This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json) Hash identifier: iuwoHoUawYdaPBHLkazKhapIdBKo5m/DcjSNlPMGFrI= Subject key identifier: 78:E0:3E:5C:93:4C:F8:BB:4D:9A:3F:28:07:23:40:E2:2F:A0:35:75 Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9 Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9 Certificate serial: 019B3AFDA7AACCC67B67F54A1AAFFBCD95ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft Manifest number: 1428 Signing time: Sat 20 Dec 2025 09:01:00 +0000 Manifest this update: Sat 20 Dec 2025 09:01:00 +0000 Manifest next update: Sun 21 Dec 2025 09:01:00 +0000 Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: GeEwWsYcukjGAntHwt//pYWF60vHK9r4rIBDn4dXQ7o=) 2: aEJUX-P3iWzm8iZ2YmNhX1BUm-w.roa (hash: UCW6fp2JBu8X3L8wVEatff2uZp8yn3edNh91K1NyH88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:a7:aa:cc:c6:7b:67:f5:4a:1a:af:fb:cd:95:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9 Validity Not Before: Dec 20 09:01:00 2025 GMT Not After : Dec 21 09:01:00 2025 GMT Subject: CN=78e03e5c934cf8bb4d9a3f28072340e22fa03575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:71:3e:e8:c0:53:f0:ab:c2:4f:1d:c5:05: db:bc:55:b6:16:86:33:66:d4:31:e1:b0:50:b3:fb: a1:27:a8:1f:52:06:b8:18:cf:53:29:13:74:9c:db: 03:b0:f6:a5:e3:50:2d:bb:bd:b5:62:a9:f3:b9:49: f4:80:29:7b:65:11:ba:0b:a5:0b:40:64:c8:3b:2f: b0:1a:4f:8b:08:a5:c8:40:60:79:ac:63:fb:af:56: 3d:8e:e1:2f:74:53:49:71:8d:2f:79:b2:25:dc:9f: 71:fe:3a:ff:1c:ae:96:c8:dc:4d:e8:8c:62:67:2f: e3:ff:a0:28:84:b6:ff:83:55:6d:cb:c6:bb:7f:96: c8:df:73:2b:0e:5f:08:06:63:d4:aa:74:69:77:c5: a8:d7:ce:37:1f:c6:80:7e:f2:1f:af:40:a5:2a:2a: 65:88:4c:45:b0:83:87:68:95:eb:80:5c:be:db:3c: ae:1c:ca:c0:f0:7c:91:dc:bf:5b:8c:d6:ad:91:57: 1a:87:d8:b1:53:3c:cb:e1:7c:68:67:58:fa:ca:b0: b5:f7:c3:d2:e9:28:38:63:b2:19:24:2b:b5:2f:dc: 72:fe:d0:9a:d2:19:ca:0b:7c:aa:63:13:7b:f1:74: 1c:2b:c6:3f:a3:3b:aa:77:d4:9d:de:0a:a6:75:dd: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:3E:5C:93:4C:F8:BB:4D:9A:3F:28:07:23:40:E2:2F:A0:35:75 X509v3 Authority Key Identifier: keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:ae:67:0f:ba:7f:c8:bf:58:13:4d:6a:83:4e:dd:c3:61:87: 0e:f1:6e:bc:43:08:97:6e:a8:b2:6c:3a:13:37:27:fc:0d:d4: 57:57:27:c4:a2:b8:e9:6e:d4:dc:74:88:13:e0:9f:ff:bf:24: 4b:d9:0e:a0:8f:29:a8:5d:fb:23:2c:ea:1d:41:19:dd:04:38: 9b:7a:75:db:ec:2c:a4:26:3a:a3:9c:99:5d:91:7d:22:77:ba: 33:be:39:22:42:ab:50:06:99:dd:ce:8f:27:17:19:75:c1:89: 68:8c:33:5c:2a:e2:4d:aa:0a:f8:46:9d:c3:61:cf:77:33:d5: d6:3c:ac:fa:f6:ff:d7:e1:c6:71:3b:a0:d3:9b:6b:e8:4f:90: f4:9e:e9:0f:ee:f1:27:c0:45:96:80:1a:38:5f:71:08:3c:ca: 19:1c:08:3c:e6:f2:97:6d:24:66:8f:35:7f:30:06:a9:a9:2b: 37:9a:a9:ba:e0:3d:ff:9d:af:96:dc:f9:83:ee:40:a7:6e:45: 7d:55:62:da:3a:26:5c:f7:02:e8:7b:94:c8:39:8b:f1:72:c6: 26:62:4c:7f:dd:2e:f3:e7:fc:f4:45:9e:c5:97:1e:70:99:ef: 92:b3:10:30:c4:a6:c9:4a:32:64:31:f6:24:ce:d1:c2:1b:88: f0:e1:45:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/aeqzMZ7Z/VKGq/7zZXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMDRkNjI5MzI3NDM5NmY1YThkNjkxNDg1ZDY4NzZhMGEy MDcxZDkwHhcNMjUxMjIwMDkwMTAwWhcNMjUxMjIxMDkwMTAwWjAzMTEwLwYDVQQD Eyg3OGUwM2U1YzkzNGNmOGJiNGQ5YTNmMjgwNzIzNDBlMjJmYTAzNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus9xPujAU/Crwk8dxQXbvFW2FoYz ZtQx4bBQs/uhJ6gfUga4GM9TKRN0nNsDsPal41Atu721YqnzuUn0gCl7ZRG6C6UL QGTIOy+wGk+LCKXIQGB5rGP7r1Y9juEvdFNJcY0vebIl3J9x/jr/HK6WyNxN6Ixi Zy/j/6AohLb/g1Vty8a7f5bI33MrDl8IBmPUqnRpd8Wo1843H8aAfvIfr0ClKipl iExFsIOHaJXrgFy+2zyuHMrA8HyR3L9bjNatkVcah9ixUzzL4XxoZ1j6yrC198PS 6Sg4Y7IZJCu1L9xy/tCa0hnKC3yqYxN78XQcK8Y/ozuqd9Sd3gqmdd0YawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjgPlyTTPi7TZo/KAcjQOIvoDV1MB8GA1UdIwQY MBaAFCAE1ikydDlvWo1pFIXWh2oKIHHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzIt NGVmOWNjNzUxNTE3LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZTVjYmQtNGQ1YS00ZWQ2LWIxYzItNGVmOWNjNzUxNTE3 LzEvSUFUV0tUSjBPVzlhaldrVWhkYUhhZ29nY2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAza5nD7p/ yL9YE01qg07dw2GHDvFuvEMIl26osmw6Ezcn/A3UV1cnxKK46W7U3HSIE+Cf/78k S9kOoI8pqF37IyzqHUEZ3QQ4m3p12+wspCY6o5yZXZF9Ine6M745IkKrUAaZ3c6P JxcZdcGJaIwzXCriTaoK+Eadw2HPdzPV1jys+vb/1+HGcTug05tr6E+Q9J7pD+7x J8BFloAaOF9xCDzKGRwIPObyl20kZo81fzAGqakrN5qpuuA9/52vltz5g+5Ap25F fVVi2jomXPcC6HuUyDmL8XLGJmJMf90u8+f89EWexZcecJnvkrMQMMSmyUoyZDH2 JM7RwhuI8OFFxg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:33:59 2025 by rpki-client