This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft File: IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json) Hash identifier: /JwULMb5xVdQIjn9tro9VyJ7Q68rXi92kWp8WFHOKhE= Subject key identifier: 8C:58:B8:CF:47:A6:7A:1C:97:5B:12:52:87:5E:0C:F7:14:2A:95:1D Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3 Certificate issuer: /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3 Certificate serial: 019B337B4555782A18F742B2F009B9EBB59C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft Manifest number: 06A4 Signing time: Thu 18 Dec 2025 22:01:15 +0000 Manifest this update: Thu 18 Dec 2025 22:01:15 +0000 Manifest next update: Fri 19 Dec 2025 22:01:15 +0000 Files and hashes: 1: 1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa (hash: N3xo7g5jGJQoS/qFHbtXSlXVpbFrX6/YoQPrJBEqRCc=) 2: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: 07kbjo2P+OuMKN+k/vidbYOxdVu84XgIeGx4XmuuLAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:45:55:78:2a:18:f7:42:b2:f0:09:b9:eb:b5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3 Validity Not Before: Dec 18 22:01:15 2025 GMT Not After : Dec 19 22:01:15 2025 GMT Subject: CN=8c58b8cf47a67a1c975b1252875e0cf7142a951d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9b:39:a3:74:82:6b:0d:4a:ce:bb:f3:29:a9: 76:3f:d7:45:74:4b:c3:d1:65:f8:40:2b:3a:bf:c7: 1b:70:40:3b:9b:5c:c6:e1:84:b9:e3:b2:1b:c2:98: c9:bb:ce:8c:1b:72:bf:d6:a8:a1:92:05:9a:b2:41: 16:9f:3e:b9:90:1e:d8:b2:1e:c5:7f:c8:f7:d2:c2: 39:49:63:8b:40:2d:95:c9:66:a1:ef:d2:54:01:ce: e2:ed:bb:c4:15:9f:5f:4f:4f:3b:48:f0:37:08:a2: 9b:30:a2:55:0d:d5:79:86:3f:60:23:f2:ed:59:30: 21:49:e2:30:75:82:03:fd:1b:a1:a7:b7:88:d3:5a: 52:27:74:02:28:1f:17:7f:f8:3a:66:bd:a4:98:3b: 30:c6:bc:9d:f2:4d:2f:b0:e3:8f:37:ec:36:b5:9d: 4a:22:4a:6c:70:48:05:d9:91:6b:2d:3f:a9:14:12: 0d:14:ff:d6:2e:3a:db:e5:0f:f9:31:c7:d9:77:4f: eb:e1:a1:d9:0c:52:d4:0a:4a:df:62:de:fa:b0:b5: a8:7e:d0:e5:8d:24:78:32:ed:b5:85:ef:6a:32:ec: e4:cf:dd:4d:a1:3d:c9:81:ff:97:74:80:00:af:ef: 48:ec:7f:46:46:d3:bc:05:94:79:35:3d:3d:de:25: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:58:B8:CF:47:A6:7A:1C:97:5B:12:52:87:5E:0C:F7:14:2A:95:1D X509v3 Authority Key Identifier: keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d6:f0:26:9a:7a:f4:67:43:80:15:66:c4:01:a0:94:04:c5: cd:29:8e:84:2d:47:52:5a:87:22:69:1c:ba:9c:f3:24:a1:99: 8d:97:f9:ea:fb:aa:1e:c8:aa:30:b6:74:c5:dc:f4:52:0d:bf: 05:65:c2:c6:b5:eb:a6:da:26:20:6d:8e:5a:4d:15:97:d6:c2: b6:af:e7:78:07:9c:e3:d6:42:06:6b:a2:e0:0c:3e:27:f3:d6: 2b:34:c3:63:7f:82:90:ab:a5:2e:67:13:f7:08:88:5b:54:5f: 3d:13:06:86:f4:53:6d:72:d6:e7:62:30:6a:6e:ad:fa:3a:62: 43:7d:55:20:26:11:af:dd:77:39:20:2b:48:76:54:79:fa:55: 0b:e8:02:89:7f:59:87:ad:f4:84:fe:b4:0c:11:29:9b:93:6c: d8:60:06:ec:aa:f2:5f:c7:c3:1c:aa:20:0c:06:d9:76:da:07: cd:32:9b:40:99:77:84:ad:99:6d:7d:c7:7b:f7:93:fb:2a:de: d2:33:64:35:ea:e4:db:71:b5:c2:13:fa:bc:e6:3d:96:58:71: cf:73:cc:23:68:97:27:2a:62:23:0b:17:0d:0e:2d:bb:b9:6c: d6:01:05:e3:4c:27:d3:83:73:0b:24:38:8a:60:d2:c3:29:42: 80:49:a4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0VVeCoY90Ky8Am567WcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWM4ZGZmNGU5OWQzZTIyODlhZjYzYjE1ZDU1ZDI0NTBj ODQyYzMwHhcNMjUxMjE4MjIwMTE1WhcNMjUxMjE5MjIwMTE1WjAzMTEwLwYDVQQD Eyg4YzU4YjhjZjQ3YTY3YTFjOTc1YjEyNTI4NzVlMGNmNzE0MmE5NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5s5o3SCaw1KzrvzKal2P9dFdEvD 0WX4QCs6v8cbcEA7m1zG4YS547IbwpjJu86MG3K/1qihkgWaskEWnz65kB7Ysh7F f8j30sI5SWOLQC2VyWah79JUAc7i7bvEFZ9fT087SPA3CKKbMKJVDdV5hj9gI/Lt WTAhSeIwdYID/Ruhp7eI01pSJ3QCKB8Xf/g6Zr2kmDswxryd8k0vsOOPN+w2tZ1K IkpscEgF2ZFrLT+pFBINFP/WLjrb5Q/5McfZd0/r4aHZDFLUCkrfYt76sLWoftDl jSR4Mu21he9qMuzkz91NoT3Jgf+XdIAAr+9I7H9GRtO8BZR5NT093iUIYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxYuM9Hpnocl1sSUodeDPcUKpUdMB8GA1UdIwQY MBaAFCKsjf9OmdPiKJr2OxXVXSRQyELDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUt ODI5OThhOTI4N2UyLzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUtODI5OThhOTI4N2Uy LzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9bwJpp6 9GdDgBVmxAGglATFzSmOhC1HUlqHImkcupzzJKGZjZf56vuqHsiqMLZ0xdz0Ug2/ BWXCxrXrptomIG2OWk0Vl9bCtq/neAec49ZCBmui4Aw+J/PWKzTDY3+CkKulLmcT 9wiIW1RfPRMGhvRTbXLW52Iwam6t+jpiQ31VICYRr913OSArSHZUefpVC+gCiX9Z h630hP60DBEpm5Ns2GAG7KryX8fDHKogDAbZdtoHzTKbQJl3hK2ZbX3He/eT+yre 0jNkNerk23G1whP6vOY9llhxz3PMI2iXJypiIwsXDQ4tu7ls1gEF40wn04NzCyQ4 imDSwylCgEmkpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:23:23 2025 by rpki-client