This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json) Hash identifier: izhwjD2v3KjvHqIp6hhzwI62ZcaIaI/JsMEi9uEJJoU= Subject key identifier: F5:5C:A4:0D:EF:20:E3:9A:34:1E:AA:72:26:49:82:2D:EA:5D:06:2F Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8 Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8 Certificate serial: 019B48F00AD9CA090FC96C2C4B52B6C3A3D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft Manifest number: 0B9C Signing time: Tue 23 Dec 2025 02:00:49 +0000 Manifest this update: Tue 23 Dec 2025 02:00:49 +0000 Manifest next update: Wed 24 Dec 2025 02:00:49 +0000 Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: s14/Eu14Z4AG0EbxCI5SJqTU/GjKQKohb3JdJlLLmBc=) 2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:0a:d9:ca:09:0f:c9:6c:2c:4b:52:b6:c3:a3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8 Validity Not Before: Dec 23 02:00:49 2025 GMT Not After : Dec 24 02:00:49 2025 GMT Subject: CN=f55ca40def20e39a341eaa722649822dea5d062f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:99:22:58:c0:fa:d6:70:86:04:2e:a7:d8: 4f:f0:25:24:59:82:22:5b:ba:5e:1a:12:98:6d:ee: df:fa:3b:de:68:64:87:a3:dd:3c:cb:ba:5f:3b:31: fd:17:db:c4:60:9d:d8:00:42:bf:3a:52:00:d9:82: a3:80:2f:a4:08:03:a0:ac:a0:85:21:4a:b5:d7:a2: af:8a:52:de:5f:27:b4:30:53:31:1a:be:75:4c:22: ee:c7:32:35:39:71:a7:f9:4f:b1:0e:d0:40:15:b8: 4d:8e:c3:29:5f:29:35:d5:96:99:43:ff:2c:6e:fd: 17:8e:2f:6a:44:41:e0:b4:6a:cf:27:ab:ad:f9:7e: 89:b9:30:c0:dd:62:11:60:1f:cd:05:af:92:22:c9: 4d:4d:42:af:3a:10:4d:28:42:c7:03:c9:35:a8:fb: ac:c2:2c:bc:78:f0:e6:6a:54:b6:28:35:53:eb:2e: f2:02:17:64:b3:8b:0d:85:93:d4:f5:3c:78:c8:28: 2c:a3:86:e2:8f:77:2d:33:e3:27:03:f1:ad:78:74: 44:d3:94:5c:bf:99:9b:88:5b:8a:e1:c5:25:b0:dc: 49:c7:8b:f8:9c:25:ac:84:4a:65:fc:c8:1a:cc:b0: bb:62:7a:eb:6e:49:22:b8:5c:a3:9f:da:8e:f6:62: f1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5C:A4:0D:EF:20:E3:9A:34:1E:AA:72:26:49:82:2D:EA:5D:06:2F X509v3 Authority Key Identifier: keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:42:61:95:32:18:1c:4d:44:0f:0e:8c:20:46:9d:fa:06:41: d9:10:1a:30:21:12:22:c0:58:8f:8d:c9:70:2f:26:fd:d7:6d: cb:8e:72:ae:b3:bf:f2:1b:c2:ff:aa:93:19:b1:f1:ee:23:db: 3e:22:15:11:e5:96:46:89:a5:78:59:91:27:5d:98:00:b2:ca: f4:20:50:d8:05:61:2d:00:b0:36:87:a6:4b:4b:18:d6:80:1a: 7d:c7:8e:06:cf:4f:e6:3a:ce:ab:99:af:f7:41:0a:0c:09:bb: bc:20:56:2f:c3:f0:9b:66:95:50:2f:ee:c7:f9:ed:49:bb:df: a0:d7:75:bb:63:94:a9:c0:de:53:50:ef:16:52:2f:ef:dd:ea: 18:7e:3d:f7:f6:a5:d1:5c:5d:28:53:04:92:80:e2:52:4b:57: a4:67:24:56:f5:a4:09:9f:7c:c9:cc:83:b6:41:23:72:1c:94: de:8c:1a:32:0d:dd:c5:4a:b4:07:70:c3:a1:61:7b:86:c5:09: 57:8b:7c:99:3b:69:11:ec:cf:85:a6:d3:e1:b1:07:57:42:a2: 6c:e5:15:de:ec:60:58:3e:9f:e2:5e:7c:eb:1f:b6:b2:68:a4: 7c:62:c5:0a:3a:00:20:5c:bb:dc:8f:0d:ce:9b:eb:05:c8:13: ed:e4:09:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8ArZygkPyWwsS1K2w6PUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi N2QyYzgwHhcNMjUxMjIzMDIwMDQ5WhcNMjUxMjI0MDIwMDQ5WjAzMTEwLwYDVQQD EyhmNTVjYTQwZGVmMjBlMzlhMzQxZWFhNzIyNjQ5ODIyZGVhNWQwNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ2ZIljA+tZwhgQup9hP8CUkWYIi W7peGhKYbe7f+jveaGSHo908y7pfOzH9F9vEYJ3YAEK/OlIA2YKjgC+kCAOgrKCF IUq116KvilLeXye0MFMxGr51TCLuxzI1OXGn+U+xDtBAFbhNjsMpXyk11ZaZQ/8s bv0Xji9qREHgtGrPJ6ut+X6JuTDA3WIRYB/NBa+SIslNTUKvOhBNKELHA8k1qPus wiy8ePDmalS2KDVT6y7yAhdks4sNhZPU9Tx4yCgso4bij3ctM+MnA/GteHRE05Rc v5mbiFuK4cUlsNxJx4v4nCWshEpl/MgazLC7YnrrbkkiuFyjn9qO9mLx8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVcpA3vIOOaNB6qciZJgi3qXQYvMB8GA1UdIwQY MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0 LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0JhlTIY HE1EDw6MIEad+gZB2RAaMCESIsBYj43JcC8m/ddty45yrrO/8hvC/6qTGbHx7iPb PiIVEeWWRomleFmRJ12YALLK9CBQ2AVhLQCwNoemS0sY1oAafceOBs9P5jrOq5mv 90EKDAm7vCBWL8Pwm2aVUC/ux/ntSbvfoNd1u2OUqcDeU1DvFlIv793qGH499/al 0VxdKFMEkoDiUktXpGckVvWkCZ98ycyDtkEjchyU3owaMg3dxUq0B3DDoWF7hsUJ V4t8mTtpEezPhabT4bEHV0KibOUV3uxgWD6f4l586x+2smikfGLFCjoAIFy73I8N zpvrBcgT7eQJ9A== -----END CERTIFICATE-----Generated at Tue Dec 23 09:13:19 2025 by rpki-client