This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json) Hash identifier: 5oQ5sDFWKFcNT72PtzYrhyUzEOVE+WIDglqG5aRzssc= Subject key identifier: CF:A9:E9:D1:25:07:49:B3:06:43:D2:97:B0:2A:8E:C5:23:D2:21:D7 Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8 Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8 Certificate serial: 019B330CBDCC57F7B45E1D27F9F1AB29B46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft Manifest number: 16DF Signing time: Thu 18 Dec 2025 20:00:31 +0000 Manifest this update: Thu 18 Dec 2025 20:00:31 +0000 Manifest next update: Fri 19 Dec 2025 20:00:31 +0000 Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: ykCgdXvzXOvipYzGUHQdYXLKNL5FOotsg2gFknVQFY0=) 2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=) 3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:bd:cc:57:f7:b4:5e:1d:27:f9:f1:ab:29:b4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8 Validity Not Before: Dec 18 20:00:31 2025 GMT Not After : Dec 19 20:00:31 2025 GMT Subject: CN=cfa9e9d1250749b30643d297b02a8ec523d221d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:91:d2:54:72:85:7f:5f:90:71:96:24:e8: 47:57:fe:8d:9a:22:95:dd:c6:56:17:88:6f:8e:32: 1c:45:56:25:e2:09:1f:66:bb:21:cc:57:16:77:56: 19:24:1c:36:f1:90:78:88:c1:23:3e:cd:07:4a:7e: 9a:a6:a2:a7:f0:cf:5c:64:61:19:b2:3f:a6:76:fd: 1f:29:8e:45:77:87:8e:ac:50:fa:a0:e2:06:6d:a4: 70:1d:bc:47:0d:26:8f:a3:21:6e:17:63:9f:1f:5f: 89:9c:5e:0a:02:03:6e:f7:9b:8a:29:7c:d1:e8:97: 1d:68:ed:dc:34:58:ae:84:32:b5:6f:9a:11:67:07: 60:cb:1b:ec:f0:6d:47:46:c5:d7:e2:0f:96:5b:b7: d7:64:90:14:40:fe:ef:38:36:ce:3d:e6:f8:11:2c: 56:ea:05:f0:26:93:41:3a:7a:02:2f:09:4d:e6:04: f2:9b:da:68:5b:06:7d:39:e4:bb:b5:d8:6e:80:00: 15:1a:bd:cb:4a:b2:12:e5:2c:83:e3:cb:e9:73:07: dd:97:c1:1e:83:1f:11:2a:75:6b:3c:da:13:d4:db: 79:55:d9:5b:d1:2b:89:84:57:5a:6d:92:c9:17:c4: 01:b5:03:5d:19:f9:fb:7b:df:28:16:5a:92:91:06: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:E9:D1:25:07:49:B3:06:43:D2:97:B0:2A:8E:C5:23:D2:21:D7 X509v3 Authority Key Identifier: keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dc:a1:04:20:07:c6:ab:0c:77:d2:96:4f:02:39:3f:a8:c5: b9:bf:51:79:32:93:35:a9:e1:dd:56:1a:00:96:84:d5:94:da: fc:2c:3a:56:57:e5:13:1c:b4:ce:3b:68:9f:e3:ad:d4:2e:f1: 83:85:e0:4e:d8:c5:66:58:13:40:0e:5f:c8:db:1b:49:67:6a: bc:50:fd:12:2e:42:0b:7f:45:fe:41:e4:bd:d5:66:e4:65:5e: b9:99:d6:f9:58:bc:0a:c8:5f:61:91:22:eb:4b:76:ff:02:b4: e1:9e:69:91:4a:7b:b2:57:1b:cc:90:61:72:b9:20:b0:88:28: 43:0f:c2:22:a8:b0:75:26:50:09:94:c7:2e:1d:b4:66:9d:d6: 81:fb:9e:7e:7f:26:be:d4:ce:4e:cd:08:16:d8:3f:4e:da:d9: de:05:4d:1f:6b:e9:ba:80:20:40:1c:57:5c:99:e6:00:c7:7e: 6c:9c:67:16:01:71:99:06:58:8e:03:c6:7f:a9:15:ef:cb:7f: a6:6a:77:10:0c:9d:76:a7:a6:f2:08:27:8c:2b:bc:e5:00:94: d5:8f:2c:29:f1:a5:f4:fd:34:bb:25:7c:02:0f:bd:5c:9f:5c: f3:97:f5:8c:80:8b:2f:75:5f:aa:00:bf:06:97:69:1b:8d:21: b8:1e:b2:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDL3MV/e0Xh0n+fGrKbRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy YTYzZjgwHhcNMjUxMjE4MjAwMDMxWhcNMjUxMjE5MjAwMDMxWjAzMTEwLwYDVQQD EyhjZmE5ZTlkMTI1MDc0OWIzMDY0M2QyOTdiMDJhOGVjNTIzZDIyMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl6R0lRyhX9fkHGWJOhHV/6NmiKV 3cZWF4hvjjIcRVYl4gkfZrshzFcWd1YZJBw28ZB4iMEjPs0HSn6apqKn8M9cZGEZ sj+mdv0fKY5Fd4eOrFD6oOIGbaRwHbxHDSaPoyFuF2OfH1+JnF4KAgNu95uKKXzR 6JcdaO3cNFiuhDK1b5oRZwdgyxvs8G1HRsXX4g+WW7fXZJAUQP7vODbOPeb4ESxW 6gXwJpNBOnoCLwlN5gTym9poWwZ9OeS7tdhugAAVGr3LSrIS5SyD48vpcwfdl8Ee gx8RKnVrPNoT1Nt5Vdlb0SuJhFdabZLJF8QBtQNdGfn7e98oFlqSkQaMtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+p6dElB0mzBkPSl7AqjsUj0iHXMB8GA1UdIwQY MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0 LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNyhBCAH xqsMd9KWTwI5P6jFub9ReTKTNanh3VYaAJaE1ZTa/Cw6VlflExy0zjton+Ot1C7x g4XgTtjFZlgTQA5fyNsbSWdqvFD9Ei5CC39F/kHkvdVm5GVeuZnW+Vi8CshfYZEi 60t2/wK04Z5pkUp7slcbzJBhcrkgsIgoQw/CIqiwdSZQCZTHLh20Zp3Wgfuefn8m vtTOTs0IFtg/TtrZ3gVNH2vpuoAgQBxXXJnmAMd+bJxnFgFxmQZYjgPGf6kV78t/ pmp3EAyddqem8ggnjCu85QCU1Y8sKfGl9P00uyV8Ag+9XJ9c85f1jICLL3VfqgC/ BpdpG40huB6ycA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:22:00 2025 by rpki-client