This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: 98Cvq0GS5ir1YF7jNv19ntprI+ueqczgGS47pBPkZ14= Subject key identifier: 79:3B:20:FC:09:02:FA:C1:F2:58:25:D8:3F:60:93:D6:49:DB:A8:D0 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019AF464BBF66F335ECA19D2981E33915134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0A93 Signing time: Sat 06 Dec 2025 16:00:33 +0000 Manifest this update: Sat 06 Dec 2025 16:00:33 +0000 Manifest next update: Sun 07 Dec 2025 16:00:33 +0000 Files and hashes: 1: Dc1SxW96IAQ3f2snIBmens7GV0U.roa (hash: A68NloNFUVZ/1yLMaTnJ5sUcnw8LpIIqTLsAe9oPGuQ=) 2: Hclo7mgAV-Jk6Qp5sVlZMDADheQ.roa (hash: cVUhTfbeGPClCYhj8aCdhEzcQl8l864NJzclgxFTC+Y=) 3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: IZYNXecToZqoSFcPlxWKa+g+QFD6TZjzfEsPQALAWkY=) 4: Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa (hash: MiHDGBqhLXLE6nmzkue9evydNoK6FMJwJm/pNx6ZNnQ=) 5: _bqJOppJMYlhCqHfIAJ6Sh83vHA.roa (hash: 1f0aFmNhmLx4lKQjnS1bd4RzjmzmwwV3y7zrSykmheM=) 6: ajmq5QdlQvXrCBRMjUs67yP9AmI.roa (hash: mQ5XjE5gzuzrTdkByBU3/meXRrw3VOANPbjnntSYJ74=) 7: cwh3r4eWlWrhqTwyia3Y6IkQ-I4.roa (hash: EAtSuVfxmrmE7PUep+zevWjbxh//ARj59/51XZyWbTI=) 8: iIyJKjInlinbrFoxMvyP7cHrL18.roa (hash: jppb7YCDugjMDFMLhWTY9NbjBHwSDw8mYabJJeuiwkQ=) 9: xmgEeMB7WvkvTgZR5WIp3Cku-OQ.roa (hash: DB/674zCoFtnashikqEwhqolbIZIshtp2JBUcqe8xB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:bb:f6:6f:33:5e:ca:19:d2:98:1e:33:91:51:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Dec 6 16:00:33 2025 GMT Not After : Dec 7 16:00:33 2025 GMT Subject: CN=793b20fc0902fac1f25825d83f6093d649dba8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:66:70:49:b7:db:a2:82:12:89:91:87:44: 05:6f:48:db:5a:26:31:ae:8f:ec:68:b2:41:c2:22: 09:9e:46:b4:09:08:a8:12:4c:06:d2:1c:97:6f:7d: 74:c6:9b:b7:41:8a:be:de:e6:8e:4b:62:c0:b2:b5: e5:70:b2:b7:3a:9e:7a:8b:2a:42:c2:76:82:bd:37: 9b:6b:0a:7c:f7:3b:45:04:d6:8e:d4:88:6d:df:36: cf:a3:4a:62:25:ad:b9:be:61:60:10:f0:eb:31:1c: f4:78:4b:24:a9:3e:37:0a:65:be:3f:f4:29:73:89: cd:05:28:42:60:cf:c5:b4:db:86:2b:0a:6e:89:cc: 35:b4:e3:c0:e4:ce:a5:1b:df:47:b0:e4:2e:41:9e: 50:60:3a:b7:53:77:d3:c7:68:9f:89:2b:80:7b:af: 1f:89:4e:4b:b1:b1:09:36:97:28:50:68:f1:aa:25: 1e:ed:63:3b:f4:92:0c:9e:c4:6d:2c:a8:ed:45:01: 38:33:e7:e7:3a:28:12:9e:60:b7:8b:0b:65:7d:8f: 