This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json) Hash identifier: 86BxAmnzhoPY2alTLOumuiCztcPy9iTs2OOE2CAPYcs= Subject key identifier: D7:27:DA:C0:D5:B8:21:CB:83:A7:CD:13:9E:D4:A8:E7:9C:AB:C5:1C Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b Certificate serial: 019B3E6DF9D2FDD4F18D4398E4823C2B482C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 01:02:33 +0000 Manifest this update: Sun 21 Dec 2025 01:02:33 +0000 Manifest next update: Mon 22 Dec 2025 01:02:33 +0000 Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: UAqmh/mjgoccPrSyrVY1lxfcT5rl/H/CnPVwQCghwas=) 2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:f9:d2:fd:d4:f1:8d:43:98:e4:82:3c:2b:48:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b Validity Not Before: Dec 21 01:02:33 2025 GMT Not After : Dec 22 01:02:33 2025 GMT Subject: CN=d727dac0d5b821cb83a7cd139ed4a8e79cabc51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:6d:9a:dc:58:0c:ef:68:5b:d9:19:e6:68: af:c6:c1:50:04:40:d5:5b:fd:46:5b:bb:1e:eb:70: cd:64:b3:90:68:f6:6b:ca:ca:69:b8:8a:1d:47:ab: be:2c:dd:bf:d2:17:ee:d9:8e:f4:45:53:1b:76:33: 98:41:ca:44:d4:77:ed:bb:52:ef:82:bc:f7:f9:66: 4e:9a:e1:f1:cd:36:3e:20:4e:0e:cc:0d:d3:92:53: 7c:a7:a8:73:4c:43:a0:66:b5:00:3d:b8:d4:a1:0f: 4b:8e:d5:60:a2:45:8c:38:65:23:83:89:6e:99:7b: 63:27:08:95:7d:1c:8c:99:3c:14:69:55:34:42:1b: 89:23:5b:1c:27:5e:d0:b4:76:63:86:cf:cf:0a:c4: 8f:59:10:de:3e:fa:e2:05:89:b0:d1:08:e3:4f:5c: c7:b8:2b:4f:f3:37:77:51:d4:78:48:8a:66:6a:21: 64:de:22:d6:18:df:50:e5:22:1e:b5:58:62:af:51: a0:2a:cd:8e:79:cf:53:06:56:64:fd:63:82:07:4e: ed:44:e7:02:41:9b:87:e2:01:f8:65:ed:ee:15:43: 77:87:6d:ae:1a:38:09:e0:fa:1a:57:04:a5:3c:a3: eb:ec:86:66:43:07:29:8b:07:f6:7f:7d:f0:f3:c4: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:DA:C0:D5:B8:21:CB:83:A7:CD:13:9E:D4:A8:E7:9C:AB:C5:1C X509v3 Authority Key Identifier: keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:83:0f:a0:cd:0b:2e:4c:61:b8:00:36:b7:e9:6a:d3:4c:31: cd:36:8d:62:4e:fa:76:c5:48:64:6f:30:b4:17:fe:26:d2:8b: 5a:d6:1d:ba:d1:77:a2:9b:67:11:1e:cd:9b:07:eb:75:30:d3: 28:03:01:10:7f:e7:82:d9:c9:2c:78:98:6f:86:87:c8:3a:91: 1f:b2:a0:30:29:0d:7f:45:0b:3d:3e:36:fe:a6:d8:60:f2:e1: a5:d8:63:6f:bf:9f:2f:83:1c:ef:fc:a1:26:6a:cd:35:ec:56: 69:dc:03:6e:5d:15:79:8c:2c:52:7c:7a:db:0a:a1:0a:87:67: 10:6b:20:66:78:e0:23:d0:4b:bd:04:12:5c:b6:56:d7:6d:c5: 31:c4:cc:e3:87:c3:a3:b7:34:68:53:e6:a9:d1:42:1a:32:3e: 10:2f:62:ca:82:2c:1e:69:2f:ef:ac:9f:be:b6:92:1e:36:b1: e4:ea:17:fd:4e:77:dd:58:c3:89:43:78:65:38:39:eb:1e:20: 79:30:80:0d:0b:42:47:1e:1e:9c:3b:ef:0a:c2:53:69:fc:72: fc:bc:86:c4:14:38:9b:b2:fd:5b:12:5a:31:c1:f4:cd:58:e6: d1:d7:a4:cf:72:82:3d:d7:d4:f9:4e:52:f4:57:07:b9:9f:9c: 57:ca:3a:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bfnS/dTxjUOY5II8K0gsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy ZGUyMGIwHhcNMjUxMjIxMDEwMjMzWhcNMjUxMjIyMDEwMjMzWjAzMTEwLwYDVQQD EyhkNzI3ZGFjMGQ1YjgyMWNiODNhN2NkMTM5ZWQ0YThlNzljYWJjNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzNtmtxYDO9oW9kZ5mivxsFQBEDV W/1GW7se63DNZLOQaPZrysppuIodR6u+LN2/0hfu2Y70RVMbdjOYQcpE1Hftu1Lv grz3+WZOmuHxzTY+IE4OzA3TklN8p6hzTEOgZrUAPbjUoQ9LjtVgokWMOGUjg4lu mXtjJwiVfRyMmTwUaVU0QhuJI1scJ17QtHZjhs/PCsSPWRDePvriBYmw0QjjT1zH uCtP8zd3UdR4SIpmaiFk3iLWGN9Q5SIetVhir1GgKs2Oec9TBlZk/WOCB07tROcC QZuH4gH4Ze3uFUN3h22uGjgJ4PoaVwSlPKPr7IZmQwcpiwf2f33w88QL3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcn2sDVuCHLg6fNE57UqOecq8UcMB8GA1UdIwQY MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0 LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4MPoM0L LkxhuAA2t+lq00wxzTaNYk76dsVIZG8wtBf+JtKLWtYdutF3optnER7NmwfrdTDT KAMBEH/ngtnJLHiYb4aHyDqRH7KgMCkNf0ULPT42/qbYYPLhpdhjb7+fL4Mc7/yh JmrNNexWadwDbl0VeYwsUnx62wqhCodnEGsgZnjgI9BLvQQSXLZW123FMcTM44fD o7c0aFPmqdFCGjI+EC9iyoIsHmkv76yfvraSHjax5OoX/U533VjDiUN4ZTg56x4g eTCADQtCRx4enDvvCsJTafxy/LyGxBQ4m7L9WxJaMcH0zVjm0dekz3KCPdfU+U5S 9FcHuZ+cV8o6YQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:52:57 2025 by rpki-client