This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json) Hash identifier: NmUyRKZSXKmZNeHGDSqmy2B0JyyO70QEjUzfW3v0y0w= Subject key identifier: CA:59:5A:E6:57:6B:B7:36:4D:EE:C8:B3:72:00:CD:C2:89:88:A4:7D Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56 Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56 Certificate serial: 019B32D60ACF812D2ADC3B4026B962602FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:00:46 +0000 Manifest this update: Thu 18 Dec 2025 19:00:46 +0000 Manifest next update: Fri 19 Dec 2025 19:00:46 +0000 Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=) 2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: 4P1elYxYifK2CyF3j32DI7fHbnsK8x/jaRfVioJEaeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:0a:cf:81:2d:2a:dc:3b:40:26:b9:62:60:2f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89693344638acb0536582fab089876578ef6bc56 Validity Not Before: Dec 18 19:00:46 2025 GMT Not After : Dec 19 19:00:46 2025 GMT Subject: CN=ca595ae6576bb7364deec8b37200cdc28988a47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:98:3e:d3:57:92:c4:0d:83:4e:97:15:db: f3:90:88:09:e8:d3:c7:e1:d7:73:3e:61:d7:2c:48: 94:41:c3:68:0b:65:b5:d5:07:b1:1f:ec:01:ad:ec: 12:36:42:40:91:00:96:99:49:f1:a2:39:02:42:58: be:1d:89:45:b5:cb:09:1f:77:41:0f:84:68:bf:e2: 37:15:42:ab:9d:73:9e:39:86:92:1e:da:b3:b3:9d: 13:02:08:1a:25:5e:0e:7f:36:d4:5b:16:76:1e:c2: 47:76:72:6d:e5:39:22:51:1c:b8:34:a5:13:e9:99: 0a:8e:d3:a6:93:27:5f:75:e5:b2:2e:6d:96:bc:9e: eb:84:cd:af:bd:50:76:13:fe:98:02:50:79:47:5e: ca:87:62:7e:8e:8f:86:82:74:a6:5e:30:17:9c:ac: d0:5a:5c:84:a3:a7:0a:0f:36:a0:d8:cc:a9:0a:8f: 33:ed:88:10:f2:02:c9:0f:39:3b:f8:06:6a:2f:f3: fb:9b:3b:9c:d5:a7:ee:96:be:78:40:14:b8:c5:4a: fa:86:b9:c5:4e:81:9e:7d:41:78:ab:fa:49:07:54: c3:fd:0f:24:6f:10:26:0e:d9:91:ec:15:50:16:f0: 18:a7:a3:86:a6:6d:97:b4:9f:89:64:25:5a:c7:63: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:59:5A:E6:57:6B:B7:36:4D:EE:C8:B3:72:00:CD:C2:89:88:A4:7D X509v3 Authority Key Identifier: keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f1:b1:a1:33:21:40:f8:c2:97:c2:75:11:86:76:d8:52:eb: d0:f3:c9:6f:ef:41:d2:29:96:d0:98:d7:25:be:24:88:17:17: d0:70:23:dc:2f:38:b9:c0:97:4b:a3:43:b0:4e:74:4b:e7:99: 66:e2:e4:3d:4b:29:b3:5d:a9:d5:ed:d6:93:4b:aa:92:46:b6: cd:d6:2b:fc:b4:97:de:59:f4:7f:a5:5b:1b:8e:d9:85:fb:e3: 51:09:25:e3:46:f7:ff:e6:10:68:10:f9:85:53:53:79:ae:84: d9:a9:83:47:69:80:0a:04:0a:e8:20:0f:ee:c0:d8:fe:49:73: d4:bc:e9:31:d3:3a:1b:65:ed:a4:50:1c:0a:d8:92:92:2c:97: d4:95:91:f4:a4:10:70:76:2f:0c:e5:fe:ea:dd:f2:da:10:52: 1a:6c:e9:ad:f6:80:eb:1a:9e:7a:2a:dc:9f:db:a7:43:c7:81: fd:d6:a9:09:7a:06:49:fe:42:42:8e:0d:70:04:09:3e:57:e7: 00:c9:8d:54:a8:31:7e:c3:75:53:55:b0:41:fa:7c:85:f6:4b: 56:01:b6:b8:eb:7b:c3:7e:d4:b4:19:79:87:fd:67:35:74:18: b4:aa:4c:d9:06:36:6e:b6:d9:bd:e1:9f:ef:78:f8:62:62:e0: 6c:21:0f:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1grPgS0q3DtAJrliYC/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NjkzMzQ0NjM4YWNiMDUzNjU4MmZhYjA4OTg3NjU3OGVm NmJjNTYwHhcNMjUxMjE4MTkwMDQ2WhcNMjUxMjE5MTkwMDQ2WjAzMTEwLwYDVQQD EyhjYTU5NWFlNjU3NmJiNzM2NGRlZWM4YjM3MjAwY2RjMjg5ODhhNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3CYPtNXksQNg06XFdvzkIgJ6NPH 4ddzPmHXLEiUQcNoC2W11QexH+wBrewSNkJAkQCWmUnxojkCQli+HYlFtcsJH3dB D4Rov+I3FUKrnXOeOYaSHtqzs50TAggaJV4OfzbUWxZ2HsJHdnJt5TkiURy4NKUT 6ZkKjtOmkydfdeWyLm2WvJ7rhM2vvVB2E/6YAlB5R17Kh2J+jo+GgnSmXjAXnKzQ WlyEo6cKDzag2MypCo8z7YgQ8gLJDzk7+AZqL/P7mzuc1afulr54QBS4xUr6hrnF ToGefUF4q/pJB1TD/Q8kbxAmDtmR7BVQFvAYp6OGpm2XtJ+JZCVax2M/bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpZWuZXa7c2Te7Is3IAzcKJiKR9MB8GA1UdIwQY MBaAFIlpM0RjissFNlgvqwiYdleO9rxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTkt NzBmOTQzZWFjNGRiLzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTktNzBmOTQzZWFjNGRi LzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvGxoTMh QPjCl8J1EYZ22FLr0PPJb+9B0imW0JjXJb4kiBcX0HAj3C84ucCXS6NDsE50S+eZ ZuLkPUsps12p1e3Wk0uqkka2zdYr/LSX3ln0f6VbG47ZhfvjUQkl40b3/+YQaBD5 hVNTea6E2amDR2mACgQK6CAP7sDY/klz1LzpMdM6G2XtpFAcCtiSkiyX1JWR9KQQ cHYvDOX+6t3y2hBSGmzprfaA6xqeeircn9unQ8eB/dapCXoGSf5CQo4NcAQJPlfn AMmNVKgxfsN1U1WwQfp8hfZLVgG2uOt7w37UtBl5h/1nNXQYtKpM2QY2brbZveGf 73j4YmLgbCEP+g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:17:13 2025 by rpki-client