This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json) Hash identifier: 22TvTDFc/ehV7B4mFqqDvtt8ioxX295Om4Q2GdgyC0M= Subject key identifier: DC:AD:72:B0:66:1D:CD:20:ED:53:8C:51:F3:B4:AA:B3:90:03:02:6E Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b Certificate serial: 019AF0BF94FAD0498727FC91915A1705E432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft Manifest number: 012A Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: woGb+n4kTi9c/XT9MGuObcdWdPhcPLvrhcza9tF2azg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:94:fa:d0:49:87:27:fc:91:91:5a:17:05:e4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=dcad72b0661dcd20ed538c51f3b4aab39003026e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4b:9c:99:f3:c6:4b:09:32:21:3c:ad:8f:7b: 69:1e:d3:32:e3:89:2f:7f:df:0e:28:2b:3c:0a:fa: 5a:87:07:28:f0:96:f9:ef:2c:3f:04:98:d3:40:21: 35:a2:57:15:58:e6:df:27:f5:13:4d:10:9a:f9:d3: 92:7b:09:3a:90:a7:89:06:93:fa:af:f5:57:46:8e: 66:34:5a:9d:5d:5a:bb:d9:f8:6a:1c:1b:00:0c:b5: 65:33:38:16:56:22:c9:32:49:21:bc:6d:b2:8d:7a: 34:37:59:08:c0:9f:44:b9:20:5b:ef:38:34:f1:d7: 07:df:b4:21:fc:d0:b8:de:47:1c:6c:e0:74:a3:22: e6:b2:99:52:72:5e:1f:fb:0d:bf:8e:e9:10:8b:75: 56:b0:ef:4b:02:d5:f7:0b:39:41:de:c2:b2:4c:b5: 0e:65:a4:7b:15:dc:fc:e5:18:ce:4f:de:9d:77:9c: 0a:64:92:8c:a5:72:f6:28:e3:41:17:b9:3a:b8:2a: 0a:c6:e0:7a:ec:3a:31:5e:99:0f:94:cb:bd:15:f9: 0e:64:2c:2c:51:12:d3:41:2c:46:d0:6a:2e:b3:a5: 74:46:f5:1e:81:3e:4d:62:b2:ec:f2:e6:91:02:13: 79:5e:a3:de:b2:9c:b6:61:a4:50:d8:1f:d0:f1:c5: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AD:72:B0:66:1D:CD:20:ED:53:8C:51:F3:B4:AA:B3:90:03:02:6E X509v3 Authority Key Identifier: keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b3:32:3d:d4:0e:af:f2:c0:0d:b9:b5:3a:69:d4:af:f0:53: 65:77:a7:aa:1b:1c:db:06:6d:20:71:0d:9b:9a:f7:bb:b0:b3: f2:a3:cd:ae:54:7d:73:0c:c4:40:a5:9f:3f:46:3c:32:45:da: 0d:20:02:e8:9e:e4:a6:c0:10:a0:0d:78:ce:d4:3a:30:15:35: e0:93:a2:33:71:38:20:5b:db:b7:9c:a2:8a:b8:13:2f:e8:53: 0c:fe:bf:89:4d:fe:ed:c3:f6:19:08:21:28:3a:26:83:86:34: a2:89:b4:01:47:1a:52:66:10:02:4b:8f:f7:09:6f:7e:43:87: f6:7b:be:f4:2d:5e:52:44:ed:6a:f7:0b:4c:18:b5:77:ba:40: ea:f1:7c:d6:22:af:63:38:7d:8e:ad:a6:4f:62:1d:6a:fd:3b: bb:4a:0c:06:54:e5:ae:53:28:11:fb:e8:d7:f4:cf:00:b2:7e: b7:ad:18:9b:ac:ff:65:06:b4:e5:e7:9c:6e:18:b5:6f:b7:a1: 57:56:96:d9:b8:33:a1:45:68:a9:d7:54:39:52:3f:63:dc:af: c2:eb:15:e4:5c:50:5e:7f:ca:9f:a2:e3:91:f2:27:6e:04:bd: 37:71:ee:d9:4e:50:2a:d8:0c:c7:6c:19:0e:8b:24:79:b6:b0: 69:3c:90:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5T60EmHJ/yRkVoXBeQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTExMzVlM2M5NjJlNzQ2ZTRmNTdkMWVhYTQ5NGEwNDlm MDNiMWIwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EyhkY2FkNzJiMDY2MWRjZDIwZWQ1MzhjNTFmM2I0YWFiMzkwMDMwMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEucmfPGSwkyITytj3tpHtMy44kv f98OKCs8Cvpahwco8Jb57yw/BJjTQCE1olcVWObfJ/UTTRCa+dOSewk6kKeJBpP6 r/VXRo5mNFqdXVq72fhqHBsADLVlMzgWViLJMkkhvG2yjXo0N1kIwJ9EuSBb7zg0 8dcH37Qh/NC43kccbOB0oyLmsplScl4f+w2/jukQi3VWsO9LAtX3CzlB3sKyTLUO ZaR7Fdz85RjOT96dd5wKZJKMpXL2KONBF7k6uCoKxuB67DoxXpkPlMu9FfkOZCws URLTQSxG0Gous6V0RvUegT5NYrLs8uaRAhN5XqPespy2YaRQ2B/Q8cU4gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNytcrBmHc0g7VOMUfO0qrOQAwJuMB8GA1UdIwQY MBaAFCKhE148li50bk9X0eqklKBJ8DsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yZjA2NmMtZGM3YS00YTQ1LTg1NzQt YTViMjk1YWVmYzAwLzEvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yZjA2NmMtZGM3YS00YTQ1LTg1NzQtYTViMjk1YWVmYzAw LzEvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrMyPdQO r/LADbm1OmnUr/BTZXenqhsc2wZtIHENm5r3u7Cz8qPNrlR9cwzEQKWfP0Y8MkXa DSAC6J7kpsAQoA14ztQ6MBU14JOiM3E4IFvbt5yiirgTL+hTDP6/iU3+7cP2GQgh KDomg4Y0oom0AUcaUmYQAkuP9wlvfkOH9nu+9C1eUkTtavcLTBi1d7pA6vF81iKv Yzh9jq2mT2Idav07u0oMBlTlrlMoEfvo1/TPALJ+t60Ym6z/ZQa05eecbhi1b7eh V1aW2bgzoUVoqddUOVI/Y9yvwusV5FxQXn/Kn6LjkfInbgS9N3Hu2U5QKtgMx2wZ DoskebawaTyQBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:11 2025 by rpki-client