This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json) Hash identifier: r2/QGbrF69S13XbVo7ph/geK/wWPMVW+EGPip7pDgRY= Subject key identifier: 2A:F7:94:D8:A1:52:76:F0:72:04:DD:5F:61:86:61:08:87:B7:2A:EC Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Certificate serial: 019B35D74A89DF41737824125343F728C296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft Manifest number: 06A7 Signing time: Fri 19 Dec 2025 09:01:00 +0000 Manifest this update: Fri 19 Dec 2025 09:01:00 +0000 Manifest next update: Sat 20 Dec 2025 09:01:00 +0000 Files and hashes: 1: 2Ak_ZKziVTI4_3cih9eiYO1viHI.roa (hash: k7qMvcLmVAFsg1jyjo16XzLrDU45d1f2VoPV9JFx5Vw=) 2: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: VcbZ/ul/c1R6sXCJunxLaw8ZWWSfBRnnSfiWoa3RVDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:4a:89:df:41:73:78:24:12:53:43:f7:28:c2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Validity Not Before: Dec 19 09:01:00 2025 GMT Not After : Dec 20 09:01:00 2025 GMT Subject: CN=2af794d8a15276f07204dd5f6186610887b72aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:91:f5:85:17:51:3b:72:f3:c6:05:43:0d: a0:b3:89:88:cb:1c:20:a4:9a:57:5f:ad:bf:8d:8e: d0:f1:a1:02:e2:40:d7:6a:c3:53:bc:ff:ce:37:b2: 4e:d6:5d:74:37:30:ca:52:d4:d8:cd:d9:be:52:91: 04:9c:f3:04:9e:6b:0d:66:58:84:4f:ee:47:67:da: c7:d8:b1:80:b4:9b:82:34:49:dc:cf:f1:47:ed:57: 29:ef:06:20:5d:ce:b8:f2:6d:69:8c:bf:57:7e:46: e9:0d:7e:0e:05:d9:5e:c1:04:48:49:12:26:99:39: f6:1c:aa:c9:c3:2f:da:9d:12:6a:7f:a4:16:b7:7b: c0:bd:a6:89:c8:e2:2d:41:88:5c:bc:1c:1d:39:06: 83:00:db:46:54:78:22:53:7a:d0:90:8e:72:d8:d1: 1f:64:65:42:47:d9:8d:37:a1:87:22:d5:4a:64:3d: 9b:5d:75:9b:a6:d2:07:df:c7:ad:d9:c6:20:68:84: 97:79:77:21:a7:d5:3a:49:f3:54:9f:69:0e:8f:6f: 56:93:b3:14:f5:2e:41:ed:2a:dc:f8:7f:1a:e5:a5: 90:76:51:5d:c8:04:26:c2:af:0f:eb:20:79:30:5d: db:fc:85:3d:cc:04:f3:68:aa:72:98:bc:bb:88:e7: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:94:D8:A1:52:76:F0:72:04:DD:5F:61:86:61:08:87:B7:2A:EC X509v3 Authority Key Identifier: keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c6:7b:5b:38:28:41:77:0c:17:3a:76:16:2a:ed:97:cb:15: f9:63:70:de:51:5f:78:c8:b6:ef:c4:98:a5:f4:7c:e8:fd:1f: ea:98:e5:cc:94:54:d1:cb:50:5c:6b:e5:da:e4:8b:a0:04:02: e1:df:92:36:52:90:6f:8d:5d:72:d0:c0:01:68:89:43:1a:d0: 6d:0c:23:1f:c2:4e:92:85:b1:56:db:fc:c9:c3:64:fd:2f:40: ae:01:18:60:3b:b8:2e:58:33:c2:d5:d8:c3:80:8c:91:cf:9b: e9:14:13:6a:76:b6:ad:61:4c:f1:d7:32:07:5f:a0:09:44:5e: 73:ee:7e:51:52:92:61:f7:64:92:b5:86:77:bb:88:f0:96:cc: a1:b5:0d:c2:8f:f0:3f:14:78:98:4a:3f:f6:4e:38:cd:7d:43: 52:6b:cc:7a:83:95:49:6d:5a:d9:a2:5a:a6:06:a0:3f:6f:4e: 28:63:be:68:2d:69:bf:6e:d1:80:6f:06:6b:e2:b9:ac:f4:4d: 8d:70:a7:55:0d:bc:2f:ca:34:2a:81:82:2b:eb:59:d7:17:d2: f9:c3:b0:ac:fe:e6:9f:ce:29:89:42:d3:2f:7f:f4:97:6e:90: e1:b0:3c:c4:f7:06:63:37:e1:40:9f:f4:fd:83:95:ae:11:c7: 08:e8:fb:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs110qJ30FzeCQSU0P3KMKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2 NWFkMTEwHhcNMjUxMjE5MDkwMTAwWhcNMjUxMjIwMDkwMTAwWjAzMTEwLwYDVQQD EygyYWY3OTRkOGExNTI3NmYwNzIwNGRkNWY2MTg2NjEwODg3YjcyYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bOR9YUXUTty88YFQw2gs4mIyxwg pJpXX62/jY7Q8aEC4kDXasNTvP/ON7JO1l10NzDKUtTYzdm+UpEEnPMEnmsNZliE T+5HZ9rH2LGAtJuCNEncz/FH7Vcp7wYgXc648m1pjL9XfkbpDX4OBdlewQRISRIm mTn2HKrJwy/anRJqf6QWt3vAvaaJyOItQYhcvBwdOQaDANtGVHgiU3rQkI5y2NEf ZGVCR9mNN6GHItVKZD2bXXWbptIH38et2cYgaISXeXchp9U6SfNUn2kOj29Wk7MU 9S5B7Src+H8a5aWQdlFdyAQmwq8P6yB5MF3b/IU9zATzaKpymLy7iOdemwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr3lNihUnbwcgTdX2GGYQiHtyrsMB8GA1UdIwQY MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3 LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8Z7Wzgo QXcMFzp2Firtl8sV+WNw3lFfeMi278SYpfR86P0f6pjlzJRU0ctQXGvl2uSLoAQC 4d+SNlKQb41dctDAAWiJQxrQbQwjH8JOkoWxVtv8ycNk/S9ArgEYYDu4LlgzwtXY w4CMkc+b6RQTana2rWFM8dcyB1+gCURec+5+UVKSYfdkkrWGd7uI8JbMobUNwo/w PxR4mEo/9k44zX1DUmvMeoOVSW1a2aJapgagP29OKGO+aC1pv27RgG8Ga+K5rPRN jXCnVQ28L8o0KoGCK+tZ1xfS+cOwrP7mn84piULTL3/0l26Q4bA8xPcGYzfhQJ/0 /YOVrhHHCOj7cA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:20 2025 by rpki-client