This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json) Hash identifier: Q5CtzCVaJHoxAh217fBmvv02LVXGdQr1AUv6dJ8O3Yw= Subject key identifier: 2A:8E:2D:26:35:08:A8:62:DE:88:44:50:62:AA:84:EE:1A:8A:58:B6 Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Certificate serial: 019B0E5B6A11700012A85ADDE9025419BEEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft Manifest number: 1779 Signing time: Thu 11 Dec 2025 17:00:30 +0000 Manifest this update: Thu 11 Dec 2025 17:00:30 +0000 Manifest next update: Fri 12 Dec 2025 17:00:30 +0000 Files and hashes: 1: EaH2QQHBEDcGaNdJtYZj2ZFNJ5k.roa (hash: 4+/I2Hjrn0j9dA2Zz00LeWlJdI1vEoPYq2H+FkwWxIU=) 2: VU8Lnit5-5bWS_B3iU2pbUqjD3A.roa (hash: f9Jbrulzf/covwNo8YJa0VovFN79QafWnPSPZ8cv6CI=) 3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: QcT9mxZppOafijeuajr11SjSsEEgNLnWVdaV9IsDwGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:6a:11:70:00:12:a8:5a:dd:e9:02:54:19:be:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Validity Not Before: Dec 11 17:00:30 2025 GMT Not After : Dec 12 17:00:30 2025 GMT Subject: CN=2a8e2d263508a862de88445062aa84ee1a8a58b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:b6:3f:89:4a:d3:34:72:41:c5:bd:12:f2: 73:28:44:05:d0:0f:7d:9e:d3:e8:1b:8d:1a:88:fe: cd:36:67:68:62:af:60:05:6f:b7:9d:f1:3f:2a:09: 29:4b:dc:37:58:c1:21:8d:03:40:ef:aa:28:7f:72: 99:98:31:f1:93:c8:d1:25:20:4c:ea:68:8e:08:7b: 44:07:85:f4:b6:ef:0b:32:29:51:f9:69:40:09:e7: f0:96:19:b7:fc:f2:f8:dc:08:ca:07:a2:6f:f0:5e: 1b:64:f1:c6:96:a0:b1:41:c3:66:46:6e:03:9b:b9: aa:be:fd:87:15:c9:80:58:48:f9:17:d0:fd:60:7f: 08:4e:37:95:6c:73:ac:40:c0:90:f4:1b:af:d6:75: 72:19:dc:29:98:89:77:48:15:af:e3:58:91:df:b1: d9:07:17:9b:0e:03:25:de:36:4e:5d:f6:08:e8:9e: cb:88:ca:38:8e:fa:41:06:c7:74:37:53:8d:48:21: 69:46:5a:94:6e:be:bb:13:98:50:97:92:31:0e:a0: ab:15:fc:a3:09:2c:82:0e:ef:d0:08:5e:c7:8b:54: 75:2d:51:07:74:0b:6e:7d:86:5f:e1:99:4c:68:b3: 66:06:f8:c5:bc:72:bd:8d:05:69:92:08:a8:8d:a5: 19:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8E:2D:26:35:08:A8:62:DE:88:44:50:62:AA:84:EE:1A:8A:58:B6 X509v3 Authority Key Identifier: keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3e:69:c0:e2:73:73:7b:27:64:16:eb:c2:ce:4f:05:7f:29: db:e1:0a:fb:eb:e0:dc:e3:d3:fa:7a:85:d8:2b:cb:a5:8b:67: a0:1e:42:a6:9c:6e:d0:1c:5c:cc:47:4e:39:26:3f:bb:71:3f: b5:d5:de:83:1e:60:5f:20:00:31:46:67:64:fa:54:c6:53:73: 92:36:85:b3:f0:3f:61:93:66:9d:c3:32:28:03:0a:e9:c0:e1: b5:fe:3e:f6:01:cc:9e:6b:dd:10:4d:be:cd:56:e2:bf:56:06: 67:03:76:e5:c2:13:f2:45:1c:80:ab:27:8e:48:af:5c:e2:37: 6b:71:b9:2e:8a:69:ac:da:11:cf:b4:1f:1a:f8:a9:2c:40:3a: 47:37:4a:bd:d7:82:48:e2:bf:be:74:22:4d:79:44:ac:a8:4c: b9:ba:9b:8d:01:ce:20:f1:9a:b2:fe:42:82:4d:02:ba:49:fb: 27:f6:8f:62:66:be:51:cf:70:54:58:f5:8c:c2:4f:54:d4:19: 13:e8:92:16:55:19:bf:41:83:8a:84:7f:f9:4f:74:e1:ec:b1: e4:f2:d7:cd:b8:e9:0c:7b:c5:c1:9c:11:24:0b:13:14:9f:bd: 8d:77:24:9c:a3:d7:9a:16:3a:b7:86:8e:48:0a:62:97:9a:77: e1:12:2f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW2oRcAASqFrd6QJUGb7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy M2Q1YjgwHhcNMjUxMjExMTcwMDMwWhcNMjUxMjEyMTcwMDMwWjAzMTEwLwYDVQQD EygyYThlMmQyNjM1MDhhODYyZGU4ODQ0NTA2MmFhODRlZTFhOGE1OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpu2P4lK0zRyQcW9EvJzKEQF0A99 ntPoG40aiP7NNmdoYq9gBW+3nfE/KgkpS9w3WMEhjQNA76oof3KZmDHxk8jRJSBM 6miOCHtEB4X0tu8LMilR+WlACefwlhm3/PL43AjKB6Jv8F4bZPHGlqCxQcNmRm4D m7mqvv2HFcmAWEj5F9D9YH8ITjeVbHOsQMCQ9Buv1nVyGdwpmIl3SBWv41iR37HZ BxebDgMl3jZOXfYI6J7LiMo4jvpBBsd0N1ONSCFpRlqUbr67E5hQl5IxDqCrFfyj CSyCDu/QCF7Hi1R1LVEHdAtufYZf4ZlMaLNmBvjFvHK9jQVpkgiojaUZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqOLSY1CKhi3ohEUGKqhO4aili2MB8GA1UdIwQY MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVD5pwOJz c3snZBbrws5PBX8p2+EK++vg3OPT+nqF2CvLpYtnoB5Cppxu0BxczEdOOSY/u3E/ tdXegx5gXyAAMUZnZPpUxlNzkjaFs/A/YZNmncMyKAMK6cDhtf4+9gHMnmvdEE2+ zVbiv1YGZwN25cIT8kUcgKsnjkivXOI3a3G5LopprNoRz7QfGvipLEA6RzdKvdeC SOK/vnQiTXlErKhMubqbjQHOIPGasv5Cgk0Cukn7J/aPYma+Uc9wVFj1jMJPVNQZ E+iSFlUZv0GDioR/+U904eyx5PLXzbjpDHvFwZwRJAsTFJ+9jXcknKPXmhY6t4aO SApil5p34RIvVA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:27:54 2025 by rpki-client