This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json) Hash identifier: KnExf0p+E7zb8QjoT82GGWXMb5vsDvrz6m6O88WLqzk= Subject key identifier: C7:81:6D:57:89:E9:90:E5:0C:29:B7:44:8A:70:24:A8:16:8E:CA:B3 Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Certificate serial: 019B3AFE1F37F4E3DBDE2BA64D68550D9E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft Manifest number: 126A Signing time: Sat 20 Dec 2025 09:01:31 +0000 Manifest this update: Sat 20 Dec 2025 09:01:31 +0000 Manifest next update: Sun 21 Dec 2025 09:01:31 +0000 Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=) 2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: DOR98UWVuG3DCofXo5+SZjr72RimrQ2eh3yS3HABqzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:1f:37:f4:e3:db:de:2b:a6:4d:68:55:0d:9e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Validity Not Before: Dec 20 09:01:31 2025 GMT Not After : Dec 21 09:01:31 2025 GMT Subject: CN=c7816d5789e990e50c29b7448a7024a8168ecab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:9b:ab:44:8d:3d:2d:b8:a5:2c:dc:ea:3b: fe:c2:db:cf:18:dc:07:ea:ae:08:3c:2f:38:79:23: db:0c:2a:59:dd:2a:3f:dc:38:27:af:bf:85:c9:a2: 4d:b6:c6:95:2d:77:a9:49:be:0b:ee:c7:17:40:7c: 4d:46:89:71:11:ab:d7:b8:14:2c:17:36:bf:a8:a8: 34:59:5e:be:17:bc:f6:3f:e9:df:a4:b9:97:b6:31: 34:73:68:24:de:9e:45:14:07:74:fe:36:79:a4:a2: ae:a9:fb:38:2b:50:a1:2b:81:9a:eb:5d:06:7d:32: bd:ad:db:ba:22:a3:ac:e6:c2:35:60:5e:15:e2:f9: ed:88:94:66:3c:49:b3:07:ea:cb:f3:11:dd:aa:d7: e5:a1:ce:b6:33:a8:49:94:dc:24:88:9e:85:94:f2: 22:07:98:6e:e1:2e:0a:66:d0:5c:14:3a:23:e1:68: 70:2e:05:27:8e:56:14:e1:a4:8e:a3:ce:9f:c6:1e: e8:80:c2:ab:8c:e1:fc:9a:1c:7e:f1:5c:fe:cc:1d: 6b:16:01:ec:d3:ea:a1:12:99:fa:ec:03:1c:4a:9a: 51:14:71:32:37:a4:ab:4a:c9:1c:b5:0e:db:2c:88: 42:8c:eb:1d:b3:ce:2b:e3:e0:93:f2:03:b2:83:4d: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:81:6D:57:89:E9:90:E5:0C:29:B7:44:8A:70:24:A8:16:8E:CA:B3 X509v3 Authority Key Identifier: keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f5:a6:22:7d:14:5e:79:1f:df:f9:bf:f3:e5:60:b7:1c:53: 00:21:b6:d9:ab:86:72:8a:fd:81:a3:79:fc:f7:08:ae:e1:b5: aa:55:83:62:42:4b:eb:3f:c7:c3:d1:e3:9a:b7:a3:35:a6:34: 48:3a:f8:25:c2:94:14:01:8c:52:bd:fa:b7:83:15:52:45:4d: d1:9b:02:3b:f1:f1:3d:e3:7f:e8:13:90:58:ef:53:93:ca:7b: c1:48:39:72:47:57:32:53:b1:59:41:ec:db:aa:25:7d:7c:11: 00:8d:79:07:a7:03:f0:a3:7b:80:d0:18:0d:38:ce:6b:1c:2b: 0c:43:62:96:47:53:bf:af:a4:30:5f:de:1e:8f:3c:bf:ab:b2: bd:93:ba:43:96:23:34:e4:ba:20:0b:9c:cf:56:63:6b:e3:ba: ac:08:b9:bf:d2:45:e4:3f:2c:c7:00:1e:d6:92:ed:5b:94:32: 9d:7e:7f:53:cd:d0:3e:94:0d:4f:27:cc:84:f9:c0:7e:ba:b0: 37:1b:a6:c6:31:b9:7e:11:3f:36:19:47:4a:d1:28:0b:53:f5: 39:76:70:bf:f5:a6:18:0d:e0:8d:9c:a9:4c:79:8f:c9:2b:c5: 44:84:b6:65:08:e8:55:c7:a3:0d:1b:65:04:de:83:fe:70:64: 58:4a:08:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/h839OPb3iumTWhVDZ4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh OWRiM2QwHhcNMjUxMjIwMDkwMTMxWhcNMjUxMjIxMDkwMTMxWjAzMTEwLwYDVQQD EyhjNzgxNmQ1Nzg5ZTk5MGU1MGMyOWI3NDQ4YTcwMjRhODE2OGVjYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr6bq0SNPS24pSzc6jv+wtvPGNwH 6q4IPC84eSPbDCpZ3So/3Dgnr7+FyaJNtsaVLXepSb4L7scXQHxNRolxEavXuBQs Fza/qKg0WV6+F7z2P+nfpLmXtjE0c2gk3p5FFAd0/jZ5pKKuqfs4K1ChK4Ga610G fTK9rdu6IqOs5sI1YF4V4vntiJRmPEmzB+rL8xHdqtfloc62M6hJlNwkiJ6FlPIi B5hu4S4KZtBcFDoj4WhwLgUnjlYU4aSOo86fxh7ogMKrjOH8mhx+8Vz+zB1rFgHs 0+qhEpn67AMcSppRFHEyN6SrSskctQ7bLIhCjOsds84r4+CT8gOyg02HwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeBbVeJ6ZDlDCm3RIpwJKgWjsqzMB8GA1UdIwQY MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt YWYxZGUzZDBmMjE3LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3 LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/WmIn0U Xnkf3/m/8+VgtxxTACG22auGcor9gaN5/PcIruG1qlWDYkJL6z/Hw9HjmrejNaY0 SDr4JcKUFAGMUr36t4MVUkVN0ZsCO/HxPeN/6BOQWO9Tk8p7wUg5ckdXMlOxWUHs 26olfXwRAI15B6cD8KN7gNAYDTjOaxwrDENilkdTv6+kMF/eHo88v6uyvZO6Q5Yj NOS6IAucz1Zja+O6rAi5v9JF5D8sxwAe1pLtW5QynX5/U83QPpQNTyfMhPnAfrqw NxumxjG5fhE/NhlHStEoC1P1OXZwv/WmGA3gjZypTHmPySvFRIS2ZQjoVcejDRtl BN6D/nBkWEoIFw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:47:15 2025 by rpki-client