This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft File: IodymNrl1aO-q8oW6S0aFB6Uhic.mft (raw, json) Hash identifier: eFGlJWg6lwSREoMRaTGATjuiW0RqLOXU52RbrKKmeLc= Subject key identifier: 84:9C:A7:67:D9:92:E7:04:7A:62:2D:79:F7:73:1E:D2:57:19:67:F9 Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627 Certificate serial: 019B416D477F5E9FB26716422EC0BF075E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft Manifest number: 05B3 Signing time: Sun 21 Dec 2025 15:00:39 +0000 Manifest this update: Sun 21 Dec 2025 15:00:39 +0000 Manifest next update: Mon 22 Dec 2025 15:00:39 +0000 Files and hashes: 1: 4qvZpbHlQrEVGaculmgT9y6fbp0.roa (hash: tCJqK90XfNlOzC+CJIY2YiVu1YRsdGe0qc+sYvxZZ4k=) 2: GCeJWQXp53i0_T9Els2HFdD580c.roa (hash: F4jM2A6o7cg7dalyRSsXPRHMxAUn8dJXwNlkzBZKjRk=) 3: Gx7WZJ-NdyF04pUk4gdMYoHuQzk.roa (hash: t6M0KFjILBRmG74F5TahE0UmVDYYLhcbj+iOGjxmViM=) 4: IodymNrl1aO-q8oW6S0aFB6Uhic.crl (hash: WOmA3VqnEXRN02Sna91jn4PvZCWEO/ebJ09b7351hj8=) 5: P8uTVptxd-UGzkymXhOkvbitcEU.roa (hash: 61AnrtiCoFhbr8PK6p0Fhr8c0CNn0nd06ZAGuQwz1l8=) 6: PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa (hash: 8P5RiewFjkqd/eRXG3pkKovd5qsr2E75hTvmlDKbDK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:47:7f:5e:9f:b2:67:16:42:2e:c0:bf:07:5e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627 Validity Not Before: Dec 21 15:00:39 2025 GMT Not After : Dec 22 15:00:39 2025 GMT Subject: CN=849ca767d992e7047a622d79f7731ed2571967f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:43:8b:8b:35:7e:08:67:60:84:1e:9a:2e: 7e:13:c5:9a:a7:e8:48:ea:3e:7d:d1:0a:22:d7:fd: 49:8e:8b:eb:5b:8e:e3:26:ec:b0:8d:27:d2:c2:3e: 12:38:b9:91:e4:8e:3a:a1:63:f7:82:2e:0e:9c:b2: be:b5:cc:f2:d1:02:d3:c9:cb:d8:8b:45:54:56:9b: f2:cd:0e:45:4a:67:86:ad:3b:43:75:f4:db:80:c8: 16:4c:37:93:0a:ea:7a:09:e4:93:c1:ef:d7:00:58: a4:fe:53:14:d1:98:b7:e8:5e:df:8b:15:38:0f:55: f6:18:1f:c7:3f:eb:95:82:b2:19:32:e5:ef:83:06: f2:76:a3:44:b9:74:52:0f:c8:79:fb:38:7a:9e:bf: 01:18:66:18:23:82:7d:a9:38:12:9a:35:44:2a:1d: 4d:79:8a:03:bd:41:e3:fe:f8:f6:b7:ab:8c:47:98: 16:2a:09:31:d5:58:30:95:85:2c:78:4d:2f:62:56: 55:9f:b2:9d:d0:ca:71:ca:d2:60:3d:b5:84:1d:fe: bd:30:8b:0e:a0:b0:35:15:7f:17:99:24:b7:7a:e5: a0:25:d2:38:33:05:a1:34:3e:80:07:1d:2b:9a:2a: ca:df:22:8b:0a:ac:e2:85:79:71:08:5b:29:e9:11: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9C:A7:67:D9:92:E7:04:7A:62:2D:79:F7:73:1E:D2:57:19:67:F9 