This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: evwZmrBchwuB75j+mc8zX5rwURwvpIWc4WkVQBtzpo8= Subject key identifier: BC:F2:DD:75:6E:D8:97:6E:AA:7E:B5:F4:C2:85:8B:0C:02:5F:ED:BF Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019AF163F7355D8D1F0C402B52F098642331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 14CF Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: 3ItpN6feGjO7UN2dRcjYM0AArZ8.roa (hash: yWi2Tk1o0zmHp1TWp1hxn+lJhdrn/9G1rnKPAwuzeV0=) 2: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 3: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 4: FQHihBoOniwmQDmO0mdn4_kxToc.roa (hash: 8vbCj1IjkktKKef6bhqcB4alSOP8znsRoac6a6VJZpM=) 5: H85sOAhghTea9a0fF7V97F8PmPU.roa (hash: 2OxoGkdCVVcRfuQOFsn/tuCAYUwqPM6hV+wTzXUpbKk=) 6: HLAFzpF1dtaNSAOxEl-uHrb_wcg.roa (hash: PtoSILiXlrGyGsA1CVrSehyontCCBay4De7QPXIkVlI=) 7: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: rvNBn2vOlKXzgiOLcF9j+C2Z34e9qQq0XcZinhgrp0o=) 8: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 9: NIsfNrgr61FvPf7cYDhBUlhxHyo.roa (hash: erf8aKvQjphq5ECHQpzvwfDmeIXYw4ufNsUCtqSAry4=) 10: O0dA6ORgAzDqkWmj1R355BHaTrI.roa (hash: 296lT6a3xrMsAitqkt1Jep7cJYB5SeLJP2n68zngwhU=) 11: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 12: bappW0a76vCPpE7es6c1mZAIjsM.roa (hash: cqG7BmBZANbhw2q44YhM+SIY2oACb3Cf8jR7Of0U21w=) 13: cxQurBlwQD8hDJHQVVeiU45NqWk.roa (hash: QtyAVyz8VfvE5j6ThLPcJgfpQ0JNwulpFn47sHfnMPY=) 14: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 15: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 16: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 17: yfM2MaiTfFDOsvvuc9oTKlnjCok.roa (hash: XLeVu8EohnDcMakSxmYm/IQDDAg+4NcTPBIPIC2LLwk=) 18: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (hash: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f7:35:5d:8d:1f:0c:40:2b:52:f0:98:64:23:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=bcf2dd756ed8976eaa7eb5f4c2858b0c025fedbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:42:e2:ca:d1:17:91:9d:47:46:38:31:99: 66:74:bc:fb:8f:84:30:77:eb:ba:5f:61:d3:53:af: 25:2e:bd:06:a9:c6:dc:ac:1e:a0:28:a8:d4:b5:1d: c7:8b:91:99:87:ee:d5:65:31:53:ab:7d:83:c6:fd: 2e:9f:d4:1d:b6:14:50:ec:14:32:4e:53:3f:92:c3: 5f:84:4b:38:79:09:66:23:c3:9c:6b:41:a0:02:01: c4:65:7d:11:77:1d:2e:42:52:c6:b9:2c:91:d3:14: 9c:27:cc:51:21:40:5a:cf:c1:58:9c:9f:5a:18:1c: 65:bd:5f:37:c8:49:5c:06:81:99:94:f9:c0:de:56: 22:b9:ff:2d:d9:31:b9:c9:eb:2f:7a:20:a0:88:3d: