This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json) Hash identifier: l5fU3Qb2Rm5mRS/1wbhX9gS7pdp/GZ5UBz1+Yvn6lxo= Subject key identifier: 50:64:CC:EC:44:AC:C2:30:8F:C4:46:30:D1:10:7B:D7:5B:A3:A9:E9 Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8 Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8 Certificate serial: 019B3B6B5D18FA552314ED0CF76A52360F87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft Manifest number: 0B95 Signing time: Sat 20 Dec 2025 11:00:50 +0000 Manifest this update: Sat 20 Dec 2025 11:00:50 +0000 Manifest next update: Sun 21 Dec 2025 11:00:50 +0000 Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: z9xUckXKdT+ymWC2nhMd+5WS0andhQFRHCdQ4XevH44=) 2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:5d:18:fa:55:23:14:ed:0c:f7:6a:52:36:0f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8 Validity Not Before: Dec 20 11:00:50 2025 GMT Not After : Dec 21 11:00:50 2025 GMT Subject: CN=5064ccec44acc2308fc44630d1107bd75ba3a9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:12:b6:d9:24:4e:1d:14:b5:80:e5:f2:57: 45:ff:ac:0f:c9:a1:12:b4:a0:ef:21:83:ec:1d:af: cc:3b:2d:aa:d9:ef:20:69:90:cc:fd:48:0f:8d:ba: 41:05:59:89:29:83:64:39:0b:0b:2a:81:e0:ae:e0: b7:29:3c:bd:f7:3b:4b:19:84:4b:78:06:0d:dd:f4: fa:e2:20:f9:93:d9:73:bc:e9:38:51:6e:fb:36:7e: 0d:d4:85:8f:2a:1a:a0:2e:56:f7:cd:2d:b6:9c:7a: ff:18:68:51:db:48:23:67:05:7b:f7:78:a0:5c:a2: a3:7a:f0:76:7e:cd:34:ae:73:c6:dd:c9:ae:ea:93: 87:fc:ba:5f:86:45:e8:d7:18:34:67:01:df:f5:f4: 6c:0b:40:05:6f:75:b9:f6:33:86:a3:40:2d:e1:46: b4:26:cd:d3:b0:ff:9e:1d:29:6f:c0:cc:65:a5:58: 57:20:48:ac:26:71:79:07:e4:40:17:f6:f3:3d:ce: a1:71:9a:a8:04:dd:07:ed:8c:80:ba:ae:6f:64:4f: 29:1e:47:b7:d9:e6:b3:b1:6c:68:e5:5e:e1:e8:bf: 55:77:c9:9e:42:61:12:ce:70:64:d9:ae:e3:60:26: 02:9d:76:40:29:42:71:31:41:07:c7:e2:e7:0e:db: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:64:CC:EC:44:AC:C2:30:8F:C4:46:30:D1:10:7B:D7:5B:A3:A9:E9 X509v3 Authority Key Identifier: keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:45:fc:4f:ba:25:a0:1d:af:f5:58:54:f9:c7:c7:d2:e9:5c: 95:34:d2:e2:a5:f0:4d:2c:6f:00:ed:65:58:7f:6a:a2:e8:9d: ee:35:21:38:0f:27:84:51:4a:b8:2c:ac:f4:fe:bf:a6:b4:3e: c6:75:de:4b:5e:c8:4f:e9:da:c4:0a:70:05:64:80:de:04:fd: b9:1b:52:3e:25:0a:c2:ec:4f:92:82:43:ae:68:7e:fa:0f:a9: be:c2:e3:31:3e:69:42:cd:be:87:0e:5c:df:cc:29:05:c2:7c: aa:7f:01:ef:9f:22:d9:68:61:51:fc:16:a9:6b:25:10:76:78: 01:57:35:e8:c4:4e:a7:e8:6c:2f:e6:cd:9d:9c:82:3f:28:fd: 59:ff:96:f0:e8:c0:80:65:a5:32:41:ba:49:02:db:3d:12:34: 30:4d:7f:91:e5:49:41:af:32:44:df:a2:31:17:80:8a:d2:e0: f4:74:49:97:81:01:35:b4:46:ba:69:2d:f9:1c:24:8f:0e:2d: 16:90:78:c1:07:69:06:ef:51:de:b7:8c:fb:d4:6d:ab:1b:64: 40:a6:6b:0e:69:80:34:83:e5:d3:04:8e:39:20:0e:d8:1b:04: b7:c3:fa:7c:35:a0:9f:2e:80:b5:0a:b8:6d:28:e0:a2:8b:cf: f7:79:d7:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a10Y+lUjFO0M92pSNg+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi N2QyYzgwHhcNMjUxMjIwMTEwMDUwWhcNMjUxMjIxMTEwMDUwWjAzMTEwLwYDVQQD Eyg1MDY0Y2NlYzQ0YWNjMjMwOGZjNDQ2MzBkMTEwN2JkNzViYTNhOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaASttkkTh0UtYDl8ldF/6wPyaES tKDvIYPsHa/MOy2q2e8gaZDM/UgPjbpBBVmJKYNkOQsLKoHgruC3KTy99ztLGYRL eAYN3fT64iD5k9lzvOk4UW77Nn4N1IWPKhqgLlb3zS22nHr/GGhR20gjZwV793ig XKKjevB2fs00rnPG3cmu6pOH/LpfhkXo1xg0ZwHf9fRsC0AFb3W59jOGo0At4Ua0 Js3TsP+eHSlvwMxlpVhXIEisJnF5B+RAF/bzPc6hcZqoBN0H7YyAuq5vZE8pHke3 2eazsWxo5V7h6L9Vd8meQmESznBk2a7jYCYCnXZAKUJxMUEHx+LnDtuDuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBkzOxErMIwj8RGMNEQe9dbo6npMB8GA1UdIwQY MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0 LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEX8T7ol oB2v9VhU+cfH0ulclTTS4qXwTSxvAO1lWH9qouid7jUhOA8nhFFKuCys9P6/prQ+ xnXeS17IT+naxApwBWSA3gT9uRtSPiUKwuxPkoJDrmh++g+pvsLjMT5pQs2+hw5c 38wpBcJ8qn8B758i2WhhUfwWqWslEHZ4AVc16MROp+hsL+bNnZyCPyj9Wf+W8OjA gGWlMkG6SQLbPRI0ME1/keVJQa8yRN+iMReAitLg9HRJl4EBNbRGumkt+Rwkjw4t FpB4wQdpBu9R3reM+9RtqxtkQKZrDmmANIPl0wSOOSAO2BsEt8P6fDWgny6AtQq4 bSjgoovP93nXSg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:34 2025 by rpki-client