X509v3 Authority Key Identifier: keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:fc:e0:8b:22:ac:12:21:2a:bf:9e:5a:e0:32:a1:96:f3:d7: 35:01:9d:6f:5d:77:54:34:04:4d:4f:58:b8:6a:46:18:dd:d6: 7a:a0:58:99:a0:50:25:8d:4b:57:ab:1b:e2:0f:68:90:ee:e9: 4c:26:d9:b9:e9:2f:62:73:cb:5f:94:b5:36:cf:79:e5:c9:40: d1:01:4e:f4:20:21:f1:00:f9:a7:8f:f5:c7:20:73:e8:bb:8d: 9b:fc:c8:b3:f5:ce:90:f6:6d:ae:3b:db:d2:b5:50:b7:06:1b: da:19:f6:a6:6c:6d:da:0d:fa:f9:b9:86:9c:fc:5d:f5:79:57: 71:fa:fe:a6:a3:a2:9e:06:65:e4:fe:9d:97:72:1b:20:17:42: c7:54:93:05:39:85:ae:7f:1a:24:00:fe:8b:19:b4:1d:4a:00: 62:34:20:cb:87:a8:72:92:93:5a:14:78:da:14:27:98:ce:8a: f8:d5:62:75:82:ed:29:2a:e1:19:22:8f:e4:e2:d0:59:95:17: e5:a1:ca:65:5a:05:6a:50:74:e2:7b:d1:34:8b:80:68:7d:c3: cf:36:39:1b:82:7f:f1:ee:a6:0e:82:7d:53:33:db:e9:65:61: b2:5c:a1:31:1f:0e:29:75:e6:bc:ef:17:df:f4:8c:2b:0c:92: ae:c7:01:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbUd/Xp+yZxZCLsC/B15JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyODc3Mjk4ZGFlNWQ1YTNiZWFiY2ExNmU5MmQxYTE0MWU5 NDg2MjcwHhcNMjUxMjIxMTUwMDM5WhcNMjUxMjIyMTUwMDM5WjAzMTEwLwYDVQQD Eyg4NDljYTc2N2Q5OTJlNzA0N2E2MjJkNzlmNzczMWVkMjU3MTk2N2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyFDi4s1fghnYIQemi5+E8Wap+hI 6j590Qoi1/1JjovrW47jJuywjSfSwj4SOLmR5I46oWP3gi4OnLK+tczy0QLTycvY i0VUVpvyzQ5FSmeGrTtDdfTbgMgWTDeTCup6CeSTwe/XAFik/lMU0Zi36F7fixU4 D1X2GB/HP+uVgrIZMuXvgwbydqNEuXRSD8h5+zh6nr8BGGYYI4J9qTgSmjVEKh1N eYoDvUHj/vj2t6uMR5gWKgkx1VgwlYUseE0vYlZVn7Kd0MpxytJgPbWEHf69MIsO oLA1FX8XmSS3euWgJdI4MwWhND6ABx0rmirK3yKLCqzihXlxCFsp6RHR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIScp2fZkucEemItefdzHtJXGWf5MB8GA1UdIwQY MBaAFCKHcpja5dWjvqvKFuktGhQelIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYt NTkzM2EwOWY3MmQxLzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYtNTkzM2EwOWY3MmQx LzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvzgiyKs EiEqv55a4DKhlvPXNQGdb113VDQETU9YuGpGGN3WeqBYmaBQJY1LV6sb4g9okO7p TCbZuekvYnPLX5S1Ns955clA0QFO9CAh8QD5p4/1xyBz6LuNm/zIs/XOkPZtrjvb 0rVQtwYb2hn2pmxt2g36+bmGnPxd9XlXcfr+pqOingZl5P6dl3IbIBdCx1STBTmF rn8aJAD+ixm0HUoAYjQgy4eocpKTWhR42hQnmM6K+NVidYLtKSrhGSKP5OLQWZUX 5aHKZVoFalB04nvRNIuAaH3DzzY5G4J/8e6mDoJ9UzPb6WVhslyhMR8OKXXmvO8X 3/SMKwySrscBIg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:21:33 2025 by rpki-client