This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json) Hash identifier: 7bVn5cYYl3CAP6jiI+r899sOnZIG+kRzp344a429hok= Subject key identifier: 63:93:8A:3C:EC:2E:2E:B0:74:93:00:08:FF:CD:37:8A:6F:6F:B5:D0 Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c Certificate serial: 019B2BC1B0D03B7624D2B6E5657CDCB46047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft Manifest number: 177B Signing time: Wed 17 Dec 2025 10:01:12 +0000 Manifest this update: Wed 17 Dec 2025 10:01:12 +0000 Manifest next update: Thu 18 Dec 2025 10:01:12 +0000 Files and hashes: 1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: DszrrW78z9HOo+60nabOsWePTJ3dj5CbJ5KYI+rr4Dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:b0:d0:3b:76:24:d2:b6:e5:65:7c:dc:b4:60:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c Validity Not Before: Dec 17 10:01:12 2025 GMT Not After : Dec 18 10:01:12 2025 GMT Subject: CN=63938a3cec2e2eb074930008ffcd378a6f6fb5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:0b:9a:f9:c4:98:4d:21:ec:c9:0a:10:04: f4:93:f5:88:1b:55:61:a0:bc:9c:09:46:f6:6d:c8: 27:28:70:f7:c7:25:6b:76:0f:15:b4:e1:b1:a3:87: a0:06:bf:c5:13:45:30:ce:d2:86:99:08:60:3c:fa: 80:95:7b:b7:f8:da:a5:c5:ff:e1:1e:a6:6a:48:23: a1:d6:0f:62:8c:38:61:dd:77:b6:be:ac:a2:ab:64: e6:0e:6e:cc:2a:57:78:0a:c0:c1:9c:46:0d:6d:fb: 56:b7:a7:6a:4f:17:7a:15:b5:4f:55:58:7d:75:89: 3c:6d:37:8f:0e:26:45:c9:4e:cb:1b:75:61:2b:9b: 29:8d:b0:41:50:77:c5:95:60:3e:77:b4:e5:51:fc: cf:95:b8:42:da:a6:f3:62:2b:aa:b3:f6:08:cc:e3: 71:ac:83:ed:ce:71:1c:e0:80:c9:0f:ef:61:2e:55: 0e:4b:ad:13:c1:fd:46:65:31:04:9a:c6:d1:64:68: fd:02:5a:f4:77:af:1a:a5:38:60:c2:55:6a:8b:aa: d5:2d:3d:04:e3:bc:ea:c9:6c:63:50:55:7a:c1:35: 5f:78:ce:be:98:10:b8:07:a9:9f:ea:2d:2f:e9:e7: 78:4b:d8:b9:a3:70:a4:01:12:37:4a:47:87:2e:18: df:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:93:8A:3C:EC:2E:2E:B0:74:93:00:08:FF:CD:37:8A:6F:6F:B5:D0 X509v3 Authority Key Identifier: keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:60:ed:86:2b:4d:30:46:38:20:8d:1e:bd:29:58:80:32:08: 7f:50:15:4e:64:39:47:95:2e:3f:db:fe:7c:35:f9:ab:59:85: 65:0c:5c:b7:cb:82:10:e0:27:89:1c:e0:ed:9b:21:b7:9f:d4: ea:b8:f8:f1:f9:69:4e:bc:83:e5:43:2e:8c:7d:94:66:50:20: 95:6c:02:c6:45:cb:da:3e:be:5e:06:d4:f0:51:a0:8f:a7:9a: 2d:6e:8d:e6:28:bf:3b:1f:9c:22:e3:0d:a6:ed:d2:f5:17:28: e0:0c:7d:ee:85:02:9f:92:0b:f6:6b:0c:8c:f9:a2:1b:2b:48: b2:af:43:d3:24:d0:6d:5c:4d:13:d4:84:48:42:be:1e:87:9f: a3:8c:5b:7a:d7:0c:e9:c8:39:1b:10:7b:be:05:08:28:18:8a: a2:6e:7c:aa:c1:04:6b:85:c3:6b:4c:90:07:a6:0c:c8:0c:2a: 6c:f5:f1:fa:87:28:e1:a9:1a:d9:5e:a8:e7:b4:60:55:1b:ec: 4a:a8:10:80:78:4f:d5:e4:09:c3:0c:97:ca:9d:0f:83:3a:bf: 72:c5:4c:06:e6:7c:8b:d9:17:25:16:6f:87:77:b5:53:1a:1c: 53:74:6f:71:0c:41:d8:20:a0:b1:1b:4a:b5:b3:4a:f4:25:82: d8:e7:01:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwbDQO3Yk0rblZXzctGBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MjVhZTMyMzRhMmM5N2MyN2Y3NWVmNTFkM2ZmMzI2YmUw NjBlMmMwHhcNMjUxMjE3MTAwMTEyWhcNMjUxMjE4MTAwMTEyWjAzMTEwLwYDVQQD Eyg2MzkzOGEzY2VjMmUyZWIwNzQ5MzAwMDhmZmNkMzc4YTZmNmZiNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveELmvnEmE0h7MkKEAT0k/WIG1Vh oLycCUb2bcgnKHD3xyVrdg8VtOGxo4egBr/FE0UwztKGmQhgPPqAlXu3+Nqlxf/h HqZqSCOh1g9ijDhh3Xe2vqyiq2TmDm7MKld4CsDBnEYNbftWt6dqTxd6FbVPVVh9 dYk8bTePDiZFyU7LG3VhK5spjbBBUHfFlWA+d7TlUfzPlbhC2qbzYiuqs/YIzONx rIPtznEc4IDJD+9hLlUOS60Twf1GZTEEmsbRZGj9Alr0d68apThgwlVqi6rVLT0E 47zqyWxjUFV6wTVfeM6+mBC4B6mf6i0v6ed4S9i5o3CkARI3SkeHLhjfgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOTijzsLi6wdJMACP/NN4pvb7XQMB8GA1UdIwQY MBaAFIklrjI0osl8J/de9R0/8ya+Bg4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUt N2U4ZTZlODg4ZGFjLzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUtN2U4ZTZlODg4ZGFj LzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWDthitN MEY4II0evSlYgDIIf1AVTmQ5R5UuP9v+fDX5q1mFZQxct8uCEOAniRzg7Zsht5/U 6rj48flpTryD5UMujH2UZlAglWwCxkXL2j6+XgbU8FGgj6eaLW6N5ii/Ox+cIuMN pu3S9Rco4Ax97oUCn5IL9msMjPmiGytIsq9D0yTQbVxNE9SESEK+Hoefo4xbetcM 6cg5GxB7vgUIKBiKom58qsEEa4XDa0yQB6YMyAwqbPXx+oco4aka2V6o57RgVRvs SqgQgHhP1eQJwwyXyp0Pgzq/csVMBuZ8i9kXJRZvh3e1UxocU3RvcQxB2CCgsRtK tbNK9CWC2OcBvw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:04:26 2025 by rpki-client