This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json) Hash identifier: /wZxHaObsyBkG6MD0ze/vGECFTXac0wpAnJFQ8xVuu8= Subject key identifier: 1D:1D:7C:DE:6B:1A:DA:C6:E4:9B:CD:1E:BB:C0:4E:F8:83:A5:C9:FF Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5 Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5 Certificate serial: 019B3FB5C14B93590FC0097C37F2288CF8A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft Manifest number: 1214 Signing time: Sun 21 Dec 2025 07:00:34 +0000 Manifest this update: Sun 21 Dec 2025 07:00:34 +0000 Manifest next update: Mon 22 Dec 2025 07:00:34 +0000 Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: YB3tng1wPYXpJixSL3eEtei4OTA7Mt8nkdPkEGBUxw4=) 2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=) 3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:c1:4b:93:59:0f:c0:09:7c:37:f2:28:8c:f8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5 Validity Not Before: Dec 21 07:00:34 2025 GMT Not After : Dec 22 07:00:34 2025 GMT Subject: CN=1d1d7cde6b1adac6e49bcd1ebbc04ef883a5c9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:ce:36:cc:f5:f2:cc:01:fc:8b:bb:b6:79: 67:e5:63:7b:4d:e7:4b:a0:3c:48:14:e6:da:c9:cd: 08:6a:fc:f1:3b:8e:eb:01:d9:f1:fa:5d:34:07:b9: 14:8a:a9:ba:b0:ae:52:e9:47:ae:da:6c:4b:c1:0b: c7:72:ae:04:ec:9a:ab:45:61:82:6c:fc:ea:16:8c: f5:0e:7a:1b:d9:01:e7:12:58:30:d9:49:6b:9d:20: bc:9e:da:40:79:ca:99:ad:d2:95:67:c1:35:22:11: de:c2:29:f0:eb:db:fd:9b:5b:f9:1a:76:70:da:ca: 6d:51:de:36:81:fe:1f:df:80:f3:fb:24:69:c9:a6: 98:af:08:46:46:13:53:24:5f:95:3d:57:ee:96:e4: 46:43:58:f8:06:87:84:d7:3b:43:48:f2:8d:65:cd: 78:34:60:f6:1a:5e:32:40:78:fa:07:07:97:41:6e: 68:50:06:da:da:cc:ce:fa:7f:53:98:6e:79:fc:ed: 71:f3:5e:b9:30:86:a9:f8:a9:30:1f:7b:fc:4b:7b: fc:54:a6:fd:6d:da:22:dc:96:02:16:9e:4c:9e:bd: f0:6a:39:96:c3:ff:99:69:29:13:22:6e:bf:39:18: 79:73:19:2c:0f:87:e0:74:04:d9:87:9d:a7:c7:4d: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1D:7C:DE:6B:1A:DA:C6:E4:9B:CD:1E:BB:C0:4E:F8:83:A5:C9:FF X509v3 Authority Key Identifier: keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bd:e5:7a:e1:3d:aa:be:bd:5a:e8:6b:1f:61:c5:64:e3:a6: c8:39:65:65:90:30:68:69:82:82:b2:d9:c0:1e:40:c1:7c:2a: 58:9d:24:ec:e7:3d:4c:66:6e:01:13:4c:57:09:ef:ad:6e:d1: b5:79:8c:e1:c1:53:ff:99:76:e0:31:20:bc:ca:08:f2:9e:4b: 93:04:5d:ed:25:2b:17:df:29:fb:f6:32:d2:a9:d1:b2:47:ac: f2:61:25:65:15:3d:3e:37:e5:87:a2:87:d3:a1:ef:99:ea:8c: 50:a7:f1:d5:2d:9a:8d:87:aa:10:89:91:af:20:33:35:98:b6: 14:3e:7e:8a:18:15:03:aa:5f:2a:34:77:13:b3:4e:21:49:5e: 9d:1e:0b:80:21:66:21:7e:b8:11:65:06:b6:a6:a0:1d:11:d7: 78:f8:53:ad:00:7f:16:0a:26:f5:d2:9e:5b:7f:43:61:98:da: 18:5e:7d:8e:17:97:28:12:1a:26:00:0f:31:e0:f9:18:d8:62: c0:cd:86:a8:b1:b4:52:79:59:cf:54:f9:59:46:01:59:02:2d: 6c:04:5d:e2:74:9e:1a:a0:ce:b7:74:da:17:e1:bd:08:9d:61: 38:b7:a2:e3:a9:bd:f7:13:7b:08:fa:e5:b5:ca:98:81:ba:1f: 64:1f:97:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tcFLk1kPwAl8N/IojPigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw ZGUzYjUwHhcNMjUxMjIxMDcwMDM0WhcNMjUxMjIyMDcwMDM0WjAzMTEwLwYDVQQD EygxZDFkN2NkZTZiMWFkYWM2ZTQ5YmNkMWViYmMwNGVmODgzYTVjOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6nONsz18swB/Iu7tnln5WN7TedL oDxIFObayc0IavzxO47rAdnx+l00B7kUiqm6sK5S6Ueu2mxLwQvHcq4E7JqrRWGC bPzqFoz1Dnob2QHnElgw2UlrnSC8ntpAecqZrdKVZ8E1IhHewinw69v9m1v5GnZw 2sptUd42gf4f34Dz+yRpyaaYrwhGRhNTJF+VPVfuluRGQ1j4BoeE1ztDSPKNZc14 NGD2Gl4yQHj6BweXQW5oUAba2szO+n9TmG55/O1x8165MIap+KkwH3v8S3v8VKb9 bdoi3JYCFp5Mnr3wajmWw/+ZaSkTIm6/ORh5cxksD4fgdATZh52nx03bQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0dfN5rGtrG5JvNHrvATviDpcn/MB8GA1UdIwQY MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1 LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL3leuE9 qr69WuhrH2HFZOOmyDllZZAwaGmCgrLZwB5AwXwqWJ0k7Oc9TGZuARNMVwnvrW7R tXmM4cFT/5l24DEgvMoI8p5LkwRd7SUrF98p+/Yy0qnRskes8mElZRU9Pjflh6KH 06HvmeqMUKfx1S2ajYeqEImRryAzNZi2FD5+ihgVA6pfKjR3E7NOIUlenR4LgCFm IX64EWUGtqagHRHXePhTrQB/Fgom9dKeW39DYZjaGF59jheXKBIaJgAPMeD5GNhi wM2GqLG0UnlZz1T5WUYBWQItbARd4nSeGqDOt3TaF+G9CJ1hOLei46m99xN7CPrl tcqYgbofZB+X4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:18 2025 by rpki-client