This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json) Hash identifier: OOdo1Q6Jy8j3ga+x15oV8G+InG60x87pka0b510jkMk= Subject key identifier: 67:0B:F5:94:EF:40:A1:A1:66:1E:7D:14:9A:C6:8D:2A:C0:4E:7B:FB Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Certificate serial: 019B5D1B9F96AC616AF97F63BFFC26250D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft Manifest number: 1209 Signing time: Sat 27 Dec 2025 00:00:49 +0000 Manifest this update: Sat 27 Dec 2025 00:00:49 +0000 Manifest next update: Sun 28 Dec 2025 00:00:49 +0000 Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: PhZ/X8/HeIywe0gnQA0CfELT1Tw3VJaCIYTrvTE/J8g=) 2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:1b:9f:96:ac:61:6a:f9:7f:63:bf:fc:26:25:0d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Validity Not Before: Dec 27 00:00:49 2025 GMT Not After : Dec 28 00:00:49 2025 GMT Subject: CN=670bf594ef40a1a1661e7d149ac68d2ac04e7bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:f9:13:51:18:d0:6e:1f:ea:bc:9c:5f:d2: 11:bb:96:18:cf:8e:5e:28:0f:89:fb:50:6d:e2:32: bd:9e:f8:22:20:43:53:66:be:1f:be:2f:43:3d:8b: d6:dd:6e:3f:3c:a6:49:95:6f:df:0f:76:ab:06:cd: 98:87:5d:f1:ed:2d:6b:89:e0:55:2c:33:2a:bc:24: 07:3d:83:27:3f:4d:31:a2:3d:cc:f9:1f:75:75:b3: e4:63:2f:55:66:8c:d3:92:27:68:ef:ef:65:fc:8d: 0e:ed:ad:49:db:4f:9b:b1:6a:24:a4:e8:a7:e5:43: 5c:1e:0d:4d:a8:6b:5b:be:70:b7:f4:df:ff:da:71: 30:09:65:52:2e:b0:6d:45:52:6f:5d:e8:e8:df:4f: af:cb:67:a0:7a:92:36:e5:25:6d:8f:3a:00:c5:77: 2f:83:5b:58:c4:09:c0:d3:3a:a4:e9:6f:e6:9e:75: 70:d4:9f:95:cb:52:90:4d:11:a2:ca:5d:18:21:21: 5b:b0:6d:b8:30:c7:52:99:98:9d:76:32:3c:11:c8: fb:9d:f8:f1:3f:a4:84:0f:f1:9f:69:f8:78:3b:f1: d5:19:4e:10:16:3e:75:f9:3f:07:c6:6a:26:7b:f5: a0:82:ce:6f:16:1f:ea:ad:35:c3:0a:2c:a9:63:e2: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0B:F5:94:EF:40:A1:A1:66:1E:7D:14:9A:C6:8D:2A:C0:4E:7B:FB X509v3 Authority Key Identifier: keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:cc:0d:76:03:60:1d:d3:ff:d9:09:65:fb:5d:a3:1a:ee: 2b:b5:8f:2e:c3:53:3b:74:87:2c:9a:42:6a:01:1b:30:bf:17: 86:04:9f:60:0f:e2:7e:cd:2a:f3:c9:02:97:6f:0c:20:7b:f6: 88:8e:54:27:49:1f:c8:ab:e6:59:f9:24:6d:d7:7d:2f:2f:40: 25:0e:23:b7:ad:c6:55:da:fb:c1:4a:31:0b:5b:2d:ff:b2:b9: 7f:5c:03:16:d7:0c:31:07:71:1c:47:79:53:a5:ac:0e:79:c9: 2f:c2:ea:88:9b:4b:02:ae:14:f8:69:db:17:62:60:31:07:3d: 3f:54:c5:6e:a7:dd:e3:f9:9a:e0:25:50:da:8b:8a:fa:56:8b: 62:86:e9:c6:df:13:9c:49:87:e9:ed:fd:8c:c5:2d:c8:08:f5: e5:ae:e7:02:7f:a9:69:39:b8:e4:37:26:c0:ca:6f:0d:42:79: 64:02:71:d8:a6:e1:19:bb:18:d2:38:80:21:ac:a2:db:d5:0e: 87:af:e4:4b:ed:9d:6f:36:0c:d9:91:c6:68:18:a1:64:e1:aa: 11:25:5f:8f:65:88:05:96:23:57:43:5a:17:8d:20:5d:63:10: be:95:19:58:80:cd:c6:eb:f3:d1:2c:fd:14:12:f9:4a:3d:1a: e5:13:58:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdG5+WrGFq+X9jv/wmJQ1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3 NTJmYTIwHhcNMjUxMjI3MDAwMDQ5WhcNMjUxMjI4MDAwMDQ5WjAzMTEwLwYDVQQD Eyg2NzBiZjU5NGVmNDBhMWExNjYxZTdkMTQ5YWM2OGQyYWMwNGU3YmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunT5E1EY0G4f6rycX9IRu5YYz45e KA+J+1Bt4jK9nvgiIENTZr4fvi9DPYvW3W4/PKZJlW/fD3arBs2Yh13x7S1rieBV LDMqvCQHPYMnP00xoj3M+R91dbPkYy9VZozTkido7+9l/I0O7a1J20+bsWokpOin 5UNcHg1NqGtbvnC39N//2nEwCWVSLrBtRVJvXejo30+vy2egepI25SVtjzoAxXcv g1tYxAnA0zqk6W/mnnVw1J+Vy1KQTRGiyl0YISFbsG24MMdSmZiddjI8Ecj7nfjx P6SED/Gfafh4O/HVGU4QFj51+T8Hxmome/Wggs5vFh/qrTXDCiypY+Lv8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcL9ZTvQKGhZh59FJrGjSrATnv7MB8GA1UdIwQY MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4 LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGM/MDXYD YB3T/9kJZftdoxruK7WPLsNTO3SHLJpCagEbML8XhgSfYA/ifs0q88kCl28MIHv2 iI5UJ0kfyKvmWfkkbdd9Ly9AJQ4jt63GVdr7wUoxC1st/7K5f1wDFtcMMQdxHEd5 U6WsDnnJL8LqiJtLAq4U+GnbF2JgMQc9P1TFbqfd4/ma4CVQ2ouK+laLYobpxt8T nEmH6e39jMUtyAj15a7nAn+paTm45DcmwMpvDUJ5ZAJx2KbhGbsY0jiAIayi29UO h6/kS+2dbzYM2ZHGaBihZOGqESVfj2WIBZYjV0NaF40gXWMQvpUZWIDNxuvz0Sz9 FBL5Sj0a5RNY0Q== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:39 2025 by rpki-client