This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json) Hash identifier: Ye8eryzTBZWC8F/4cTgSOFXgM04nnqXdi1ggN8CNUcU= Subject key identifier: B5:A3:3A:63:AF:E7:04:46:09:E6:DA:0A:71:00:CC:66:E0:2B:FC:CD Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3 Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3 Certificate serial: 019AF2ADE666B6E462AD35E5C1567BC3467F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft Manifest number: 0FC9 Signing time: Sat 06 Dec 2025 08:01:14 +0000 Manifest this update: Sat 06 Dec 2025 08:01:14 +0000 Manifest next update: Sun 07 Dec 2025 08:01:14 +0000 Files and hashes: 1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: nAv/6hob9kugOeymaBUCC5f6DVC8mWkTrf3CE+ugyx4=) 2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e6:66:b6:e4:62:ad:35:e5:c1:56:7b:c3:46:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3 Validity Not Before: Dec 6 08:01:14 2025 GMT Not After : Dec 7 08:01:14 2025 GMT Subject: CN=b5a33a63afe7044609e6da0a7100cc66e02bfccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:93:b3:65:10:e5:df:9e:fb:47:25:fd:f3: 76:f1:12:6d:e8:1d:26:8d:bc:95:6d:aa:a6:d3:1c: 0f:2d:83:21:5c:d8:35:ba:b9:ab:d9:74:34:2d:86: 6e:59:8b:3d:cc:cf:98:2f:bd:18:1e:28:58:32:aa: 81:07:67:42:14:c2:f4:75:ae:42:a8:31:1d:aa:01: 7d:80:6b:60:78:78:45:28:d6:ec:73:b6:ce:1c:63: c1:95:cb:11:42:74:72:39:35:a6:dd:9a:c7:21:80: 83:cb:44:e9:00:7a:8a:50:ae:64:6c:0a:f9:50:b3: 1e:a2:ea:d7:43:5f:1d:63:96:8e:3c:d7:6b:a8:97: 77:f9:11:05:fd:c0:d0:71:de:f5:cf:c0:9e:0d:3b: eb:39:73:ff:f6:31:e9:50:f9:4b:1f:52:e7:e3:3d: 4b:80:76:ca:26:79:e2:61:21:b8:72:a9:dd:82:2f: 1c:d9:a0:53:78:84:4f:7d:a5:2b:5d:e0:73:21:18: d8:74:99:f9:6c:a0:2c:a8:77:6f:b9:88:21:fc:e5: 0b:c4:de:bf:42:bb:1c:16:12:ec:80:41:8f:06:18: 9f:35:10:53:c6:ad:f2:d7:32:49:75:ef:9e:6c:e8: 2f:88:4e:90:7c:f0:92:52:a0:16:9a:81:c2:a8:e4: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A3:3A:63:AF:E7:04:46:09:E6:DA:0A:71:00:CC:66:E0:2B:FC:CD X509v3 Authority Key Identifier: keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:51:95:2d:ee:e7:df:2e:c1:01:9a:7e:60:22:e7:04:89:6b: 82:35:c9:a0:01:1f:d8:88:ae:19:e8:a8:05:47:06:e3:0d:15: ed:4a:63:31:99:f4:23:da:5a:27:64:2a:e9:13:9d:d6:76:56: 2e:c4:9f:2c:40:4c:72:2d:38:b6:ab:ad:7f:92:12:4e:f3:ea: 94:21:30:fc:65:7f:fe:73:e2:9e:df:31:b2:66:b7:d4:63:b8: a9:4c:b9:9d:fb:1b:20:1c:bb:4b:aa:2b:70:8a:4a:54:93:a7: 9a:f5:ac:b8:8b:95:20:d9:52:38:51:43:c9:fa:25:a3:0f:3b: 73:9e:65:90:61:af:a8:2a:84:5b:92:4c:26:60:74:ec:76:dd: ff:6e:b0:5f:86:ab:53:7b:ca:48:07:28:34:cb:85:6d:77:81: 93:c6:f0:61:d3:59:c1:06:34:29:2e:6d:dd:ed:84:e2:21:ca: cf:e8:a6:d5:df:d1:ca:82:df:52:f6:60:d5:8f:ea:77:3a:c6: 3b:45:33:28:b4:66:d2:b3:16:40:f9:90:0c:4a:40:94:81:78: ec:11:ff:78:87:a5:8c:00:8d:74:28:4d:8e:3a:23:97:77:c8: 66:c6:4e:a0:e0:02:09:bd:5d:92:bf:65:5e:70:fc:c9:d2:cd: 38:b5:7d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreZmtuRirTXlwVZ7w0Z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDc3MzU1ZGYxMWNkYmY5OTJmOTBkNjdlYWFiOTEwOWFi OGViZjMwHhcNMjUxMjA2MDgwMTE0WhcNMjUxMjA3MDgwMTE0WjAzMTEwLwYDVQQD EyhiNWEzM2E2M2FmZTcwNDQ2MDllNmRhMGE3MTAwY2M2NmUwMmJmY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheOTs2UQ5d+e+0cl/fN28RJt6B0m jbyVbaqm0xwPLYMhXNg1urmr2XQ0LYZuWYs9zM+YL70YHihYMqqBB2dCFML0da5C qDEdqgF9gGtgeHhFKNbsc7bOHGPBlcsRQnRyOTWm3ZrHIYCDy0TpAHqKUK5kbAr5 ULMeourXQ18dY5aOPNdrqJd3+REF/cDQcd71z8CeDTvrOXP/9jHpUPlLH1Ln4z1L gHbKJnniYSG4cqndgi8c2aBTeIRPfaUrXeBzIRjYdJn5bKAsqHdvuYgh/OULxN6/ QrscFhLsgEGPBhifNRBTxq3y1zJJde+ebOgviE6QfPCSUqAWmoHCqOQlEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWjOmOv5wRGCebaCnEAzGbgK/zNMB8GA1UdIwQY MBaAFCEHc1XfEc2/mS+Q1n6quRCauOvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjct NDNiZjY1NWYzMzY1LzEvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjctNDNiZjY1NWYzMzY1 LzEvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVGVLe7n 3y7BAZp+YCLnBIlrgjXJoAEf2IiuGeioBUcG4w0V7UpjMZn0I9paJ2Qq6ROd1nZW LsSfLEBMci04tqutf5ISTvPqlCEw/GV//nPint8xsma31GO4qUy5nfsbIBy7S6or cIpKVJOnmvWsuIuVINlSOFFDyfolow87c55lkGGvqCqEW5JMJmB07Hbd/26wX4ar U3vKSAcoNMuFbXeBk8bwYdNZwQY0KS5t3e2E4iHKz+im1d/RyoLfUvZg1Y/qdzrG O0UzKLRm0rMWQPmQDEpAlIF47BH/eIeljACNdChNjjojl3fIZsZOoOACCb1dkr9l XnD8ydLNOLV9Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:04 2025 by rpki-client