This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: fFEV1kwziHo2v/7tY179e82bE9vluyLzf4DjpcdmvXM= Subject key identifier: 0F:84:1D:4E:9A:8C:3D:3E:27:62:71:AE:2A:EA:15:82:76:2E:70:18 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B39EA8E5F561CC0CEE5582C403964D054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0AB7 Signing time: Sat 20 Dec 2025 04:00:31 +0000 Manifest this update: Sat 20 Dec 2025 04:00:31 +0000 Manifest next update: Sun 21 Dec 2025 04:00:31 +0000 Files and hashes: 1: Dc1SxW96IAQ3f2snIBmens7GV0U.roa (hash: A68NloNFUVZ/1yLMaTnJ5sUcnw8LpIIqTLsAe9oPGuQ=) 2: Hclo7mgAV-Jk6Qp5sVlZMDADheQ.roa (hash: cVUhTfbeGPClCYhj8aCdhEzcQl8l864NJzclgxFTC+Y=) 3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: 43AqP9wC1ebFVuzKNlPwo2BDCXYQVXJUI1O9eidOOi8=) 4: Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa (hash: MiHDGBqhLXLE6nmzkue9evydNoK6FMJwJm/pNx6ZNnQ=) 5: _bqJOppJMYlhCqHfIAJ6Sh83vHA.roa (hash: 1f0aFmNhmLx4lKQjnS1bd4RzjmzmwwV3y7zrSykmheM=) 6: ajmq5QdlQvXrCBRMjUs67yP9AmI.roa (hash: mQ5XjE5gzuzrTdkByBU3/meXRrw3VOANPbjnntSYJ74=) 7: cwh3r4eWlWrhqTwyia3Y6IkQ-I4.roa (hash: EAtSuVfxmrmE7PUep+zevWjbxh//ARj59/51XZyWbTI=) 8: iIyJKjInlinbrFoxMvyP7cHrL18.roa (hash: jppb7YCDugjMDFMLhWTY9NbjBHwSDw8mYabJJeuiwkQ=) 9: xmgEeMB7WvkvTgZR5WIp3Cku-OQ.roa (hash: DB/674zCoFtnashikqEwhqolbIZIshtp2JBUcqe8xB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:8e:5f:56:1c:c0:ce:e5:58:2c:40:39:64:d0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Dec 20 04:00:31 2025 GMT Not After : Dec 21 04:00:31 2025 GMT Subject: CN=0f841d4e9a8c3d3e276271ae2aea1582762e7018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:3e:6c:b7:e7:4f:40:f9:8d:49:64:20:fc: 90:31:a1:e9:2a:09:1e:7a:1a:1d:ab:27:b6:f7:5e: ce:c3:9c:cf:cb:34:04:6c:c1:54:fd:b9:f3:1e:89: aa:ff:ea:5c:60:ea:62:a6:a8:59:83:96:c7:bd:4d: af:38:b7:4f:26:25:47:f5:30:f1:d4:7c:96:63:86: ea:97:10:08:e2:8f:c4:f6:6e:41:57:3a:41:3a:db: 48:da:3e:e1:e8:ae:6c:e5:3f:f0:17:98:8a:21:17: 17:41:c5:b2:36:b8:62:b2:1f:06:1f:92:5c:9f:bc: a1:4c:38:12:f4:2b:b3:c6:de:30:10:de:62:5b:2a: 77:55:ce:5e:cf:93:c3:f2:83:f4:27:32:09:ef:f8: e5:f7:7d:0e:92:90:53:b9:bc:54:01:61:d2:01:17: c0:51:cd:72:1f:9d:3f:d2:e6:d7:40:f4:ef:2f:fa: 70:cd:a6:5b:ed:3e:ff:18:07:30:1d:36:83:2c:37: 64:fc:24:fc:8d:c8:7d:6e:0c:a5:92:02:03:0f:18: 