This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: 5SmYgV8EjzgFL2Y7Mel/D9aQ88sAERm4jsyUmSJJGs4= Subject key identifier: 70:22:68:D4:3C:5D:31:43:76:17:34:F7:65:59:F9:FD:F3:EA:0E:8F Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019B38D8525101459F686C5D95111C14170E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 177B Signing time: Fri 19 Dec 2025 23:00:59 +0000 Manifest this update: Fri 19 Dec 2025 23:00:59 +0000 Manifest next update: Sat 20 Dec 2025 23:00:59 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: kdUFfViXUsio4Ht0WNwJS/CQ25x5Kx/lm+CyVGg+QlQ=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa (hash: Hy1jxMcmkJjc7Rfw6ZAzEMKDTAjkCP2ewVbsibxOPr4=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:52:51:01:45:9f:68:6c:5d:95:11:1c:14:17:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Dec 19 23:00:59 2025 GMT Not After : Dec 20 23:00:59 2025 GMT Subject: CN=702268d43c5d3143761734f76559f9fdf3ea0e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:81:aa:7c:e4:82:f7:55:aa:c4:2f:a5:fd: c4:b8:7d:94:7e:9d:f1:df:d6:8d:ea:51:03:52:23: 88:1e:78:87:6e:90:00:e4:c3:f6:2b:06:a4:1f:91: 45:52:2f:c1:bf:13:36:e6:d4:08:9d:f6:67:18:63: bd:d8:78:a6:48:c2:d4:7c:74:a2:31:1b:8a:e4:ec: 80:98:71:9e:3f:2c:0d:c9:ae:28:d1:c7:bd:d1:e7: 81:a1:f5:cd:e3:18:5e:cd:bf:da:fb:f9:12:ea:71: 02:6c:79:bc:31:f1:6f:43:ca:05:84:9b:f5:65:99: 94:7e:d3:89:a4:c3:37:54:35:97:ab:ff:4d:f6:d7: 8c:c1:ff:07:b5:6f:e9:44:f4:7e:f9:2a:b2:7a:e7: 87:7b:86:8f:a7:3e:91:30:6c:58:30:70:6c:80:f9: d8:8c:a8:ee:f3:49:69:2a:da:c6:3b:98:37:54:86: ed:33:dc:13:45:b9:81:ee:32:5e:24:75:05:d2:b9: 49:3a:dc:a3:a3:ec:24:80:62:4e:a5:f3:ae:2e:13: b6:fc:7d:28:82:d2:db:85:fc:8d:97:e4:80:c8:25: 3e:55:b2:70:11:be:db:62:b1:4f:b2:1a:79:d4:ea: de:79:c3:96:50:b8:fb:6b:c3:2b:1b:cb:aa:84:2a: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:22:68:D4:3C:5D:31:43:76:17:34:F7:65:59:F9:FD:F3:EA:0E:8F X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:90:cf:ef:57:85:e0:74:fb:c8:74:ae:68:15:a1:a0:84:b4: 84:a6:ff:22:ea:6f:8c:ec:f2:af:83:a5:4e:15:ef:38:ec:9b: 33:46:4b:23:5a:0d:38:d1:b6:63:85:0b:1e:f5:9f:b6:94:9e: 4f:f8:a1:65:06:57:b8:90:5a:79:4d:2f:3f:5c:2d:21:39:f0: 72:f6:01:bd:49:bd:35:05:fb:60:57:61:ac:8c:26:3c:99:f4: 01:f0:71:a4:03:93:3e:67:a8:69:5c:b4:8d:8c:9a:b3:0a:c2: 62:68:9b:3b:58:f5:62:21:0e:e1:59:c0:b7:11:02:27:68:4f: 92:37:7f:b3:94:69:dd:48:a3:d9:d3:fd:70:45:c7:c0:5f:44: d8:a5:76:19:2d:6c:c5:07:af:85:b2:e1:50:9a:af:74:99:cc: 5b:24:b5:76:22:71:8e:e2:6b:df:45:e5:e8:02:c7:04:2a:66: bd:21:09:b1:cc:8d:3f:0e:d3:b1:65:e4:6f:2c:11:37:c7:28: f4:e6:38:1d:2a:52:fe:34:10:e8:84:c0:01:5f:2a:b2:f3:8f: 76:6d:2c:a6:a6:38:f1:c3:a0:b2:74:03:d8:c0:e8:b6:79:2e: 71:64:8f:86:d4:14:89:4a:5d:6a:05:bb:61:ac:cd:68:e5:a5: e1:6a:05:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42FJRAUWfaGxdlREcFBcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUxMjE5MjMwMDU5WhcNMjUxMjIwMjMwMDU5WjAzMTEwLwYDVQQD Eyg3MDIyNjhkNDNjNWQzMTQzNzYxNzM0Zjc2NTU5ZjlmZGYzZWEwZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO2BqnzkgvdVqsQvpf3EuH2Ufp3x 39aN6lEDUiOIHniHbpAA5MP2KwakH5FFUi/BvxM25tQInfZnGGO92HimSMLUfHSi MRuK5OyAmHGePywNya4o0ce90eeBofXN4xhezb/a+/kS6nECbHm8MfFvQ8oFhJv1 ZZmUftOJpMM3VDWXq/9N9teMwf8HtW/pRPR++SqyeueHe4aPpz6RMGxYMHBsgPnY jKju80lpKtrGO5g3VIbtM9wTRbmB7jJeJHUF0rlJOtyjo+wkgGJOpfOuLhO2/H0o gtLbhfyNl+SAyCU+VbJwEb7bYrFPshp51OreecOWULj7a8MrG8uqhCpREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAiaNQ8XTFDdhc092VZ+f3z6g6PMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJDP71eF 4HT7yHSuaBWhoIS0hKb/IupvjOzyr4OlThXvOOybM0ZLI1oNONG2Y4ULHvWftpSe T/ihZQZXuJBaeU0vP1wtITnwcvYBvUm9NQX7YFdhrIwmPJn0AfBxpAOTPmeoaVy0 jYyaswrCYmibO1j1YiEO4VnAtxECJ2hPkjd/s5Rp3Uij2dP9cEXHwF9E2KV2GS1s xQevhbLhUJqvdJnMWyS1diJxjuJr30Xl6ALHBCpmvSEJscyNPw7TsWXkbywRN8co 9OY4HSpS/jQQ6ITAAV8qsvOPdm0spqY48cOgsnQD2MDotnkucWSPhtQUiUpdagW7 YazNaOWl4WoF5w== -----END CERTIFICATE-----Generated at Sat Dec 20 08:18:09 2025 by rpki-client