This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json) Hash identifier: jVM1m623dSxen0Gn7Z74E67lozBuhxPwU7Pr1Qc+EnM= Subject key identifier: 60:A7:E1:49:EF:98:A7:2D:20:62:23:DA:FD:78:27:CE:CA:8B:A5:7D Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847 Certificate serial: 019B3A587B45FFB6F17A0689199DB5F14DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 06:00:35 +0000 Manifest this update: Sat 20 Dec 2025 06:00:35 +0000 Manifest next update: Sun 21 Dec 2025 06:00:35 +0000 Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=) 2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: Q1i6ialBQFu1mFmJfH6v1m2BlI8QZlz1+/FaQThjl8M=) 3: SvUe214QH6Ya-cuQjZkktKdtLlE.roa (hash: owxUW7VWw73BMkoM79NT87230Ehd2e45uip4EamL7jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:7b:45:ff:b6:f1:7a:06:89:19:9d:b5:f1:4d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847 Validity Not Before: Dec 20 06:00:35 2025 GMT Not After : Dec 21 06:00:35 2025 GMT Subject: CN=60a7e149ef98a72d206223dafd7827ceca8ba57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:02:90:72:b3:c0:ca:c1:c7:60:fc:db:b3: e5:2a:fa:cc:e3:08:61:34:66:17:ec:66:60:30:c2: 27:0a:a7:dc:dc:89:e9:d4:07:59:c9:71:bb:e7:a7: 86:fe:f9:63:af:ed:d6:f7:67:ca:a9:6e:ec:b1:93: 28:7a:b7:a1:ef:dd:1a:21:e5:86:03:03:4c:44:e7: 4d:4e:18:19:b2:f4:73:1c:f2:8d:e7:56:d3:96:ad: 49:3b:8a:2a:65:ae:d5:8a:9b:ab:16:db:ed:e4:83: d2:42:26:7c:aa:b6:cd:1a:ba:b3:59:b6:c4:52:fa: 90:86:cc:85:e6:d6:a9:08:c9:6a:61:55:ba:7a:7f: 16:13:c3:06:23:78:be:1f:77:6e:58:e6:95:61:0e: ba:7f:45:e6:41:33:6a:ce:03:27:3d:cc:28:41:cd: 85:56:7e:a7:7e:08:a4:62:11:0c:79:44:7a:08:f3: 06:a9:09:3e:f5:19:da:36:67:5b:d3:ec:fa:d9:47: 18:9c:41:cd:4a:77:0e:bd:e4:71:59:73:d5:9f:32: 98:30:ab:9a:29:53:3b:c9:98:80:e6:95:02:c4:f3: 6a:10:6f:12:10:46:99:ec:71:8d:ac:1d:c1:c1:53: 04:95:2f:b3:0d:39:e5:d8:40:2b:07:af:13:4b:68: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:E1:49:EF:98:A7:2D:20:62:23:DA:FD:78:27:CE:CA:8B:A5:7D X509v3 Authority Key Identifier: keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:89:b1:6f:fc:15:66:d8:f7:04:90:ba:d5:17:03:75:23:5f: e4:17:e5:22:6d:c9:45:99:f3:07:c2:72:b9:48:d2:7d:81:36: 44:c7:06:10:68:4a:95:9d:aa:d7:df:9d:3f:5c:d6:63:16:f2: 80:80:cc:66:50:fa:46:5c:2a:8f:6f:58:f2:b2:62:9d:8a:30: 87:37:36:cf:90:85:a7:86:62:79:83:50:f3:39:a4:32:fd:21: 11:9a:57:56:52:f2:81:57:fc:44:a5:de:2a:bc:d1:1a:a5:dd: fd:ac:a8:47:c6:bc:15:7f:d6:81:10:44:a0:7c:ec:38:57:e2: 5c:b6:52:d1:21:f5:11:c2:8a:8f:c0:f4:3f:a9:b7:32:f7:f1: cb:e3:a8:39:db:f7:7e:9a:70:64:ce:3f:ae:7c:db:c8:cf:15: 18:8e:ef:e1:7a:16:16:30:d6:ed:61:94:f5:1a:b1:d1:df:75: c1:21:c0:56:f9:21:ba:e5:d5:7e:04:a9:35:03:9b:ad:6d:6f: bd:43:e3:b2:59:29:bf:07:90:93:8f:1f:da:12:1a:f1:3f:ea: 78:fa:78:9e:01:26:59:a5:82:a8:e4:fb:50:1f:f5:df:4d:1b: b6:85:b7:c1:a3:3e:df:41:34:af:59:eb:39:ae:ed:4c:fd:a2: 3a:b8:bf:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHtF/7bxegaJGZ218U3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0 ZTg4NDcwHhcNMjUxMjIwMDYwMDM1WhcNMjUxMjIxMDYwMDM1WjAzMTEwLwYDVQQD Eyg2MGE3ZTE0OWVmOThhNzJkMjA2MjIzZGFmZDc4MjdjZWNhOGJhNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeUCkHKzwMrBx2D827PlKvrM4whh NGYX7GZgMMInCqfc3Inp1AdZyXG756eG/vljr+3W92fKqW7ssZMoereh790aIeWG AwNMROdNThgZsvRzHPKN51bTlq1JO4oqZa7VipurFtvt5IPSQiZ8qrbNGrqzWbbE UvqQhsyF5tapCMlqYVW6en8WE8MGI3i+H3duWOaVYQ66f0XmQTNqzgMnPcwoQc2F Vn6nfgikYhEMeUR6CPMGqQk+9RnaNmdb0+z62UcYnEHNSncOveRxWXPVnzKYMKua KVM7yZiA5pUCxPNqEG8SEEaZ7HGNrB3BwVMElS+zDTnl2EArB68TS2jz2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCn4UnvmKctIGIj2v14J87Ki6V9MB8GA1UdIwQY MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATomxb/wV Ztj3BJC61RcDdSNf5BflIm3JRZnzB8JyuUjSfYE2RMcGEGhKlZ2q19+dP1zWYxby gIDMZlD6Rlwqj29Y8rJinYowhzc2z5CFp4ZieYNQ8zmkMv0hEZpXVlLygVf8RKXe KrzRGqXd/ayoR8a8FX/WgRBEoHzsOFfiXLZS0SH1EcKKj8D0P6m3Mvfxy+OoOdv3 fppwZM4/rnzbyM8VGI7v4XoWFjDW7WGU9Rqx0d91wSHAVvkhuuXVfgSpNQObrW1v vUPjslkpvweQk48f2hIa8T/qePp4ngEmWaWCqOT7UB/1300btoW3waM+30E0r1nr Oa7tTP2iOri/Sw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:04 2025 by rpki-client