This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json) Hash identifier: f/p1Y+4Z28j/XrUzfi6I9AFfeqA5yP4yTozaBVxFlSI= Subject key identifier: 3A:6D:38:0F:7B:97:4B:4F:AC:12:12:E5:B1:8A:DF:4B:F7:08:0E:9D Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Certificate serial: 019B3E3582B9BB395C7306733726FB0D1A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft Manifest number: 11F9 Signing time: Sun 21 Dec 2025 00:00:52 +0000 Manifest this update: Sun 21 Dec 2025 00:00:52 +0000 Manifest next update: Mon 22 Dec 2025 00:00:52 +0000 Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: j6eZJZ0Qf8r0FSOPfT8/VNm/eKJqQq8V1rbKtEadML4=) 2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:82:b9:bb:39:5c:73:06:73:37:26:fb:0d:1a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Validity Not Before: Dec 21 00:00:52 2025 GMT Not After : Dec 22 00:00:52 2025 GMT Subject: CN=3a6d380f7b974b4fac1212e5b18adf4bf7080e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4e:53:f8:88:a1:44:1f:e9:a8:d7:8f:13:a2: 9d:da:8e:0c:a0:ce:47:1d:72:18:0b:72:34:eb:1c: 72:aa:b4:b3:8c:63:6f:76:ac:9b:08:8f:dc:e8:f9: 51:1e:b6:aa:cd:20:df:8b:ba:6c:15:38:74:ec:1f: ea:d1:ed:d1:93:7f:72:1b:48:cc:7f:c5:6c:e7:9b: a1:c8:a1:79:d5:94:a7:a7:f1:ee:4f:6c:f7:c1:40: 60:6d:a1:25:8a:47:75:53:e3:09:b4:84:c7:c5:3b: 3b:77:95:f2:e3:c9:24:ef:e6:cc:fc:04:c5:69:b8: 29:6a:a5:92:8b:2c:af:74:5c:cb:b0:e2:2d:eb:98: 9f:ff:57:6d:5e:04:c0:25:8b:16:a8:8d:50:82:79: e1:55:f0:ab:43:af:09:55:10:84:f4:ec:00:33:9c: 33:70:4f:62:fb:b6:2a:5c:68:04:68:be:f0:06:9b: 03:a7:6f:c7:4b:15:44:47:66:3d:b0:7f:cb:3d:9c: 21:15:14:08:60:bb:96:04:d5:6b:1b:71:50:9e:63: 18:8c:a1:59:30:cb:eb:9b:c4:28:aa:49:56:2a:9e: c8:7a:62:33:ec:50:7b:13:44:b0:ca:97:8a:0e:1a: bd:8d:ea:4d:de:8b:7c:b6:c7:a2:44:43:1b:3c:85: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6D:38:0F:7B:97:4B:4F:AC:12:12:E5:B1:8A:DF:4B:F7:08:0E:9D X509v3 Authority Key Identifier: keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8d:3c:c0:11:72:47:df:df:37:dd:d1:8f:c1:8e:61:2b:44: 6a:69:30:fa:6b:66:96:5c:14:23:3c:80:e1:d7:33:f0:81:ed: 8d:0b:ee:69:f8:a0:40:0d:2a:5e:d5:71:78:91:ea:ca:c1:be: 2b:dd:2b:25:d6:27:fe:d3:3d:79:a5:2e:81:4e:c6:14:29:83: 01:d8:2c:53:68:1b:46:ea:ba:4b:6e:fb:dd:01:26:3d:82:ce: 62:1b:4c:6a:1b:ce:45:fc:73:f8:4d:df:5a:60:38:ab:10:8a: 80:32:c2:17:4a:9a:a6:6f:5f:f1:05:b6:c7:ba:ca:a5:00:d4: 40:e6:4e:ac:53:8f:f2:7d:59:51:b2:e3:eb:8b:6e:d4:e0:86: 9c:10:e9:89:dd:9a:fe:58:7d:51:3e:47:14:40:a8:44:bb:30: f7:2a:4e:71:60:db:d0:47:de:b0:37:43:e9:fe:6e:c5:38:46: 26:a6:c8:f6:22:36:8e:cc:48:72:8d:27:2d:5e:a2:8f:f7:df: a7:3e:a8:03:6c:03:3e:f1:a0:67:db:44:21:8b:ba:11:ed:5b: 43:f9:14:eb:1c:ad:40:e6:c0:5b:e7:9c:84:ec:13:7c:91:2e: 85:60:09:d2:48:7b:4b:41:8f:7f:22:61:a2:6f:68:a5:9c:27: cf:be:cb:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NYK5uzlccwZzNyb7DRoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3 NTJmYTIwHhcNMjUxMjIxMDAwMDUyWhcNMjUxMjIyMDAwMDUyWjAzMTEwLwYDVQQD EygzYTZkMzgwZjdiOTc0YjRmYWMxMjEyZTViMThhZGY0YmY3MDgwZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA305T+IihRB/pqNePE6Kd2o4MoM5H HXIYC3I06xxyqrSzjGNvdqybCI/c6PlRHraqzSDfi7psFTh07B/q0e3Rk39yG0jM f8Vs55uhyKF51ZSnp/HuT2z3wUBgbaElikd1U+MJtITHxTs7d5Xy48kk7+bM/ATF abgpaqWSiyyvdFzLsOIt65if/1dtXgTAJYsWqI1QgnnhVfCrQ68JVRCE9OwAM5wz cE9i+7YqXGgEaL7wBpsDp2/HSxVER2Y9sH/LPZwhFRQIYLuWBNVrG3FQnmMYjKFZ MMvrm8QoqklWKp7IemIz7FB7E0SwypeKDhq9jepN3ot8tseiREMbPIWlfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDptOA97l0tPrBIS5bGK30v3CA6dMB8GA1UdIwQY MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4 LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqo08wBFy R9/fN93Rj8GOYStEamkw+mtmllwUIzyA4dcz8IHtjQvuafigQA0qXtVxeJHqysG+ K90rJdYn/tM9eaUugU7GFCmDAdgsU2gbRuq6S2773QEmPYLOYhtMahvORfxz+E3f WmA4qxCKgDLCF0qapm9f8QW2x7rKpQDUQOZOrFOP8n1ZUbLj64tu1OCGnBDpid2a /lh9UT5HFECoRLsw9ypOcWDb0EfesDdD6f5uxThGJqbI9iI2jsxIco0nLV6ij/ff pz6oA2wDPvGgZ9tEIYu6Ee1bQ/kU6xytQObAW+echOwTfJEuhWAJ0kh7S0GPfyJh om9opZwnz77L4g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:19 2025 by rpki-client