6e:dd:49:a8:e6:96:4b:7f:50:3b:2d:68:9b:44:3f: 11:b7:08:16:7c:3b:2c:42:89:03:55:27:1a:8c:d7: 7f:ae:a1:b1:84:83:4b:7d:38:98:59:47:46:2f:60: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:20:FC:09:02:FA:C1:F2:58:25:D8:3F:60:93:D6:49:DB:A8:D0 X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:32:f7:d6:36:bc:03:73:2e:4a:94:7f:08:95:0c:28:08:38: c7:ee:8e:85:a4:8c:34:e1:d0:ba:c6:9a:e1:e4:75:c6:54:e8: 11:df:3a:0b:00:22:45:77:9a:9b:57:26:66:ab:54:b8:be:33: 15:e8:af:4f:8f:de:94:c1:49:c8:80:a6:2d:76:03:b7:52:9e: d1:e4:2d:c4:53:64:8d:49:bc:77:94:39:e5:e5:5e:54:c5:57: d8:11:c8:f6:88:ca:ab:e1:b8:6a:81:2e:8e:68:5b:07:d6:86: df:17:d6:d1:f0:ab:d0:69:43:9b:c6:32:19:f3:c8:59:a1:34: 06:71:12:32:f9:46:f1:2b:0b:e1:05:ee:a0:cb:19:8c:2e:1e: 39:ce:85:5b:92:3d:83:2b:e5:88:bb:b6:80:61:a6:73:66:6f: ba:a8:1b:86:2d:10:a3:7b:a7:22:cd:68:aa:26:97:8e:18:47: c8:c2:59:6e:d5:ec:c4:1c:f7:f5:4a:13:29:9d:15:9f:60:90: 16:e5:07:22:4b:3b:39:fb:74:cc:81:36:6a:ac:52:09:a7:1e: 99:ba:1f:82:c1:dd:c2:b0:98:50:6e:96:37:2f:d8:ed:46:52: 65:18:c3:61:2b:c2:77:3d:38:aa:1b:e9:73:e5:a5:35:ff:ac: 6c:df:1f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZLv2bzNeyhnSmB4zkVE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjUxMjA2MTYwMDMzWhcNMjUxMjA3MTYwMDMzWjAzMTEwLwYDVQQD Eyg3OTNiMjBmYzA5MDJmYWMxZjI1ODI1ZDgzZjYwOTNkNjQ5ZGJhOGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSxmcEm326KCEomRh0QFb0jbWiYx ro/saLJBwiIJnka0CQioEkwG0hyXb310xpu3QYq+3uaOS2LAsrXlcLK3Op56iypC wnaCvTebawp89ztFBNaO1Iht3zbPo0piJa25vmFgEPDrMRz0eEskqT43CmW+P/Qp c4nNBShCYM/FtNuGKwpuicw1tOPA5M6lG99HsOQuQZ5QYDq3U3fTx2ifiSuAe68f iU5LsbEJNpcoUGjxqiUe7WM79JIMnsRtLKjtRQE4M+fnOigSnmC3iwtlfY9u3Umo 5pZLf1A7LWibRD8RtwgWfDssQokDVScajNd/rqGxhINLfTiYWUdGL2CKiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk7IPwJAvrB8lgl2D9gk9ZJ26jQMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzL31ja8 A3MuSpR/CJUMKAg4x+6OhaSMNOHQusaa4eR1xlToEd86CwAiRXeam1cmZqtUuL4z FeivT4/elMFJyICmLXYDt1Ke0eQtxFNkjUm8d5Q55eVeVMVX2BHI9ojKq+G4aoEu jmhbB9aG3xfW0fCr0GlDm8YyGfPIWaE0BnESMvlG8SsL4QXuoMsZjC4eOc6FW5I9 gyvliLu2gGGmc2Zvuqgbhi0Qo3unIs1oqiaXjhhHyMJZbtXsxBz39UoTKZ0Vn2CQ FuUHIks7Oft0zIE2aqxSCacembofgsHdwrCYUG6WNy/Y7UZSZRjDYSvCdz04qhvp c+WlNf+sbN8f0Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:26 2025 by rpki-client