This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json) Hash identifier: fIGDbq7jZUpGUxBprNtx6EVXq3/K5u81pySkPZQ0u50= Subject key identifier: 88:EB:54:F6:37:01:65:EB:BA:74:19:BC:80:33:BF:E3:E4:FC:28:67 Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847 Certificate serial: 019AF4D28B034D8C23A38D1569134815FA7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 18:00:30 +0000 Manifest this update: Sat 06 Dec 2025 18:00:30 +0000 Manifest next update: Sun 07 Dec 2025 18:00:30 +0000 Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=) 2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: +0pQMEE6uZAVx8UPKXiGdCJca3wkVy8I0KbJjjFGC/g=) 3: SvUe214QH6Ya-cuQjZkktKdtLlE.roa (hash: owxUW7VWw73BMkoM79NT87230Ehd2e45uip4EamL7jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:8b:03:4d:8c:23:a3:8d:15:69:13:48:15:fa:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847 Validity Not Before: Dec 6 18:00:30 2025 GMT Not After : Dec 7 18:00:30 2025 GMT Subject: CN=88eb54f6370165ebba7419bc8033bfe3e4fc2867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8f:be:b3:5b:75:6f:92:fd:f5:68:4c:ad:2a: ff:a0:1a:b3:57:8e:67:17:e9:48:9c:ce:45:0c:dd: e2:68:b1:22:ee:32:81:9e:45:4c:2f:f2:01:27:3a: d6:df:dd:c2:11:26:75:1c:f1:da:8a:41:30:d2:f2: 87:56:34:b3:0e:44:78:e0:4d:a8:72:9e:25:e0:f0: 78:88:78:15:d7:c4:0d:9a:e3:34:48:4b:f9:36:76: 54:8c:d9:b0:f8:a4:21:1d:37:3f:51:23:89:e2:37: 4c:07:2c:93:2a:1a:3b:72:a2:ec:82:29:4d:97:3a: 43:da:4e:93:33:fd:61:ce:6c:44:3d:fa:5c:08:74: ac:3a:20:65:76:b5:35:c8:b7:87:5d:81:b8:f7:a6: 07:dd:b3:0e:64:28:3f:ae:bc:f0:00:c5:70:90:8a: 70:74:c8:38:23:d1:a6:fa:72:1a:6e:df:39:8b:7c: c6:4c:6a:e9:74:04:64:09:fb:c9:60:f3:e5:35:94: 94:e9:a7:7c:7b:b1:64:ec:f9:c3:02:a0:e9:2d:39: ac:4a:79:01:32:11:70:72:9e:23:46:34:24:84:42: 56:ef:5f:df:79:83:f5:3c:a5:b9:44:11:4b:6b:1f: b0:c0:26:41:dd:3d:ff:4c:0a:65:59:ff:b7:01:8a: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EB:54:F6:37:01:65:EB:BA:74:19:BC:80:33:BF:E3:E4:FC:28:67 X509v3 Authority Key Identifier: keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b2:b6:0d:f7:02:0b:74:b0:ef:81:ed:a4:d6:bf:65:ce:6e: 9b:9e:05:91:cd:ec:bb:b7:d4:f1:d0:9a:c1:5c:08:38:0c:1b: 27:d5:de:64:b6:26:a8:e1:60:24:e3:86:48:3a:d3:07:0b:4c: f5:91:2f:3e:52:6a:38:d9:55:0c:2a:37:cb:61:52:4d:24:d8: d7:3e:54:0e:6d:37:5e:91:c4:0e:cf:37:12:05:8f:f3:9c:6c: 23:62:b0:46:4e:66:7f:a5:0f:48:6c:f6:fd:7b:8f:0b:76:7f: 5f:49:cf:4e:31:7f:8e:01:54:cd:6c:81:ac:d8:0f:96:a8:f6: 5b:40:c5:a3:8f:ef:f0:02:13:3f:ff:cd:51:a5:be:6a:f4:b9: 74:38:4a:c5:53:7c:01:6c:d9:e5:fe:2d:a0:5b:65:66:e9:e5: db:3c:d6:52:99:f0:c4:c5:27:a0:2a:6e:46:67:c2:8f:ca:11: b5:52:74:8c:de:bd:b8:e3:a7:e8:e4:c2:39:7d:5f:b4:96:5a: c9:9d:f0:52:c7:b2:44:f3:0d:bb:65:d4:fc:6e:9f:60:05:da: 56:02:1f:63:8b:de:2a:0b:6d:f4:d7:b9:07:45:f6:3c:5c:b0: e1:db:d2:0c:97:4e:8e:65:bc:e3:7a:9b:32:29:d5:37:23:ba: 97:36:08:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00osDTYwjo40VaRNIFfp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0 ZTg4NDcwHhcNMjUxMjA2MTgwMDMwWhcNMjUxMjA3MTgwMDMwWjAzMTEwLwYDVQQD Eyg4OGViNTRmNjM3MDE2NWViYmE3NDE5YmM4MDMzYmZlM2U0ZmMyODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4++s1t1b5L99WhMrSr/oBqzV45n F+lInM5FDN3iaLEi7jKBnkVML/IBJzrW393CESZ1HPHaikEw0vKHVjSzDkR44E2o cp4l4PB4iHgV18QNmuM0SEv5NnZUjNmw+KQhHTc/USOJ4jdMByyTKho7cqLsgilN lzpD2k6TM/1hzmxEPfpcCHSsOiBldrU1yLeHXYG496YH3bMOZCg/rrzwAMVwkIpw dMg4I9Gm+nIabt85i3zGTGrpdARkCfvJYPPlNZSU6ad8e7Fk7PnDAqDpLTmsSnkB MhFwcp4jRjQkhEJW71/feYP1PKW5RBFLax+wwCZB3T3/TAplWf+3AYpgzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjrVPY3AWXrunQZvIAzv+Pk/ChnMB8GA1UdIwQY MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrK2DfcC C3Sw74HtpNa/Zc5um54Fkc3su7fU8dCawVwIOAwbJ9XeZLYmqOFgJOOGSDrTBwtM 9ZEvPlJqONlVDCo3y2FSTSTY1z5UDm03XpHEDs83EgWP85xsI2KwRk5mf6UPSGz2 /XuPC3Z/X0nPTjF/jgFUzWyBrNgPlqj2W0DFo4/v8AITP//NUaW+avS5dDhKxVN8 AWzZ5f4toFtlZunl2zzWUpnwxMUnoCpuRmfCj8oRtVJ0jN69uOOn6OTCOX1ftJZa yZ3wUseyRPMNu2XU/G6fYAXaVgIfY4veKgtt9Ne5B0X2PFyw4dvSDJdOjmW843qb MinVNyO6lzYISw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:44 2025 by rpki-client