This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json) Hash identifier: cdcaYO7QttUFLpNpAJu2Pfm5Ma9Y/8ucfVdzvUQLbeM= Subject key identifier: B3:66:E0:E8:11:80:47:B6:F8:CB:0B:AB:BD:E2:92:D9:ED:9D:FC:19 Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545 Certificate serial: 019B36B44D77858BAC0A23101689CAA38D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft Manifest number: 1397 Signing time: Fri 19 Dec 2025 13:02:24 +0000 Manifest this update: Fri 19 Dec 2025 13:02:24 +0000 Manifest next update: Sat 20 Dec 2025 13:02:24 +0000 Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=) 2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: iwRsqc93ROgoGthFnDUegY5wOdu0cwbEJB+4VHEOhgc=) 3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:4d:77:85:8b:ac:0a:23:10:16:89:ca:a3:8d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545 Validity Not Before: Dec 19 13:02:24 2025 GMT Not After : Dec 20 13:02:24 2025 GMT Subject: CN=b366e0e8118047b6f8cb0babbde292d9ed9dfc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:2d:aa:91:1d:9f:a9:7a:e5:c2:ee:d3:07: 7b:10:55:1b:6a:24:0f:1b:30:32:f6:9a:cb:45:48: 80:14:3e:e2:2e:fb:67:47:8b:fb:5a:7f:39:1b:53: 43:3b:fa:50:b5:61:5d:17:13:e4:0c:a8:93:e3:55: 2e:80:d0:58:60:bd:1c:3a:f7:61:e5:68:c7:50:05: e7:65:37:bc:08:64:b1:c6:86:94:12:09:87:7d:27: 51:40:57:ab:e9:f2:cd:9c:28:c3:a1:c1:5e:da:44: 6a:8a:f3:15:23:cb:e7:29:c0:bf:43:5c:ca:fe:3d: 77:ac:60:bf:41:fd:23:62:b8:cf:7f:05:05:6f:8c: 97:7f:55:b4:e5:5d:4d:4d:5b:c5:8e:49:be:b3:b3: 1c:97:76:db:62:62:19:88:7a:d6:7b:88:77:30:ff: 4a:28:02:f5:51:09:67:08:7d:40:40:18:0f:96:e7: d6:ef:07:b2:de:1c:af:25:a6:e9:09:c9:b9:d8:70: ce:c8:38:c8:b9:24:8f:57:77:e6:53:0d:18:ec:9d: 00:48:b9:e9:01:ee:ca:d3:ab:86:80:a8:2c:e2:f5: 91:e0:c8:b6:7d:c1:41:b8:1a:f1:7b:dc:e5:f0:7b: 52:79:11:58:19:d0:c4:26:d4:84:d3:74:d2:33:8e: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:66:E0:E8:11:80:47:B6:F8:CB:0B:AB:BD:E2:92:D9:ED:9D:FC:19 X509v3 Authority Key Identifier: keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:98:35:c4:cd:8e:c6:f6:8e:d9:c6:8a:a1:8f:14:49:b1:1a: 8b:c2:a8:10:1a:f8:eb:13:52:da:e1:ba:64:1a:87:bb:60:b4: 89:dd:f7:2a:4c:a9:0f:7a:4d:6d:17:72:46:ac:0a:48:4f:f4: 29:94:7b:2b:51:16:06:0a:e7:04:e7:d7:a5:61:da:07:65:4b: 54:fd:d4:d1:f4:e2:90:2d:a5:43:c6:b9:5c:5e:08:05:e2:64: 92:02:1a:70:27:47:33:6e:c4:c3:a9:ca:ca:e4:9a:d6:f9:e9: 16:82:38:70:56:cf:e0:2e:ae:33:b0:bf:ed:39:cd:94:6c:90: fc:e8:c4:b9:58:ba:dc:70:b1:32:6b:8a:8d:b2:88:78:72:f6: a7:d8:dc:95:dc:c7:d1:55:b8:fc:a4:62:f5:5d:d8:11:0e:b2: a6:c2:63:49:4b:f3:ae:37:aa:2b:9f:d6:34:19:e3:4e:f1:b8: f1:ac:7d:f4:d4:63:2e:c8:77:48:2d:dc:b4:8b:2d:4d:f2:76: cc:24:3c:a3:2e:bb:03:6b:4f:5e:aa:30:0f:79:5f:33:95:8f: 6e:b9:9e:dc:64:2b:ca:99:54:37:7d:f9:77:30:68:07:33:a7: 45:e9:fd:3c:a6:d9:ef:3d:d0:cc:f4:e3:0c:0e:8e:2a:ed:06: 93:5a:c7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tE13hYusCiMQFonKo40oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5 M2Q1NDUwHhcNMjUxMjE5MTMwMjI0WhcNMjUxMjIwMTMwMjI0WjAzMTEwLwYDVQQD EyhiMzY2ZTBlODExODA0N2I2ZjhjYjBiYWJiZGUyOTJkOWVkOWRmYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxEtqpEdn6l65cLu0wd7EFUbaiQP GzAy9prLRUiAFD7iLvtnR4v7Wn85G1NDO/pQtWFdFxPkDKiT41UugNBYYL0cOvdh 5WjHUAXnZTe8CGSxxoaUEgmHfSdRQFer6fLNnCjDocFe2kRqivMVI8vnKcC/Q1zK /j13rGC/Qf0jYrjPfwUFb4yXf1W05V1NTVvFjkm+s7Mcl3bbYmIZiHrWe4h3MP9K KAL1UQlnCH1AQBgPlufW7wey3hyvJabpCcm52HDOyDjIuSSPV3fmUw0Y7J0ASLnp Ae7K06uGgKgs4vWR4Mi2fcFBuBrxe9zl8HtSeRFYGdDEJtSE03TSM474rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNm4OgRgEe2+MsLq73iktntnfwZMB8GA1UdIwQY MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt OTM3ZGNmZjUxZTJkLzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZg1xM2O xvaO2caKoY8USbEai8KoEBr46xNS2uG6ZBqHu2C0id33KkypD3pNbRdyRqwKSE/0 KZR7K1EWBgrnBOfXpWHaB2VLVP3U0fTikC2lQ8a5XF4IBeJkkgIacCdHM27Ew6nK yuSa1vnpFoI4cFbP4C6uM7C/7TnNlGyQ/OjEuVi63HCxMmuKjbKIeHL2p9jcldzH 0VW4/KRi9V3YEQ6ypsJjSUvzrjeqK5/WNBnjTvG48ax99NRjLsh3SC3ctIstTfJ2 zCQ8oy67A2tPXqowD3lfM5WPbrme3GQryplUN335dzBoBzOnRen9PKbZ7z3QzPTj DA6OKu0Gk1rH5w== -----END CERTIFICATE-----Generated at Fri Dec 19 23:05:32 2025 by rpki-client