This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json) Hash identifier: zrC/XCMdqcRNYHTHx+Vev4aD1H0cnHT4GTUlO9XwWfc= Subject key identifier: 67:A5:97:2E:8A:D0:C2:13:B0:FB:BD:D7:CC:6E:83:8F:6B:12:6B:57 Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b Certificate serial: 019AF12CEABC1802896C75A99515F1770F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: TmWhLwj4IzvD76M0mnLsi5EL0TQYIsmEEv++O1TXtzA=) 2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ea:bc:18:02:89:6c:75:a9:95:15:f1:77:0f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=67a5972e8ad0c213b0fbbdd7cc6e838f6b126b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:23:2d:b0:f2:04:ba:cc:ac:6b:7e:ff:91:8d: 4c:02:1f:aa:4d:1c:7c:94:51:03:de:77:b9:23:9f: 1e:29:44:73:42:c9:db:e6:b1:73:06:ea:65:b4:28: 5c:9d:df:e2:b3:d1:ef:2f:f3:68:4e:c4:cd:1e:5a: 9c:4b:b8:53:aa:fa:6b:8c:a1:58:33:4f:ca:21:72: 2f:f9:ab:9c:df:ed:8a:30:5b:4d:f5:e6:f2:4f:05: bd:32:32:3c:0d:dd:93:59:ac:e6:70:1c:ef:27:19: ee:79:6a:8f:28:1e:e3:77:ea:e2:19:b5:02:60:42: 3b:85:93:05:68:48:cc:04:32:4c:f9:ff:c8:24:4a: 29:ea:f9:c7:07:8e:ed:6f:15:0a:29:f7:95:de:b6: e2:ce:e4:e2:66:59:64:c3:c0:c4:4b:60:f9:29:91: 15:f9:b2:92:ca:59:7a:df:44:11:b2:a1:8b:fc:dc: f9:d8:c7:e0:66:f9:1c:c6:27:26:1c:00:11:32:4a: a6:e3:19:d8:2d:ea:61:74:7d:be:d6:56:75:cb:60: 4b:47:a0:45:bc:f2:ce:e7:f8:29:58:c6:7d:a1:fd: ae:ec:be:a5:77:ad:7a:70:ca:da:a5:1d:32:1a:2a: f0:3f:2e:ff:da:5d:7a:c7:9e:c0:29:fa:57:ed:47: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A5:97:2E:8A:D0:C2:13:B0:FB:BD:D7:CC:6E:83:8F:6B:12:6B:57 X509v3 Authority Key Identifier: keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:44:55:9f:77:e7:98:27:50:86:c6:d1:73:06:55:53:29:83: a7:9d:a5:75:17:4c:7d:02:c4:24:60:3a:61:cb:05:a8:1e:c7: ba:76:13:87:58:92:aa:40:2c:6a:05:aa:91:1c:e2:14:9f:7b: 36:c4:0d:f3:8b:e8:d8:f9:d5:5d:4d:cf:df:13:1f:84:aa:dc: 91:58:f9:46:3d:e6:fc:58:78:b6:fc:7e:23:e7:26:f9:5c:23: 50:09:4b:83:03:45:9f:89:ae:c9:29:f9:cb:14:6f:df:a7:e1: 4d:60:ae:40:57:b1:f0:e1:93:ac:f4:59:5d:27:25:7d:58:e0: 19:e7:e7:ab:46:dc:9d:6f:74:04:c4:9e:35:15:a5:11:27:55: bc:9f:f5:59:49:a6:f1:a6:43:c3:3e:ec:88:11:a5:45:7e:3d: 6c:d3:55:c0:8a:37:8b:1d:28:56:8e:f1:ce:92:06:1e:9a:c9: 68:89:cc:f4:3e:99:47:59:54:42:38:71:46:29:22:71:dc:12: 67:f9:e8:32:22:b7:9d:03:cd:61:16:0f:28:61:80:d0:ee:bc: ce:16:a8:b3:ed:7e:6c:64:47:90:6b:21:87:37:d7:3b:5c:f4: 4e:09:39:dc:82:5f:51:4d:82:bf:7e:44:fc:60:f8:16:03:78: 80:3c:22:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOq8GAKJbHWplRXxdw9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy ZGUyMGIwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD Eyg2N2E1OTcyZThhZDBjMjEzYjBmYmJkZDdjYzZlODM4ZjZiMTI2YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iMtsPIEusysa37/kY1MAh+qTRx8 lFED3ne5I58eKURzQsnb5rFzBupltChcnd/is9HvL/NoTsTNHlqcS7hTqvprjKFY M0/KIXIv+auc3+2KMFtN9ebyTwW9MjI8Dd2TWazmcBzvJxnueWqPKB7jd+riGbUC YEI7hZMFaEjMBDJM+f/IJEop6vnHB47tbxUKKfeV3rbizuTiZllkw8DES2D5KZEV +bKSyll630QRsqGL/Nz52MfgZvkcxicmHAARMkqm4xnYLephdH2+1lZ1y2BLR6BF vPLO5/gpWMZ9of2u7L6ld616cMrapR0yGirwPy7/2l16x57AKfpX7UdBbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGelly6K0MITsPu918xug49rEmtXMB8GA1UdIwQY MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0 LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkRVn3fn mCdQhsbRcwZVUymDp52ldRdMfQLEJGA6YcsFqB7HunYTh1iSqkAsagWqkRziFJ97 NsQN84vo2PnVXU3P3xMfhKrckVj5Rj3m/Fh4tvx+I+cm+VwjUAlLgwNFn4muySn5 yxRv36fhTWCuQFex8OGTrPRZXSclfVjgGefnq0bcnW90BMSeNRWlESdVvJ/1WUmm 8aZDwz7siBGlRX49bNNVwIo3ix0oVo7xzpIGHprJaInM9D6ZR1lUQjhxRikicdwS Z/noMiK3nQPNYRYPKGGA0O68zhaos+1+bGRHkGshhzfXO1z0Tgk53IJfUU2Cv35E /GD4FgN4gDwiGg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:17 2025 by rpki-client