This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: zI1NlRiSaCmx9iNO88Uqi3r5HKdt1gvbUKdatWiTqFI= Subject key identifier: 8E:16:C8:AD:43:8F:C0:D3:56:15:54:33:46:FA:6E:8F:48:C1:74:86 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B06A2037A03392607AAA2C0D36DC60172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 14DA Signing time: Wed 10 Dec 2025 05:00:39 +0000 Manifest this update: Wed 10 Dec 2025 05:00:39 +0000 Manifest next update: Thu 11 Dec 2025 05:00:39 +0000 Files and hashes: 1: 3ItpN6feGjO7UN2dRcjYM0AArZ8.roa (hash: yWi2Tk1o0zmHp1TWp1hxn+lJhdrn/9G1rnKPAwuzeV0=) 2: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 3: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 4: FQHihBoOniwmQDmO0mdn4_kxToc.roa (hash: 8vbCj1IjkktKKef6bhqcB4alSOP8znsRoac6a6VJZpM=) 5: H85sOAhghTea9a0fF7V97F8PmPU.roa (hash: 2OxoGkdCVVcRfuQOFsn/tuCAYUwqPM6hV+wTzXUpbKk=) 6: HLAFzpF1dtaNSAOxEl-uHrb_wcg.roa (hash: PtoSILiXlrGyGsA1CVrSehyontCCBay4De7QPXIkVlI=) 7: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: AAO9AzuM7JcHQNEUibvybyd9lo++iRqG/MlLizcCMeo=) 8: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 9: NIsfNrgr61FvPf7cYDhBUlhxHyo.roa (hash: erf8aKvQjphq5ECHQpzvwfDmeIXYw4ufNsUCtqSAry4=) 10: O0dA6ORgAzDqkWmj1R355BHaTrI.roa (hash: 296lT6a3xrMsAitqkt1Jep7cJYB5SeLJP2n68zngwhU=) 11: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 12: bappW0a76vCPpE7es6c1mZAIjsM.roa (hash: cqG7BmBZANbhw2q44YhM+SIY2oACb3Cf8jR7Of0U21w=) 13: cxQurBlwQD8hDJHQVVeiU45NqWk.roa (hash: QtyAVyz8VfvE5j6ThLPcJgfpQ0JNwulpFn47sHfnMPY=) 14: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 15: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 16: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 17: yfM2MaiTfFDOsvvuc9oTKlnjCok.roa (hash: XLeVu8EohnDcMakSxmYm/IQDDAg+4NcTPBIPIC2LLwk=) 18: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (hash: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a2:03:7a:03:39:26:07:aa:a2:c0:d3:6d:c6:01:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Dec 10 05:00:39 2025 GMT Not After : Dec 11 05:00:39 2025 GMT Subject: CN=8e16c8ad438fc0d35615543346fa6e8f48c17486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:93:9b:96:54:50:19:32:c2:55:eb:84:33:6d: fa:7b:14:c4:14:ff:3a:31:bb:cb:a8:d9:7b:ef:02: 33:38:7b:b2:36:b6:c2:4b:02:2f:8a:c4:0d:cf:eb: ad:7b:85:8b:66:0d:7f:29:12:42:06:ec:d4:73:d0: c3:64:a9:c3:5f:c4:a4:bf:e8:03:6c:08:cd:eb:9f: 7b:18:3d:dd:ec:de:31:91:4c:f3:5e:85:df:11:c6: c6:bf:2c:e9:7d:71:72:54:57:ad:34:27:1a:a4:dc: 5b:9a:c3:4e:44:62:f6:35:2b:64:f6:93:4f:5d:82: