This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json) Hash identifier: 9L0b7mNBLlXJgxhFoPaA6iDtVl7kCNA6dI0UgzCu0Sg= Subject key identifier: B5:61:70:64:5A:D1:9E:42:AF:CD:E7:83:E8:D1:63:D1:81:C0:57:AB Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Certificate serial: 019B16F1582524B0703344DEC3F8171BC252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft Manifest number: 177A Signing time: Sat 13 Dec 2025 09:01:14 +0000 Manifest this update: Sat 13 Dec 2025 09:01:14 +0000 Manifest next update: Sun 14 Dec 2025 09:01:14 +0000 Files and hashes: 1: Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa (hash: 4IG2rPSclxVb9yuX8BnAS143KaJ4+m9FFie+h4KMN4U=) 2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: y/olIvOm0Dw+u7IORd3PGXbmc7c6WXsr24T1O/DY8AU=) 3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=) 4: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=) 5: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:f1:58:25:24:b0:70:33:44:de:c3:f8:17:1b:c2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Validity Not Before: Dec 13 09:01:14 2025 GMT Not After : Dec 14 09:01:14 2025 GMT Subject: CN=b56170645ad19e42afcde783e8d163d181c057ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:6b:9c:a1:6b:a3:9a:78:05:1f:4d:a8:e7: 82:7b:83:ae:f6:91:73:a2:5c:c6:0b:55:7c:b1:94: 1c:6e:4f:a3:b4:bc:f2:6a:25:25:f6:34:0f:6d:e9: d9:25:86:ed:cf:b7:75:62:68:f3:ba:61:72:89:ef: 3e:23:6c:ae:cc:75:de:de:9d:27:b0:ee:10:51:bd: 46:d9:7b:7d:a0:ef:93:69:92:0a:05:1d:a9:fd:fd: 5a:77:19:68:5d:7c:72:35:be:04:a4:df:fd:85:42: ad:15:17:59:01:8e:32:90:88:18:9a:12:1a:78:8a: 93:e6:ce:b3:22:1a:8a:9b:5a:87:9b:b4:04:fd:fe: c6:47:cf:b1:e4:32:55:75:b2:c6:2a:af:35:d2:be: ed:5e:b3:e9:4a:12:68:56:80:e3:f7:94:26:8f:0a: dc:b8:f3:03:50:e6:4f:6c:73:d6:4e:bf:dd:4e:c4: 10:50:1c:02:3d:66:6e:f6:56:11:30:93:a2:5d:c1: 95:40:37:24:a1:04:f1:73:b0:3d:ec:3b:c0:72:0d: c8:9a:c4:14:e0:11:ca:99:0a:1f:4c:8e:21:0d:4c: 16:44:20:fc:00:80:77:36:d8:51:8c:df:b6:bc:b0: 59:dc:14:04:5d:54:c6:77:44:bb:53:2e:da:d9:71: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:61:70:64:5A:D1:9E:42:AF:CD:E7:83:E8:D1:63:D1:81:C0:57:AB X509v3 Authority Key Identifier: keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cb:9b:51:8b:fc:78:5d:6b:45:5d:a5:20:88:50:cd:e1:70: ff:a9:56:ea:9d:02:79:3d:40:ae:10:eb:1a:b6:e6:42:ae:4c: da:5a:10:b9:26:b0:f4:46:58:bd:50:f1:53:0f:ad:53:06:93: 7f:4b:06:64:58:88:9c:67:86:36:53:0f:c6:81:28:a4:de:b6: 0b:66:2f:3c:c0:04:7c:84:4a:c9:f5:fe:8b:e8:6d:05:79:6b: 9c:f8:3e:fd:53:b1:0f:22:17:a4:69:94:be:c9:a5:d9:22:c2: 05:09:ca:73:cd:22:1f:af:5f:46:1b:e8:61:32:b1:97:77:b8: 1d:77:3c:a7:14:37:aa:75:12:28:6c:a5:db:3d:14:db:3f:69: f3:f3:6f:60:12:b4:d7:62:a3:d5:31:7e:f2:23:11:b1:53:d4: a4:cb:ec:f2:e7:2a:08:5f:7e:34:af:9e:86:da:03:e4:69:2f: 49:ed:66:d7:65:1a:5e:a2:fb:65:08:91:d1:ec:c7:1d:1f:67: 7a:c2:67:d0:6e:49:9e:a9:1e:a2:ab:60:f1:85:dc:a7:d1:01: 1d:29:92:c0:1a:30:e5:63:14:70:b8:af:e0:5a:5f:60:8d:ae: cb:61:f0:6a:13:99:4e:7f:6e:8a:9f:fc:f2:8a:43:7a:96:56: f4:b8:82:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsW8VglJLBwM0Tew/gXG8JSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4 YjJkZTcwHhcNMjUxMjEzMDkwMTE0WhcNMjUxMjE0MDkwMTE0WjAzMTEwLwYDVQQD EyhiNTYxNzA2NDVhZDE5ZTQyYWZjZGU3ODNlOGQxNjNkMTgxYzA1N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjNrnKFro5p4BR9NqOeCe4Ou9pFz olzGC1V8sZQcbk+jtLzyaiUl9jQPbenZJYbtz7d1YmjzumFyie8+I2yuzHXe3p0n sO4QUb1G2Xt9oO+TaZIKBR2p/f1adxloXXxyNb4EpN/9hUKtFRdZAY4ykIgYmhIa eIqT5s6zIhqKm1qHm7QE/f7GR8+x5DJVdbLGKq810r7tXrPpShJoVoDj95Qmjwrc uPMDUOZPbHPWTr/dTsQQUBwCPWZu9lYRMJOiXcGVQDckoQTxc7A97DvAcg3ImsQU 4BHKmQofTI4hDUwWRCD8AIB3NthRjN+2vLBZ3BQEXVTGd0S7Uy7a2XHjWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVhcGRa0Z5Cr83ng+jRY9GBwFerMB8GA1UdIwQY MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMubUYv8 eF1rRV2lIIhQzeFw/6lW6p0CeT1ArhDrGrbmQq5M2loQuSaw9EZYvVDxUw+tUwaT f0sGZFiInGeGNlMPxoEopN62C2YvPMAEfIRKyfX+i+htBXlrnPg+/VOxDyIXpGmU vsml2SLCBQnKc80iH69fRhvoYTKxl3e4HXc8pxQ3qnUSKGyl2z0U2z9p8/NvYBK0 12Kj1TF+8iMRsVPUpMvs8ucqCF9+NK+ehtoD5GkvSe1m12UaXqL7ZQiR0ezHHR9n esJn0G5Jnqkeoqtg8YXcp9EBHSmSwBow5WMUcLiv4FpfYI2uy2HwahOZTn9uip/8 8opDepZW9LiCDg== -----END CERTIFICATE-----Generated at Sat Dec 13 15:40:50 2025 by rpki-client