This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json) Hash identifier: hudOLfoejAp3jefMJZAPAARQu6V48phTa+Qs+Xhn1vU= Subject key identifier: 6F:95:A8:EA:D7:54:EC:8E:06:98:A5:D6:69:34:05:86:16:B1:10:71 Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8 Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8 Certificate serial: 019AF540E41B4B30C22D98160AD493AAACE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft Manifest number: 16BF Signing time: Sat 06 Dec 2025 20:01:01 +0000 Manifest this update: Sat 06 Dec 2025 20:01:01 +0000 Manifest next update: Sun 07 Dec 2025 20:01:01 +0000 Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: VnlV6fBcgmj8szeYrxOmQU42wddpkKduAjrP+QvnwW0=) 2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=) 3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:e4:1b:4b:30:c2:2d:98:16:0a:d4:93:aa:ac:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8 Validity Not Before: Dec 6 20:01:01 2025 GMT Not After : Dec 7 20:01:01 2025 GMT Subject: CN=6f95a8ead754ec8e0698a5d66934058616b11071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:52:8d:85:b7:03:bf:68:35:85:0a:32:51: f5:fa:2f:7d:ad:7c:e4:ee:7d:53:c1:75:fc:33:c5: 57:43:cd:d3:e8:ec:46:7d:78:e3:c9:90:93:e5:b7: ad:a3:5e:85:94:1d:0e:9e:40:bb:81:06:a8:4a:71: f8:9b:e2:b2:a2:c9:e0:d4:b7:20:fe:db:96:55:0d: 4e:39:e7:50:05:30:0e:19:5f:1f:b7:cc:3a:0e:b0: 71:e8:e8:a0:e6:b0:aa:1b:41:69:a0:5b:ac:1a:b0: 63:cf:43:23:53:09:e1:71:83:82:44:22:04:88:ad: 96:81:7e:1a:f7:3b:b1:74:05:15:66:2a:fa:08:2a: 08:37:59:02:59:56:76:07:5f:ad:64:07:a8:28:31: 8c:ec:b8:c1:27:eb:1b:36:2c:01:fe:86:f3:83:c3: 8d:48:88:d8:0f:9c:2a:f6:49:3e:21:b9:4e:2a:c4: b7:40:11:c3:6a:09:25:c3:f6:fa:28:a5:64:dc:c7: a4:49:92:96:20:e3:06:e5:95:26:12:0f:14:30:7e: ff:70:4b:a4:10:61:a3:42:98:46:b7:78:4f:30:fe: 48:f0:c3:4c:0b:54:a7:75:31:dd:75:47:78:75:a4: f6:d4:32:2b:26:3e:4e:11:83:65:7c:85:8e:14:19: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:95:A8:EA:D7:54:EC:8E:06:98:A5:D6:69:34:05:86:16:B1:10:71 X509v3 Authority Key Identifier: keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4e:37:c3:60:9f:40:e5:3e:48:df:81:e7:bc:06:a6:9b:f0: e9:e4:0d:8a:ca:44:20:05:2d:02:65:2e:1c:b4:20:6a:04:f6: ce:4c:a7:06:61:3e:6d:aa:4a:18:ec:50:d9:fa:d0:bb:f8:a6: 25:23:76:0d:f4:c3:70:fa:57:69:55:78:f2:78:31:c3:1d:fc: c6:f0:0b:42:58:96:14:ab:53:70:f0:d2:fb:40:44:15:2d:c6: 28:22:5f:02:4c:8f:e9:9f:88:b4:ac:cb:bf:63:e7:bb:fd:88: e9:40:f0:09:74:f7:f1:2a:e2:27:f4:4d:3d:7d:e9:9d:1e:a6: 39:99:37:ba:f3:1c:76:3e:f4:f0:a3:43:92:ae:9d:09:1a:71: 4f:c3:0a:c1:98:a7:63:9d:1b:4c:5a:43:a9:78:c3:fd:d3:dc: ea:79:8b:be:61:15:5d:4a:cc:2b:74:ac:e6:71:be:eb:e2:62: 21:80:0d:c6:a4:d0:31:df:82:4d:40:f7:a6:03:8e:33:72:b2: 0b:f8:36:8f:03:bf:ca:2c:33:97:fe:50:b1:dc:33:c2:0b:98: 98:8f:f6:cd:5e:0f:cd:c7:57:4f:c9:3c:e5:00:b3:15:72:34: 8f:6f:58:8c:31:8e:7a:cd:96:69:cc:a9:e3:c9:1a:c6:ab:8f: 60:10:cb:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QOQbSzDCLZgWCtSTqqzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy YTYzZjgwHhcNMjUxMjA2MjAwMTAxWhcNMjUxMjA3MjAwMTAxWjAzMTEwLwYDVQQD Eyg2Zjk1YThlYWQ3NTRlYzhlMDY5OGE1ZDY2OTM0MDU4NjE2YjExMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCNSjYW3A79oNYUKMlH1+i99rXzk 7n1TwXX8M8VXQ83T6OxGfXjjyZCT5beto16FlB0OnkC7gQaoSnH4m+Kyosng1Lcg /tuWVQ1OOedQBTAOGV8ft8w6DrBx6Oig5rCqG0FpoFusGrBjz0MjUwnhcYOCRCIE iK2WgX4a9zuxdAUVZir6CCoIN1kCWVZ2B1+tZAeoKDGM7LjBJ+sbNiwB/obzg8ON SIjYD5wq9kk+IblOKsS3QBHDagklw/b6KKVk3MekSZKWIOMG5ZUmEg8UMH7/cEuk EGGjQphGt3hPMP5I8MNMC1SndTHddUd4daT21DIrJj5OEYNlfIWOFBnfVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+VqOrXVOyOBpil1mk0BYYWsRBxMB8GA1UdIwQY MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0 LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUE43w2Cf QOU+SN+B57wGppvw6eQNispEIAUtAmUuHLQgagT2zkynBmE+bapKGOxQ2frQu/im JSN2DfTDcPpXaVV48ngxwx38xvALQliWFKtTcPDS+0BEFS3GKCJfAkyP6Z+ItKzL v2Pnu/2I6UDwCXT38SriJ/RNPX3pnR6mOZk3uvMcdj708KNDkq6dCRpxT8MKwZin Y50bTFpDqXjD/dPc6nmLvmEVXUrMK3Ss5nG+6+JiIYANxqTQMd+CTUD3pgOOM3Ky C/g2jwO/yiwzl/5QsdwzwguYmI/2zV4PzcdXT8k85QCzFXI0j29YjDGOes2Wacyp 48kaxquPYBDLww== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:25 2025 by rpki-client