This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json) Hash identifier: M7CjRm64Gn5b4bkahVQAzWOYSSyk4MSkwf5UUiM8RX0= Subject key identifier: DD:0F:75:6B:3C:E5:7D:D3:6C:1E:51:4E:D6:5F:08:9D:3B:41:FA:0F Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac Certificate serial: 019AF19BA0699D9008FE81C3FE779101C8A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: YwAGbtTQZXfe8blVDxMDsYm8UNY.roa (hash: A+07MBH15e8To3URRuyPmW0pFMg83UuaLyIprSu/vsM=) 2: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: dDl1WCM6O8ADvdQEnP3ji8oZ/rpyOV8dU+69h5xv7Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a0:69:9d:90:08:fe:81:c3:fe:77:91:01:c8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=dd0f756b3ce57dd36c1e514ed65f089d3b41fa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:5b:af:a9:ce:7f:dd:d7:79:08:54:48:c7: 69:8c:ef:7e:d3:7d:ca:29:ea:de:f4:28:e5:3b:fe: b2:99:f9:ff:7d:c4:97:2f:3c:7f:a4:07:78:50:ba: c9:41:ef:ea:ca:44:96:21:15:d7:3a:3a:2a:af:fe: 20:8b:5b:c2:54:12:a7:1c:18:a1:6c:f9:21:1f:53: b4:53:da:8d:e1:5b:e4:c4:9e:05:04:2f:17:7e:9b: 7e:d1:69:30:7b:84:5b:b8:b7:3e:a0:11:37:33:0f: ee:93:a4:be:dd:f4:5c:27:25:5e:56:c5:9d:69:57: 71:91:c5:7b:ea:ab:58:74:7c:e6:f2:66:76:1c:d4: 67:65:ca:81:a3:46:36:d2:f6:2c:a5:f9:ed:44:2c: 62:0f:96:f9:ba:2b:91:1a:d2:d4:92:fd:61:09:89: 42:21:47:19:1e:bc:95:23:77:2c:a5:4d:c1:b5:88: dd:7c:97:f2:3a:77:01:a5:49:53:78:b6:95:d4:07: a3:82:65:64:13:3d:6f:49:90:d2:15:42:a1:fa:aa: db:50:91:7b:53:df:5d:0a:5f:6d:ac:68:0a:82:f8: 26:8a:08:77:74:de:f2:84:99:36:9a:33:66:b1:11: c3:24:12:37:f9:7e:4c:db:8f:1e:e8:9b:b9:e7:5d: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0F:75:6B:3C:E5:7D:D3:6C:1E:51:4E:D6:5F:08:9D:3B:41:FA:0F X509v3 Authority Key Identifier: keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f7:4c:03:7d:a8:2c:2d:2d:e3:47:8b:07:19:f7:a9:16:4d: 22:af:cc:bc:9c:0d:83:44:d1:e0:88:81:72:44:fc:4e:ac:27: c0:bb:8a:b3:0b:21:32:3e:b2:43:79:cb:64:0e:22:a5:40:a2: 0b:3a:7b:9b:ea:12:31:fe:fd:a3:b0:50:1b:b1:d6:76:31:36: c6:43:cf:87:0b:75:49:ad:a9:b2:f7:e7:7f:aa:01:65:02:45: 62:0b:71:f1:f3:9a:2a:fc:58:33:be:bd:07:25:aa:06:04:3b: 02:15:76:88:e9:98:f7:93:51:be:7e:d6:29:2e:b3:1c:a6:fd: f5:c8:06:85:03:ca:80:95:4e:b5:ba:95:26:02:80:af:1c:63: 48:07:73:b2:5f:d3:01:1c:60:5c:63:4e:d9:24:63:4a:3a:6a: 9f:0b:75:e3:8f:f7:41:64:6b:2a:6b:fe:b6:09:37:6d:a1:c7: a2:20:90:a6:b0:23:cd:bf:8d:a4:f5:30:03:77:de:82:8d:07: fc:9e:cb:c9:50:4e:ed:2e:da:1b:09:80:dc:64:6a:a8:2a:51: 81:60:b9:ef:a8:d5:d9:af:24:0c:cf:86:58:dd:ea:bb:2d:a4: 41:2a:d7:6f:a6:2d:ed:80:5a:01:19:cc:bf:fa:c6:d2:81:61: 85:73:54:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6BpnZAI/oHD/neRAciiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MGM0OTgzZWUxOGJjNWUwMjVmYWFmZGUzMWM2NDEzNGE0 NjIwYWMwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD EyhkZDBmNzU2YjNjZTU3ZGQzNmMxZTUxNGVkNjVmMDg5ZDNiNDFmYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjBbr6nOf93XeQhUSMdpjO9+033K Kere9CjlO/6ymfn/fcSXLzx/pAd4ULrJQe/qykSWIRXXOjoqr/4gi1vCVBKnHBih bPkhH1O0U9qN4VvkxJ4FBC8Xfpt+0Wkwe4RbuLc+oBE3Mw/uk6S+3fRcJyVeVsWd aVdxkcV76qtYdHzm8mZ2HNRnZcqBo0Y20vYspfntRCxiD5b5uiuRGtLUkv1hCYlC IUcZHryVI3cspU3BtYjdfJfyOncBpUlTeLaV1AejgmVkEz1vSZDSFUKh+qrbUJF7 U99dCl9trGgKgvgmigh3dN7yhJk2mjNmsRHDJBI3+X5M248e6Ju5512WZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0PdWs85X3TbB5RTtZfCJ07QfoPMB8GA1UdIwQY MBaAFIkMSYPuGLxeAl+q/eMcZBNKRiCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80MTFjNGItMTU2YS00Y2MwLWEzNGUt ZWMxOWNkMzhmMjQ1LzEvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80MTFjNGItMTU2YS00Y2MwLWEzNGUtZWMxOWNkMzhmMjQ1 LzEvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfdMA32o LC0t40eLBxn3qRZNIq/MvJwNg0TR4IiBckT8TqwnwLuKswshMj6yQ3nLZA4ipUCi Czp7m+oSMf79o7BQG7HWdjE2xkPPhwt1Sa2psvfnf6oBZQJFYgtx8fOaKvxYM769 ByWqBgQ7AhV2iOmY95NRvn7WKS6zHKb99cgGhQPKgJVOtbqVJgKArxxjSAdzsl/T ARxgXGNO2SRjSjpqnwt144/3QWRrKmv+tgk3baHHoiCQprAjzb+NpPUwA3fego0H /J7LyVBO7S7aGwmA3GRqqCpRgWC576jV2a8kDM+GWN3quy2kQSrXb6Yt7YBaARnM v/rG0oFhhXNUSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:34 2025 by rpki-client