This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json) Hash identifier: 4oU3JZSSmqld1pczlwSJNg/lxs0c1hS/feGh/k9Xo6I= Subject key identifier: 33:76:AF:BB:E0:19:93:6C:A1:D0:63:6E:FB:5A:20:8E:C3:AB:0F:11 Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf Certificate serial: 019AF5E6192F377895980C2321632DF0CF68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft Manifest number: 0E20 Signing time: Sat 06 Dec 2025 23:01:28 +0000 Manifest this update: Sat 06 Dec 2025 23:01:28 +0000 Manifest next update: Sun 07 Dec 2025 23:01:28 +0000 Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: oGOkSmRCl/r4bMK5GaKxGCmyqLsCfIx8XFExPg/TQw0=) 2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:19:2f:37:78:95:98:0c:23:21:63:2d:f0:cf:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf Validity Not Before: Dec 6 23:01:28 2025 GMT Not After : Dec 7 23:01:28 2025 GMT Subject: CN=3376afbbe019936ca1d0636efb5a208ec3ab0f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:01:9f:e2:ff:31:6b:e4:64:58:9f:5c:2d: 73:cf:e4:2a:0f:29:a6:24:6b:6e:78:60:1f:1e:da: fd:a6:5e:bd:63:d2:79:fa:d4:1e:62:c9:c7:2c:c6: 67:a5:d3:60:13:2a:51:61:e5:96:f7:60:c7:f0:27: da:43:e7:75:8d:09:6f:62:70:f0:29:b5:9c:39:a8: 3c:39:4c:9f:39:32:cd:58:df:de:c6:3b:65:ae:57: fa:c4:e8:a1:f4:e6:19:49:d7:1f:69:66:ac:5e:46: 2e:13:a4:9e:d6:0d:8e:81:2b:e9:64:3b:1d:7b:68: 78:7e:fc:27:2b:e3:bb:2b:3d:32:e4:bc:5e:df:9b: 98:4e:79:09:d2:68:b0:77:b5:7a:7a:8b:e1:9c:e8: 51:ad:56:5e:c9:fd:2c:fd:12:50:5a:cd:95:71:0a: 45:44:60:f4:fd:03:b0:73:e4:e7:55:6b:42:ac:17: 86:2c:31:e2:a9:bd:7b:fe:a4:05:a2:f1:6f:b6:be: 3b:d5:38:31:d1:92:53:d9:2b:7f:b1:f4:42:bc:84: b9:9f:db:11:64:9d:c3:49:f9:37:4a:41:51:05:5c: 07:d3:f2:b5:23:96:1c:e0:38:1f:5c:0f:40:7b:cf: e7:9d:49:a9:89:26:12:b5:e4:3e:6b:cf:7c:3e:a2: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:76:AF:BB:E0:19:93:6C:A1:D0:63:6E:FB:5A:20:8E:C3:AB:0F:11 X509v3 Authority Key Identifier: keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:02:8f:f0:ee:82:9e:b0:2e:7b:c5:28:5a:8f:35:38:70:61: 29:50:59:34:d1:69:09:04:12:b3:03:3c:ab:1f:63:1f:da:9c: 5c:1b:4e:5e:fb:4e:3d:0c:87:1c:5a:3a:bb:11:41:76:fc:5e: be:4d:5c:c4:d9:6f:69:2d:85:5a:8a:90:b3:c3:25:ab:6d:50: 92:e1:47:2f:69:12:e5:03:e9:9a:29:5c:9c:80:d9:2b:34:2f: 65:39:68:5c:ec:a6:10:0f:f7:20:3e:f7:2b:6e:9b:8a:90:96: de:af:b4:33:fe:62:f5:7d:ec:37:52:bd:a0:bd:87:40:86:be: 0f:ee:b9:30:ec:ff:9e:15:09:55:e1:2e:aa:6a:fa:97:95:82: 9f:1f:09:8c:02:12:83:2b:a7:1c:24:b9:5d:87:37:bf:81:8f: 84:0c:86:be:03:8c:68:99:ac:f5:6f:41:d6:86:aa:81:52:58: 29:0b:e6:b7:90:94:38:66:ba:03:f7:62:85:af:10:e6:bd:cb: b9:16:bd:d6:b0:5e:f0:12:dc:13:7f:02:71:09:28:53:f9:8d: 63:2d:9b:b2:c4:bf:1e:cd:ce:f1:73:7c:a2:54:d9:35:a2:de: 3f:10:35:14:5c:6d:0e:1d:f1:c5:09:85:66:2c:cf:25:7b:27: eb:19:51:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15hkvN3iVmAwjIWMt8M9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDFmNDM5ZGViYWZmNTg4MDM5NWQ3OGYwYmJmYWQ4Y2E3 NjA4YmYwHhcNMjUxMjA2MjMwMTI4WhcNMjUxMjA3MjMwMTI4WjAzMTEwLwYDVQQD EygzMzc2YWZiYmUwMTk5MzZjYTFkMDYzNmVmYjVhMjA4ZWMzYWIwZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AwBn+L/MWvkZFifXC1zz+QqDymm JGtueGAfHtr9pl69Y9J5+tQeYsnHLMZnpdNgEypRYeWW92DH8CfaQ+d1jQlvYnDw KbWcOag8OUyfOTLNWN/exjtlrlf6xOih9OYZSdcfaWasXkYuE6Se1g2OgSvpZDsd e2h4fvwnK+O7Kz0y5Lxe35uYTnkJ0miwd7V6eovhnOhRrVZeyf0s/RJQWs2VcQpF RGD0/QOwc+TnVWtCrBeGLDHiqb17/qQFovFvtr471Tgx0ZJT2St/sfRCvIS5n9sR ZJ3DSfk3SkFRBVwH0/K1I5Yc4DgfXA9Ae8/nnUmpiSYSteQ+a898PqKWeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN2r7vgGZNsodBjbvtaII7Dqw8RMB8GA1UdIwQY MBaAFCEB9Dneuv9YgDldePC7+tjKdgi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgt ZTNkZWZiN2UyNTE4LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgtZTNkZWZiN2UyNTE4 LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQKP8O6C nrAue8UoWo81OHBhKVBZNNFpCQQSswM8qx9jH9qcXBtOXvtOPQyHHFo6uxFBdvxe vk1cxNlvaS2FWoqQs8Mlq21QkuFHL2kS5QPpmilcnIDZKzQvZTloXOymEA/3ID73 K26bipCW3q+0M/5i9X3sN1K9oL2HQIa+D+65MOz/nhUJVeEuqmr6l5WCnx8JjAIS gyunHCS5XYc3v4GPhAyGvgOMaJms9W9B1oaqgVJYKQvmt5CUOGa6A/diha8Q5r3L uRa91rBe8BLcE38CcQkoU/mNYy2bssS/Hs3O8XN8olTZNaLePxA1FFxtDh3xxQmF ZizPJXsn6xlRpg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:11:54 2025 by rpki-client