This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json) Hash identifier: urnyqCNxq7+uWFx9sLdFaXsNpq1NZ9S+6s1LBh3UD+Q= Subject key identifier: F0:7D:AE:72:70:6B:58:3E:FF:71:DE:BC:C5:DD:D7:51:B7:D1:3A:89 Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Certificate serial: 019AF6C0FC291FB3964DA088C4FF5332E1A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft Manifest number: 11D4 Signing time: Sun 07 Dec 2025 03:00:33 +0000 Manifest this update: Sun 07 Dec 2025 03:00:33 +0000 Manifest next update: Mon 08 Dec 2025 03:00:33 +0000 Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: HU69YasxINXhhK1eglFZd+NmJWfYdcBJR4zM75FFnvI=) 2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c0:fc:29:1f:b3:96:4d:a0:88:c4:ff:53:32:e1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Validity Not Before: Dec 7 03:00:33 2025 GMT Not After : Dec 8 03:00:33 2025 GMT Subject: CN=f07dae72706b583eff71debcc5ddd751b7d13a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:44:22:a6:82:88:00:79:b2:12:7f:89:02: 71:be:df:1e:82:f8:45:aa:3f:c9:4b:71:68:26:0f: a9:6d:60:5f:73:65:3e:2f:ae:1e:72:62:03:22:f0: e8:7e:00:a9:8f:d4:d4:f3:30:6e:92:ec:cf:dc:f9: 84:94:09:8f:1a:82:88:1c:dd:ad:58:1f:cf:96:49: 24:df:78:a4:c0:d9:5b:1b:28:d4:24:5a:2b:2b:95: 1c:62:92:e4:d3:bd:01:f0:9a:c9:de:68:c8:3f:b3: 81:e9:7a:e3:8d:b6:5a:81:be:33:36:99:95:58:eb: 65:50:8b:73:30:b8:2b:82:a6:ae:8e:bf:2a:55:b8: af:68:73:fb:c8:bb:72:e9:aa:42:04:cc:29:15:33: bd:f7:e8:00:b2:46:98:68:1b:76:48:c1:12:f3:1e: 99:5a:aa:fc:36:e8:3c:a8:50:b5:ad:80:10:57:01: 84:3a:0c:85:db:17:50:c9:92:5d:c4:33:09:6f:f3: ee:14:30:c4:04:a7:db:26:ef:f5:6c:85:6b:dd:03: c2:ed:7a:53:44:2c:a2:2f:1e:10:55:dd:ca:70:ab: ec:cc:03:b5:49:87:d8:67:1c:bf:a2:81:6e:f3:3b: 6e:aa:cd:7b:61:40:14:db:49:91:a5:1e:24:0e:2a: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7D:AE:72:70:6B:58:3E:FF:71:DE:BC:C5:DD:D7:51:B7:D1:3A:89 X509v3 Authority Key Identifier: keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:a5:3b:34:92:51:c4:15:34:88:01:d4:a4:9f:b3:51:85:71: 32:5e:5c:9f:1a:b5:f3:0f:5e:b3:0c:16:38:26:ad:3f:7c:f9: 61:2f:44:29:e0:e4:6b:e2:75:1d:f4:3b:55:d1:12:37:f2:6b: de:87:5c:70:be:a5:c6:4e:6e:16:e1:71:c9:18:5b:28:4d:68: a7:41:3e:e1:9f:1c:66:7a:7c:32:7d:1d:82:9b:34:94:b9:11: ab:75:ac:44:98:df:ca:ed:04:14:ef:df:96:df:14:7f:1a:59: 87:61:14:95:0b:5a:b3:10:e8:59:41:a4:62:05:9c:5a:b8:21: 78:9e:b9:fd:14:4e:96:16:98:4b:77:8f:c5:6a:8d:5b:da:09: cc:a9:cf:4b:7f:3a:09:6a:dc:ba:54:88:75:fb:33:9a:20:43: 90:4f:d4:fd:86:6c:56:7e:8d:bf:57:c9:2b:33:aa:e8:54:1f: 39:a5:cd:0e:32:08:31:e9:5a:90:4d:6d:8f:6c:cc:54:54:72: d9:47:20:88:63:6f:2e:24:fa:25:a8:15:59:2e:40:f5:99:42: a6:d9:79:db:ec:8e:51:d6:17:53:ca:b0:6f:15:40:31:5b:a9: 2a:7c:ae:ba:05:df:8e:53:aa:f6:1c:bf:9e:fa:a8:6d:db:b4: bf:31:20:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wPwpH7OWTaCIxP9TMuGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3 NTJmYTIwHhcNMjUxMjA3MDMwMDMzWhcNMjUxMjA4MDMwMDMzWjAzMTEwLwYDVQQD EyhmMDdkYWU3MjcwNmI1ODNlZmY3MWRlYmNjNWRkZDc1MWI3ZDEzYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPBEIqaCiAB5shJ/iQJxvt8egvhF qj/JS3FoJg+pbWBfc2U+L64ecmIDIvDofgCpj9TU8zBukuzP3PmElAmPGoKIHN2t WB/Plkkk33ikwNlbGyjUJForK5UcYpLk070B8JrJ3mjIP7OB6XrjjbZagb4zNpmV WOtlUItzMLgrgqaujr8qVbivaHP7yLty6apCBMwpFTO99+gAskaYaBt2SMES8x6Z Wqr8Nug8qFC1rYAQVwGEOgyF2xdQyZJdxDMJb/PuFDDEBKfbJu/1bIVr3QPC7XpT RCyiLx4QVd3KcKvszAO1SYfYZxy/ooFu8ztuqs17YUAU20mRpR4kDio7UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB9rnJwa1g+/3HevMXd11G30TqJMB8GA1UdIwQY MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4 LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqU7NJJR xBU0iAHUpJ+zUYVxMl5cnxq18w9eswwWOCatP3z5YS9EKeDka+J1HfQ7VdESN/Jr 3odccL6lxk5uFuFxyRhbKE1op0E+4Z8cZnp8Mn0dgps0lLkRq3WsRJjfyu0EFO/f lt8UfxpZh2EUlQtasxDoWUGkYgWcWrgheJ65/RROlhaYS3ePxWqNW9oJzKnPS386 CWrculSIdfszmiBDkE/U/YZsVn6Nv1fJKzOq6FQfOaXNDjIIMelakE1tj2zMVFRy 2UcgiGNvLiT6JagVWS5A9ZlCptl52+yOUdYXU8qwbxVAMVupKnyuugXfjlOq9hy/ nvqobdu0vzEgDA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:40 2025 by rpki-client