This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft File: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json) Hash identifier: xgV+C9kOdKu8w2lOyTUBPFJ5BQIWdLWDH1ms8m9eyvY= Subject key identifier: A5:9A:AE:75:2A:05:4E:AF:E5:25:23:3C:F6:A8:0D:95:19:64:CA:A7 Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5 Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5 Certificate serial: 019B37FC8BB36A3F06AF3F45B78DBC1630DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft Manifest number: 0EA5 Signing time: Fri 19 Dec 2025 19:00:56 +0000 Manifest this update: Fri 19 Dec 2025 19:00:56 +0000 Manifest next update: Sat 20 Dec 2025 19:00:56 +0000 Files and hashes: 1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: VE/lVK9rV2DJbHLm9JRrSv4l+96E+uvIteHWgtGOMkw=) 2: uJDTTmn4-4oW9k1wMlYj6SoOXQ4.roa (hash: pc1//08OK0uZCD5sEikyCqJI0sYd32Do1RYyDgm63AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:8b:b3:6a:3f:06:af:3f:45:b7:8d:bc:16:30:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5 Validity Not Before: Dec 19 19:00:56 2025 GMT Not After : Dec 20 19:00:56 2025 GMT Subject: CN=a59aae752a054eafe525233cf6a80d951964caa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:96:a1:a2:44:89:6d:5a:78:5d:e1:42:b6: 26:45:6d:92:04:bf:ea:2f:56:8e:96:03:60:ed:ff: 86:ed:c1:9b:48:53:bc:57:f7:6b:d8:8e:f6:48:9b: 4b:78:cd:e8:73:e5:98:b9:79:44:14:dd:d1:0e:3a: b3:a3:63:eb:03:53:11:24:01:e1:8b:16:78:78:f0: 09:41:fd:68:8e:cf:98:fe:e7:61:83:b9:13:cc:c1: 96:26:fa:f1:7b:4f:f5:6a:33:e1:3e:af:43:04:c9: 8b:2c:41:c3:1a:1c:c0:ad:7f:2d:43:ef:2e:64:a4: 51:02:47:0b:fd:36:6a:c7:6d:48:55:ac:1c:0a:38: b6:18:82:a5:07:23:ba:04:88:ef:1a:cb:79:bf:5e: 75:5a:22:1a:1b:f1:fc:6e:50:22:9a:8f:03:4d:6c: 33:62:d8:f8:ab:a0:40:17:d6:6b:8a:99:c9:b4:fd: e5:2d:4d:6b:09:fd:12:11:5c:da:b8:e9:6d:52:f5: 41:0e:52:e9:63:ed:74:18:4b:9d:3d:95:07:7b:2a: 40:5a:30:a5:12:b5:45:57:ac:75:7a:23:7f:b7:e0: 2f:f6:7e:64:ff:70:f5:55:d4:24:81:9c:54:6f:ee: ce:06:67:97:8f:ed:5d:76:74:64:e6:c8:65:c6:21: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9A:AE:75:2A:05:4E:AF:E5:25:23:3C:F6:A8:0D:95:19:64:CA:A7 X509v3 Authority Key Identifier: keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:10:11:b9:02:2f:5f:18:ac:f6:6b:0d:ba:ff:ee:b1:d5:39: 06:c3:6e:73:8e:19:4c:a4:04:fa:93:e9:4b:a2:ee:38:35:2d: 06:47:16:2e:fe:0e:60:b0:b6:15:4d:d1:1b:1f:80:89:90:de: 67:46:27:95:5d:d0:1a:2f:0b:2e:88:c1:52:78:47:c9:b5:bd: 2e:f1:dd:c1:74:f1:01:31:b2:19:ab:6d:a5:59:15:5b:61:46: e2:ce:c6:77:f0:e3:44:5a:25:cb:48:fa:6d:2e:80:b9:8d:81: 5d:38:95:86:3f:1f:12:77:67:c5:e5:a2:c2:70:34:ae:49:f3: 79:ae:35:8b:62:48:8e:55:03:06:d6:0d:42:47:b2:f1:5e:5d: 9e:47:b1:5f:d5:ec:ac:0f:18:1b:64:17:1a:d0:85:1e:04:56: 3b:35:05:b9:d6:2c:3c:2f:97:08:65:57:eb:34:6f:b7:e2:75: ed:db:1d:b3:a7:95:37:9e:7c:39:f7:28:c5:45:f4:3e:00:b2: 38:2d:14:27:05:91:97:b0:2d:76:66:df:ea:dd:ce:5a:a7:06: 87:4e:e1:22:f8:33:29:c0:d8:b3:92:14:99:2a:6f:da:e6:5a: ff:51:fd:c0:94:22:b2:5d:68:bc:02:d0:5b:ff:89:09:d5:c1: b3:20:0a:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Iuzaj8Grz9Ft428FjDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZWRmMGQ4ODFhZWVhMmU1OTk5OWI4MWQyOTc1MTEzZTE0 MDU1ZjUwHhcNMjUxMjE5MTkwMDU2WhcNMjUxMjIwMTkwMDU2WjAzMTEwLwYDVQQD EyhhNTlhYWU3NTJhMDU0ZWFmZTUyNTIzM2NmNmE4MGQ5NTE5NjRjYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv2WoaJEiW1aeF3hQrYmRW2SBL/q L1aOlgNg7f+G7cGbSFO8V/dr2I72SJtLeM3oc+WYuXlEFN3RDjqzo2PrA1MRJAHh ixZ4ePAJQf1ojs+Y/udhg7kTzMGWJvrxe0/1ajPhPq9DBMmLLEHDGhzArX8tQ+8u ZKRRAkcL/TZqx21IVawcCji2GIKlByO6BIjvGst5v151WiIaG/H8blAimo8DTWwz Ytj4q6BAF9ZripnJtP3lLU1rCf0SEVzauOltUvVBDlLpY+10GEudPZUHeypAWjCl ErVFV6x1eiN/t+Av9n5k/3D1VdQkgZxUb+7OBmeXj+1ddnRk5shlxiGQ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWarnUqBU6v5SUjPPaoDZUZZMqnMB8GA1UdIwQY MBaAFCLt8NiBruouWZmbgdKXURPhQFX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83NjVmNjItZTAzNS00NWRhLWJjNjQt NDc1M2VmYzg5MjlkLzEvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83NjVmNjItZTAzNS00NWRhLWJjNjQtNDc1M2VmYzg5Mjlk LzEvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRARuQIv Xxis9msNuv/usdU5BsNuc44ZTKQE+pPpS6LuODUtBkcWLv4OYLC2FU3RGx+AiZDe Z0YnlV3QGi8LLojBUnhHybW9LvHdwXTxATGyGattpVkVW2FG4s7Gd/DjRFoly0j6 bS6AuY2BXTiVhj8fEndnxeWiwnA0rknzea41i2JIjlUDBtYNQkey8V5dnkexX9Xs rA8YG2QXGtCFHgRWOzUFudYsPC+XCGVX6zRvt+J17dsds6eVN558OfcoxUX0PgCy OC0UJwWRl7Atdmbf6t3OWqcGh07hIvgzKcDYs5IUmSpv2uZa/1H9wJQisl1ovALQ W/+JCdXBsyAKlA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:56 2025 by rpki-client