This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json) Hash identifier: /rvKVNGc5mE32VWtgMzBurH6Ks9XlS+FxErphCCuQ1o= Subject key identifier: 8F:12:ED:86:70:58:FB:C2:F7:BA:9B:68:3B:AB:4C:E9:DB:A0:4B:CF Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Certificate serial: 019AF19B865964CCD279FFFBB91EAE68056E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft Manifest number: 1244 Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=) 2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: alZxl/eEA9KdbO7fAY9o3BkGxks10fDeBMm1MJ75Wrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:86:59:64:cc:d2:79:ff:fb:b9:1e:ae:68:05:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=8f12ed867058fbc2f7ba9b683bab4ce9dba04bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:0c:da:f7:38:59:4d:36:18:da:7d:89:75: d1:51:ab:a5:21:da:13:17:57:a7:e5:76:f8:2b:47: de:e3:07:f3:3b:0e:7f:a3:f4:02:83:48:ba:6f:9e: 83:c0:ba:79:e9:44:1b:6f:43:b6:eb:d7:07:96:0d: df:6f:15:51:02:00:9c:e4:21:b1:0e:ef:21:b3:23: 7d:73:22:9b:90:6d:03:84:82:b6:21:4a:fd:f0:b6: 03:53:0b:da:ed:00:f9:23:d2:69:b2:86:4b:5a:39: f1:2f:70:5c:7e:b6:99:48:9b:75:e9:ac:e3:fb:19: 53:38:b3:5a:0a:03:c4:36:b6:47:fd:8e:b5:22:19: 62:77:f2:69:c6:36:a5:02:33:b3:b3:d1:e9:35:04: cd:56:ba:c9:60:27:e4:92:38:61:a9:28:8c:b8:cb: 7a:72:14:0f:18:ba:b8:3a:a5:00:9b:8b:08:00:d8: 56:21:1e:da:1f:7e:5f:6b:9b:b3:0f:ee:f1:fd:0d: 7d:dc:bc:a9:76:60:fd:53:d8:14:9c:89:10:b0:86: 1f:56:8b:2d:05:c5:3c:d6:12:95:d4:55:a1:16:82: d2:6b:92:75:68:cc:1f:96:78:3f:7c:9b:d3:af:9b: b4:2e:a6:7d:62:a5:5d:30:d9:57:72:cb:1b:23:be: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:12:ED:86:70:58:FB:C2:F7:BA:9B:68:3B:AB:4C:E9:DB:A0:4B:CF X509v3 Authority Key Identifier: keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ea:78:96:91:fa:b0:da:e2:27:0f:a8:55:bd:9b:ed:2a:72: 6d:19:a7:89:d2:2d:18:a5:a0:8a:c5:8c:88:78:b3:dd:a5:f9: 5a:05:4a:46:06:f1:a7:0c:7a:fc:35:68:f9:8d:bd:d3:af:d0: 2d:1c:b7:96:d2:04:c2:1f:9f:7d:2c:a3:e9:22:f2:ee:13:b3: a7:5f:e6:29:9f:a3:91:0f:5a:e4:d2:e6:fe:fe:fa:6a:8c:a9: c6:08:f2:ad:90:21:ea:8c:7e:ab:06:62:96:c1:16:37:99:e6: e6:7a:42:02:31:72:e9:f6:e3:6f:01:6c:54:14:22:6b:fd:dc: c6:91:df:98:5a:b8:c1:92:b0:33:66:2b:70:8c:2c:54:33:0c: a3:21:b3:ae:bc:f8:ea:97:36:85:df:8a:4b:48:18:74:25:19: ae:62:70:ff:80:0b:3f:92:82:48:7e:2c:b6:4d:19:3b:81:85: 0e:e4:39:f0:09:de:b8:fc:c5:cc:8c:f5:43:dd:d7:61:fd:b8: 14:4f:95:9b:a9:00:75:66:66:15:26:f1:e0:6f:06:38:9b:b2: f2:4b:b6:1c:e2:5c:86:cf:f1:2c:1b:ef:86:bc:88:87:59:dc: b8:22:15:cd:78:eb:ca:d9:a9:c8:59:7c:66:ea:ad:21:c2:3c: c3:44:cf:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4ZZZMzSef/7uR6uaAVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh OWRiM2QwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD Eyg4ZjEyZWQ4NjcwNThmYmMyZjdiYTliNjgzYmFiNGNlOWRiYTA0YmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHsM2vc4WU02GNp9iXXRUaulIdoT F1en5Xb4K0fe4wfzOw5/o/QCg0i6b56DwLp56UQbb0O269cHlg3fbxVRAgCc5CGx Du8hsyN9cyKbkG0DhIK2IUr98LYDUwva7QD5I9JpsoZLWjnxL3BcfraZSJt16azj +xlTOLNaCgPENrZH/Y61Ihlid/JpxjalAjOzs9HpNQTNVrrJYCfkkjhhqSiMuMt6 chQPGLq4OqUAm4sIANhWIR7aH35fa5uzD+7x/Q193LypdmD9U9gUnIkQsIYfVost BcU81hKV1FWhFoLSa5J1aMwflng/fJvTr5u0LqZ9YqVdMNlXcssbI76cvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8S7YZwWPvC97qbaDurTOnboEvPMB8GA1UdIwQY MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt YWYxZGUzZDBmMjE3LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3 LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROp4lpH6 sNriJw+oVb2b7SpybRmnidItGKWgisWMiHiz3aX5WgVKRgbxpwx6/DVo+Y2906/Q LRy3ltIEwh+ffSyj6SLy7hOzp1/mKZ+jkQ9a5NLm/v76aoypxgjyrZAh6ox+qwZi lsEWN5nm5npCAjFy6fbjbwFsVBQia/3cxpHfmFq4wZKwM2YrcIwsVDMMoyGzrrz4 6pc2hd+KS0gYdCUZrmJw/4ALP5KCSH4stk0ZO4GFDuQ58AneuPzFzIz1Q93XYf24 FE+Vm6kAdWZmFSbx4G8GOJuy8ku2HOJchs/xLBvvhryIh1ncuCIVzXjrytmpyFl8 ZuqtIcI8w0TPVw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:34 2025 by rpki-client