This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json) Hash identifier: IqAHiJAH996I2pDfKEnhjwdnnVmuIUR9LW2P7g79yII= Subject key identifier: FA:CB:D8:CC:8C:D1:17:60:7D:63:2C:36:CF:70:D4:39:74:10:27:58 Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6 Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6 Certificate serial: 019AF1D2370164EB6D3C006A5338EFE329A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: GFgQ+zXi3ZiKgTBKe6AXFqQMQPM5iIhR9LBmJs3lBGw=) 2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:37:01:64:eb:6d:3c:00:6a:53:38:ef:e3:29:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6 Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=facbd8cc8cd117607d632c36cf70d43974102758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:64:9f:20:c4:0b:c4:89:7a:d9:3a:dc:6d: 11:00:75:2d:d2:b5:6b:22:44:ce:c0:60:2a:10:e3: 6b:92:df:19:cd:71:91:4a:f0:91:70:20:8f:10:7b: 12:c6:21:2f:2e:cb:4f:00:77:71:27:68:2e:e1:9a: 33:bc:16:70:79:b6:b8:4b:c6:19:a2:80:fe:20:ba: 43:02:bd:9e:b1:0b:3d:2d:c9:de:6f:ad:dd:dc:fa: 52:af:5d:14:2d:38:5b:44:43:86:20:9d:44:de:29: eb:ba:63:62:12:ab:94:eb:49:56:ce:43:69:23:4d: fb:55:38:f6:32:c6:f0:82:b1:39:ec:2e:0d:79:02: 4e:ca:a5:63:4f:61:12:cc:e5:54:9e:f8:ac:42:14: e4:7e:e6:f9:aa:16:2b:e9:54:4d:88:5e:58:7e:66: 26:50:2a:de:59:d6:9c:42:a8:70:ff:46:40:e7:05: ab:7d:96:28:ff:7a:68:71:03:a5:29:82:f6:6f:65: e2:e9:2f:99:e9:02:f3:98:f6:17:d4:6b:20:a3:54: c3:5f:d0:f8:35:20:cc:12:7f:12:83:7f:76:8c:fb: bc:bd:96:71:ce:79:b3:fc:0b:62:ab:35:b1:85:59: c5:81:f8:c0:66:6e:fa:3c:9e:b9:b9:bf:0a:90:27: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CB:D8:CC:8C:D1:17:60:7D:63:2C:36:CF:70:D4:39:74:10:27:58 X509v3 Authority Key Identifier: keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:05:e9:93:8b:14:01:7c:c8:10:69:51:2f:97:53:24:2d:fe: 8c:ca:7b:86:f1:ea:52:60:21:91:26:04:84:88:a5:ef:44:f9: a8:b3:8c:c2:2c:56:cf:a9:cc:1d:bb:d7:f3:42:da:ea:94:18: 64:5e:bf:ad:b5:57:18:cf:a1:fb:3a:3d:f5:67:fc:46:ed:08: 2f:f7:2a:0e:4e:b5:92:08:f8:5c:3e:55:95:6f:f0:f3:4b:26: 59:20:61:09:e8:48:93:5d:a5:0f:ed:5a:77:c6:fa:1b:2a:ea: 9a:4f:41:97:a1:5f:93:49:d9:4c:c1:f9:70:8d:14:4c:c2:13: c7:96:12:f1:48:42:a2:1f:6c:c2:58:f4:58:e3:f6:4a:8d:9d: 84:6c:44:5e:91:af:d1:ad:d9:ec:b6:85:8d:75:35:11:8f:ee: 07:fe:29:7d:01:67:8b:ae:ba:f6:17:97:2c:5b:f6:c9:23:0d: 38:68:69:45:07:e1:47:8b:30:d9:ce:ec:91:ba:22:93:11:e6: cf:d3:9a:78:67:e2:ec:b0:de:d4:69:f1:80:e5:92:c4:4d:2f: 17:03:a1:a1:1f:16:44:af:39:68:3b:c2:9e:cf:4c:75:99:cd: 66:55:09:ce:a6:16:ac:39:bb:6f:b0:8e:56:6c:eb:51:ee:99: 6a:3d:91:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jcBZOttPABqUzjv4ymoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjQxZmFiM2U2M2VhZjViZGYwNzE2NmRmNWFhNjgxNjJl YWQ3YTYwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EyhmYWNiZDhjYzhjZDExNzYwN2Q2MzJjMzZjZjcwZDQzOTc0MTAyNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUJknyDEC8SJetk63G0RAHUt0rVr IkTOwGAqEONrkt8ZzXGRSvCRcCCPEHsSxiEvLstPAHdxJ2gu4ZozvBZweba4S8YZ ooD+ILpDAr2esQs9Lcneb63d3PpSr10ULThbREOGIJ1E3inrumNiEquU60lWzkNp I037VTj2MsbwgrE57C4NeQJOyqVjT2ESzOVUnvisQhTkfub5qhYr6VRNiF5YfmYm UCreWdacQqhw/0ZA5wWrfZYo/3pocQOlKYL2b2Xi6S+Z6QLzmPYX1Gsgo1TDX9D4 NSDMEn8Sg392jPu8vZZxznmz/AtiqzWxhVnFgfjAZm76PJ65ub8KkCdg7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrL2MyM0RdgfWMsNs9w1Dl0ECdYMB8GA1UdIwQY MBaAFIj0H6s+Y+r1vfBxZt9apoFi6temMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMt ODk3Y2I2YTQzMGQ3LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMtODk3Y2I2YTQzMGQ3 LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgXpk4sU AXzIEGlRL5dTJC3+jMp7hvHqUmAhkSYEhIil70T5qLOMwixWz6nMHbvX80La6pQY ZF6/rbVXGM+h+zo99Wf8Ru0IL/cqDk61kgj4XD5VlW/w80smWSBhCehIk12lD+1a d8b6Gyrqmk9Bl6Ffk0nZTMH5cI0UTMITx5YS8UhCoh9swlj0WOP2So2dhGxEXpGv 0a3Z7LaFjXU1EY/uB/4pfQFni6669heXLFv2ySMNOGhpRQfhR4sw2c7skboikxHm z9OaeGfi7LDe1GnxgOWSxE0vFwOhoR8WRK85aDvCns9MdZnNZlUJzqYWrDm7b7CO VmzrUe6Zaj2RpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:45 2025 by rpki-client