This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json) Hash identifier: YKchXyiedWBN2nG3a+uKRtO/moUuljmt9YK91PitXUQ= Subject key identifier: 5D:1E:B2:3D:29:E5:DB:0C:FE:2A:CA:A0:07:5A:E9:17:D4:A3:F6:E8 Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24 Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324 Certificate serial: 019B31FABFB814F6CD746FCA432EDE04D9E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft Manifest number: 1569 Signing time: Thu 18 Dec 2025 15:01:15 +0000 Manifest this update: Thu 18 Dec 2025 15:01:15 +0000 Manifest next update: Fri 19 Dec 2025 15:01:15 +0000 Files and hashes: 1: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (hash: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=) 2: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: RdXcMGgytcUtY5rZ/tg6kHnPfIw/BTbByBopBkvHEtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:bf:b8:14:f6:cd:74:6f:ca:43:2e:de:04:d9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324 Validity Not Before: Dec 18 15:01:15 2025 GMT Not After : Dec 19 15:01:15 2025 GMT Subject: CN=5d1eb23d29e5db0cfe2acaa0075ae917d4a3f6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:c4:10:75:cf:4e:2d:07:86:0a:fc:e6:87: 31:cb:d7:43:d0:d2:c7:ce:ce:f2:35:f0:cf:44:22: d8:62:20:38:95:52:32:2b:f0:1d:37:06:81:1a:c1: be:cd:22:1f:fa:de:cc:ad:aa:c7:61:69:d9:62:86: 8a:f9:ad:a4:ab:b4:03:19:e6:52:d9:8b:63:2d:94: ca:e3:25:d3:e3:5b:9c:58:c5:0e:2a:7d:38:b1:12: e9:63:1c:5e:73:62:d5:58:5e:5f:d1:04:37:03:3a: 39:60:a7:4b:00:b4:ff:9c:fb:5e:c7:b2:da:59:2b: 25:4c:94:e3:ab:85:ff:9c:70:2f:d1:57:b1:63:6b: 72:e3:7d:56:75:0a:15:a5:c5:cf:93:09:78:0e:af: 3c:f8:69:47:8f:97:8d:ff:c3:9e:99:c9:e3:83:61: bf:2e:7c:d6:6c:fb:10:f2:04:80:c0:94:e6:1d:ef: 7d:8e:66:31:ab:1f:32:41:8d:90:ba:cc:bf:9b:a1: b0:a3:88:93:54:8f:1e:f1:98:50:9f:e0:f9:96:3f: 49:3e:95:b4:6c:fa:85:8f:70:bd:dd:b8:74:34:db: ee:c9:12:ea:6e:88:7b:56:21:f6:c5:7f:25:12:a0: ca:cf:bf:f7:91:71:80:31:9f:e9:2f:17:69:cb:db: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:B2:3D:29:E5:DB:0C:FE:2A:CA:A0:07:5A:E9:17:D4:A3:F6:E8 X509v3 Authority Key Identifier: keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:35:6b:ec:7b:3c:f2:25:fc:86:80:31:e9:79:b0:81:42:09: 17:28:a9:3e:0b:13:fb:63:01:b8:b2:bb:95:6f:27:09:76:b2: 01:1a:89:f0:57:ca:84:cd:2c:5f:11:44:86:97:98:72:7c:fe: 5d:72:94:4d:be:2e:ea:b4:7e:db:df:19:35:f4:27:c3:58:a6: 1a:18:08:92:64:6c:6c:ae:93:3b:06:4f:cc:a8:f2:23:dd:ce: 00:f8:03:23:74:86:46:df:c0:54:cf:8b:41:73:ed:bd:24:ef: f0:a3:45:4c:25:93:86:56:93:c8:f9:f6:d9:e7:f3:8a:b3:6b: 0f:bc:6f:25:e9:65:09:5c:b7:6d:b7:89:99:cc:0f:48:a8:77: bc:a4:a1:f0:6f:df:f8:de:9c:81:b6:78:a1:ff:03:e0:db:b5: c7:7a:9c:3f:a3:e9:39:45:3e:18:3f:1a:6c:65:f5:a8:f6:db: be:04:0b:21:2f:5f:16:f8:f3:c7:78:e1:2e:85:c9:bb:c8:93: c1:04:cb:dd:11:1b:e4:7b:01:87:40:3e:91:37:e3:20:63:fa: bb:51:c3:97:27:a1:53:4c:36:e2:29:62:4c:a3:db:5f:ec:3d: eb:ba:9f:1a:d4:7a:ab:ab:d4:e5:f1:15:c6:62:d8:5f:c9:aa: 6e:50:0d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+r+4FPbNdG/KQy7eBNnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTcyZjNlZDIzZTIyOTRmOWJiNmJhNjYwMjQ2MTY2YzEz ZjgzMjQwHhcNMjUxMjE4MTUwMTE1WhcNMjUxMjE5MTUwMTE1WjAzMTEwLwYDVQQD Eyg1ZDFlYjIzZDI5ZTVkYjBjZmUyYWNhYTAwNzVhZTkxN2Q0YTNmNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbEEHXPTi0Hhgr85ocxy9dD0NLH zs7yNfDPRCLYYiA4lVIyK/AdNwaBGsG+zSIf+t7MrarHYWnZYoaK+a2kq7QDGeZS 2YtjLZTK4yXT41ucWMUOKn04sRLpYxxec2LVWF5f0QQ3Azo5YKdLALT/nPtex7La WSslTJTjq4X/nHAv0VexY2ty431WdQoVpcXPkwl4Dq88+GlHj5eN/8Oemcnjg2G/ LnzWbPsQ8gSAwJTmHe99jmYxqx8yQY2Qusy/m6Gwo4iTVI8e8ZhQn+D5lj9JPpW0 bPqFj3C93bh0NNvuyRLqboh7ViH2xX8lEqDKz7/3kXGAMZ/pLxdpy9u57QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0esj0p5dsM/irKoAda6RfUo/boMB8GA1UdIwQY MBaAFCKnLz7SPiKU+btrpmAkYWbBP4MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQt YjBiMmVhYWVlZDYxLzEvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQtYjBiMmVhYWVlZDYx LzEvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDVr7Hs8 8iX8hoAx6XmwgUIJFyipPgsT+2MBuLK7lW8nCXayARqJ8FfKhM0sXxFEhpeYcnz+ XXKUTb4u6rR+298ZNfQnw1imGhgIkmRsbK6TOwZPzKjyI93OAPgDI3SGRt/AVM+L QXPtvSTv8KNFTCWThlaTyPn22efzirNrD7xvJellCVy3bbeJmcwPSKh3vKSh8G/f +N6cgbZ4of8D4Nu1x3qcP6PpOUU+GD8abGX1qPbbvgQLIS9fFvjzx3jhLoXJu8iT wQTL3REb5HsBh0A+kTfjIGP6u1HDlyehU0w24iliTKPbX+w967qfGtR6q6vU5fEV xmLYX8mqblANsg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:49 2025 by rpki-client