This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json) Hash identifier: IDpW3vN0SHvXyY7mTKKeCbOC5hc6cbB+5HrDxmAXnh0= Subject key identifier: FF:35:67:4A:07:5C:52:06:9C:72:70:E2:E6:92:8E:06:49:D8:47:84 Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847 Certificate serial: 019AF2E4369FED34A409ED57EE08386D7203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=) 2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: zzMHI0PgUJErd25UtwmuBtO2VykeH/s0J3NeEypjFM0=) 3: SvUe214QH6Ya-cuQjZkktKdtLlE.roa (hash: owxUW7VWw73BMkoM79NT87230Ehd2e45uip4EamL7jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:36:9f:ed:34:a4:09:ed:57:ee:08:38:6d:72:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847 Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=ff35674a075c52069c7270e2e6928e0649d84784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:78:6a:22:46:f4:02:79:cc:12:72:14:3d: a6:6e:c3:cd:4e:0f:e0:2e:1f:7b:63:8f:91:85:39: d8:48:e9:0b:c1:13:cd:dc:81:38:b5:f8:92:30:be: 7e:61:07:25:0c:31:55:dd:c1:e6:00:dc:03:70:b1: 8c:d1:3b:31:49:46:da:ab:96:4b:33:b3:ae:03:64: ee:cd:da:f4:38:2e:65:b9:68:24:9c:39:f2:26:81: 7e:e1:47:03:3a:b8:bc:f9:2c:8e:d9:10:51:2c:7a: 24:86:84:ab:56:b5:b5:09:e0:ae:c3:6a:0e:e4:a3: eb:f0:a6:12:4a:5a:d9:29:c6:91:73:99:c0:ca:76: 01:c7:c6:4b:02:04:c7:38:e2:4c:5d:c1:a7:03:0e: 66:44:48:d7:9f:ce:a9:fa:1c:06:c4:bb:f0:f3:ec: 3f:96:54:02:bc:b3:ac:95:23:1c:64:43:46:f3:60: ba:60:90:a0:4a:83:2f:f6:d3:1c:5a:aa:1c:66:39: f6:4d:bb:f4:c2:74:f4:bc:99:d3:49:b9:a7:3a:9e: b7:fc:19:47:d0:85:1e:7a:dd:ed:5b:ca:1c:08:b6: 9e:eb:2c:d6:a6:c5:76:b1:18:47:56:fe:42:c2:04: ec:19:92:03:a6:cf:39:b0:8b:eb:fc:88:bf:85:cd: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:35:67:4A:07:5C:52:06:9C:72:70:E2:E6:92:8E:06:49:D8:47:84 X509v3 Authority Key Identifier: keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:95:ba:dc:c3:27:6a:9c:95:ec:4f:b9:34:7b:71:92:1e:ae: 45:c7:2a:a1:4b:ee:68:32:cb:f2:b1:01:59:48:34:f6:0c:26: 2c:03:27:e7:70:c4:01:38:4e:f5:3b:0d:e3:66:11:f8:23:28: bd:d5:4b:a7:7e:9b:18:30:43:1e:f2:c3:6a:45:68:35:22:ac: ca:91:b0:bb:7b:75:c2:df:d1:6f:54:e0:4f:59:56:b6:af:10: 37:b6:49:ee:ad:99:a3:e3:d2:0a:34:2f:7e:69:93:64:7f:1f: 43:88:d4:af:79:7f:a9:36:0a:e4:78:14:e6:9c:b1:08:32:54: cf:db:67:72:5e:43:16:7f:90:b3:fa:7e:51:82:d0:d6:12:33: 60:c9:88:33:df:77:19:ec:32:b4:33:6a:e1:be:32:f5:c1:b2: f0:33:bb:c6:66:96:ec:a9:1a:f1:85:f0:3d:71:35:1b:03:78: 60:d7:c6:a8:27:0b:bb:17:69:40:e6:e1:db:2b:5d:14:a6:14: 30:dd:0f:73:e4:39:ca:c7:dc:70:09:ab:3f:ba:58:79:54:0c: 91:46:ff:bb:1e:24:ec:2c:ef:cf:aa:8b:31:5c:4f:fc:c0:61: 84:02:56:b2:8b:76:05:37:1b:40:14:4c:c7:bc:94:90:12:44: 9a:f1:3d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5Daf7TSkCe1X7gg4bXIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0 ZTg4NDcwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EyhmZjM1Njc0YTA3NWM1MjA2OWM3MjcwZTJlNjkyOGUwNjQ5ZDg0Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3d4aiJG9AJ5zBJyFD2mbsPNTg/g Lh97Y4+RhTnYSOkLwRPN3IE4tfiSML5+YQclDDFV3cHmANwDcLGM0TsxSUbaq5ZL M7OuA2Tuzdr0OC5luWgknDnyJoF+4UcDOri8+SyO2RBRLHokhoSrVrW1CeCuw2oO 5KPr8KYSSlrZKcaRc5nAynYBx8ZLAgTHOOJMXcGnAw5mREjXn86p+hwGxLvw8+w/ llQCvLOslSMcZENG82C6YJCgSoMv9tMcWqocZjn2Tbv0wnT0vJnTSbmnOp63/BlH 0IUeet3tW8ocCLae6yzWpsV2sRhHVv5CwgTsGZIDps85sIvr/Ii/hc2e9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP81Z0oHXFIGnHJw4uaSjgZJ2EeEMB8GA1UdIwQY MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpW63MMn apyV7E+5NHtxkh6uRccqoUvuaDLL8rEBWUg09gwmLAMn53DEAThO9TsN42YR+CMo vdVLp36bGDBDHvLDakVoNSKsypGwu3t1wt/Rb1TgT1lWtq8QN7ZJ7q2Zo+PSCjQv fmmTZH8fQ4jUr3l/qTYK5HgU5pyxCDJUz9tncl5DFn+Qs/p+UYLQ1hIzYMmIM993 GewytDNq4b4y9cGy8DO7xmaW7Kka8YXwPXE1GwN4YNfGqCcLuxdpQObh2ytdFKYU MN0Pc+Q5ysfccAmrP7pYeVQMkUb/ux4k7Czvz6qLMVxP/MBhhAJWsot2BTcbQBRM x7yUkBJEmvE9cg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:43 2025 by rpki-client