This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json) Hash identifier: 4/hh5qsxhP1SdF31QeERWiLIm777vJJv0al0kehUkTo= Subject key identifier: A6:F4:2E:0E:AA:21:42:F8:3D:CD:8F:36:A2:DA:39:3E:49:F9:43:19 Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Certificate serial: 019B5ABF94472415E323DC69ED01A3B0F115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 13:01:03 +0000 Manifest this update: Fri 26 Dec 2025 13:01:03 +0000 Manifest next update: Sat 27 Dec 2025 13:01:03 +0000 Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=) 2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: pjk1ajS99h5y5mAzZ+DMFH572plse/aF8C2rRZkT/to=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:94:47:24:15:e3:23:dc:69:ed:01:a3:b0:f1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Validity Not Before: Dec 26 13:01:03 2025 GMT Not After : Dec 27 13:01:03 2025 GMT Subject: CN=a6f42e0eaa2142f83dcd8f36a2da393e49f94319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:e2:62:28:6d:ca:0a:44:43:89:92:a1:9c: f8:78:d9:fb:cb:65:1c:9c:45:91:22:eb:bf:8c:44: 97:c6:93:8d:8f:c3:b3:61:61:93:04:5b:7b:43:46: e6:57:ed:c1:ae:e3:f4:5f:f2:80:ea:98:d5:41:d4: 75:b8:2a:d1:77:eb:85:1f:b1:4f:af:67:76:9b:05: e5:9e:81:e3:92:f6:9a:aa:53:e7:32:74:63:bf:8e: b0:59:20:fe:4a:d3:b3:6d:1a:1d:c8:55:68:50:c6: d9:fe:dd:64:43:ed:24:56:19:25:a7:41:d3:db:6f: 6d:ec:ff:fa:4b:dd:88:17:f4:cd:84:99:87:28:01: e8:f9:8c:c8:ec:ad:e5:45:de:d3:24:52:13:f4:15: c8:4b:22:0f:bc:21:41:e8:2f:7b:b9:b7:39:9a:46: 39:c2:c2:c1:9b:57:1c:53:99:5d:84:d5:df:f3:10: 32:a1:74:46:be:b9:a5:d0:f3:02:dd:80:69:cf:5e: 1d:f3:b4:a2:9d:5e:50:c2:29:c8:b6:af:cc:2d:2f: 31:95:ad:5e:82:f4:b1:67:d5:e8:bd:d5:5b:c3:0b: 1a:e4:8c:74:5e:5b:f9:77:07:fd:6d:a5:7b:7d:0e: 99:7e:c4:08:53:c0:ec:f8:6a:3a:2e:8d:6c:2c:65: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F4:2E:0E:AA:21:42:F8:3D:CD:8F:36:A2:DA:39:3E:49:F9:43:19 X509v3 Authority Key Identifier: keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2f:dd:b4:91:43:85:da:1c:44:66:66:f5:5e:a3:be:75:bd: be:ff:79:6d:89:9c:77:21:87:35:81:70:e4:5e:c1:07:09:20: 05:61:d2:79:67:3b:1b:1c:a7:61:ec:95:05:5e:92:ba:dd:e7: 67:a2:19:1c:b0:81:60:8a:d5:b6:09:de:6f:62:63:87:d4:00: 0e:9c:fe:f0:9c:68:39:26:a9:3f:82:64:a3:03:1f:49:9d:90: 67:bf:36:9e:7b:fd:86:9c:79:6f:63:d2:25:e4:7e:d6:c2:2d: f2:41:9f:c4:b6:94:c6:b5:b7:e5:7d:1a:a6:5c:d0:a9:21:a9: 3b:15:d5:83:1a:29:5e:65:5b:cf:df:a4:73:db:66:58:c9:3d: ef:90:43:46:8f:78:e3:ff:28:e1:a8:04:c0:db:9a:ea:2d:47: 47:09:e2:44:bb:8a:d9:b7:7b:5b:a5:2f:ae:17:14:2c:a3:e2: 05:b7:4c:d8:e1:0b:3c:ce:f6:31:fa:ea:f1:13:3f:8f:b0:96: 7f:d7:10:85:cb:e4:fe:be:d9:35:e4:f3:ef:a8:b8:8a:02:2d: df:c9:33:1b:e1:f3:59:6e:23:f4:0e:36:75:3a:f4:1c:72:d4: 42:0c:d2:1b:6e:da:8e:4d:06:d1:5d:bf:d4:c3:a1:4d:4b:f1: 18:43:bf:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav5RHJBXjI9xp7QGjsPEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmFhMWYwZWQ0NTk2ZTczM2Y4YjYyZDM5ZTM3YjhkZTUw ODVlZDcwHhcNMjUxMjI2MTMwMTAzWhcNMjUxMjI3MTMwMTAzWjAzMTEwLwYDVQQD EyhhNmY0MmUwZWFhMjE0MmY4M2RjZDhmMzZhMmRhMzkzZTQ5Zjk0MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHHiYihtygpEQ4mSoZz4eNn7y2Uc nEWRIuu/jESXxpONj8OzYWGTBFt7Q0bmV+3BruP0X/KA6pjVQdR1uCrRd+uFH7FP r2d2mwXlnoHjkvaaqlPnMnRjv46wWSD+StOzbRodyFVoUMbZ/t1kQ+0kVhklp0HT 229t7P/6S92IF/TNhJmHKAHo+YzI7K3lRd7TJFIT9BXISyIPvCFB6C97ubc5mkY5 wsLBm1ccU5ldhNXf8xAyoXRGvrml0PMC3YBpz14d87SinV5QwinItq/MLS8xla1e gvSxZ9XovdVbwwsa5Ix0Xlv5dwf9baV7fQ6ZfsQIU8Ds+Go6Lo1sLGXK/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb0Lg6qIUL4Pc2PNqLaOT5J+UMZMB8GA1UdIwQY MBaAFIlqofDtRZbnM/i2LTnje43lCF7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMt YTI4NmQwMjUzMmQzLzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMtYTI4NmQwMjUzMmQz LzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC/dtJFD hdocRGZm9V6jvnW9vv95bYmcdyGHNYFw5F7BBwkgBWHSeWc7GxynYeyVBV6Sut3n Z6IZHLCBYIrVtgneb2Jjh9QADpz+8JxoOSapP4JkowMfSZ2QZ782nnv9hpx5b2PS JeR+1sIt8kGfxLaUxrW35X0aplzQqSGpOxXVgxopXmVbz9+kc9tmWMk975BDRo94 4/8o4agEwNua6i1HRwniRLuK2bd7W6UvrhcULKPiBbdM2OELPM72Mfrq8RM/j7CW f9cQhcvk/r7ZNeTz76i4igIt38kzG+HzWW4j9A42dTr0HHLUQgzSG27ajk0G0V2/ 1MOhTUvxGEO/fg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:26 2025 by rpki-client