This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json) Hash identifier: IVUln/dbnOMalpXx5omfMLiLOA0XR4VAV3t6rozFj6g= Subject key identifier: D3:F1:F1:11:7B:FA:BD:82:76:84:4F:A3:CA:BD:EB:4E:2B:58:0E:32 Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Certificate serial: 019B3CEC803D0B6AE949CE475F5EBDD865CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft Manifest number: 126B Signing time: Sat 20 Dec 2025 18:01:30 +0000 Manifest this update: Sat 20 Dec 2025 18:01:30 +0000 Manifest next update: Sun 21 Dec 2025 18:01:30 +0000 Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=) 2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: OtjMc9ReZNkT6P2onaF8cRjvGq8YfXgdE7qTeR0/MVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:80:3d:0b:6a:e9:49:ce:47:5f:5e:bd:d8:65:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Validity Not Before: Dec 20 18:01:30 2025 GMT Not After : Dec 21 18:01:30 2025 GMT Subject: CN=d3f1f1117bfabd8276844fa3cabdeb4e2b580e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:9f:35:c3:34:b8:2d:c1:f5:52:dc:e6:77: 64:7a:70:5c:57:43:3f:9c:aa:36:83:43:ec:0c:d3: 41:ed:82:ff:b1:a6:25:cc:5d:6e:06:cd:bc:3d:d3: 3c:37:d7:c6:2f:33:6c:ae:8c:ae:ed:8f:d8:fc:5c: 5f:f2:b5:8d:4e:ce:0e:11:f2:f6:16:f2:2a:61:e0: 1e:06:f9:32:8f:a5:05:42:dc:12:e4:1d:64:df:ef: e9:2b:73:15:2c:8a:f4:22:3c:08:87:45:37:9b:86: e8:43:48:df:83:ef:2b:cf:2f:59:68:6b:ee:91:f2: 43:1d:1c:8a:06:a7:2e:42:17:cb:c8:29:7e:bb:31: 6d:a5:49:df:23:f3:99:b2:77:28:06:46:89:b6:2d: 4c:f6:17:9e:b4:58:e1:48:58:5b:a5:f4:1a:02:44: 19:e1:b3:c7:55:94:e0:22:1f:dd:1a:8f:68:82:e6: 25:56:71:ff:d1:19:41:42:2d:fd:67:84:e7:29:2e: 3e:66:ec:8b:1b:56:05:1e:26:94:6c:9a:89:3a:2d: fc:7c:a7:f0:db:20:07:16:62:e4:39:9a:57:91:19: 08:7d:db:77:51:6d:8d:3b:7e:f9:d8:58:3a:1d:3f: a2:c6:96:19:96:ad:7a:e9:ab:d7:7f:89:36:fd:b8: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:F1:11:7B:FA:BD:82:76:84:4F:A3:CA:BD:EB:4E:2B:58:0E:32 X509v3 Authority Key Identifier: keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a3:aa:d3:97:50:77:80:26:1f:c9:8f:89:e5:f2:9d:3b:26: 3d:11:fb:9a:8f:39:25:24:f8:8a:06:ff:b4:37:1d:fe:7a:b5: b3:a8:7e:22:02:8a:30:50:b8:2a:bb:aa:76:db:ca:83:c1:0c: 6c:2c:4b:00:d5:d6:78:c0:86:62:01:a9:3d:e6:29:56:2c:e4: de:45:e8:93:f1:92:9a:66:51:bb:ab:88:f5:af:8b:be:ac:b1: 93:7d:8c:34:09:cd:b7:26:fc:cb:4c:59:75:87:b0:b6:51:2c: da:93:a0:08:b0:31:d8:45:8d:28:d3:b1:1d:ce:57:50:53:e2: ea:67:e2:66:b0:cd:66:10:4e:9e:2f:76:85:43:6a:d1:fd:c6: 27:e5:d9:20:d0:d1:fa:c5:87:ca:92:f7:3c:4e:45:6f:fa:3a: d0:2e:a2:e1:22:2b:e8:e2:a7:92:34:d3:45:36:38:ce:5e:65: 73:2b:78:bd:d7:de:fc:3b:73:a6:9c:3e:26:92:af:8c:e7:ac: 2e:3b:15:39:8a:61:72:91:4f:e4:8c:52:f4:1d:94:1a:c9:00: a9:58:1b:c0:fd:62:b8:47:fc:4f:d4:65:d2:d8:ae:c0:95:67: c0:15:d1:61:33:07:24:ef:9d:ec:47:a9:af:e6:3a:b5:81:7d: a3:25:0b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87IA9C2rpSc5HX1692GXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh OWRiM2QwHhcNMjUxMjIwMTgwMTMwWhcNMjUxMjIxMTgwMTMwWjAzMTEwLwYDVQQD EyhkM2YxZjExMTdiZmFiZDgyNzY4NDRmYTNjYWJkZWI0ZTJiNTgwZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytefNcM0uC3B9VLc5ndkenBcV0M/ nKo2g0PsDNNB7YL/saYlzF1uBs28PdM8N9fGLzNsroyu7Y/Y/Fxf8rWNTs4OEfL2 FvIqYeAeBvkyj6UFQtwS5B1k3+/pK3MVLIr0IjwIh0U3m4boQ0jfg+8rzy9ZaGvu kfJDHRyKBqcuQhfLyCl+uzFtpUnfI/OZsncoBkaJti1M9heetFjhSFhbpfQaAkQZ 4bPHVZTgIh/dGo9oguYlVnH/0RlBQi39Z4TnKS4+ZuyLG1YFHiaUbJqJOi38fKfw 2yAHFmLkOZpXkRkIfdt3UW2NO3752Fg6HT+ixpYZlq166avXf4k2/bil7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPx8RF7+r2CdoRPo8q9604rWA4yMB8GA1UdIwQY MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt YWYxZGUzZDBmMjE3LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3 LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaOq05dQ d4AmH8mPieXynTsmPRH7mo85JST4igb/tDcd/nq1s6h+IgKKMFC4KruqdtvKg8EM bCxLANXWeMCGYgGpPeYpVizk3kXok/GSmmZRu6uI9a+Lvqyxk32MNAnNtyb8y0xZ dYewtlEs2pOgCLAx2EWNKNOxHc5XUFPi6mfiZrDNZhBOni92hUNq0f3GJ+XZINDR +sWHypL3PE5Fb/o60C6i4SIr6OKnkjTTRTY4zl5lcyt4vdfe/Dtzppw+JpKvjOes LjsVOYphcpFP5IxS9B2UGskAqVgbwP1iuEf8T9Rl0tiuwJVnwBXRYTMHJO+d7Eep r+Y6tYF9oyULQg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:35 2025 by rpki-client