This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json) Hash identifier: 53cCXZ0JFUgGr0/uAzLYoZVf++fT/4YT+hDb8I37UeU= Subject key identifier: A4:97:EF:CE:0C:CE:BD:6C:E3:6D:DE:FE:79:71:E4:FC:9B:30:8D:2F Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Certificate serial: 019B0F37C3DD06FC97FC83E296D0351D6C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft Manifest number: 0CEC Signing time: Thu 11 Dec 2025 21:01:11 +0000 Manifest this update: Thu 11 Dec 2025 21:01:11 +0000 Manifest next update: Fri 12 Dec 2025 21:01:11 +0000 Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: HFcOywet1ArMudZfqP2BWFwg6/5IdlG8U7w627IFu0U=) 2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=) 3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:c3:dd:06:fc:97:fc:83:e2:96:d0:35:1d:6c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Validity Not Before: Dec 11 21:01:11 2025 GMT Not After : Dec 12 21:01:11 2025 GMT Subject: CN=a497efce0ccebd6ce36ddefe7971e4fc9b308d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:32:75:97:65:70:82:35:8c:14:28:6b:6a: b9:2e:f8:1e:43:7e:fb:d8:90:21:f8:37:0e:ee:a0: a0:82:93:d4:26:90:76:01:61:61:1e:d7:c2:0a:98: 35:91:43:c1:6e:99:bb:e5:15:81:ef:59:d9:f5:4d: 5a:a1:e6:7e:a3:dc:d8:d3:01:2e:79:ba:5c:69:40: a3:3c:c7:84:4e:8e:7c:a3:e2:71:f1:33:ab:94:18: 61:2f:56:9c:b3:8c:2f:fe:6a:b6:c1:88:59:fb:36: 9f:c3:f9:18:1d:6a:f9:26:10:a7:6d:3f:87:c6:13: 73:68:7c:cd:bc:55:de:0d:33:8b:ab:4a:70:07:98: 50:3a:48:48:1c:8c:df:76:94:8f:cf:24:68:43:5c: 8c:2d:4b:af:98:a2:a6:2b:07:51:a5:96:a5:9d:ae: e2:62:88:02:f1:94:fb:1f:6f:6f:02:d0:c1:0e:3f: fd:44:84:a4:db:4a:68:d7:d1:54:8d:32:49:16:a0: 9a:2d:cb:86:0a:a0:83:4f:3a:56:45:d3:65:b2:74: b4:8d:77:fe:29:d1:be:6b:5d:23:7f:75:70:cd:ca: 6c:c6:71:ec:7d:3e:54:cf:22:10:a4:66:99:13:0c: 03:c9:cc:4d:8e:ea:bb:4c:a6:a4:1f:ce:28:2c:2f: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:97:EF:CE:0C:CE:BD:6C:E3:6D:DE:FE:79:71:E4:FC:9B:30:8D:2F X509v3 Authority Key Identifier: keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a0:b7:f7:97:3e:03:97:79:fb:c4:a1:bd:69:f9:94:0e:67: e1:84:9e:5e:02:e4:06:6a:ec:a2:ca:87:a9:ca:75:1c:87:00: bd:cb:2b:d5:ee:d7:6f:e9:52:2f:0c:62:a7:25:e4:87:6c:b5: 47:c1:b3:7f:59:23:e8:3f:92:56:d8:1f:b0:4f:08:aa:ab:f4: d8:65:db:84:54:a6:e5:8b:e8:e2:3f:09:d7:32:15:3f:40:ba: fc:9f:b8:c5:83:99:10:28:76:a5:05:d4:de:1a:90:ae:fa:c7: 5f:1e:82:28:0e:7d:28:a2:97:f1:e1:30:64:6f:77:dc:8a:a6: 22:3d:57:8b:23:b3:6c:bd:ba:c9:99:9c:66:0a:d5:a9:e6:5b: f3:d6:fd:0a:84:17:9d:a3:17:06:db:e1:69:e0:0f:b7:bf:79: cd:49:71:73:db:e5:94:f1:e9:bf:bd:8a:4a:40:02:c3:7b:06: cf:50:ac:cb:3a:72:b3:75:5c:83:ed:7b:77:91:8e:20:66:91: 39:7e:35:4b:9a:0b:2e:b7:f4:2a:21:84:35:35:f0:ad:17:b7: 3a:cd:2c:14:97:09:63:40:79:e5:05:12:75:71:a3:05:e8:92: ad:7a:35:a4:32:54:8a:b3:e7:d0:f4:e6:c4:ae:8d:4f:bb:01: 0f:48:e5:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN8PdBvyX/IPiltA1HWx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzBlMjYwNjA5MTNjNzU4MTM3NDg4YmZkN2FiMWJmZTll MTBhZTIwHhcNMjUxMjExMjEwMTExWhcNMjUxMjEyMjEwMTExWjAzMTEwLwYDVQQD EyhhNDk3ZWZjZTBjY2ViZDZjZTM2ZGRlZmU3OTcxZTRmYzliMzA4ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe8ydZdlcII1jBQoa2q5LvgeQ377 2JAh+DcO7qCggpPUJpB2AWFhHtfCCpg1kUPBbpm75RWB71nZ9U1aoeZ+o9zY0wEu ebpcaUCjPMeETo58o+Jx8TOrlBhhL1acs4wv/mq2wYhZ+zafw/kYHWr5JhCnbT+H xhNzaHzNvFXeDTOLq0pwB5hQOkhIHIzfdpSPzyRoQ1yMLUuvmKKmKwdRpZalna7i YogC8ZT7H29vAtDBDj/9RISk20po19FUjTJJFqCaLcuGCqCDTzpWRdNlsnS0jXf+ KdG+a10jf3VwzcpsxnHsfT5UzyIQpGaZEwwDycxNjuq7TKakH84oLC+WDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSX784Mzr1s423e/nlx5PybMI0vMB8GA1UdIwQY MBaAFCMw4mBgkTx1gTdIi/16sb/p4QriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0Yjkt NzA2NzgyY2ZhMDNiLzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0YjktNzA2NzgyY2ZhMDNi LzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6C395c+ A5d5+8ShvWn5lA5n4YSeXgLkBmrsosqHqcp1HIcAvcsr1e7Xb+lSLwxipyXkh2y1 R8Gzf1kj6D+SVtgfsE8Iqqv02GXbhFSm5Yvo4j8J1zIVP0C6/J+4xYOZECh2pQXU 3hqQrvrHXx6CKA59KKKX8eEwZG933IqmIj1XiyOzbL26yZmcZgrVqeZb89b9CoQX naMXBtvhaeAPt795zUlxc9vllPHpv72KSkACw3sGz1Csyzpys3Vcg+17d5GOIGaR OX41S5oLLrf0KiGENTXwrRe3Os0sFJcJY0B55QUSdXGjBeiSrXo1pDJUirPn0PTm xK6NT7sBD0jlTg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:19 2025 by rpki-client