This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json) Hash identifier: WLBC7W3gw0Mzmf6QHAL+OdXO9I4S2tFsdZG+0tGFRpc= Subject key identifier: FF:E1:A7:2B:BD:BE:C8:CB:74:88:02:3F:EB:6B:95:99:AA:D0:23:3F Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35 Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435 Certificate serial: 019B2061DEF1A6A9D9012DBBB8BD6157693F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft Manifest number: 166A Signing time: Mon 15 Dec 2025 05:00:43 +0000 Manifest this update: Mon 15 Dec 2025 05:00:43 +0000 Manifest next update: Tue 16 Dec 2025 05:00:43 +0000 Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: pAtDmUoeNzhOx5rEBfUmvnXIeDXREzlQhKL8JzWeK4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:de:f1:a6:a9:d9:01:2d:bb:b8:bd:61:57:69:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435 Validity Not Before: Dec 15 05:00:43 2025 GMT Not After : Dec 16 05:00:43 2025 GMT Subject: CN=ffe1a72bbdbec8cb7488023feb6b9599aad0233f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:d1:26:39:46:dc:c4:f4:af:c1:31:22:c0: 4c:91:09:57:96:e1:62:70:3e:54:07:61:fc:d2:ca: 40:14:05:70:ab:09:ba:9b:7f:19:d4:4f:70:e8:da: 88:e8:4e:81:e5:c5:12:53:fa:f9:f8:6f:97:ee:5c: f7:c5:4a:e5:93:ed:15:d6:e1:59:5c:05:92:2b:bd: 2e:35:1d:2d:a0:8d:63:a8:b2:84:ac:cd:6d:65:18: 8e:20:fb:be:7e:6d:46:09:af:49:47:bd:96:e0:08: 9d:db:d2:0d:11:22:7a:56:c8:21:b5:6e:17:7e:54: 2d:29:f7:01:72:04:5b:75:d3:3a:03:01:c2:cc:44: 2b:89:c5:8c:33:5a:6d:74:b7:14:59:ce:bb:1a:b8: c5:75:ce:6e:51:dd:4f:1c:99:c6:d6:b4:a8:b4:07: f9:90:56:65:11:e2:92:84:93:db:fe:c9:b4:81:ef: ac:a7:06:26:49:86:a5:a2:81:78:f3:68:b7:e5:af: 42:ab:b8:10:81:6e:cd:14:54:54:18:54:64:bd:25: be:d6:c9:5d:47:14:16:c0:1f:d8:8e:83:76:c6:9f: 9f:b6:32:d1:f0:1f:28:d3:c7:a3:fd:79:0f:7a:4d: 55:b3:17:24:cd:f4:3d:f0:c3:ea:b8:92:e4:2f:d3: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:A7:2B:BD:BE:C8:CB:74:88:02:3F:EB:6B:95:99:AA:D0:23:3F X509v3 Authority Key Identifier: keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:02:c2:89:05:03:91:5e:3b:03:a0:e7:1c:2e:ee:36:3c:12: 95:86:ae:47:92:4a:7d:a5:9c:96:68:03:bf:23:df:11:6f:24: ab:d6:a3:5d:53:6c:b5:df:60:1d:be:dc:1f:89:f3:56:ee:5d: 14:27:49:37:6a:da:70:c7:71:aa:c5:da:cc:8a:8c:83:5e:cf: 28:1c:bf:0f:32:bb:7f:f4:de:94:06:c4:a9:8d:b8:a9:e1:7c: cf:b6:a6:69:3d:bd:f6:fc:c3:50:e6:19:d0:d9:d0:5d:69:68: ed:ec:1f:72:c4:a2:28:d2:ed:bc:5e:7f:ef:d2:a1:41:b0:f0: 30:0f:ca:c4:38:28:f1:20:0f:71:21:60:d2:b7:f2:99:d7:ce: aa:bd:ea:ee:15:ed:3b:dc:09:42:fd:a3:62:7e:60:e3:92:14: 97:8a:12:9c:dd:b1:2b:af:f5:32:12:8d:bd:a0:a0:0b:f1:a7: 55:67:a4:51:5b:32:79:4b:b9:ac:05:83:b7:4c:3c:d0:f7:fc: 58:7c:33:f7:86:6f:a3:58:53:f8:55:b0:c6:87:6a:e3:33:44: 56:e9:2e:52:83:84:67:75:c4:64:a6:3a:5d:81:93:e9:21:3f: 5a:76:f2:52:e4:37:f5:2a:a6:c9:65:02:97:ce:ad:07:32:a8: dd:96:db:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYd7xpqnZAS27uL1hV2k/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTVhYWUzZDdmNzJlZWNlODM5NmI0MTQ5MjIwOGFkZDUy MTg0MzUwHhcNMjUxMjE1MDUwMDQzWhcNMjUxMjE2MDUwMDQzWjAzMTEwLwYDVQQD EyhmZmUxYTcyYmJkYmVjOGNiNzQ4ODAyM2ZlYjZiOTU5OWFhZDAyMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri/RJjlG3MT0r8ExIsBMkQlXluFi cD5UB2H80spAFAVwqwm6m38Z1E9w6NqI6E6B5cUSU/r5+G+X7lz3xUrlk+0V1uFZ XAWSK70uNR0toI1jqLKErM1tZRiOIPu+fm1GCa9JR72W4Aid29INESJ6VsghtW4X flQtKfcBcgRbddM6AwHCzEQricWMM1ptdLcUWc67GrjFdc5uUd1PHJnG1rSotAf5 kFZlEeKShJPb/sm0ge+spwYmSYalooF482i35a9Cq7gQgW7NFFRUGFRkvSW+1sld RxQWwB/YjoN2xp+ftjLR8B8o08ej/XkPek1VsxckzfQ98MPquJLkL9NydwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/hpyu9vsjLdIgCP+trlZmq0CM/MB8GA1UdIwQY MBaAFImlquPX9y7s6DlrQUkiCK3VIYQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFXcTQ5ZjNMdXpvT1d0QlNTSUlyZFVoaERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MTQ1Y2ItMDJiZC00N2U2LWIwNGIt MDg3MTE1MmExYWEzLzEvaWFXcTQ5ZjNMdXpvT1d0QlNTSUlyZFVoaERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85MTQ1Y2ItMDJiZC00N2U2LWIwNGItMDg3MTE1MmExYWEz LzEvaWFXcTQ5ZjNMdXpvT1d0QlNTSUlyZFVoaERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgLCiQUD kV47A6DnHC7uNjwSlYauR5JKfaWclmgDvyPfEW8kq9ajXVNstd9gHb7cH4nzVu5d FCdJN2racMdxqsXazIqMg17PKBy/DzK7f/TelAbEqY24qeF8z7amaT299vzDUOYZ 0NnQXWlo7ewfcsSiKNLtvF5/79KhQbDwMA/KxDgo8SAPcSFg0rfymdfOqr3q7hXt O9wJQv2jYn5g45IUl4oSnN2xK6/1MhKNvaCgC/GnVWekUVsyeUu5rAWDt0w80Pf8 WHwz94Zvo1hT+FWwxodq4zNEVukuUoOEZ3XEZKY6XYGT6SE/WnbyUuQ39SqmyWUC l86tBzKo3Zbb5g== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:59 2025 by rpki-client