This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json) Hash identifier: kUYk//ZogiordJQJ2jEbMuJIo3WwLvmJFrnrlUxjC5E= Subject key identifier: 94:AE:B2:FC:BE:11:99:FB:BD:F4:35:B2:99:D9:38:EA:84:E2:72:79 Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90 Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490 Certificate serial: 019B299BD6B60C7DF5623BB6BBDFF7A101E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft Manifest number: 060E Signing time: Wed 17 Dec 2025 00:00:37 +0000 Manifest this update: Wed 17 Dec 2025 00:00:37 +0000 Manifest next update: Thu 18 Dec 2025 00:00:37 +0000 Files and hashes: 1: EAD0diuoZK02qxxsVWWiclAVX5I.roa (hash: kzXgijoQ+OFnt0McFOmyH17ijOy9UUEek/dQbYMoKFU=) 2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: 1MRQiI+QZido5GEwV6eIalP6PGG+kefvEPgxBDewVYM=) 3: nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa (hash: voylSjHlayiNYZNWUzC6whbKd8QLUjoGC1qGpaQazoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9b:d6:b6:0c:7d:f5:62:3b:b6:bb:df:f7:a1:01:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490 Validity Not Before: Dec 17 00:00:37 2025 GMT Not After : Dec 18 00:00:37 2025 GMT Subject: CN=94aeb2fcbe1199fbbdf435b299d938ea84e27279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:88:d0:32:0f:6d:dd:3d:65:e7:03:b6:07: 5b:de:bf:9d:be:75:75:55:a5:03:f9:05:69:65:23: 6c:79:25:5c:10:ba:fb:4f:f6:49:09:f1:8a:32:f2: 3b:04:2b:c3:22:38:9e:5a:d9:f0:ab:d2:c3:23:a6: 85:cc:33:9f:ab:55:c2:72:e2:c7:67:f1:29:68:9d: b2:49:40:9a:c5:11:84:eb:13:43:58:a7:c5:48:86: 89:26:4d:dc:17:b8:14:e9:da:68:e6:5a:af:d2:4e: d8:97:af:13:4e:72:b8:ad:fe:7c:e1:9d:a7:65:74: ba:f0:40:e0:3a:fd:3a:74:57:28:2b:33:9b:7f:60: 33:64:56:81:e4:79:26:2e:e2:1c:f6:d8:9d:16:16: 66:9e:55:91:36:91:4d:1f:e2:93:c0:9e:fc:8d:65: 60:73:1c:f9:b1:7f:fd:1e:9c:e9:72:c1:1e:d1:fa: b4:c6:01:62:21:ae:71:6d:7c:7f:69:64:0b:9d:98: a4:75:29:54:e4:03:e6:f1:15:2b:99:5f:63:d4:a9: 48:fe:e4:2b:a2:b8:5b:34:06:06:97:41:e9:05:37: 85:56:0d:c1:98:32:10:de:40:0e:5e:57:0a:16:80: 54:97:a1:69:47:ae:46:46:97:86:85:5e:71:f9:c6: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AE:B2:FC:BE:11:99:FB:BD:F4:35:B2:99:D9:38:EA:84:E2:72:79 X509v3 Authority Key Identifier: keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fa:e3:a8:81:ea:4b:d6:3f:33:ff:84:a6:e7:c5:72:88:ff: cf:ac:2d:d3:af:13:c3:59:ee:e1:b7:8d:ee:e9:7e:07:c7:d5: 4c:0f:c6:be:15:5b:89:c9:81:fa:68:83:84:e9:c3:ea:8d:6e: db:f3:23:cd:4a:e8:8c:f0:21:90:6a:fd:b2:57:21:5c:87:26: e8:a9:4b:e5:aa:01:78:2e:48:a1:48:1c:7c:0b:05:80:f2:e6: 54:a1:2d:55:ae:40:b4:52:51:56:fa:40:73:d9:1e:78:84:11: 90:15:10:9f:78:7f:68:49:76:8e:c2:ed:f0:9b:65:7f:87:2d: 41:0b:04:e0:a3:ab:50:6c:16:6f:e7:b4:38:aa:c3:9e:72:f0: b0:52:a6:c5:aa:dc:06:9b:ec:b7:96:f5:63:b7:d4:d7:e2:34: 5b:03:d9:15:51:55:6b:e1:77:48:98:85:ca:28:68:1f:a7:70: e0:91:e1:e8:4e:05:ba:0a:fb:e8:e2:6d:6f:96:80:f8:03:99: df:aa:74:89:b7:e2:20:d4:ea:58:69:bd:d5:6a:5e:60:f5:bd: 66:3c:3a:65:c2:9a:cb:98:4a:07:78:69:df:cb:a4:b1:3c:a6: ad:19:fc:18:d9:bb:c4:2f:50:47:f1:2b:66:1a:54:a2:81:20: ac:f6:77:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspm9a2DH31Yju2u9/3oQHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDFiNjM4OGQ2NDM1ZjU0OTkwOTA1MzgyYjQxZGM5Njc1 ZmQ0OTAwHhcNMjUxMjE3MDAwMDM3WhcNMjUxMjE4MDAwMDM3WjAzMTEwLwYDVQQD Eyg5NGFlYjJmY2JlMTE5OWZiYmRmNDM1YjI5OWQ5MzhlYTg0ZTI3Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVWI0DIPbd09ZecDtgdb3r+dvnV1 VaUD+QVpZSNseSVcELr7T/ZJCfGKMvI7BCvDIjieWtnwq9LDI6aFzDOfq1XCcuLH Z/EpaJ2ySUCaxRGE6xNDWKfFSIaJJk3cF7gU6dpo5lqv0k7Yl68TTnK4rf584Z2n ZXS68EDgOv06dFcoKzObf2AzZFaB5HkmLuIc9tidFhZmnlWRNpFNH+KTwJ78jWVg cxz5sX/9HpzpcsEe0fq0xgFiIa5xbXx/aWQLnZikdSlU5APm8RUrmV9j1KlI/uQr orhbNAYGl0HpBTeFVg3BmDIQ3kAOXlcKFoBUl6FpR65GRpeGhV5x+cYqFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSusvy+EZn7vfQ1spnZOOqE4nJ5MB8GA1UdIwQY MBaAFCEBtjiNZDX1SZCQU4K0HclnX9SQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt NGRmODkxMjE4OGY3LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3 LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfrjqIHq S9Y/M/+EpufFcoj/z6wt068Tw1nu4beN7ul+B8fVTA/GvhVbicmB+miDhOnD6o1u 2/MjzUrojPAhkGr9slchXIcm6KlL5aoBeC5IoUgcfAsFgPLmVKEtVa5AtFJRVvpA c9keeIQRkBUQn3h/aEl2jsLt8Jtlf4ctQQsE4KOrUGwWb+e0OKrDnnLwsFKmxarc Bpvst5b1Y7fU1+I0WwPZFVFVa+F3SJiFyihoH6dw4JHh6E4Fugr76OJtb5aA+AOZ 36p0ibfiINTqWGm91WpeYPW9Zjw6ZcKay5hKB3hp38uksTymrRn8GNm7xC9QR/Er ZhpUooEgrPZ3Ew== -----END CERTIFICATE-----Generated at Wed Dec 17 09:48:48 2025 by rpki-client