This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json) Hash identifier: 9oVrnItRsgpmvrkK9u8qykLIBMU3iHcfKFCJthNNyPA= Subject key identifier: 8E:92:BF:F9:3A:D5:B0:D8:D1:CC:0C:F8:10:38:2A:25:5A:BB:5B:6B Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b Certificate serial: 019B34C4BAA1128F9417568195721FEB7561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 04:01:06 +0000 Manifest this update: Fri 19 Dec 2025 04:01:06 +0000 Manifest next update: Sat 20 Dec 2025 04:01:06 +0000 Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: nfIorx/TbdtKfx8eZSC0Y2e3n7t73mOQBKMeR76/Nk8=) 2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:ba:a1:12:8f:94:17:56:81:95:72:1f:eb:75:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b Validity Not Before: Dec 19 04:01:06 2025 GMT Not After : Dec 20 04:01:06 2025 GMT Subject: CN=8e92bff93ad5b0d8d1cc0cf810382a255abb5b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:5f:ad:4c:be:73:fc:3d:f6:26:3f:2c:f0: bc:fe:1b:62:f5:f6:00:56:87:fb:e0:bc:9c:f9:5f: fc:30:d2:a5:71:d9:5c:03:61:10:b0:61:12:d0:d0: c1:89:b1:8c:0f:99:18:4c:38:24:cb:2d:a5:a8:6a: 46:97:11:16:3b:5c:8c:31:3f:bc:a2:42:2e:5b:06: b0:fa:54:e1:96:64:e1:47:96:2a:0d:de:95:37:b7: 3c:53:09:87:80:09:b4:27:77:5d:64:9b:ff:f1:ab: c2:74:4d:e5:a8:63:ea:b2:87:e3:bd:2e:8e:1a:d6: 75:85:e9:b2:56:a4:00:27:6e:7a:85:37:43:d8:ab: 1d:f8:cb:1f:16:e6:65:d5:fb:d2:8b:06:be:75:c8: 6c:95:a8:b6:8c:78:52:bc:6b:1e:57:59:1e:5b:5c: e0:9f:b8:64:c2:e3:fc:61:36:d4:f1:31:b4:34:32: aa:3b:5d:f9:b8:34:7c:1d:64:04:18:6a:b8:f9:dc: 8c:6d:7a:9e:34:3d:c8:e5:62:58:e1:a9:e7:2e:a5: a5:e2:f1:9c:bf:45:3e:c1:18:33:e1:33:16:90:b0: 16:0d:7f:63:62:48:b8:c4:47:74:73:dd:a8:cc:7b: 41:7a:52:a5:be:aa:e8:69:19:ee:a9:ed:56:fa:02: 99:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:92:BF:F9:3A:D5:B0:D8:D1:CC:0C:F8:10:38:2A:25:5A:BB:5B:6B X509v3 Authority Key Identifier: keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c6:4e:76:0c:0b:f7:2d:8f:77:1e:b8:9d:f8:a1:cd:06:64: b7:74:3d:5e:90:23:d6:02:fa:89:f4:32:e2:09:1c:60:a6:ea: b5:b6:23:f8:24:56:5c:da:01:e5:fd:9e:8e:10:77:55:08:40: ea:91:53:6e:b1:f2:30:d2:43:24:25:6d:67:b5:2d:a4:63:46: eb:a7:50:f5:42:5c:f9:79:39:b6:31:34:88:99:c3:c3:b8:bb: 94:a2:70:cd:f2:f5:cc:7f:47:97:3a:fa:87:a7:cb:05:0d:60: 21:49:6b:db:9c:e8:ad:d5:19:bc:cf:81:20:dc:9a:b8:fb:af: bf:a3:9c:6a:53:5a:73:52:f1:c8:e3:2d:96:8c:f6:68:5d:04: 8a:d3:bb:22:7c:c7:dc:f0:72:f8:7c:b6:f1:bb:ad:00:33:4c: de:76:c8:dd:a7:33:42:81:6b:01:fa:05:b2:3a:57:f9:a1:21: 5c:1e:f0:56:5d:5f:b7:11:e9:cf:9f:75:f8:71:87:9e:c5:73: d4:35:87:48:05:b6:70:26:e5:42:b4:2b:77:11:73:29:8d:28: a7:53:b8:2b:d5:9c:30:7f:66:d7:4f:06:af:b9:89:be:cc:f3: e4:4a:26:85:fe:99:f3:dd:c9:af:dc:6e:ad:03:94:2b:3f:48: 90:b3:26:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xLqhEo+UF1aBlXIf63VhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy ZGUyMGIwHhcNMjUxMjE5MDQwMTA2WhcNMjUxMjIwMDQwMTA2WjAzMTEwLwYDVQQD Eyg4ZTkyYmZmOTNhZDViMGQ4ZDFjYzBjZjgxMDM4MmEyNTVhYmI1YjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrBfrUy+c/w99iY/LPC8/hti9fYA Vof74Lyc+V/8MNKlcdlcA2EQsGES0NDBibGMD5kYTDgkyy2lqGpGlxEWO1yMMT+8 okIuWwaw+lThlmThR5YqDd6VN7c8UwmHgAm0J3ddZJv/8avCdE3lqGPqsofjvS6O GtZ1hemyVqQAJ256hTdD2Ksd+MsfFuZl1fvSiwa+dchslai2jHhSvGseV1keW1zg n7hkwuP8YTbU8TG0NDKqO135uDR8HWQEGGq4+dyMbXqeND3I5WJY4annLqWl4vGc v0U+wRgz4TMWkLAWDX9jYki4xEd0c92ozHtBelKlvqroaRnuqe1W+gKZowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6Sv/k61bDY0cwM+BA4KiVau1trMB8GA1UdIwQY MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0 LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8ZOdgwL 9y2Pdx64nfihzQZkt3Q9XpAj1gL6ifQy4gkcYKbqtbYj+CRWXNoB5f2ejhB3VQhA 6pFTbrHyMNJDJCVtZ7UtpGNG66dQ9UJc+Xk5tjE0iJnDw7i7lKJwzfL1zH9Hlzr6 h6fLBQ1gIUlr25zordUZvM+BINyauPuvv6OcalNac1LxyOMtloz2aF0EitO7InzH 3PBy+Hy28butADNM3nbI3aczQoFrAfoFsjpX+aEhXB7wVl1ftxHpz591+HGHnsVz 1DWHSAW2cCblQrQrdxFzKY0op1O4K9WcMH9m108Gr7mJvszz5Eomhf6Z893Jr9xu rQOUKz9IkLMm3w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:14 2025 by rpki-client