This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft File: iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json) Hash identifier: KVKzQdtF4Njp0GFjzCnIVAL18/5b9x9QMA+IS8DtX5s= Subject key identifier: 63:F4:89:AC:1D:3C:2A:F6:8F:20:9A:FD:E7:CF:1A:B8:8B:B4:BE:F2 Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc Certificate serial: 019B4437F599A03023C2061E5CEDD50BCB8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 04:01:16 +0000 Manifest this update: Mon 22 Dec 2025 04:01:16 +0000 Manifest next update: Tue 23 Dec 2025 04:01:16 +0000 Files and hashes: 1: c_7uOl8s8Kdh9CychkSYtAnQ7tY.roa (hash: Nr/ZIZGpAUJ7Gcwt3DrN0gnkpV9viza7zxUo/JxiEbY=) 2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: MCZt3ddyBuovbPd/SwZZIIlV7FoJYJMBNveI9mvUSe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:f5:99:a0:30:23:c2:06:1e:5c:ed:d5:0b:cb:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc Validity Not Before: Dec 22 04:01:16 2025 GMT Not After : Dec 23 04:01:16 2025 GMT Subject: CN=63f489ac1d3c2af68f209afde7cf1ab88bb4bef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:57:6b:36:dc:19:2e:7f:72:a8:aa:5b:77: 3a:7e:2a:5d:52:2f:56:aa:7d:3e:7d:e4:dd:b6:72: 7a:fa:52:df:55:30:64:9b:7e:8d:cf:d0:23:30:1f: 40:32:fd:5b:ca:dd:87:18:27:2f:98:30:4d:a9:9d: 3d:6a:f7:4b:1d:53:63:91:37:5d:5a:c7:8f:ff:01: 1a:be:23:bd:c8:42:68:fb:a6:42:31:04:0b:eb:8d: 7a:35:56:c4:b8:5a:52:ad:76:22:7f:70:0e:be:b5: 15:e0:6c:dd:9e:22:71:1a:9c:9a:1d:82:78:b5:c5: 63:4e:90:09:7a:2e:a3:c9:25:a3:25:60:36:96:e4: 53:06:38:0a:86:ea:47:4b:d8:ee:c5:8e:9f:75:b0: 3b:ee:d4:a8:8f:1e:07:78:48:19:16:8d:3d:a2:c4: 11:44:5b:af:b5:82:e7:b7:f1:a4:e2:bb:30:44:24: 88:96:80:04:5a:d8:ad:2f:6d:63:a0:83:45:32:5f: 96:bb:10:06:19:06:a1:1e:8f:61:b0:7b:96:70:e4: 7c:66:36:31:ce:27:47:f5:20:52:27:3c:96:9e:c8: b7:d2:dd:ed:0e:e5:94:c8:91:25:da:4c:a3:5f:be: dc:79:00:4d:f1:85:5c:82:a7:8d:7c:17:d4:5b:b8: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F4:89:AC:1D:3C:2A:F6:8F:20:9A:FD:E7:CF:1A:B8:8B:B4:BE:F2 X509v3 Authority Key Identifier: keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:73:30:da:77:a9:25:fa:eb:18:52:87:d3:98:67:1d:1f:e4: 4c:33:b6:6a:6f:99:ca:b8:bd:b3:a9:89:c4:34:f2:6c:32:65: b5:69:17:e4:47:2a:bb:34:ab:d4:4e:c9:08:56:ec:df:97:77: 6a:28:c2:66:a5:07:82:0d:49:64:e6:f7:a4:a3:15:aa:6d:d7: 6c:cb:57:b2:42:2c:38:79:c7:aa:db:34:f8:ef:69:bb:d3:1b: 8e:87:1a:df:69:88:85:df:a7:91:57:93:f6:1f:9a:d7:e4:d8: d2:a4:03:2e:66:13:b1:fb:0a:42:df:ff:49:a7:6b:6f:63:af: 1e:0f:bf:5a:52:71:9e:6a:7f:26:6b:1f:6c:30:0c:96:1e:83: 3d:e0:da:ab:14:f1:b5:c4:8f:f1:07:37:04:6c:5e:c8:58:31: bb:2a:ca:9c:1f:8d:62:34:76:71:63:04:f4:10:cc:93:cc:c1: 96:e8:31:50:60:59:ee:30:59:c0:de:2d:5f:18:db:8b:1d:aa: a4:72:e5:df:48:37:0a:ef:f0:86:6e:d5:ce:4f:aa:e7:90:49: 1f:6e:42:b5:c8:d0:b8:6a:1b:24:fe:3d:13:38:65:5c:90:f9: a0:0e:ca:1e:b7:4e:39:9b:07:87:b4:a0:3b:c1:b9:f5:a0:8f: 9a:7f:66:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN/WZoDAjwgYeXO3VC8uPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2EyYTQwMTlhMjgxNzdjZGY4MDY1OTlmMWFiNWQ1MWQx N2I4ZGMwHhcNMjUxMjIyMDQwMTE2WhcNMjUxMjIzMDQwMTE2WjAzMTEwLwYDVQQD Eyg2M2Y0ODlhYzFkM2MyYWY2OGYyMDlhZmRlN2NmMWFiODhiYjRiZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SRXazbcGS5/cqiqW3c6fipdUi9W qn0+feTdtnJ6+lLfVTBkm36Nz9AjMB9AMv1byt2HGCcvmDBNqZ09avdLHVNjkTdd WseP/wEaviO9yEJo+6ZCMQQL6416NVbEuFpSrXYif3AOvrUV4GzdniJxGpyaHYJ4 tcVjTpAJei6jySWjJWA2luRTBjgKhupHS9juxY6fdbA77tSojx4HeEgZFo09osQR RFuvtYLnt/Gk4rswRCSIloAEWtitL21joINFMl+WuxAGGQahHo9hsHuWcOR8ZjYx zidH9SBSJzyWnsi30t3tDuWUyJEl2kyjX77ceQBN8YVcgqeNfBfUW7iIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP0iawdPCr2jyCa/efPGriLtL7yMB8GA1UdIwQY MBaAFIk6KkAZooF3zfgGWZ8atdUdF7jcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEt MzYxNzg2ZjE3YTA1LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEtMzYxNzg2ZjE3YTA1 LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnMw2nep JfrrGFKH05hnHR/kTDO2am+Zyri9s6mJxDTybDJltWkX5EcquzSr1E7JCFbs35d3 aijCZqUHgg1JZOb3pKMVqm3XbMtXskIsOHnHqts0+O9pu9Mbjoca32mIhd+nkVeT 9h+a1+TY0qQDLmYTsfsKQt//Sadrb2OvHg+/WlJxnmp/JmsfbDAMlh6DPeDaqxTx tcSP8Qc3BGxeyFgxuyrKnB+NYjR2cWME9BDMk8zBlugxUGBZ7jBZwN4tXxjbix2q pHLl30g3Cu/whm7Vzk+q55BJH25CtcjQuGobJP49EzhlXJD5oA7KHrdOOZsHh7Sg O8G59aCPmn9m2Q== -----END CERTIFICATE-----Generated at Mon Dec 22 10:19:54 2025 by rpki-client