This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json) Hash identifier: 5fPpu3AU6kqbeFZxRC/5EBK+JUWY92duvwlZiqHmtVg= Subject key identifier: C8:B0:73:F3:6C:17:13:C3:84:6A:D7:DE:72:36:F8:45:61:18:0F:BD Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8 Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8 Certificate serial: 019B31C38A46BF9FB38F8CB24DEB6E7C0973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft Manifest number: 0B90 Signing time: Thu 18 Dec 2025 14:00:57 +0000 Manifest this update: Thu 18 Dec 2025 14:00:57 +0000 Manifest next update: Fri 19 Dec 2025 14:00:57 +0000 Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: rlryYZp7e0PgAuT1lFT3Ily6kSGDCFt1cvT6z8EMPUQ=) 2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:8a:46:bf:9f:b3:8f:8c:b2:4d:eb:6e:7c:09:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8 Validity Not Before: Dec 18 14:00:57 2025 GMT Not After : Dec 19 14:00:57 2025 GMT Subject: CN=c8b073f36c1713c3846ad7de7236f84561180fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:9d:33:34:20:65:0a:21:b0:af:49:ca:31: 16:ac:44:06:e2:d7:2a:39:e6:88:4f:8c:22:99:3d: bb:49:f2:a2:4b:6e:77:22:b6:ad:f6:0e:78:db:46: 25:c4:5f:52:0f:25:17:28:13:8d:20:f7:e9:06:a5: cc:e3:5c:6b:b3:f6:64:38:86:ca:90:af:1d:73:58: 7f:7a:b2:ea:95:c3:51:42:6a:6c:0f:04:a3:86:5f: d5:5c:94:a4:d9:50:8f:4f:6e:8c:a4:aa:e8:9f:af: 01:37:9b:99:22:d2:2a:6b:3c:8b:15:7f:fc:14:6a: ce:ed:21:7e:b3:0c:2f:e5:5c:f6:2b:d7:42:4a:58: c8:bd:bf:c2:88:08:c0:8c:d9:fc:56:3e:f5:f6:35: 4a:d2:57:04:8f:2e:35:24:fc:2d:70:57:6e:cf:4d: 79:fb:30:83:a7:a3:d1:62:49:84:65:35:00:a6:16: 33:67:f9:12:cc:02:e0:46:33:5e:07:34:6f:97:be: e6:79:bd:38:cd:17:04:6c:c7:5d:44:55:2f:f2:ef: e6:19:17:54:1e:c6:59:ce:92:e6:bb:1a:b6:9a:93: ad:cf:a7:34:38:b6:cf:9e:9a:75:02:f2:58:02:db: ad:c1:c0:fc:b3:fd:3c:94:93:6a:b5:3f:21:96:cd: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:73:F3:6C:17:13:C3:84:6A:D7:DE:72:36:F8:45:61:18:0F:BD X509v3 Authority Key Identifier: keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:72:84:0d:64:b8:b7:ba:08:f9:88:20:32:9f:8f:16:69:29: 35:a2:f4:c0:3b:03:b9:fe:14:e0:64:e9:5b:c0:15:9f:24:2f: 31:79:2b:38:0e:36:95:17:cf:65:12:0e:20:25:0d:22:32:f6: 43:ea:59:bf:57:e3:1f:06:f5:2f:9f:73:5a:f7:33:37:03:89: 70:ac:e5:66:29:e2:6a:91:4c:b1:0f:85:0f:28:38:c4:e0:c0: 78:d0:9f:08:04:44:14:c0:dd:54:17:90:02:e6:24:e8:f2:13: d1:ce:d2:2b:f1:27:fc:ef:79:e9:18:59:30:46:2c:2f:9a:a3: 1b:bf:8b:d3:51:48:15:3f:86:2d:14:4b:5b:b1:ee:70:93:c1: c0:fc:97:41:58:b5:03:b8:73:15:fb:fc:28:fa:60:0d:63:d9: 69:be:87:89:d5:dd:9d:62:d5:e8:24:50:b7:0e:ee:ac:2c:a8: 3f:5c:b4:a2:7c:1a:9b:26:fa:22:cc:c2:79:2e:fd:5b:fa:76: af:f0:95:41:6e:f2:ed:ed:8a:54:8b:9f:0b:29:61:7b:a7:ca: 40:7d:99:11:15:12:2b:be:62:02:e7:dd:c6:d8:18:7a:bc:cd: d6:8f:34:92:88:29:f2:f4:7c:7b:0d:08:49:3d:cc:17:1f:10: db:5e:c7:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw4pGv5+zj4yyTetufAlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi N2QyYzgwHhcNMjUxMjE4MTQwMDU3WhcNMjUxMjE5MTQwMDU3WjAzMTEwLwYDVQQD EyhjOGIwNzNmMzZjMTcxM2MzODQ2YWQ3ZGU3MjM2Zjg0NTYxMTgwZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT+dMzQgZQohsK9JyjEWrEQG4tcq OeaIT4wimT27SfKiS253Irat9g5420YlxF9SDyUXKBONIPfpBqXM41xrs/ZkOIbK kK8dc1h/erLqlcNRQmpsDwSjhl/VXJSk2VCPT26MpKron68BN5uZItIqazyLFX/8 FGrO7SF+swwv5Vz2K9dCSljIvb/CiAjAjNn8Vj719jVK0lcEjy41JPwtcFduz015 +zCDp6PRYkmEZTUAphYzZ/kSzALgRjNeBzRvl77meb04zRcEbMddRFUv8u/mGRdU HsZZzpLmuxq2mpOtz6c0OLbPnpp1AvJYAtutwcD8s/08lJNqtT8hls2HqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiwc/NsFxPDhGrX3nI2+EVhGA+9MB8GA1UdIwQY MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0 LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnKEDWS4 t7oI+YggMp+PFmkpNaL0wDsDuf4U4GTpW8AVnyQvMXkrOA42lRfPZRIOICUNIjL2 Q+pZv1fjHwb1L59zWvczNwOJcKzlZiniapFMsQ+FDyg4xODAeNCfCAREFMDdVBeQ AuYk6PIT0c7SK/En/O956RhZMEYsL5qjG7+L01FIFT+GLRRLW7HucJPBwPyXQVi1 A7hzFfv8KPpgDWPZab6HidXdnWLV6CRQtw7urCyoP1y0onwamyb6IszCeS79W/p2 r/CVQW7y7e2KVIufCylhe6fKQH2ZERUSK75iAufdxtgYerzN1o80kogp8vR8ew0I ST3MFx8Q217HOw== -----END CERTIFICATE-----Generated at Thu Dec 18 16:15:29 2025 by rpki-client