This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json) Hash identifier: t7qDxNyUaQwptHOouc9Lx8wyLfS1fmcfV1WLPoZzNv0= Subject key identifier: 74:E8:02:62:AC:99:1D:83:6E:E9:56:42:7A:57:B7:D1:91:AD:C2:01 Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Certificate serial: 019AF5AE838291204F07DA7D08463C721E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft Manifest number: 0438 Signing time: Sat 06 Dec 2025 22:00:46 +0000 Manifest this update: Sat 06 Dec 2025 22:00:46 +0000 Manifest next update: Sun 07 Dec 2025 22:00:46 +0000 Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: ICyjo3S6OgPWzWUaQWSoI3eDO7ku9p1VpVOVpOXJZX4=) 2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=) 3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=) 4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:83:82:91:20:4f:07:da:7d:08:46:3c:72:1e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Validity Not Before: Dec 6 22:00:46 2025 GMT Not After : Dec 7 22:00:46 2025 GMT Subject: CN=74e80262ac991d836ee956427a57b7d191adc201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:46:03:62:f0:13:d0:59:6b:ff:10:e3:d8: 08:7e:98:3d:4d:51:12:0e:45:72:c2:9d:62:60:df: 0a:0c:b3:77:05:f1:66:0d:68:ad:69:3a:3e:e6:a6: 5f:0b:17:94:21:ca:e5:d3:8b:3d:9f:ad:63:ef:86: b6:3a:26:83:be:b5:23:46:e8:dc:c2:d8:03:76:be: dd:9e:c9:59:62:0a:07:6c:04:5b:36:eb:9b:28:04: 16:d9:24:15:cc:06:b1:ed:36:3a:63:68:1a:5d:df: 65:e4:02:8a:d8:15:42:72:9e:f3:92:56:fa:77:7a: a2:8a:99:61:69:d9:50:a6:20:c8:90:1d:f2:ed:a8: 44:32:89:71:05:d1:ae:1b:e6:6b:41:d7:a7:19:13: 3b:99:e6:be:02:c0:4b:76:b3:1f:08:59:4f:33:b8: 52:d9:76:61:17:58:68:57:50:a9:ba:0a:b1:7d:64: 72:a3:05:03:f1:4e:2a:e6:d1:89:52:7c:4d:27:13: 56:f5:27:07:17:05:aa:55:75:84:ac:99:4d:92:c6: eb:bf:23:18:b9:db:e0:40:91:8a:76:96:a5:4c:44: b4:a7:8a:31:f1:c7:be:b5:bb:77:63:ae:ff:22:56: 1c:ca:07:7d:0f:76:68:b7:09:3e:72:80:f8:eb:5a: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E8:02:62:AC:99:1D:83:6E:E9:56:42:7A:57:B7:D1:91:AD:C2:01 X509v3 Authority Key Identifier: keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:58:d2:06:ae:48:36:f8:9a:4c:fb:68:0c:7e:7b:2e:2f: 8c:5c:c5:60:50:e4:d8:d5:e8:eb:f6:f0:10:0e:94:b4:6d:f5: c8:e2:f8:c0:dd:eb:1d:07:c0:81:0b:ae:8b:d7:83:4f:47:a9: a0:e0:ab:55:1f:ee:bb:4c:db:cc:a5:5e:a5:a0:4c:a0:c0:ea: ab:15:9f:a3:fe:15:7d:14:e8:87:70:cb:bb:23:8f:30:ab:28: 8d:60:83:27:1a:e5:57:72:cd:3a:d6:8b:76:b4:84:d6:48:dc: f0:41:b0:b9:c5:78:13:38:f1:15:21:df:d3:20:df:0a:4a:1a: ea:66:ac:80:34:7c:58:73:26:6c:7d:3f:d6:8c:f3:ac:bc:e0: 45:4f:60:f0:a7:cc:da:32:94:3f:05:b5:80:39:9f:b5:0a:29: 10:3e:56:4c:5c:24:48:78:a3:a6:42:74:f7:31:18:78:ca:c3: c2:0a:5b:5f:d8:34:75:48:85:b1:c2:e8:cf:a7:ba:72:4e:b5: fe:9d:36:fa:8b:75:a7:af:93:ff:73:b4:e2:d1:03:10:ab:b6: 98:10:fb:b3:9e:ae:07:b6:87:8c:60:91:63:ec:76:12:12:e9: 3b:34:9f:c1:4f:89:34:ec:65:a9:7e:e6:5a:00:e3:7d:dc:66: 4b:3b:62:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1roOCkSBPB9p9CEY8ch47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj ZDcwOTEwHhcNMjUxMjA2MjIwMDQ2WhcNMjUxMjA3MjIwMDQ2WjAzMTEwLwYDVQQD Eyg3NGU4MDI2MmFjOTkxZDgzNmVlOTU2NDI3YTU3YjdkMTkxYWRjMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZGA2LwE9BZa/8Q49gIfpg9TVES DkVywp1iYN8KDLN3BfFmDWitaTo+5qZfCxeUIcrl04s9n61j74a2OiaDvrUjRujc wtgDdr7dnslZYgoHbARbNuubKAQW2SQVzAax7TY6Y2gaXd9l5AKK2BVCcp7zklb6 d3qiiplhadlQpiDIkB3y7ahEMolxBdGuG+ZrQdenGRM7mea+AsBLdrMfCFlPM7hS 2XZhF1hoV1CpugqxfWRyowUD8U4q5tGJUnxNJxNW9ScHFwWqVXWErJlNksbrvyMY udvgQJGKdpalTES0p4ox8ce+tbt3Y67/IlYcygd9D3Zotwk+coD461pTKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHToAmKsmR2DbulWQnpXt9GRrcIBMB8GA1UdIwQY MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt ODJmYTNkMjYwODY5LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5 LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrpY0gau SDb4mkz7aAx+ey4vjFzFYFDk2NXo6/bwEA6UtG31yOL4wN3rHQfAgQuui9eDT0ep oOCrVR/uu0zbzKVepaBMoMDqqxWfo/4VfRToh3DLuyOPMKsojWCDJxrlV3LNOtaL drSE1kjc8EGwucV4EzjxFSHf0yDfCkoa6masgDR8WHMmbH0/1ozzrLzgRU9g8KfM 2jKUPwW1gDmftQopED5WTFwkSHijpkJ09zEYeMrDwgpbX9g0dUiFscLoz6e6ck61 /p02+ot1p6+T/3O04tEDEKu2mBD7s56uB7aHjGCRY+x2EhLpOzSfwU+JNOxlqX7m WgDjfdxmSztiKg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:14 2025 by rpki-client