This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json) Hash identifier: NtxyL+dQJUtd/C+29thG5/1SyXPZHfdA8c0kJX7SHUw= Subject key identifier: 78:E3:8D:A8:18:D4:1B:C0:8F:C7:74:95:75:87:47:D8:E8:78:68:4B Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Certificate serial: 019B10B897AD6505A5808B9A9D656CC86DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft Manifest number: 0446 Signing time: Fri 12 Dec 2025 04:01:31 +0000 Manifest this update: Fri 12 Dec 2025 04:01:31 +0000 Manifest next update: Sat 13 Dec 2025 04:01:31 +0000 Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: X0Lz4iMJvQb3mLkGOM4UWICKmQumMZNQamYICk3fbWo=) 2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=) 3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=) 4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:97:ad:65:05:a5:80:8b:9a:9d:65:6c:c8:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Validity Not Before: Dec 12 04:01:31 2025 GMT Not After : Dec 13 04:01:31 2025 GMT Subject: CN=78e38da818d41bc08fc77495758747d8e878684b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:ef:8f:86:1a:4e:57:f6:85:bd:cd:7f:76: 1c:c2:25:77:ad:48:4f:5a:1b:a3:d5:20:d6:05:c4: 70:69:49:3b:59:21:14:ad:ed:85:c2:1a:ad:85:2c: 6c:21:45:5a:c1:b1:55:a1:57:ca:3b:b3:71:c3:bf: ea:c0:04:bb:6f:e2:fd:95:1d:3d:2b:49:fd:9e:36: be:fb:0d:3a:64:e7:7f:0f:3c:fb:6e:39:ff:97:7d: b0:ef:60:d1:0d:1b:1b:22:10:7a:ac:0a:a6:97:df: cd:13:8a:27:2c:64:ec:70:9b:66:d0:59:d4:3c:59: fb:3a:1c:31:1b:3a:b7:04:fc:44:1c:d6:bf:a8:6b: 9d:ea:71:b6:9d:fd:21:bd:4b:07:65:25:0b:af:8d: f6:3c:e5:22:ed:eb:71:a2:e7:97:1e:9f:24:4f:7b: a4:d9:78:5d:52:47:d1:8a:19:23:88:d8:9a:d7:53: 6a:97:af:d1:bb:e0:c6:d4:57:75:10:10:4d:8d:56: 9d:76:25:ef:61:70:92:7e:f4:65:ce:3a:44:49:87: 89:5b:b9:31:0a:e0:8e:f4:5f:67:c5:8a:07:7d:7f: d5:38:49:1d:7f:13:f1:45:a6:2a:4f:97:0f:9e:60: 3f:53:5a:7d:8c:07:6e:6f:3e:c6:57:eb:1f:42:1e: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E3:8D:A8:18:D4:1B:C0:8F:C7:74:95:75:87:47:D8:E8:78:68:4B X509v3 Authority Key Identifier: keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5a:aa:aa:75:94:a8:eb:55:b2:bf:52:94:2a:67:7a:79:1a: e3:70:a6:b8:a3:83:d2:b5:b9:76:2c:38:b7:05:7f:ad:be:08: eb:f4:ff:e4:3d:78:84:70:be:87:09:40:73:5f:48:d2:6d:20: 72:ac:26:e9:a0:4f:4f:37:f7:d9:bb:f1:ff:1c:27:6a:35:e2: 84:10:8d:d1:4d:35:c4:e5:8f:21:a5:51:4a:6d:2f:51:2f:27: 78:8e:67:c8:f0:e9:2b:ad:d4:d3:9d:ec:20:ad:ea:f9:52:7e: 1f:47:81:73:8d:0a:42:77:07:01:41:9d:c0:35:ca:b2:e1:b5: b7:b7:f6:b7:a5:5c:bf:b6:2b:bd:94:6f:91:87:5c:77:7f:f6: 6f:4d:00:fd:02:6d:a0:94:e2:2a:72:b7:19:51:4c:49:f8:ce: cb:c4:1b:b7:fe:e6:5e:bc:db:59:c4:30:5b:77:36:e8:f9:2c: f4:60:50:f8:19:13:84:fc:4a:f1:3d:11:b8:07:09:fc:25:ff: 4d:2f:db:16:e2:8e:7b:97:d6:c1:d0:f9:8e:84:6c:0c:d2:ed: bf:b7:bf:b3:25:61:00:d2:19:b3:9a:24:4a:3b:c0:4c:08:25: 38:e3:ef:1e:1a:78:7c:1e:74:d5:89:c8:1c:4c:3c:a7:01:f7: 53:06:d8:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuJetZQWlgIuanWVsyG2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj ZDcwOTEwHhcNMjUxMjEyMDQwMTMxWhcNMjUxMjEzMDQwMTMxWjAzMTEwLwYDVQQD Eyg3OGUzOGRhODE4ZDQxYmMwOGZjNzc0OTU3NTg3NDdkOGU4Nzg2ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscXvj4YaTlf2hb3Nf3YcwiV3rUhP Whuj1SDWBcRwaUk7WSEUre2FwhqthSxsIUVawbFVoVfKO7Nxw7/qwAS7b+L9lR09 K0n9nja++w06ZOd/Dzz7bjn/l32w72DRDRsbIhB6rAqml9/NE4onLGTscJtm0FnU PFn7OhwxGzq3BPxEHNa/qGud6nG2nf0hvUsHZSULr432POUi7etxoueXHp8kT3uk 2XhdUkfRihkjiNia11Nql6/Ru+DG1Fd1EBBNjVaddiXvYXCSfvRlzjpESYeJW7kx CuCO9F9nxYoHfX/VOEkdfxPxRaYqT5cPnmA/U1p9jAdubz7GV+sfQh4kmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjjjagY1BvAj8d0lXWHR9joeGhLMB8GA1UdIwQY MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt ODJmYTNkMjYwODY5LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5 LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlqqqnWU qOtVsr9SlCpnenka43CmuKOD0rW5diw4twV/rb4I6/T/5D14hHC+hwlAc19I0m0g cqwm6aBPTzf32bvx/xwnajXihBCN0U01xOWPIaVRSm0vUS8neI5nyPDpK63U053s IK3q+VJ+H0eBc40KQncHAUGdwDXKsuG1t7f2t6Vcv7YrvZRvkYdcd3/2b00A/QJt oJTiKnK3GVFMSfjOy8Qbt/7mXrzbWcQwW3c26Pks9GBQ+BkThPxK8T0RuAcJ/CX/ TS/bFuKOe5fWwdD5joRsDNLtv7e/syVhANIZs5okSjvATAglOOPvHhp4fB501YnI HEw8pwH3UwbYrQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:09:37 2025 by rpki-client