This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft File: iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json) Hash identifier: XaOp2UyabZ/j9oMl+80OBAWkTcl9KuYCu4yo1Y1sG8o= Subject key identifier: 47:55:CF:ED:BA:02:CD:97:B6:56:A1:FD:5A:61:E1:30:7F:5D:D7:F8 Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc Certificate serial: 019B53AB042998EFDB3FDF922421F0BAB719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 04:01:15 +0000 Manifest this update: Thu 25 Dec 2025 04:01:15 +0000 Manifest next update: Fri 26 Dec 2025 04:01:15 +0000 Files and hashes: 1: c_7uOl8s8Kdh9CychkSYtAnQ7tY.roa (hash: Nr/ZIZGpAUJ7Gcwt3DrN0gnkpV9viza7zxUo/JxiEbY=) 2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: fpF2dwcHrx12nOOZbFwGxIi4Iya9205uIp+VxZWUgfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:04:29:98:ef:db:3f:df:92:24:21:f0:ba:b7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc Validity Not Before: Dec 25 04:01:15 2025 GMT Not After : Dec 26 04:01:15 2025 GMT Subject: CN=4755cfedba02cd97b656a1fd5a61e1307f5dd7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:8a:6b:4a:d0:b8:35:0b:c4:c8:e2:83:ee: 4d:ce:6c:b1:44:80:1c:71:c3:26:88:16:eb:95:45: f9:be:d0:ab:05:18:41:4d:68:03:c1:85:1b:bc:ce: 21:b8:65:47:2e:81:a3:97:41:33:fc:8f:71:19:af: 03:58:ed:a1:50:4c:2d:54:a4:65:60:e3:87:51:51: bf:61:8d:c6:9e:a7:f4:0e:78:88:c4:35:86:f8:23: f8:c2:57:2b:0d:55:d7:1f:c6:01:33:f5:c0:5d:49: 3f:6e:b1:a3:fd:a1:cf:28:a7:fb:a5:87:6e:41:cd: fe:24:d8:12:13:3b:87:94:f8:10:c9:75:a9:9c:cc: 84:11:29:98:ca:c0:f2:11:ef:b9:d9:00:cc:02:04: 4d:6e:f4:be:ba:df:cc:77:36:77:0d:e6:77:25:a1: 4b:37:a5:c2:77:a3:69:1a:fd:74:ce:de:b0:37:09: 51:27:d8:a5:52:bd:dd:0b:f9:61:b6:09:e4:51:07: 5a:c7:7d:ea:f8:10:fb:9f:4a:56:61:86:74:76:31: c1:e2:3d:86:0b:83:ba:7f:d7:28:80:be:e6:d4:69: f8:51:23:10:a6:ef:76:b4:88:34:99:7f:b5:0c:73: d5:e7:96:68:17:21:ee:69:67:48:ad:7e:6e:38:e5: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:55:CF:ED:BA:02:CD:97:B6:56:A1:FD:5A:61:E1:30:7F:5D:D7:F8 X509v3 Authority Key Identifier: keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:eb:24:f2:38:8c:5e:e8:05:e7:a6:d7:d7:40:be:ec:f2: 85:27:35:49:75:65:6e:67:6a:f1:13:0c:88:9a:22:17:40:37: ee:42:99:48:86:ae:bc:be:4f:3c:5a:65:96:a1:80:40:00:34: c1:66:2c:fe:7a:d2:fb:59:fb:05:7f:0a:70:c2:37:7c:83:f5: 62:6b:49:86:75:25:bb:9b:2f:7b:38:39:ea:d8:f3:4a:85:bb: eb:4b:63:d6:b2:45:66:6e:99:2b:62:84:7b:06:7b:42:c5:8b: c3:38:9b:d7:4d:de:bd:7f:a7:a5:bc:4c:56:07:68:13:8a:a5: ce:82:44:9b:05:a9:86:dd:3f:01:6a:c0:1f:89:58:67:14:5e: 29:54:08:cb:a0:df:0c:87:c8:bc:7d:3c:dc:d3:0c:ec:c1:74: f3:2d:bc:4e:21:e4:4f:91:79:2e:4c:fd:7c:5b:af:5b:e5:b1: 2d:cb:a0:58:a4:9e:ad:0b:4e:8a:24:2b:fc:78:c2:c3:e9:6d: 3b:16:f2:d5:88:1a:c8:e3:ba:d0:76:a9:4b:07:f8:8b:42:f0: 5c:2a:61:6e:85:26:10:35:fc:d5:90:72:38:5f:40:29:de:55: 69:68:3e:74:f4:21:f3:ab:98:33:bc:71:bf:0a:ef:c3:03:4d: b5:ff:66:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqwQpmO/bP9+SJCHwurcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2EyYTQwMTlhMjgxNzdjZGY4MDY1OTlmMWFiNWQ1MWQx N2I4ZGMwHhcNMjUxMjI1MDQwMTE1WhcNMjUxMjI2MDQwMTE1WjAzMTEwLwYDVQQD Eyg0NzU1Y2ZlZGJhMDJjZDk3YjY1NmExZmQ1YTYxZTEzMDdmNWRkN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34CKa0rQuDULxMjig+5NzmyxRIAc ccMmiBbrlUX5vtCrBRhBTWgDwYUbvM4huGVHLoGjl0Ez/I9xGa8DWO2hUEwtVKRl YOOHUVG/YY3Gnqf0DniIxDWG+CP4wlcrDVXXH8YBM/XAXUk/brGj/aHPKKf7pYdu Qc3+JNgSEzuHlPgQyXWpnMyEESmYysDyEe+52QDMAgRNbvS+ut/MdzZ3DeZ3JaFL N6XCd6NpGv10zt6wNwlRJ9ilUr3dC/lhtgnkUQdax33q+BD7n0pWYYZ0djHB4j2G C4O6f9cogL7m1Gn4USMQpu92tIg0mX+1DHPV55ZoFyHuaWdIrX5uOOXRNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdVz+26As2Xtlah/Vph4TB/Xdf4MB8GA1UdIwQY MBaAFIk6KkAZooF3zfgGWZ8atdUdF7jcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEt MzYxNzg2ZjE3YTA1LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEtMzYxNzg2ZjE3YTA1 LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEvrJPI4 jF7oBeem19dAvuzyhSc1SXVlbmdq8RMMiJoiF0A37kKZSIauvL5PPFpllqGAQAA0 wWYs/nrS+1n7BX8KcMI3fIP1YmtJhnUlu5svezg56tjzSoW760tj1rJFZm6ZK2KE ewZ7QsWLwzib103evX+npbxMVgdoE4qlzoJEmwWpht0/AWrAH4lYZxReKVQIy6Df DIfIvH083NMM7MF08y28TiHkT5F5Lkz9fFuvW+WxLcugWKSerQtOiiQr/HjCw+lt Oxby1YgayOO60HapSwf4i0LwXCphboUmEDX81ZByOF9AKd5VaWg+dPQh86uYM7xx vwrvwwNNtf9mnw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:39 2025 by rpki-client