This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json) Hash identifier: p+zgB8tw9rhr5BAEoW9kO44ndU1wlSnN4PWTDXIgQ44= Subject key identifier: 3E:D7:97:8B:F7:21:34:1F:43:4C:3D:93:2B:59:B3:65:B7:C1:EE:8F Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Certificate serial: 019B0EC99BAF12C971D1AC4B935D791EDAD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 19:00:52 +0000 Manifest this update: Thu 11 Dec 2025 19:00:52 +0000 Manifest next update: Fri 12 Dec 2025 19:00:52 +0000 Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: nmPFSXbeydJb38JEjqv94lxhD2GtgxEPS70hEDfU638=) 2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=) 3: YgI-v6xyCyvCdaFE_0gi8JebnCU.roa (hash: 8nUg6t7h+Myv8fLu/m3fBl/zsOujrUMcs0usjBSVmFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:9b:af:12:c9:71:d1:ac:4b:93:5d:79:1e:da:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Validity Not Before: Dec 11 19:00:52 2025 GMT Not After : Dec 12 19:00:52 2025 GMT Subject: CN=3ed7978bf721341f434c3d932b59b365b7c1ee8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:e3:cc:3e:9e:08:c5:d8:19:4c:eb:bd:d0: 4d:7b:da:86:39:52:71:78:12:94:6a:61:61:dc:9c: 61:bc:9a:ca:fd:76:b1:94:f8:ad:b5:1b:42:22:52: 2f:b0:28:2d:77:f0:d0:94:4a:f9:78:ec:9d:47:79: ff:d9:92:c0:f2:5d:75:fb:22:aa:12:90:f2:11:87: d4:fe:7e:6c:bc:25:07:50:69:b4:f5:d7:50:d1:1a: 91:31:98:6a:b9:17:31:f3:d5:60:3a:c5:01:44:f5: a3:5d:c3:cf:4c:44:a1:f0:82:ae:fd:a3:aa:b6:67: c3:76:a6:c0:ff:18:20:2e:94:07:f8:8d:28:1e:ec: 12:4f:e1:c2:f2:b1:78:81:bb:99:ad:84:94:8f:9a: a3:96:74:92:07:66:01:26:fa:f2:65:c6:ba:03:a9: f5:11:d2:d5:98:38:08:f1:82:8d:a8:7f:b5:6c:7e: 0a:b6:cd:bc:27:59:a6:cf:6b:ab:a5:73:68:86:1f: 38:d0:07:35:cf:d7:5d:43:14:a9:b2:eb:37:4d:bb: 8a:d6:09:bf:91:33:18:d9:49:bb:49:55:d8:8c:5e: ae:d1:33:d0:13:4b:ea:d2:60:92:d0:c9:61:51:a7: c4:62:85:0f:bb:0f:0f:e7:e6:41:75:42:30:a9:d3: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:97:8B:F7:21:34:1F:43:4C:3D:93:2B:59:B3:65:B7:C1:EE:8F X509v3 Authority Key Identifier: keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:34:9c:9b:8d:aa:93:3d:77:2f:00:a7:8b:62:d9:01:51:e7: d8:ba:84:94:ac:b1:e2:12:12:1d:e1:c3:4c:72:42:78:ac:f1: bd:14:eb:0e:e3:19:77:d9:7a:f4:3b:4b:b6:a3:a8:93:d2:f4: f6:f5:4f:c3:b9:64:f4:95:60:02:fa:9c:db:7c:2e:44:32:47: 75:dc:60:91:40:83:8f:36:19:2a:7f:11:2b:b0:32:23:fe:d3: 37:c7:53:6d:20:12:66:31:b6:31:8e:e2:b4:d6:10:b4:b7:41: a8:35:d4:43:04:95:96:03:92:c6:bb:c9:28:2c:47:86:d7:07: 95:47:d4:48:ea:87:4f:e1:41:5e:13:4f:e4:db:0e:6e:a4:bf: 66:66:63:05:32:cd:68:86:97:ee:c7:9a:6b:2a:2f:8e:af:46: af:67:b1:39:cd:3c:b8:53:cd:4d:f7:5b:7a:50:35:ef:e6:3e: 38:0d:f0:db:10:e9:04:71:e0:b4:01:1e:a0:2e:50:82:80:0b: 09:b4:57:0b:11:16:e5:83:46:ca:3b:26:8b:54:7f:7a:a5:15: f3:0a:9a:92:34:39:c0:3e:67:ca:c3:69:f0:30:31:6e:82:33: df:92:fc:1e:4f:64:a8:90:db:72:07:35:5e:bd:2f:dc:2d:bc: cd:40:03:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyZuvEslx0axLk115HtrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy NDIyYzUwHhcNMjUxMjExMTkwMDUyWhcNMjUxMjEyMTkwMDUyWjAzMTEwLwYDVQQD EygzZWQ3OTc4YmY3MjEzNDFmNDM0YzNkOTMyYjU5YjM2NWI3YzFlZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts3jzD6eCMXYGUzrvdBNe9qGOVJx eBKUamFh3JxhvJrK/XaxlPittRtCIlIvsCgtd/DQlEr5eOydR3n/2ZLA8l11+yKq EpDyEYfU/n5svCUHUGm09ddQ0RqRMZhquRcx89VgOsUBRPWjXcPPTESh8IKu/aOq tmfDdqbA/xggLpQH+I0oHuwST+HC8rF4gbuZrYSUj5qjlnSSB2YBJvryZca6A6n1 EdLVmDgI8YKNqH+1bH4Kts28J1mmz2urpXNohh840Ac1z9ddQxSpsus3TbuK1gm/ kTMY2Um7SVXYjF6u0TPQE0vq0mCS0MlhUafEYoUPuw8P5+ZBdUIwqdNE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7Xl4v3ITQfQ0w9kytZs2W3we6PMB8GA1UdIwQY MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjScm42q kz13LwCni2LZAVHn2LqElKyx4hISHeHDTHJCeKzxvRTrDuMZd9l69DtLtqOok9L0 9vVPw7lk9JVgAvqc23wuRDJHddxgkUCDjzYZKn8RK7AyI/7TN8dTbSASZjG2MY7i tNYQtLdBqDXUQwSVlgOSxrvJKCxHhtcHlUfUSOqHT+FBXhNP5NsObqS/ZmZjBTLN aIaX7seaayovjq9Gr2exOc08uFPNTfdbelA17+Y+OA3w2xDpBHHgtAEeoC5QgoAL CbRXCxEW5YNGyjsmi1R/eqUV8wqakjQ5wD5nysNp8DAxboIz35L8Hk9kqJDbcgc1 Xr0v3C28zUADbQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:20 2025 by rpki-client