This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: 6803Z8P7ddDr5Fvz3gDGdPpJh/+NJjX22TTw38YigZs= Subject key identifier: 20:7D:DA:5B:EF:F7:8B:B1:0F:63:AF:EC:D6:3A:03:9B:0F:49:C4:92 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019AFB0C0A561240818D944F3CBF457DF5BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 175B Signing time: Sun 07 Dec 2025 23:01:01 +0000 Manifest this update: Sun 07 Dec 2025 23:01:01 +0000 Manifest next update: Mon 08 Dec 2025 23:01:01 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: wUhhfypW5J0mYHSzR8Dx6MRuCCEB+Y+PSUsPa9Hsuq0=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa (hash: Hy1jxMcmkJjc7Rfw6ZAzEMKDTAjkCP2ewVbsibxOPr4=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:0c:0a:56:12:40:81:8d:94:4f:3c:bf:45:7d:f5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Dec 7 23:01:01 2025 GMT Not After : Dec 8 23:01:01 2025 GMT Subject: CN=207dda5beff78bb10f63afecd63a039b0f49c492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:37:71:86:dc:d6:e2:1b:03:a4:d5:df:1a: 7a:07:d7:8b:cf:42:d5:8a:62:30:1b:27:ac:10:48: 6d:11:aa:ce:d8:98:b1:04:2a:6b:60:80:85:db:43: 29:c0:d4:4a:42:f1:cc:b6:09:ec:21:fd:36:05:1b: 6a:5f:d2:ac:dd:b1:b1:ca:bd:dd:6a:3b:61:9e:53: 29:0f:ff:73:93:bb:50:1b:76:ca:d7:0a:35:b9:88: 1a:41:ca:97:9c:1c:e5:94:da:56:fc:67:54:2e:e8: 56:be:66:e8:fd:f6:ac:01:c1:e0:55:91:41:ac:ca: cb:5a:3a:ba:14:18:1c:69:1c:c3:50:c1:a3:d6:56: 8c:a6:67:74:9e:2c:b8:27:ad:3a:06:8c:bf:e6:d4: 6c:dd:dd:a3:64:8d:7f:46:c0:5d:ee:fd:e4:de:bd: ca:af:33:83:81:e3:39:22:23:a8:6c:e6:4f:c8:bb: 14:d6:6a:99:36:c3:2e:c2:a2:0d:c3:ca:85:58:f3: 99:27:68:f5:19:c2:c3:95:bb:1f:97:ed:dc:7a:a5: 73:5b:8a:9a:41:f9:6b:72:ed:2b:70:05:44:52:f1: f2:ae:9a:5a:c6:7b:44:2e:e7:45:bf:f5:2e:fd:6a: 9a:2b:62:c4:1a:33:fb:87:2a:b3:e1:51:f1:2e:86: 5e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7D:DA:5B:EF:F7:8B:B1:0F:63:AF:EC:D6:3A:03:9B:0F:49:C4:92 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:56:c1:7f:1e:87:45:d2:d0:64:12:fb:3a:68:36:95:32:e7: f7:a8:15:26:28:53:da:c3:c3:5b:68:00:93:0f:a5:80:7b:77: 34:99:af:d8:bf:be:c2:e9:95:44:74:1b:48:6f:ba:0b:15:8d: 9a:24:bf:87:bc:8b:22:ed:8b:de:7b:ec:c8:2d:b3:79:55:38: b3:5e:f7:fe:9f:19:d8:b1:6b:a2:c4:f7:04:07:4b:18:af:b9: d8:fa:4d:5b:df:45:bd:b6:bb:b8:89:c3:79:bc:02:b1:fd:85: 29:de:f3:4c:79:dc:9a:2f:22:1f:9c:dc:a3:26:7c:18:c1:e6: 7f:aa:15:a8:40:d2:7f:03:fc:c8:9d:ce:41:be:bc:ae:6d:c2: 07:22:f3:31:e9:5a:e3:a9:0f:25:14:43:ba:a2:a7:e7:81:ac: 4d:17:7e:bb:8f:49:3a:68:d4:85:9a:0a:85:aa:67:c6:71:ad: a9:d3:52:e4:23:80:9b:20:5b:fe:3b:6f:68:3a:23:9a:9b:de: 9b:b9:4f:db:7d:db:22:2f:57:82:32:3c:d3:ca:e0:51:7a:98: 64:97:c4:d6:bf:77:cf:3c:11:32:2b:b3:a2:19:b2:4d:a5:83: 47:97:4f:3a:e8:ff:ba:bb:b4:c6:da:6c:a8:09:d3:0a:4d:31: 20:6e:72:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7DApWEkCBjZRPPL9FffW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUxMjA3MjMwMTAxWhcNMjUxMjA4MjMwMTAxWjAzMTEwLwYDVQQD EygyMDdkZGE1YmVmZjc4YmIxMGY2M2FmZWNkNjNhMDM5YjBmNDljNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+I3cYbc1uIbA6TV3xp6B9eLz0LV imIwGyesEEhtEarO2JixBCprYICF20MpwNRKQvHMtgnsIf02BRtqX9Ks3bGxyr3d ajthnlMpD/9zk7tQG3bK1wo1uYgaQcqXnBzllNpW/GdULuhWvmbo/fasAcHgVZFB rMrLWjq6FBgcaRzDUMGj1laMpmd0niy4J606Boy/5tRs3d2jZI1/RsBd7v3k3r3K rzODgeM5IiOobOZPyLsU1mqZNsMuwqINw8qFWPOZJ2j1GcLDlbsfl+3ceqVzW4qa Qflrcu0rcAVEUvHyrppaxntELudFv/Uu/WqaK2LEGjP7hyqz4VHxLoZeVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB92lvv94uxD2Ov7NY6A5sPScSSMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFbBfx6H RdLQZBL7Omg2lTLn96gVJihT2sPDW2gAkw+lgHt3NJmv2L++wumVRHQbSG+6CxWN miS/h7yLIu2L3nvsyC2zeVU4s173/p8Z2LFrosT3BAdLGK+52PpNW99Fvba7uInD ebwCsf2FKd7zTHncmi8iH5zcoyZ8GMHmf6oVqEDSfwP8yJ3OQb68rm3CByLzMela 46kPJRRDuqKn54GsTRd+u49JOmjUhZoKhapnxnGtqdNS5COAmyBb/jtvaDojmpve m7lP233bIi9XgjI808rgUXqYZJfE1r93zzwRMiuzohmyTaWDR5dPOuj/uru0xtps qAnTCk0xIG5yUQ== -----END CERTIFICATE-----Generated at Mon Dec 8 02:49:28 2025 by rpki-client