This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json) Hash identifier: VMb21hqLiTY+PCR92kXAI4HgB6Ehz8Dia36hRg4xfyk= Subject key identifier: 8F:3A:DC:CD:D5:1E:3F:DD:21:EE:24:E3:86:D3:E2:B3:2A:E1:98:25 Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Certificate serial: 019AF31C61B33AED8CCFA52915F909E999D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft Manifest number: 1522 Signing time: Sat 06 Dec 2025 10:01:54 +0000 Manifest this update: Sat 06 Dec 2025 10:01:54 +0000 Manifest next update: Sun 07 Dec 2025 10:01:54 +0000 Files and hashes: 1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=) 2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=) 3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: 9Odzc6m2DVM8iav7uhHCv2TDX15EW9eDi7ODSphe5QA=) 4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:61:b3:3a:ed:8c:cf:a5:29:15:f9:09:e9:99:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Validity Not Before: Dec 6 10:01:54 2025 GMT Not After : Dec 7 10:01:54 2025 GMT Subject: CN=8f3adccdd51e3fdd21ee24e386d3e2b32ae19825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:fe:2d:e8:6b:85:7c:62:99:fe:6c:31:7a: 6f:b0:86:e3:71:e0:a2:3a:ad:85:05:a4:16:5d:f6: 83:3f:61:84:05:2e:59:cc:23:f3:32:71:5d:a5:03: b9:7c:fc:a3:f5:a1:ab:3d:18:a9:b8:fa:21:31:9e: 44:fd:e6:79:89:da:0a:a9:c4:fe:bb:9f:45:9c:6c: 48:b6:32:1d:ea:77:e4:c6:f1:6a:b4:34:f8:96:e2: fd:60:e7:ba:b9:8e:83:5b:83:b8:e7:39:d7:56:cf: b7:9e:c5:8c:1a:49:0f:51:ba:81:a2:34:55:bb:9c: 94:fc:0c:b9:fa:d3:79:e2:3d:a0:d0:ee:e0:fb:db: 74:c8:3b:c2:b9:9e:d1:c5:b3:85:7b:ad:71:3f:dd: 57:a1:30:72:14:a7:26:96:97:e1:fd:ba:5c:c0:01: 18:14:d6:98:72:0a:5d:7d:9a:e9:02:90:fe:a1:4c: aa:1d:6d:96:8a:e6:d1:ce:72:1c:6e:76:f9:7e:c2: dd:2c:34:a1:4b:fa:e1:88:0c:50:50:4e:fb:28:86: cf:23:4a:f8:e4:56:9b:23:42:c5:ab:d3:1d:ee:89: 2e:1d:79:f6:77:6f:62:bf:83:d6:bd:60:97:29:ec: 9e:51:9f:74:89:8e:2e:89:e9:94:52:c1:95:0b:15: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3A:DC:CD:D5:1E:3F:DD:21:EE:24:E3:86:D3:E2:B3:2A:E1:98:25 X509v3 Authority Key Identifier: keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c4:c0:b9:47:6f:31:6a:57:1f:0c:e9:88:44:c2:20:5e:48: 33:ca:d9:95:a3:1a:8e:6c:9d:53:3a:50:d8:61:c0:5b:25:10: 6d:1e:db:3c:0f:2e:69:be:09:17:5c:c3:4b:7b:a8:1f:34:1b: 86:7a:82:99:99:51:7b:f7:c8:9e:e5:57:46:6b:a4:7c:53:cd: 09:b2:fe:ad:f3:ad:20:67:04:01:97:1a:d8:85:aa:e6:89:9f: 06:76:3f:9b:35:35:70:f2:af:fa:ca:dd:5a:e5:ec:2b:96:a9: 4a:c6:de:8f:46:ea:ae:12:4f:f2:1b:46:63:c6:22:3d:86:30: fd:6e:f4:1b:f9:40:71:aa:ce:52:4e:db:a0:5d:51:fa:39:c9: 91:c3:3b:98:07:80:3f:0d:16:4f:2b:09:a9:c9:df:32:8e:96: ab:0b:a1:96:24:40:ed:18:b8:47:78:57:5a:63:f4:0a:13:b9: 4f:b1:17:c1:3c:e2:41:f2:36:71:8e:ba:ab:1f:5a:1f:7e:33: ff:ee:f1:4a:bb:ec:e0:24:c7:80:2b:da:d4:e0:d3:5e:38:49: d6:d8:26:3e:f9:24:71:e0:5f:2f:73:89:1e:09:5d:f3:9b:ae: 99:ca:a7:1f:de:28:c7:a1:55:99:35:c4:2b:9f:87:e5:01:91: 7d:dc:59:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGGzOu2Mz6UpFfkJ6ZnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MmZhMDE5MDJmNGU4YzM0N2YyMTE2ZTQ2NDVkYTFhNmI0 ZTA5NjIwHhcNMjUxMjA2MTAwMTU0WhcNMjUxMjA3MTAwMTU0WjAzMTEwLwYDVQQD Eyg4ZjNhZGNjZGQ1MWUzZmRkMjFlZTI0ZTM4NmQzZTJiMzJhZTE5ODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0z+LehrhXximf5sMXpvsIbjceCi Oq2FBaQWXfaDP2GEBS5ZzCPzMnFdpQO5fPyj9aGrPRipuPohMZ5E/eZ5idoKqcT+ u59FnGxItjId6nfkxvFqtDT4luL9YOe6uY6DW4O45znXVs+3nsWMGkkPUbqBojRV u5yU/Ay5+tN54j2g0O7g+9t0yDvCuZ7RxbOFe61xP91XoTByFKcmlpfh/bpcwAEY FNaYcgpdfZrpApD+oUyqHW2WiubRznIcbnb5fsLdLDShS/rhiAxQUE77KIbPI0r4 5FabI0LFq9Md7okuHXn2d29iv4PWvWCXKeyeUZ90iY4uiemUUsGVCxUbpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI863M3VHj/dIe4k44bT4rMq4ZglMB8GA1UdIwQY MBaAFIgvoBkC9OjDR/IRbkZF2hprTgliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAt NWMyZDI2NTcwNWUwLzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAtNWMyZDI2NTcwNWUw LzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcTAuUdv MWpXHwzpiETCIF5IM8rZlaMajmydUzpQ2GHAWyUQbR7bPA8uab4JF1zDS3uoHzQb hnqCmZlRe/fInuVXRmukfFPNCbL+rfOtIGcEAZca2IWq5omfBnY/mzU1cPKv+srd WuXsK5apSsbej0bqrhJP8htGY8YiPYYw/W70G/lAcarOUk7boF1R+jnJkcM7mAeA Pw0WTysJqcnfMo6WqwuhliRA7Ri4R3hXWmP0ChO5T7EXwTziQfI2cY66qx9aH34z /+7xSrvs4CTHgCva1ODTXjhJ1tgmPvkkceBfL3OJHgld85uumcqnH94ox6FVmTXE K5+H5QGRfdxZGw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:20:21 2025 by rpki-client