This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft File: iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json) Hash identifier: wxohaz0jJ35qcCg7Zm3gZqh8yapOsd2x+yr77u9EbqM= Subject key identifier: 9C:2B:A2:62:A7:CD:E2:2F:1D:D1:77:EB:56:78:46:5B:D4:0D:62:EE Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72 Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872 Certificate serial: 019B202B61DBF44C301A7DC7B437E52899DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft Manifest number: 0568 Signing time: Mon 15 Dec 2025 04:01:12 +0000 Manifest this update: Mon 15 Dec 2025 04:01:12 +0000 Manifest next update: Tue 16 Dec 2025 04:01:12 +0000 Files and hashes: 1: 0aPhXVyce0SICbpq9bOaehiO5Pw.roa (hash: QZjecyF8WoZMTAQ+88px6Agq67hFp09iHfOWPO4elas=) 2: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=) 3: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: xW/6BNdNTT0UJDaoacH3go9TMu9r6GvND+H3wH/dRig=) 4: mMg3E1Nb2aLQF9y3s1zWz-BTo_Q.roa (hash: cvp5yOj8Ixek1gITTHoV35TmSlVgKcQg6j0GCNNS5mI=) 5: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:61:db:f4:4c:30:1a:7d:c7:b4:37:e5:28:99:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872 Validity Not Before: Dec 15 04:01:12 2025 GMT Not After : Dec 16 04:01:12 2025 GMT Subject: CN=9c2ba262a7cde22f1dd177eb5678465bd40d62ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:bf:fd:ea:7a:7b:31:df:68:49:21:d5:4b: 85:2c:80:49:95:e1:53:e8:0d:69:19:90:af:43:c6: a8:86:c7:b5:8f:3a:7a:67:06:c6:01:a9:47:5d:fc: 1d:6b:03:38:4a:99:04:26:52:9f:c3:64:e4:7b:34: 30:92:ba:e7:9e:b1:80:11:25:ab:9d:32:87:6b:c6: 15:a3:42:69:45:f8:66:be:29:a8:8f:1c:4b:1d:e6: 8d:98:47:f8:76:83:02:cf:61:bd:81:e5:0b:c9:ee: 4c:ca:ce:01:31:4d:52:0d:3b:ed:3a:74:13:0f:84: 1c:3e:8c:33:60:51:a3:11:31:2b:f1:a0:b6:c9:2e: eb:ce:8a:2a:5e:c3:aa:ac:30:03:c9:24:a3:8b:33: d5:1f:74:a8:d6:a0:45:4e:47:31:5f:1b:dc:d3:fc: 2e:65:1a:6c:aa:0f:53:f3:88:99:72:b2:98:93:ea: f6:e5:5f:4b:fb:f4:d8:6a:f5:99:1b:2d:14:2c:7b: fb:f9:f6:d4:cc:7e:d4:0f:3b:97:08:cd:b6:4f:e4: 44:af:05:87:22:88:21:56:4f:90:ee:66:62:e0:c8: 34:64:c3:41:7a:29:ee:8e:b6:d2:04:fb:9b:a0:d2: ff:ea:56:e5:b9:c9:b4:b3:f2:f8:67:63:33:7a:ba: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2B:A2:62:A7:CD:E2:2F:1D:D1:77:EB:56:78:46:5B:D4:0D:62:EE X509v3 Authority Key Identifier: keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:f7:9a:8a:c6:21:f9:76:5d:e7:63:38:00:13:dc:81:6e: d6:9a:64:06:cd:61:2a:a1:34:03:0b:d9:7e:3e:00:69:83:87: fb:f8:23:0d:7e:58:0d:6f:4b:e9:8b:1a:ad:3a:9a:e8:f4:a0: 3e:a5:18:ad:63:80:7a:a4:50:0a:f9:8c:6e:52:73:bd:da:fe: e6:8a:46:d8:70:f7:44:81:26:83:23:d4:d0:3f:6c:20:c9:ee: 3e:2e:bd:48:71:34:d8:40:0f:06:71:11:f2:10:7a:2f:c6:66: 57:1c:68:d2:f8:ce:54:19:63:90:ad:26:37:f8:fa:3a:7e:1d: eb:8f:18:40:5f:ab:70:fb:28:e8:97:93:d5:f6:1a:83:4d:c0: b8:ef:eb:cb:9d:4b:24:17:e4:be:9f:67:2b:da:b1:bb:a5:58: 43:30:db:e1:1e:ab:e1:a5:2c:a6:54:06:4b:4e:5e:5e:5a:dc: 00:25:34:23:97:d9:31:18:19:2e:d3:87:b6:af:7a:ed:c8:e0: fc:6b:78:21:6d:14:5f:04:33:76:65:b6:bd:fc:85:15:09:42: 51:5a:3b:33:a9:8a:84:0b:c5:7b:cd:d0:69:7a:78:4e:9b:31: ed:3b:ff:64:b8:9a:8a:a6:40:fd:7f:33:68:c6:18:86:d0:79: 84:bc:06:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK2Hb9EwwGn3HtDflKJneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjhmZjMxMGRhN2RmODMwOWNmYWI0ZGNmOWEyMzU4NDJi NjA4NzIwHhcNMjUxMjE1MDQwMTEyWhcNMjUxMjE2MDQwMTEyWjAzMTEwLwYDVQQD Eyg5YzJiYTI2MmE3Y2RlMjJmMWRkMTc3ZWI1Njc4NDY1YmQ0MGQ2MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSC//ep6ezHfaEkh1UuFLIBJleFT 6A1pGZCvQ8aohse1jzp6ZwbGAalHXfwdawM4SpkEJlKfw2TkezQwkrrnnrGAESWr nTKHa8YVo0JpRfhmvimojxxLHeaNmEf4doMCz2G9geULye5Mys4BMU1SDTvtOnQT D4QcPowzYFGjETEr8aC2yS7rzooqXsOqrDADySSjizPVH3So1qBFTkcxXxvc0/wu ZRpsqg9T84iZcrKYk+r25V9L+/TYavWZGy0ULHv7+fbUzH7UDzuXCM22T+RErwWH IoghVk+Q7mZi4Mg0ZMNBeinujrbSBPuboNL/6lblucm0s/L4Z2MzerowmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwromKnzeIvHdF361Z4RlvUDWLuMB8GA1UdIwQY MBaAFIoo/zENp9+DCc+rTc+aI1hCtghyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQt MjRjZjhhNjFkN2U4LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQtMjRjZjhhNjFkN2U4 LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifb3morG Ifl2XedjOAAT3IFu1ppkBs1hKqE0AwvZfj4AaYOH+/gjDX5YDW9L6YsarTqa6PSg PqUYrWOAeqRQCvmMblJzvdr+5opG2HD3RIEmgyPU0D9sIMnuPi69SHE02EAPBnER 8hB6L8ZmVxxo0vjOVBljkK0mN/j6On4d648YQF+rcPso6JeT1fYag03AuO/ry51L JBfkvp9nK9qxu6VYQzDb4R6r4aUsplQGS05eXlrcACU0I5fZMRgZLtOHtq967cjg /Gt4IW0UXwQzdmW2vfyFFQlCUVo7M6mKhAvFe83QaXp4Tpsx7Tv/ZLiaiqZA/X8z aMYYhtB5hLwGwQ== -----END CERTIFICATE-----Generated at Mon Dec 15 09:28:54 2025 by rpki-client