2c:46:a7:e3:c5:67:f4:a9:c3:73:ad:bb:ab:6b:1e: 32:a7:f9:6b:89:37:f6:9d:ad:93:8c:1d:b3:f6:ce: a3:a2:fb:dc:2b:a6:4c:1d:a6:d6:f7:9a:74:29:15: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:84:1D:4E:9A:8C:3D:3E:27:62:71:AE:2A:EA:15:82:76:2E:70:18 X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ff:73:c7:0c:30:69:e5:3d:68:25:8c:62:a2:4f:a8:fe:0c: 18:4f:43:d2:7f:9f:3a:bb:cc:ab:da:ff:9f:87:5a:c8:f5:83: 99:0c:0b:af:d4:5e:cc:3a:da:df:67:10:8b:a4:44:d6:7a:32: a3:34:c2:98:c4:c1:03:a3:7e:1d:9a:d9:12:24:9a:26:12:16: a8:47:fd:e3:55:5e:e5:c0:58:bd:25:89:79:41:30:82:d6:27: f3:45:5d:ef:02:d6:33:20:89:d7:6f:3e:00:98:86:64:33:ea: 9f:73:55:c0:a8:91:07:e3:59:53:da:e9:d7:36:a5:f9:37:9c: a4:38:e6:8b:14:fe:2e:fa:a2:d3:de:e7:fc:a0:d7:80:1f:85: 81:9a:3c:75:66:ea:44:28:9d:42:03:86:96:b6:75:39:b1:58: e1:3a:27:24:9d:10:c9:68:4e:37:8f:13:ac:1c:b6:e2:af:8e: 8f:0d:80:d0:46:7a:6b:8f:65:f8:5c:cd:94:29:75:cc:9d:fe: d0:4d:41:98:29:77:c6:6e:7e:bc:7c:4b:b2:6a:88:3e:e1:3a: 77:b6:40:ca:bc:d0:8c:6e:46:ad:a4:92:27:36:57:81:4b:fd: 16:37:b6:0a:9e:8b:9b:ea:01:20:04:f6:70:22:b1:e7:43:6f: 6b:5e:e0:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56o5fVhzAzuVYLEA5ZNBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjUxMjIwMDQwMDMxWhcNMjUxMjIxMDQwMDMxWjAzMTEwLwYDVQQD EygwZjg0MWQ0ZTlhOGMzZDNlMjc2MjcxYWUyYWVhMTU4Mjc2MmU3MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkk+bLfnT0D5jUlkIPyQMaHpKgke ehodqye2917Ow5zPyzQEbMFU/bnzHomq/+pcYOpipqhZg5bHvU2vOLdPJiVH9TDx 1HyWY4bqlxAI4o/E9m5BVzpBOttI2j7h6K5s5T/wF5iKIRcXQcWyNrhish8GH5Jc n7yhTDgS9Cuzxt4wEN5iWyp3Vc5ez5PD8oP0JzIJ7/jl930OkpBTubxUAWHSARfA Uc1yH50/0ubXQPTvL/pwzaZb7T7/GAcwHTaDLDdk/CT8jch9bgylkgIDDxgsRqfj xWf0qcNzrburax4yp/lriTf2na2TjB2z9s6jovvcK6ZMHabW95p0KRUBwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+EHU6ajD0+J2JxrirqFYJ2LnAYMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif9zxwww aeU9aCWMYqJPqP4MGE9D0n+fOrvMq9r/n4dayPWDmQwLr9RezDra32cQi6RE1noy ozTCmMTBA6N+HZrZEiSaJhIWqEf941Ve5cBYvSWJeUEwgtYn80Vd7wLWMyCJ128+ AJiGZDPqn3NVwKiRB+NZU9rp1zal+TecpDjmixT+Lvqi097n/KDXgB+FgZo8dWbq RCidQgOGlrZ1ObFY4TonJJ0QyWhON48TrBy24q+Ojw2A0EZ6a49l+FzNlCl1zJ3+ 0E1BmCl3xm5+vHxLsmqIPuE6d7ZAyrzQjG5GraSSJzZXgUv9Fje2Cp6Lm+oBIAT2 cCKx50Nva17gqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:04 2025 by rpki-client