This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json) Hash identifier: nYFQevktv5M85+cMqlaZdFSf1jDbTkriSxEqvevHQIk= Subject key identifier: E5:38:E8:BD:AF:E6:B6:EE:1D:7C:21:51:17:55:52:7D:5F:4E:FD:16 Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Certificate serial: 019B3F11A658FD905ABE173B6D0BF9F784AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft Manifest number: 045E Signing time: Sun 21 Dec 2025 04:01:19 +0000 Manifest this update: Sun 21 Dec 2025 04:01:19 +0000 Manifest next update: Mon 22 Dec 2025 04:01:19 +0000 Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: 4cf4dJK1zoEMRxKVOLStbjV8S+rfLw4rky2YeK35yc4=) 2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=) 3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=) 4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:a6:58:fd:90:5a:be:17:3b:6d:0b:f9:f7:84:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Validity Not Before: Dec 21 04:01:19 2025 GMT Not After : Dec 22 04:01:19 2025 GMT Subject: CN=e538e8bdafe6b6ee1d7c21511755527d5f4efd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a5:f6:12:2a:dd:a7:c8:da:50:89:96:1a:72: a0:3b:5d:b2:26:4a:b1:e8:6a:0f:d9:29:02:77:b6: 72:ce:6d:b1:08:5d:28:4f:9b:86:9d:32:f0:90:fb: c9:c6:0c:98:db:83:02:57:ea:a2:51:61:12:6a:9e: 2c:f0:47:56:fc:bf:d3:1c:79:e0:fe:99:6b:6c:35: 7c:1a:63:21:05:8c:a8:5b:38:f6:bb:9d:9a:8e:dd: 95:5c:11:c3:9d:04:a7:73:aa:af:8b:64:60:84:dc: 0c:f0:05:fd:bc:53:29:13:ea:9b:6e:9f:87:89:93: b5:6f:05:a5:8b:f1:49:2b:f0:29:eb:f9:1e:b2:e9: b7:f0:44:44:37:21:3a:f3:53:e4:67:6d:e4:aa:5d: 1b:11:62:14:2f:2c:93:54:af:01:7a:54:95:6d:35: bb:43:60:e5:f5:8d:eb:55:c6:4d:05:94:cf:03:ae: 6c:5c:e9:49:05:29:b1:b1:bb:2d:a1:9a:42:20:76: b0:5f:4e:b3:bb:07:b9:a5:47:52:c7:0e:97:82:fb: 52:4c:da:76:ff:50:48:35:6a:a3:d0:bc:8f:29:9b: 24:3c:99:f5:7c:8f:4d:9d:e9:2a:97:3a:9e:6e:b3: 5f:95:90:a2:9f:d0:8b:cd:58:4f:b9:d7:05:3d:61: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:38:E8:BD:AF:E6:B6:EE:1D:7C:21:51:17:55:52:7D:5F:4E:FD:16 X509v3 Authority Key Identifier: keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e7:4e:90:1f:4d:d2:09:b4:0c:1a:4f:68:e7:a2:09:13:25: ea:eb:95:81:7a:ab:5d:7b:67:92:c6:bb:05:e5:3a:e4:24:77: 56:ba:31:3b:0e:8e:ed:b8:18:e5:3a:71:93:5a:43:c6:36:8a: 3a:9d:23:ee:01:e9:a6:e6:ae:82:86:a1:f8:83:7b:7b:cc:60: 7c:da:08:bd:39:77:3d:13:5a:fc:ae:d1:d7:96:1f:e9:e3:78: 9f:9f:63:22:bf:57:2a:d3:f3:75:d1:b0:71:a0:3d:4c:b0:26: a3:c1:a3:7a:25:f8:21:0e:df:6c:45:eb:9d:1c:b3:0f:3e:b9: 01:41:ae:b3:a0:8b:f0:e4:9b:56:78:01:c2:0e:08:49:f3:71: ce:f6:cc:af:2e:21:d5:7f:60:82:cd:c6:14:c8:48:77:92:7f: f4:6e:02:4d:ce:5e:db:ee:03:c2:34:31:62:b6:4a:af:54:48: d5:1a:32:45:72:9b:65:61:b9:0b:65:c4:2d:f3:dc:fd:b0:dc: 48:c3:8a:bd:92:bc:3a:65:38:26:23:cd:85:65:2d:5d:57:1b: 71:06:ae:f5:5d:8c:64:31:70:95:4c:f1:24:d8:4e:77:2a:c5: a5:f6:ab:3a:3d:c5:4c:37:e8:f6:ba:4c:78:d7:a1:04:08:bb: b7:df:ed:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EaZY/ZBavhc7bQv594SuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj ZDcwOTEwHhcNMjUxMjIxMDQwMTE5WhcNMjUxMjIyMDQwMTE5WjAzMTEwLwYDVQQD EyhlNTM4ZThiZGFmZTZiNmVlMWQ3YzIxNTExNzU1NTI3ZDVmNGVmZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6X2Eirdp8jaUImWGnKgO12yJkqx 6GoP2SkCd7Zyzm2xCF0oT5uGnTLwkPvJxgyY24MCV+qiUWESap4s8EdW/L/THHng /plrbDV8GmMhBYyoWzj2u52ajt2VXBHDnQSnc6qvi2RghNwM8AX9vFMpE+qbbp+H iZO1bwWli/FJK/Ap6/kesum38ERENyE681PkZ23kql0bEWIULyyTVK8BelSVbTW7 Q2Dl9Y3rVcZNBZTPA65sXOlJBSmxsbstoZpCIHawX06zuwe5pUdSxw6XgvtSTNp2 /1BINWqj0LyPKZskPJn1fI9NnekqlzqebrNflZCin9CLzVhPudcFPWG0kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU46L2v5rbuHXwhURdVUn1fTv0WMB8GA1UdIwQY MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt ODJmYTNkMjYwODY5LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5 LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOdOkB9N 0gm0DBpPaOeiCRMl6uuVgXqrXXtnksa7BeU65CR3VroxOw6O7bgY5Tpxk1pDxjaK Op0j7gHppuaugoah+IN7e8xgfNoIvTl3PRNa/K7R15Yf6eN4n59jIr9XKtPzddGw caA9TLAmo8GjeiX4IQ7fbEXrnRyzDz65AUGus6CL8OSbVngBwg4ISfNxzvbMry4h 1X9ggs3GFMhId5J/9G4CTc5e2+4DwjQxYrZKr1RI1RoyRXKbZWG5C2XELfPc/bDc SMOKvZK8OmU4JiPNhWUtXVcbcQau9V2MZDFwlUzxJNhOdyrFpfarOj3FTDfo9rpM eNehBAi7t9/tQg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:38 2025 by rpki-client