4c:2d:75:ba:cc: 4a:05:03:f5:ef:d1:d6:f1:90:6c:8e:b9:e6:de:e4: 68:71:25:a4:30:f9:8e:39:89:a4:37:06:f0:b9:17: e6:e9:06:3f:75:eb:da:10:8a:bd:ef:7f:e2:5b:82: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3C:EC:35:5D:05:9D:33:B1:E7:AC:BB:4C:2F:EF:64:F7:E4:1F:C7 X509v3 Authority Key Identifier: keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c8:50:02:43:64:32:72:bd:60:a9:8a:7a:09:1f:b1:24:9f: c9:28:32:07:e3:b0:08:e4:eb:d6:81:3b:db:de:fe:3e:9e:12: 4a:48:aa:4b:26:bb:80:1e:31:68:67:56:d7:64:f1:d0:07:fb: 2e:3c:68:f2:c8:b0:00:e6:f9:44:82:d8:b6:57:03:76:31:7c: 1b:33:99:36:73:5b:d9:65:79:3b:46:0e:71:14:e9:6b:0b:7b: f8:d4:58:0f:0f:d2:b3:1d:db:c9:ce:eb:29:a8:d7:10:16:d0: 8d:94:c1:df:ea:bf:99:59:bb:47:aa:fa:1f:af:a8:f0:95:17: 15:02:ca:c8:84:6c:06:c5:1d:c9:48:aa:9c:a6:52:52:87:bb: 2e:78:a2:c1:c2:4f:70:f2:91:b3:73:56:cc:fe:03:d8:dc:8f: 10:17:f6:fe:7b:17:4f:af:e2:38:4a:59:c1:65:f2:fd:c3:0a: 67:7a:78:73:0b:02:7d:61:a2:39:2d:45:6d:4e:e2:17:f1:b6: 6c:43:ce:48:82:70:35:6e:98:32:f7:48:c0:79:e3:76:bb:8b: 7b:43:fd:89:0a:4f:38:cc:3f:64:d3:7a:a3:27:68:b6:a6:3e: 73:dd:cf:83:c1:ae:ed:15:92:a7:a0:b9:62:96:7c:de:07:d1: 0f:6f:f8:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56ywytfWlK1YqJpaJEJaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDYwNjc2NDMyZjY4NzIzNjYyYzkzMjU3OWE4NDkzNTIw MTRiOTUwHhcNMjUxMjIwMDQwMTExWhcNMjUxMjIxMDQwMTExWjAzMTEwLwYDVQQD Eyg2YTNjZWMzNTVkMDU5ZDMzYjFlN2FjYmI0YzJmZWY2NGY3ZTQxZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CppUMxzMJSb7fEufsxYyCAXP2pH Qny7zk0hLgEuVOdmR/bMV9wpRQWAPjVfjSTByoKr+hCZz1ENLWMiZiVYAQlAO1/8 KSgwm/5HB2+9G9heMJl2r038TxtMq03808KfDhuAeawDcr8RwisIaBSSBctxGv6w oZT8AIy/66p7FCl2gfNYrvRoBrgSMMmAo0ROuPCGR790EP4C5dQJH8t1PccB5JTU qDAtvsHDsfmRmisTBrOXAHl3mjZfnK07BY7sxe4VCPSVHIWWbklnTC11usxKBQP1 79HW8ZBsjrnm3uRocSWkMPmOOYmkNwbwuRfm6QY/devaEIq973/iW4KqSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo87DVdBZ0zseesu0wv72T35B/HMB8GA1UdIwQY MBaAFIrWBnZDL2hyNmLJMleahJNSAUuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUt Mjg0MDM2YTgxZDkwLzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUtMjg0MDM2YTgxZDkw LzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8hQAkNk MnK9YKmKegkfsSSfySgyB+OwCOTr1oE7297+Pp4SSkiqSya7gB4xaGdW12Tx0Af7 Ljxo8siwAOb5RILYtlcDdjF8GzOZNnNb2WV5O0YOcRTpawt7+NRYDw/Ssx3byc7r KajXEBbQjZTB3+q/mVm7R6r6H6+o8JUXFQLKyIRsBsUdyUiqnKZSUoe7LniiwcJP cPKRs3NWzP4D2NyPEBf2/nsXT6/iOEpZwWXy/cMKZ3p4cwsCfWGiOS1FbU7iF/G2 bEPOSIJwNW6YMvdIwHnjdruLe0P9iQpPOMw/ZNN6oydotqY+c93Pg8Gu7RWSp6C5 YpZ83gfRD2/4NA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:20:42 2025 by rpki-client