This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json) Hash identifier: c0mUl2qFvFBw1mcmCb1GS2AR87lUpEHAWWfL9mysVyY= Subject key identifier: 7A:EF:D8:A4:41:AB:53:15:04:53:0A:FA:F6:BD:DB:8C:9E:E8:44:1C Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Certificate serial: 019B35330BD2427FC1D9A9D1AB98A19C836D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft Manifest number: 1267 Signing time: Fri 19 Dec 2025 06:01:36 +0000 Manifest this update: Fri 19 Dec 2025 06:01:36 +0000 Manifest next update: Sat 20 Dec 2025 06:01:36 +0000 Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=) 2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: JdN3cRVQmSBSWXhRlr9Bb3aHlej4Ner+yxAkibbc4QI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:0b:d2:42:7f:c1:d9:a9:d1:ab:98:a1:9c:83:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Validity Not Before: Dec 19 06:01:36 2025 GMT Not After : Dec 20 06:01:36 2025 GMT Subject: CN=7aefd8a441ab531504530afaf6bddb8c9ee8441c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:82:58:e6:69:c8:c3:23:05:19:d3:4f:2c: 02:3c:17:cb:90:01:25:61:37:d1:b7:3d:db:36:4c: 3c:86:31:5b:a5:1e:14:1c:10:a2:0f:fa:c6:36:75: d3:13:a7:5e:af:de:c0:3e:b0:4b:fa:8b:10:7a:32: 8f:0f:53:f3:b7:ba:1f:b1:db:7e:45:1e:2b:0d:9c: 9a:a4:d9:60:7b:c8:da:a7:4b:7f:13:6b:0e:5c:60: 20:07:db:eb:ac:34:45:db:28:33:46:1b:30:3b:bb: 78:47:55:9c:49:d2:9b:d8:fc:15:5f:35:04:44:fb: 11:0a:04:f0:ee:f0:1e:1f:66:4e:0f:11:26:65:2e: 5f:21:c6:37:20:81:78:9a:89:fd:b7:33:c4:de:44: c8:3f:a7:62:b9:88:8b:33:83:07:2b:bd:91:0c:96: 27:81:cd:88:f8:e7:a5:04:d3:af:9a:0b:81:ba:fa: 4f:6a:73:ea:f5:46:cb:d9:53:f8:c4:f7:c7:4c:05: ab:2a:8d:6f:02:70:cc:aa:b0:50:8d:06:31:dc:5b: 00:42:8c:f7:06:01:69:02:e9:da:6f:ac:22:25:01: 10:2e:f5:88:67:a4:e1:a1:b0:e2:e4:c9:bc:71:20: cd:27:2a:07:51:24:e7:9c:77:d7:20:a8:67:44:2c: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EF:D8:A4:41:AB:53:15:04:53:0A:FA:F6:BD:DB:8C:9E:E8:44:1C X509v3 Authority Key Identifier: keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:bc:f8:b5:9d:bd:48:0e:5b:0f:ee:5d:14:40:ab:65:b3:c9: 3a:60:c3:bf:d9:49:97:f4:9a:1e:a9:7b:5d:55:58:2a:19:a9: 06:ac:8b:11:a6:a6:f1:9d:51:cf:19:58:38:a1:ba:6e:02:2f: 1c:33:4a:6f:aa:5c:62:41:36:c7:c3:7d:50:79:25:1b:b3:bf: fd:0d:83:4f:2d:be:13:2c:ad:48:da:4e:00:2e:a5:eb:b7:0d: 64:0c:34:53:55:9e:b2:7b:11:09:70:cf:ac:70:04:8c:4c:fe: 79:9a:c2:b2:1b:df:a6:60:db:03:d0:83:1f:2a:a2:78:7d:96: e0:26:cf:54:95:8f:0b:0f:f9:60:c3:62:87:35:84:74:19:f1: 6c:74:56:c9:3c:94:4a:ee:7a:65:80:6b:c3:99:3b:47:80:34: ba:fc:e3:f8:db:95:35:99:58:9a:4f:23:e8:c2:b8:11:ff:9a: be:65:3b:0e:b4:6f:5d:36:a7:04:4b:e0:82:c4:09:7b:d1:7a: 65:a4:4c:2c:85:96:9a:d0:20:08:3d:ce:a4:ce:f1:6c:6b:8e: 11:de:ac:ba:ed:ac:48:24:e6:4e:e7:c2:d1:c5:4e:e6:29:31: ec:df:5a:2b:8a:a6:5c:33:22:5a:d2:67:a9:b1:e5:77:0c:07: 69:ea:b6:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MwvSQn/B2anRq5ihnINtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh OWRiM2QwHhcNMjUxMjE5MDYwMTM2WhcNMjUxMjIwMDYwMTM2WjAzMTEwLwYDVQQD Eyg3YWVmZDhhNDQxYWI1MzE1MDQ1MzBhZmFmNmJkZGI4YzllZTg0NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpaCWOZpyMMjBRnTTywCPBfLkAEl YTfRtz3bNkw8hjFbpR4UHBCiD/rGNnXTE6der97APrBL+osQejKPD1Pzt7ofsdt+ RR4rDZyapNlge8jap0t/E2sOXGAgB9vrrDRF2ygzRhswO7t4R1WcSdKb2PwVXzUE RPsRCgTw7vAeH2ZODxEmZS5fIcY3IIF4mon9tzPE3kTIP6diuYiLM4MHK72RDJYn gc2I+OelBNOvmguBuvpPanPq9UbL2VP4xPfHTAWrKo1vAnDMqrBQjQYx3FsAQoz3 BgFpAunab6wiJQEQLvWIZ6ThobDi5Mm8cSDNJyoHUSTnnHfXIKhnRCyrcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrv2KRBq1MVBFMK+va924ye6EQcMB8GA1UdIwQY MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt YWYxZGUzZDBmMjE3LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3 LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3bz4tZ29 SA5bD+5dFECrZbPJOmDDv9lJl/SaHql7XVVYKhmpBqyLEaam8Z1RzxlYOKG6bgIv HDNKb6pcYkE2x8N9UHklG7O//Q2DTy2+EyytSNpOAC6l67cNZAw0U1WesnsRCXDP rHAEjEz+eZrCshvfpmDbA9CDHyqieH2W4CbPVJWPCw/5YMNihzWEdBnxbHRWyTyU Su56ZYBrw5k7R4A0uvzj+NuVNZlYmk8j6MK4Ef+avmU7DrRvXTanBEvggsQJe9F6 ZaRMLIWWmtAgCD3OpM7xbGuOEd6suu2sSCTmTufC0cVO5ikx7N9aK4qmXDMiWtJn qbHldwwHaeq2mQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:50:41 2025 by rpki-client