e5:f4:ee:59:52:2e:72:8d:67:49:33:82:ad:c5:20: 11:77:76:e4:c3:05:c1:66:fe:fc:f5:9b:a6:ae:b2: 2f:25:56:a6:45:6f:4c:44:9b:19:5a:59:78:31:53: 8b:09:89:43:df:7b:2a:f4:e2:a3:33:ec:e8:3d:6f: d3:08:70:2c:72:32:32:db:af:58:66:9e:b6:6d:34: 11:f6:f1:4b:29:5c:38:0a:83:4f:39:d9:89:d3:71: 54:ff:19:89:60:8a:79:72:9a:35:3e:f3:d7:77:ac: 45:67:1d:dd:53:a9:a8:59:32:38:5c:39:18:8a:e0: dc:e9:d5:cf:d9:74:98:f1:f5:34:4c:d3:46:ac:36: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:C8:AD:43:8F:C0:D3:56:15:54:33:46:FA:6E:8F:48:C1:74:86 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:a5:05:c6:2c:0d:52:df:3a:3c:a3:3f:6f:46:9c:bd:46: 75:00:9b:dd:7c:e5:8b:d7:bd:cc:20:a0:bb:69:1c:3d:9d:13: 6f:eb:d9:7e:05:93:d3:61:ad:4d:6d:10:3a:0e:2d:42:d8:65: bd:25:94:00:d8:1c:0f:21:37:1f:fc:c5:1b:d4:24:9a:3f:19: a8:39:d7:ee:70:43:7d:87:35:44:18:e6:95:97:68:28:2b:b1: 9b:f3:36:70:21:b6:45:94:83:d8:64:a1:c5:80:8a:87:e3:b8: a2:f0:a1:c3:b9:33:6a:55:87:7b:68:0d:a3:7a:27:fd:a9:40: d9:f2:77:d1:3e:7b:0a:87:5a:02:a8:05:17:0c:66:31:75:b4: b9:1b:49:e7:47:06:2b:40:d1:52:d1:74:49:ac:06:3b:77:fa: 57:4a:12:e0:73:79:1a:37:55:94:b8:21:a7:56:8b:2d:26:b9: 81:18:98:7f:e8:41:fe:d7:06:01:88:ae:99:ab:0f:ed:f8:fd: da:aa:61:12:77:1f:56:89:e0:e8:f5:38:9b:71:84:20:e7:87: 36:60:39:b7:61:23:ea:6f:ce:7b:57:06:32:5b:cb:c6:92:85: 43:50:74:5a:b1:65:e1:58:dc:26:e4:b6:7e:84:ba:80:ea:f0: 91:0a:cc:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGogN6AzkmB6qiwNNtxgFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMjEwMDUwMDM5WhcNMjUxMjExMDUwMDM5WjAzMTEwLwYDVQQD Eyg4ZTE2YzhhZDQzOGZjMGQzNTYxNTU0MzM0NmZhNmU4ZjQ4YzE3NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpObllRQGTLCVeuEM236exTEFP86 MbvLqNl77wIzOHuyNrbCSwIvisQNz+ute4WLZg1/KRJCBuzUc9DDZKnDX8Skv+gD bAjN6597GD3d7N4xkUzzXoXfEcbGvyzpfXFyVFetNCcapNxbmsNORGL2NStk9pNP XYLl9O5ZUi5yjWdJM4KtxSARd3bkwwXBZv789ZumrrIvJVamRW9MRJsZWll4MVOL CYlD33sq9OKjM+zoPW/TCHAscjIy269YZp62bTQR9vFLKVw4CoNPOdmJ03FU/xmJ YIp5cpo1PvPXd6xFZx3dU6moWTI4XDkYiuDc6dXP2XSY8fU0TNNGrDYwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4WyK1Dj8DTVhVUM0b6bo9IwXSGMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXClBcYs DVLfOjyjP29GnL1GdQCb3Xzli9e9zCCgu2kcPZ0Tb+vZfgWT02GtTW0QOg4tQthl vSWUANgcDyE3H/zFG9Qkmj8ZqDnX7nBDfYc1RBjmlZdoKCuxm/M2cCG2RZSD2GSh xYCKh+O4ovChw7kzalWHe2gNo3on/alA2fJ30T57CodaAqgFFwxmMXW0uRtJ50cG K0DRUtF0SawGO3f6V0oS4HN5GjdVlLghp1aLLSa5gRiYf+hB/tcGAYiumasP7fj9 2qphEncfVong6PU4m3GEIOeHNmA5t2Ej6m/Oe1cGMlvLxpKFQ1B0WrFl4VjcJuS2 foS6gOrwkQrMKw== -----END CERTIFICATE-----Generated at Wed Dec 10 10:07:24 2025 by rpki-client