This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft File: iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json) Hash identifier: XHYs5cvC6IVbRLXYvVR5753j8CP2inNUMQFKqBvT2Hs= Subject key identifier: 41:85:5C:6B:DA:4D:E0:A8:E4:D0:E9:9C:DD:96:E5:E8:F7:11:B2:A4 Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc Certificate serial: 019AF31BCCCEDDF8644149BC96AC88485B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: c_7uOl8s8Kdh9CychkSYtAnQ7tY.roa (hash: Nr/ZIZGpAUJ7Gcwt3DrN0gnkpV9viza7zxUo/JxiEbY=) 2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: d9/z6D0+k+pRS5lRXvdBB6HeFUjqRBCy3DoOytJhUd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:cc:ce:dd:f8:64:41:49:bc:96:ac:88:48:5b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=41855c6bda4de0a8e4d0e99cdd96e5e8f711b2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:e9:c4:93:39:74:a0:90:b1:10:56:c7:e5: 9a:43:4c:4f:22:cb:a9:42:c8:0c:c0:21:51:55:1c: da:8b:18:65:a1:dc:27:61:b1:ac:bd:7d:bd:68:28: a8:c3:85:16:3f:b4:70:48:42:68:e4:17:ff:6b:27: 31:02:4e:ef:75:0b:b7:b3:22:65:d0:4b:87:00:0d: 21:7c:d0:04:c4:a5:d9:83:25:76:4b:a8:08:b4:91: 58:93:b1:06:28:c9:0d:8a:2a:40:2a:8d:a1:9b:4c: a7:d4:56:ce:3c:dc:46:4b:16:1c:1a:2b:ac:4f:a5: 30:28:bb:29:c6:ad:59:ce:01:61:d0:d1:33:05:5c: 52:83:a6:fc:7d:03:27:13:9d:cb:24:36:db:b9:40: 82:a6:a4:90:4e:49:2c:76:ea:4f:95:ca:1d:d9:fc: 09:79:43:55:2b:69:64:09:5d:b6:2e:ef:19:1a:22: 17:c6:46:72:82:4b:73:ca:0e:97:8d:e8:f5:d8:97: e3:4c:60:d0:e5:d7:1a:4b:2e:0c:3c:19:f9:de:11: df:da:69:77:49:3e:79:ec:4e:6d:57:2b:94:5d:f8: dc:ec:5a:3d:7b:f1:fd:bd:d6:c8:78:ad:2c:da:95: fd:35:20:b5:d2:12:d8:e4:de:37:3d:0b:7e:84:76: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:5C:6B:DA:4D:E0:A8:E4:D0:E9:9C:DD:96:E5:E8:F7:11:B2:A4 X509v3 Authority Key Identifier: keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f1:41:a5:67:df:08:21:06:7b:9a:b4:9e:ef:a2:35:67:71: 2b:1f:91:e1:b1:60:cb:b1:7b:ac:be:4f:4e:ad:a3:41:3b:00: 50:87:dd:25:64:34:4b:12:66:d5:7d:f4:c2:22:6e:3e:46:c2: ee:29:7d:1c:2b:9c:0c:27:d7:55:a1:16:d8:b1:67:72:9f:4e: 98:1f:e5:bb:67:4d:67:7d:7b:34:bf:f9:e2:ce:40:5a:cf:e4: 90:64:17:08:6e:67:f0:1c:4b:6e:60:95:14:5f:db:07:68:2e: 0f:f6:63:2c:48:4d:76:7d:e2:33:c8:16:16:45:79:ec:74:22: 1f:31:9d:b5:f8:24:c6:bf:2e:8c:7e:fd:89:b5:47:d1:a4:c1: c1:ac:47:6e:0c:0d:87:9f:7b:14:71:c0:84:ae:83:18:ff:e6: 9b:17:71:a1:41:ae:db:18:97:88:70:64:6b:f1:0e:68:0f:f9: 6e:42:bf:35:41:ec:f6:8f:58:52:40:be:20:be:50:44:bc:da: bc:27:6b:df:98:5c:e1:a0:1a:96:06:66:41:3d:76:f6:b2:63: 64:99:fe:ef:3e:ef:97:aa:f8:10:76:91:e8:d9:3b:f7:69:c5: 1e:00:c6:b7:54:fd:d1:20:9d:88:98:ed:6a:86:87:f7:85:1d: 65:ab:18:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8zO3fhkQUm8lqyISFuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2EyYTQwMTlhMjgxNzdjZGY4MDY1OTlmMWFiNWQ1MWQx N2I4ZGMwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD Eyg0MTg1NWM2YmRhNGRlMGE4ZTRkMGU5OWNkZDk2ZTVlOGY3MTFiMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYDpxJM5dKCQsRBWx+WaQ0xPIsup QsgMwCFRVRzaixhlodwnYbGsvX29aCiow4UWP7RwSEJo5Bf/aycxAk7vdQu3syJl 0EuHAA0hfNAExKXZgyV2S6gItJFYk7EGKMkNiipAKo2hm0yn1FbOPNxGSxYcGius T6UwKLspxq1ZzgFh0NEzBVxSg6b8fQMnE53LJDbbuUCCpqSQTkksdupPlcod2fwJ eUNVK2lkCV22Lu8ZGiIXxkZygktzyg6Xjej12JfjTGDQ5dcaSy4MPBn53hHf2ml3 ST557E5tVyuUXfjc7Fo9e/H9vdbIeK0s2pX9NSC10hLY5N43PQt+hHYvEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGFXGvaTeCo5NDpnN2W5ej3EbKkMB8GA1UdIwQY MBaAFIk6KkAZooF3zfgGWZ8atdUdF7jcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEt MzYxNzg2ZjE3YTA1LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEtMzYxNzg2ZjE3YTA1 LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPFBpWff CCEGe5q0nu+iNWdxKx+R4bFgy7F7rL5PTq2jQTsAUIfdJWQ0SxJm1X30wiJuPkbC 7il9HCucDCfXVaEW2LFncp9OmB/lu2dNZ317NL/54s5AWs/kkGQXCG5n8BxLbmCV FF/bB2guD/ZjLEhNdn3iM8gWFkV57HQiHzGdtfgkxr8ujH79ibVH0aTBwaxHbgwN h597FHHAhK6DGP/mmxdxoUGu2xiXiHBka/EOaA/5bkK/NUHs9o9YUkC+IL5QRLza vCdr35hc4aAalgZmQT129rJjZJn+7z7vl6r4EHaR6Nk792nFHgDGt1T90SCdiJjt aoaH94UdZasY1g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:18 2025 by rpki-client