This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json) Hash identifier: XYrQ7vT+ZAcIvdk/fel5K4eP11ZecXqYjDRig0oI66s= Subject key identifier: A0:62:9F:3B:AE:E4:E8:CF:E7:8C:1A:A1:34:AA:9B:2A:EA:67:1E:78 Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Certificate serial: 019B593ECB092611D56D175917F86D13D82C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft Manifest number: 1207 Signing time: Fri 26 Dec 2025 06:00:45 +0000 Manifest this update: Fri 26 Dec 2025 06:00:45 +0000 Manifest next update: Sat 27 Dec 2025 06:00:45 +0000 Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: 9kafXSTRMjgqgEMsTK5vSP8OsiivEHRDC4bICKryX3E=) 2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:cb:09:26:11:d5:6d:17:59:17:f8:6d:13:d8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Validity Not Before: Dec 26 06:00:45 2025 GMT Not After : Dec 27 06:00:45 2025 GMT Subject: CN=a0629f3baee4e8cfe78c1aa134aa9b2aea671e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:94:77:be:70:24:65:43:31:c1:ca:9c:d4:67: d3:5a:f7:56:7f:0a:96:13:2c:ae:6a:f8:b8:0e:9c: 96:f8:cc:cd:25:39:a1:cf:30:d6:be:d0:ab:a6:29: d6:7e:6a:15:f7:95:3a:79:1b:a5:b8:9c:5e:84:79: 13:1d:61:8d:f7:6b:82:67:1f:60:70:af:f4:67:bf: e7:31:32:1b:b3:1d:5f:59:94:c0:53:99:67:0e:6c: 8d:c9:cc:bd:3a:29:75:14:98:17:2e:a2:2e:5e:97: 42:bb:08:51:71:f0:6e:1d:74:b3:be:c9:fa:e9:be: de:53:9b:15:e5:cf:d5:cb:57:c0:6e:81:7d:67:a1: 45:93:89:74:84:7c:c7:5d:1e:cf:74:8f:4e:14:74: f7:0f:89:ce:87:a8:fc:44:ee:c3:58:17:8e:a2:69: 2d:b2:6e:90:2c:61:30:f4:34:73:ea:06:82:e8:25: c3:fd:97:d3:c1:e3:b5:08:29:71:6b:b2:48:97:90: 32:ea:a6:8e:dd:04:73:3f:47:1e:1e:eb:f3:e2:e4: 47:dc:fd:84:8e:44:ad:de:77:38:c9:8d:f6:fc:05: 7f:ac:80:fe:87:27:8d:b8:12:9d:0c:ce:01:c8:fe: c9:04:66:4b:c5:a9:9a:b6:ef:ca:11:b0:0b:9b:46: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:62:9F:3B:AE:E4:E8:CF:E7:8C:1A:A1:34:AA:9B:2A:EA:67:1E:78 X509v3 Authority Key Identifier: keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ab:54:31:9d:57:28:39:db:5e:0b:3c:27:33:a1:26:14:2e: bb:c3:16:4b:66:8b:5d:6a:13:36:50:8f:a1:48:bc:da:63:9a: 13:f6:28:e3:c3:4e:e1:9a:42:3e:ac:ff:cb:ff:6e:67:f7:31: ac:40:46:8c:eb:f2:a6:a7:8d:c6:bf:27:78:98:6d:af:80:c2: f8:79:ac:ae:a5:0b:fd:38:46:ba:23:bd:e2:30:a3:59:f4:ab: 60:72:40:ee:87:58:19:34:db:d3:e7:82:e7:1d:37:17:e1:00: 5c:05:00:77:f5:0d:55:95:17:75:95:7b:53:9d:f9:e3:93:44: 2a:37:4a:cb:80:e6:08:45:9e:ea:61:f2:31:16:8d:7d:bf:21: 8e:e6:4c:1a:1f:47:be:62:0a:8f:33:0a:03:4e:7e:d1:0b:a1: 8a:35:d7:35:7d:e2:fe:2a:f4:d5:d4:e7:07:ec:d9:44:85:07: 12:cb:5d:10:fc:9e:d1:3e:62:87:70:bb:8c:3c:5c:5b:b9:25: 91:a7:7b:28:e8:cb:97:a7:39:27:66:2a:91:f5:43:1f:6e:a6: 09:4e:bc:1d:f2:25:47:a5:24:4a:e3:51:67:9a:cf:b3:9b:f1: 31:04:30:9b:cb:28:c2:c0:11:b5:32:25:9f:d0:69:32:6a:2f: e5:2b:72:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPssJJhHVbRdZF/htE9gsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3 NTJmYTIwHhcNMjUxMjI2MDYwMDQ1WhcNMjUxMjI3MDYwMDQ1WjAzMTEwLwYDVQQD EyhhMDYyOWYzYmFlZTRlOGNmZTc4YzFhYTEzNGFhOWIyYWVhNjcxZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95R3vnAkZUMxwcqc1GfTWvdWfwqW Eyyuavi4DpyW+MzNJTmhzzDWvtCrpinWfmoV95U6eRuluJxehHkTHWGN92uCZx9g cK/0Z7/nMTIbsx1fWZTAU5lnDmyNycy9Oil1FJgXLqIuXpdCuwhRcfBuHXSzvsn6 6b7eU5sV5c/Vy1fAboF9Z6FFk4l0hHzHXR7PdI9OFHT3D4nOh6j8RO7DWBeOomkt sm6QLGEw9DRz6gaC6CXD/ZfTweO1CClxa7JIl5Ay6qaO3QRzP0ceHuvz4uRH3P2E jkSt3nc4yY32/AV/rID+hyeNuBKdDM4ByP7JBGZLxamatu/KEbALm0aSMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBinzuu5OjP54waoTSqmyrqZx54MB8GA1UdIwQY MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4 LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvatUMZ1X KDnbXgs8JzOhJhQuu8MWS2aLXWoTNlCPoUi82mOaE/Yo48NO4ZpCPqz/y/9uZ/cx rEBGjOvypqeNxr8neJhtr4DC+HmsrqUL/ThGuiO94jCjWfSrYHJA7odYGTTb0+eC 5x03F+EAXAUAd/UNVZUXdZV7U53545NEKjdKy4DmCEWe6mHyMRaNfb8hjuZMGh9H vmIKjzMKA05+0QuhijXXNX3i/ir01dTnB+zZRIUHEstdEPye0T5ih3C7jDxcW7kl kad7KOjLl6c5J2YqkfVDH26mCU68HfIlR6UkSuNRZ5rPs5vxMQQwm8sowsARtTIl n9BpMmov5StyFw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:37 2025 by rpki-client