b1:7b:9a:54:b9:6f:f3:ba:de:69:8f:40:c7:6b:54: 30:bb:01:57:36:3d:d7:8a:35:8b:68:90:95:99:30: f5:a4:a4:6b:21:aa:83:a8:01:5e:fc:52:aa:9c:f1: 29:36:0b:e9:fd:50:7b:35:ed:d0:77:5d:c8:90:f8: 1c:4f:c2:00:a0:f7:2e:93:2f:8b:3b:f4:d0:ac:7c: 25:e7:8e:57:26:07:aa:06:6f:d5:89:ba:ed:42:d1: ec:1d:e9:6e:ee:1f:33:80:4a:cf:a7:c5:17:fb:9d: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F2:DD:75:6E:D8:97:6E:AA:7E:B5:F4:C2:85:8B:0C:02:5F:ED:BF X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:69:be:e5:ae:65:84:15:22:2a:ae:be:50:6d:f7:f2:10:a7: 58:c5:8f:5d:c3:fa:ce:11:bd:7c:59:26:39:de:36:0d:91:57: 64:68:a5:ab:34:c7:e7:47:18:4a:02:11:79:0d:48:ea:3e:6b: 25:81:a6:00:5e:d3:42:eb:f3:c0:f5:3c:4c:d8:c2:6a:14:97: d8:04:38:e8:0b:df:b8:20:f1:82:b5:a4:24:6f:f4:40:84:b5: a0:fd:86:5c:c3:1a:0c:49:4e:9f:48:37:8b:08:5c:7a:0a:2b: 1b:b3:ea:8a:e3:0b:51:04:4a:76:c2:8f:4a:74:2e:93:37:7e: a0:f9:3c:c0:79:9f:4b:3b:94:99:e4:e7:53:b3:1d:15:c6:5e: fe:f9:23:63:f1:3d:14:85:47:0a:b2:60:29:4f:ce:79:0a:22: de:fd:7f:36:51:84:f1:6d:8e:d4:65:cb:b5:4d:ed:7e:0a:8c: 74:ce:20:bb:9b:62:ae:ff:76:33:5d:69:bf:4c:c0:30:76:2a: 4d:68:98:81:e7:3d:39:23:06:aa:68:c1:62:c9:1b:86:f7:ae: 99:fe:ca:d8:e3:2b:91:98:b2:15:53:bb:d7:9c:0f:ef:e3:e5: 6f:b7:64:98:8d:11:38:bc:b2:ff:3a:4c:59:47:1c:c6:81:06: 50:a1:30:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/c1XY0fDEArUvCYZCMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EyhiY2YyZGQ3NTZlZDg5NzZlYWE3ZWI1ZjRjMjg1OGIwYzAyNWZlZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cxC4srRF5GdR0Y4MZlmdLz7j4Qw d+u6X2HTU68lLr0GqcbcrB6gKKjUtR3Hi5GZh+7VZTFTq32Dxv0un9QdthRQ7BQy TlM/ksNfhEs4eQlmI8Oca0GgAgHEZX0Rdx0uQlLGuSyR0xScJ8xRIUBaz8FYnJ9a GBxlvV83yElcBoGZlPnA3lYiuf8t2TG5yesveiCgiD2xe5pUuW/zut5pj0DHa1Qw uwFXNj3XijWLaJCVmTD1pKRrIaqDqAFe/FKqnPEpNgvp/VB7Ne3Qd13IkPgcT8IA oPcuky+LO/TQrHwl545XJgeqBm/VibrtQtHsHelu7h8zgErPp8UX+53LNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzy3XVu2Jduqn619MKFiwwCX+2/MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWm+5a5l hBUiKq6+UG338hCnWMWPXcP6zhG9fFkmOd42DZFXZGilqzTH50cYSgIReQ1I6j5r JYGmAF7TQuvzwPU8TNjCahSX2AQ46AvfuCDxgrWkJG/0QIS1oP2GXMMaDElOn0g3 iwhcegorG7PqiuMLUQRKdsKPSnQukzd+oPk8wHmfSzuUmeTnU7MdFcZe/vkjY/E9 FIVHCrJgKU/OeQoi3v1/NlGE8W2O1GXLtU3tfgqMdM4gu5tirv92M11pv0zAMHYq TWiYgec9OSMGqmjBYskbhveumf7K2OMrkZiyFVO715wP7+Plb7dkmI0ROLyy/zpM WUccxoEGUKEw8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:01 2025 by rpki-client