This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json) Hash identifier: AjVpVWaV48g9K65Mg6IJdNakVP5lwNVjHRlGFPUWhZw= Subject key identifier: E8:33:01:66:DB:D3:C9:BA:07:46:82:AB:18:26:3A:9E:4E:C6:B0:45 Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9 Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9 Certificate serial: 019B085B6ADBBD30B73E495079C7618FBE3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft Manifest number: 075D Signing time: Wed 10 Dec 2025 13:02:47 +0000 Manifest this update: Wed 10 Dec 2025 13:02:47 +0000 Manifest next update: Thu 11 Dec 2025 13:02:47 +0000 Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: 7bq7yMp+jHDUqz++oL+W1NOVRIA2AhH3T6XE4GciYSw=) 2: ZXtK8i0ZkTBxTFkF4gT8SCIZTmw.roa (hash: KikSjMlfZMQPJYB8hmRvlc00FrgqM6UWZDTUG/QEicY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5b:6a:db:bd:30:b7:3e:49:50:79:c7:61:8f:be:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9 Validity Not Before: Dec 10 13:02:47 2025 GMT Not After : Dec 11 13:02:47 2025 GMT Subject: CN=e8330166dbd3c9ba074682ab18263a9e4ec6b045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:3b:76:ab:0e:20:04:6a:04:31:92:11:53: 0f:ff:40:01:b3:33:8f:30:61:ca:7e:91:6d:3b:3d: 5d:98:47:f0:f3:e9:11:14:af:5a:5b:63:81:0e:55: 82:72:b0:7b:73:b5:91:eb:8b:73:f8:c3:3a:a5:38: d2:1a:7d:7c:d8:fd:97:11:d0:60:2f:04:b6:c2:cc: b9:e1:19:2f:d3:e6:9c:68:21:7b:aa:55:bb:16:b0: 28:31:35:03:30:81:d2:f6:a7:f2:86:0f:53:3c:cb: 57:df:eb:be:4a:f3:02:d2:7b:c1:08:73:00:f5:6f: b9:7e:9e:a8:04:a8:73:4e:24:8a:25:2f:b5:b1:7c: 42:14:37:18:48:94:70:83:b7:68:a1:04:fe:a4:0c: 59:24:f2:09:f1:20:90:04:e2:17:07:2e:ea:7e:8b: 77:f6:33:5a:a3:61:40:d7:4a:71:05:48:44:0f:aa: 46:83:fe:93:ee:ab:fc:f7:7f:dd:ca:de:ef:23:86: 18:25:9e:d3:75:4c:77:85:2c:bc:71:9e:05:88:bc: a2:f2:34:c6:c1:78:3d:1c:bb:40:17:72:12:9e:7f: 86:41:a3:dc:59:4a:11:64:52:48:b1:50:cd:e1:10: f6:e7:42:ca:d0:5c:aa:e2:f6:2a:2f:31:7f:2f:a1: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:33:01:66:DB:D3:C9:BA:07:46:82:AB:18:26:3A:9E:4E:C6:B0:45 X509v3 Authority Key Identifier: keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:4c:ab:fc:bf:85:2e:60:00:c8:74:78:7c:ac:7a:40:16:76: ef:0c:f1:30:74:bc:6d:96:e9:b7:1a:c4:a8:a2:c2:21:03:ea: 20:c4:8d:53:e2:ab:e5:5a:12:9d:6a:46:8f:2b:e9:e6:a1:15: ba:67:f7:a2:17:bb:2d:d2:fd:12:0c:51:df:db:de:51:12:ca: 5c:9e:ac:aa:01:50:9c:08:85:0f:14:ac:db:08:8b:b3:a3:8f: ea:ab:87:8c:26:ea:0d:5b:0e:10:14:36:2d:36:f7:98:9c:f0: 33:16:d7:96:d5:10:53:62:31:4c:98:3e:41:a2:6d:0a:7c:9f: fe:5d:88:47:e4:ae:df:94:ff:f0:aa:36:61:ca:88:6f:fe:2b: 3b:ac:96:42:f4:06:75:10:b1:e8:2a:38:2d:ab:e9:3b:9b:2a: 91:ec:74:59:af:ff:1c:5c:2f:18:a1:4e:91:05:38:35:5a:7d: c2:70:b6:a9:6e:7e:fd:ec:ae:08:0a:d4:75:18:44:a7:96:d1: e0:04:b6:1a:5b:ef:62:90:f9:8a:c3:47:85:fe:38:ba:5b:e3: 22:37:4a:ed:30:cc:6b:72:39:aa:d0:02:e3:73:84:5a:df:dc: 18:05:13:e6:a3:15:06:93:61:b2:6d:2e:01:0b:95:99:c7:00: b8:83:2e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIW2rbvTC3PklQecdhj747MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGQxYzBkYjVhYTE4ODBkNzc0N2UyMmYxZGJmNDcxNmQz MTAxYTkwHhcNMjUxMjEwMTMwMjQ3WhcNMjUxMjExMTMwMjQ3WjAzMTEwLwYDVQQD EyhlODMzMDE2NmRiZDNjOWJhMDc0NjgyYWIxODI2M2E5ZTRlYzZiMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwc7dqsOIARqBDGSEVMP/0ABszOP MGHKfpFtOz1dmEfw8+kRFK9aW2OBDlWCcrB7c7WR64tz+MM6pTjSGn182P2XEdBg LwS2wsy54Rkv0+acaCF7qlW7FrAoMTUDMIHS9qfyhg9TPMtX3+u+SvMC0nvBCHMA 9W+5fp6oBKhzTiSKJS+1sXxCFDcYSJRwg7dooQT+pAxZJPIJ8SCQBOIXBy7qfot3 9jNao2FA10pxBUhED6pGg/6T7qv893/dyt7vI4YYJZ7TdUx3hSy8cZ4FiLyi8jTG wXg9HLtAF3ISnn+GQaPcWUoRZFJIsVDN4RD250LK0Fyq4vYqLzF/L6E6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgzAWbb08m6B0aCqxgmOp5OxrBFMB8GA1UdIwQY MBaAFCENHA21qhiA13R+IvHb9HFtMQGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUt ZDcxMTMwYzZjMGY5LzEvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUtZDcxMTMwYzZjMGY5 LzEvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0yr/L+F LmAAyHR4fKx6QBZ27wzxMHS8bZbptxrEqKLCIQPqIMSNU+Kr5VoSnWpGjyvp5qEV umf3ohe7LdL9EgxR39veURLKXJ6sqgFQnAiFDxSs2wiLs6OP6quHjCbqDVsOEBQ2 LTb3mJzwMxbXltUQU2IxTJg+QaJtCnyf/l2IR+Su35T/8Ko2YcqIb/4rO6yWQvQG dRCx6Co4LavpO5sqkex0Wa//HFwvGKFOkQU4NVp9wnC2qW5+/eyuCArUdRhEp5bR 4AS2GlvvYpD5isNHhf44ulvjIjdK7TDMa3I5qtAC43OEWt/cGAUT5qMVBpNhsm0u AQuVmccAuIMu+A== -----END CERTIFICATE-----Generated at Wed Dec 10 17:22:31 2025 by rpki-client