This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json) Hash identifier: uD0xc4TiorujfN5wdF6w36IRy7pQVZQaOjMRcuo6mtw= Subject key identifier: DE:B7:39:51:69:C0:7E:E4:F0:ED:E3:CD:C9:15:CF:B1:64:EF:CF:C7 Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Certificate serial: 019AF42DC8D60A744839D7B79681D4611E33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft Manifest number: 0685 Signing time: Sat 06 Dec 2025 15:00:32 +0000 Manifest this update: Sat 06 Dec 2025 15:00:32 +0000 Manifest next update: Sun 07 Dec 2025 15:00:32 +0000 Files and hashes: 1: 2Ak_ZKziVTI4_3cih9eiYO1viHI.roa (hash: k7qMvcLmVAFsg1jyjo16XzLrDU45d1f2VoPV9JFx5Vw=) 2: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: VLpsgpn3idOB05Vl2oDvOYnKGm6hd14M4N6Mxt8DjOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c8:d6:0a:74:48:39:d7:b7:96:81:d4:61:1e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Validity Not Before: Dec 6 15:00:32 2025 GMT Not After : Dec 7 15:00:32 2025 GMT Subject: CN=deb7395169c07ee4f0ede3cdc915cfb164efcfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:0b:0e:15:47:22:2d:4c:07:43:1f:9e:82: 0c:41:3a:04:dd:3e:bc:8c:83:6a:91:9a:cf:e1:2e: e0:e1:4d:e0:22:97:10:d4:76:99:44:42:8e:a6:3a: 8f:6f:65:7f:44:fa:89:24:ec:58:74:91:08:d5:62: 0d:6d:10:ab:34:33:39:01:18:d8:25:9b:c9:46:9a: a7:63:1d:d3:58:08:c4:28:ae:88:8d:8b:01:bf:6b: 78:e4:a2:e5:fb:db:3d:86:4e:a7:ee:35:ee:85:f7: 04:52:1a:77:8d:78:97:44:7e:e1:71:4b:28:08:11: 3a:e0:fa:bd:58:4f:1b:e5:79:b3:e7:a0:6f:83:26: e1:42:cc:9f:20:7a:ca:0a:dc:7e:1d:04:ca:ce:8f: ba:3f:91:51:93:eb:b7:3c:83:d4:aa:24:1f:5e:bc: 61:0c:8e:ab:2c:b2:0e:23:1c:15:47:af:82:83:a1: d0:b4:97:da:e3:97:54:42:6e:9b:db:67:dd:4d:fe: 11:f3:f8:fa:0b:75:68:54:34:52:e5:53:bb:e2:a5: 5f:d4:ae:73:6c:f3:73:77:39:6b:f9:ab:76:b2:72: 36:91:98:3a:70:cd:b3:b2:ae:e3:e4:94:3f:82:8c: 81:6c:cd:72:6f:8c:4c:ee:c3:7b:b7:11:aa:af:92: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B7:39:51:69:C0:7E:E4:F0:ED:E3:CD:C9:15:CF:B1:64:EF:CF:C7 X509v3 Authority Key Identifier: keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0c:5a:f8:ef:0b:d4:b5:c3:73:fe:67:21:d1:45:9c:f1:8a: 27:16:e3:6b:e4:1b:e2:1c:8b:db:f5:15:31:4d:c1:a7:37:ad: 21:c0:ed:92:c2:fd:e0:69:93:87:02:88:88:00:1c:cb:6c:74: c7:da:ce:95:c9:f1:8b:ff:0f:fd:db:9c:95:5b:ca:48:12:b7: 75:f0:4a:ac:0d:53:6f:a5:0a:38:fc:2f:a9:2a:9e:76:43:6f: 1d:fd:52:68:3a:f9:e1:58:8f:57:1b:6a:23:08:eb:23:82:d1: 5c:bf:cb:92:76:b1:15:55:8d:9f:ca:b7:d3:18:e8:e6:9f:02: 66:d2:27:03:8a:96:a8:fe:12:74:55:1e:41:1f:13:ff:d0:86: b1:40:72:3a:de:81:92:04:e6:ce:25:bd:4f:22:d9:16:f0:d5: 02:69:60:d1:bd:20:a5:39:52:ff:57:a3:56:11:fe:68:c2:eb: df:72:3b:41:58:ad:05:21:e5:fa:12:10:c4:46:5c:87:91:e8: 24:f6:0a:f0:f6:61:10:a1:05:7f:88:a1:e8:b4:69:41:3a:78: 14:dc:1b:40:4b:ad:32:5b:64:e0:5f:5e:b7:e2:a9:9c:d0:50: 1c:4e:50:b8:d7:49:fc:a4:39:10:a4:a8:51:7d:b1:ea:8a:62: 87:f5:ee:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcjWCnRIOde3loHUYR4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2 NWFkMTEwHhcNMjUxMjA2MTUwMDMyWhcNMjUxMjA3MTUwMDMyWjAzMTEwLwYDVQQD EyhkZWI3Mzk1MTY5YzA3ZWU0ZjBlZGUzY2RjOTE1Y2ZiMTY0ZWZjZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw88LDhVHIi1MB0MfnoIMQToE3T68 jINqkZrP4S7g4U3gIpcQ1HaZREKOpjqPb2V/RPqJJOxYdJEI1WINbRCrNDM5ARjY JZvJRpqnYx3TWAjEKK6IjYsBv2t45KLl+9s9hk6n7jXuhfcEUhp3jXiXRH7hcUso CBE64Pq9WE8b5Xmz56BvgybhQsyfIHrKCtx+HQTKzo+6P5FRk+u3PIPUqiQfXrxh DI6rLLIOIxwVR6+Cg6HQtJfa45dUQm6b22fdTf4R8/j6C3VoVDRS5VO74qVf1K5z bPNzdzlr+at2snI2kZg6cM2zsq7j5JQ/goyBbM1yb4xM7sN7txGqr5KbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN63OVFpwH7k8O3jzckVz7Fk78/HMB8GA1UdIwQY MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3 LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgxa+O8L 1LXDc/5nIdFFnPGKJxbja+Qb4hyL2/UVMU3BpzetIcDtksL94GmThwKIiAAcy2x0 x9rOlcnxi/8P/duclVvKSBK3dfBKrA1Tb6UKOPwvqSqedkNvHf1SaDr54ViPVxtq IwjrI4LRXL/LknaxFVWNn8q30xjo5p8CZtInA4qWqP4SdFUeQR8T/9CGsUByOt6B kgTmziW9TyLZFvDVAmlg0b0gpTlS/1ejVhH+aMLr33I7QVitBSHl+hIQxEZch5Ho JPYK8PZhEKEFf4ih6LRpQTp4FNwbQEutMltk4F9et+KpnNBQHE5QuNdJ/KQ5EKSo UX2x6opih/Xuww== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:32 2025 by rpki-client