This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json) Hash identifier: Gy60CABrFkr6jCYxsgM2epjEfwXGMugNr8748HqE7Oo= Subject key identifier: 2F:EC:1D:8C:D7:83:69:22:4C:8A:17:3E:ED:66:CC:6E:88:0F:4D:6E Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8 Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8 Certificate serial: 019B07B513CFC46F83D98685D4C569392B56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft Manifest number: 16FF Signing time: Wed 10 Dec 2025 10:01:06 +0000 Manifest this update: Wed 10 Dec 2025 10:01:06 +0000 Manifest next update: Thu 11 Dec 2025 10:01:06 +0000 Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: knY7mr/jsln52VXSrFeTFYcyQtBMtCRMhfK3eEsBetI=) 2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:13:cf:c4:6f:83:d9:86:85:d4:c5:69:39:2b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8 Validity Not Before: Dec 10 10:01:06 2025 GMT Not After : Dec 11 10:01:06 2025 GMT Subject: CN=2fec1d8cd78369224c8a173eed66cc6e880f4d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:c4:af:d3:4b:d2:4b:95:c5:b9:d6:f4:e4: c2:2c:01:05:e6:78:87:ff:c6:f6:d6:2f:7f:f3:87: 10:c6:49:0b:d4:26:33:b4:99:ce:4c:94:96:19:66: 7e:29:ad:2d:9e:5a:45:8d:c3:2a:cc:2c:4f:96:9e: 59:11:ac:d2:d0:6f:d2:34:61:4f:38:42:6f:39:ab: 7d:6a:84:29:0a:5a:83:d5:7c:a0:02:2f:65:2b:e2: 60:41:a2:9e:62:33:bc:ce:cb:e2:3d:5f:29:f7:e9: 88:72:64:e9:7b:02:e6:20:c1:2a:c3:2b:0c:7b:85: b3:51:a2:55:8a:c1:95:cc:05:da:7e:15:52:2c:fa: 7a:55:d6:50:49:60:e9:4b:7a:c6:5c:4a:bd:70:78: 8a:f1:71:58:88:d9:fa:70:7c:86:a0:06:c4:4f:68: 37:f7:81:2a:20:bd:84:f4:df:51:84:b1:e0:e0:ff: 49:0e:61:6b:bc:1c:b4:c5:88:61:1c:c8:0f:24:c2: ba:d8:22:73:bd:02:24:ec:66:db:14:9e:ed:e8:6e: a9:93:b0:84:d5:cc:8a:45:4c:89:3c:ba:05:bd:e8: b5:35:89:86:d3:21:92:bd:67:bc:1b:64:87:b5:eb: 6e:f8:e4:83:65:0d:be:e6:70:38:23:57:fc:b9:29: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EC:1D:8C:D7:83:69:22:4C:8A:17:3E:ED:66:CC:6E:88:0F:4D:6E X509v3 Authority Key Identifier: keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9e:01:e2:51:be:70:0c:b9:3a:94:bd:b0:10:8f:a4:8d:bc: 5b:52:76:ba:d3:e6:f1:90:61:56:a4:bf:f0:99:d6:6d:f2:23: 0e:5e:e0:11:31:69:47:bd:41:ef:f6:30:b3:fe:c3:4b:25:39: f0:ed:2e:ed:03:45:ea:dc:df:86:86:2b:cc:16:ea:51:ac:b5: 0f:d6:4a:44:54:81:ca:7c:80:94:fe:3e:d7:33:ff:00:2e:ec: 95:7f:bb:a0:f8:9d:d6:c4:f2:0a:2c:00:96:c7:b5:63:19:0f: d0:a7:56:7c:78:76:55:06:12:e7:91:b6:15:e1:ec:65:f0:de: 3a:f2:2b:5e:6a:54:8b:71:4b:19:2d:24:28:bf:0d:f8:6a:cc: a8:99:dd:9d:de:53:c3:48:de:f1:58:dc:ab:7c:d9:e8:6f:bb: 37:92:7a:72:40:4f:9c:17:18:46:fd:d3:e3:5e:60:a9:6b:7a: 44:4e:fc:8b:5d:4c:03:a5:1d:a1:d8:3a:1d:2b:61:f1:ae:5c: e4:4e:9b:b1:e8:6a:1b:df:f2:d6:31:08:ca:65:9b:d9:ab:78: 81:73:ed:7a:7e:0f:0f:d2:21:a4:f9:30:a2:e0:d9:3a:6b:2c: ab:32:a9:00:01:ad:29:ac:65:78:87:37:1c:28:22:35:b0:f3: 3d:93:2c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtRPPxG+D2YaF1MVpOStWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj ZjU3YzgwHhcNMjUxMjEwMTAwMTA2WhcNMjUxMjExMTAwMTA2WjAzMTEwLwYDVQQD EygyZmVjMWQ4Y2Q3ODM2OTIyNGM4YTE3M2VlZDY2Y2M2ZTg4MGY0ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHfEr9NL0kuVxbnW9OTCLAEF5niH /8b21i9/84cQxkkL1CYztJnOTJSWGWZ+Ka0tnlpFjcMqzCxPlp5ZEazS0G/SNGFP OEJvOat9aoQpClqD1XygAi9lK+JgQaKeYjO8zsviPV8p9+mIcmTpewLmIMEqwysM e4WzUaJVisGVzAXafhVSLPp6VdZQSWDpS3rGXEq9cHiK8XFYiNn6cHyGoAbET2g3 94EqIL2E9N9RhLHg4P9JDmFrvBy0xYhhHMgPJMK62CJzvQIk7GbbFJ7t6G6pk7CE 1cyKRUyJPLoFvei1NYmG0yGSvWe8G2SHtetu+OSDZQ2+5nA4I1f8uSnYrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/sHYzXg2kiTIoXPu1mzG6ID01uMB8GA1UdIwQY MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt YjkwYTk0MWVhNTFhLzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ4B4lG+ cAy5OpS9sBCPpI28W1J2utPm8ZBhVqS/8JnWbfIjDl7gETFpR71B7/Yws/7DSyU5 8O0u7QNF6tzfhoYrzBbqUay1D9ZKRFSBynyAlP4+1zP/AC7slX+7oPid1sTyCiwA lse1YxkP0KdWfHh2VQYS55G2FeHsZfDeOvIrXmpUi3FLGS0kKL8N+GrMqJndnd5T w0je8Vjcq3zZ6G+7N5J6ckBPnBcYRv3T415gqWt6RE78i11MA6Udodg6HSth8a5c 5E6bsehqG9/y1jEIymWb2at4gXPten4PD9IhpPkwouDZOmssqzKpAAGtKaxleIc3 HCgiNbDzPZMseQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:43:53 2025 by rpki-client