This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json) Hash identifier: jdpCL/jLTJuo+oQY+WTsdywY3EoCTDoUaTPh1vSPJtk= Subject key identifier: AC:8B:97:37:7D:DD:E2:0D:55:9F:A6:B7:E7:57:72:AF:A9:3E:3E:82 Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Certificate serial: 019B0E26C530068BA226A8E67D77EB1AFE35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 16:03:00 +0000 Manifest this update: Thu 11 Dec 2025 16:03:00 +0000 Manifest next update: Fri 12 Dec 2025 16:03:00 +0000 Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=) 2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=) 3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: ZNkpehh2bjK3V4UAVHkCSjiAegPdtwXGYaS99rcfun0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:c5:30:06:8b:a2:26:a8:e6:7d:77:eb:1a:fe:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Validity Not Before: Dec 11 16:03:00 2025 GMT Not After : Dec 12 16:03:00 2025 GMT Subject: CN=ac8b97377ddde20d559fa6b7e75772afa93e3e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:a4:be:f1:62:f0:98:03:6e:df:a2:3b:7f: 37:06:a7:fe:29:37:d9:a3:57:3b:7f:5c:75:b9:58: d4:dc:9d:d9:42:08:2c:0b:72:e5:9b:76:d5:4c:44: 9a:fd:58:c1:8b:5f:bd:5a:a0:f4:e2:13:e0:f2:fe: bb:c3:e6:71:66:27:da:9c:bf:45:71:3f:9b:25:db: b7:54:5c:91:b5:8c:6c:e3:53:d6:fd:31:41:cf:d1: a9:be:56:e7:0f:11:df:ff:85:28:27:e9:4f:dd:0e: 0e:86:39:e3:36:23:74:77:21:e3:26:39:24:15:2d: 09:6e:cf:02:ad:a3:0c:8c:31:2a:cc:e4:9d:50:53: 02:f2:e2:de:33:bc:ea:5c:d7:13:73:af:aa:96:0c: 15:5a:f3:5f:e1:a4:62:b1:b7:5e:4e:5f:34:fa:01: c0:7c:a1:7b:9d:df:29:75:19:99:47:4d:f6:90:86: de:cf:de:ce:d0:5a:ce:26:09:42:85:2b:55:e0:79: f2:35:58:fb:fd:30:cd:92:04:a2:3b:3e:ed:52:df: d5:83:29:7b:99:43:3d:a5:55:9a:34:b7:db:a0:1e: ce:99:9a:d3:e9:99:f4:99:66:02:9a:51:67:c4:54: ed:59:c4:43:31:6f:cb:e3:03:b8:85:6f:82:17:9c: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:97:37:7D:DD:E2:0D:55:9F:A6:B7:E7:57:72:AF:A9:3E:3E:82 X509v3 Authority Key Identifier: keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e4:5f:dc:52:23:f7:f7:9f:5b:63:65:f9:ea:da:9b:f3:81: 12:64:ed:81:5e:0e:a9:61:d0:1b:a0:01:bc:f6:00:e4:0d:08: dc:3d:8e:4e:28:14:fa:bc:de:79:16:8d:d9:6d:25:61:de:c1: 24:dc:18:6e:d6:2c:fa:df:fa:bd:4a:2b:ce:ca:42:88:29:1b: 27:ca:16:16:45:c5:1c:bb:ff:74:9a:91:f8:13:e8:e1:cb:f5: ae:8b:91:d2:03:5e:54:c3:bc:fc:32:4f:9e:62:c4:fe:b4:bb: d6:dd:59:a1:2b:84:0a:f8:82:6a:4f:5f:fa:bb:d1:94:5b:d3: 2c:9f:98:74:6c:c7:6e:d8:69:bf:1f:4b:9c:1c:3d:df:a1:91: 7e:a4:b4:c5:47:79:05:5c:df:9c:34:43:ef:49:bb:aa:7a:af: 00:f3:af:ab:5d:5a:54:15:ac:82:f8:88:ef:74:59:e1:5c:21: a8:34:42:42:01:ce:e9:66:21:7a:3e:64:a5:91:6d:f0:09:3c: 6b:a2:18:dc:1a:e8:65:07:f4:23:28:95:32:08:2d:70:67:42: 44:8b:72:4b:3c:c8:cd:f8:81:4a:38:b3:6d:58:26:b9:2f:d4: d4:d2:e5:7b:bc:eb:ac:b5:6f:c7:aa:f4:df:2d:60:37:41:a4: f5:36:4c:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJsUwBouiJqjmfXfrGv41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh MjhmZmIwHhcNMjUxMjExMTYwMzAwWhcNMjUxMjEyMTYwMzAwWjAzMTEwLwYDVQQD EyhhYzhiOTczNzdkZGRlMjBkNTU5ZmE2YjdlNzU3NzJhZmE5M2UzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeqkvvFi8JgDbt+iO383Bqf+KTfZ o1c7f1x1uVjU3J3ZQggsC3Llm3bVTESa/VjBi1+9WqD04hPg8v67w+ZxZifanL9F cT+bJdu3VFyRtYxs41PW/TFBz9GpvlbnDxHf/4UoJ+lP3Q4OhjnjNiN0dyHjJjkk FS0Jbs8CraMMjDEqzOSdUFMC8uLeM7zqXNcTc6+qlgwVWvNf4aRisbdeTl80+gHA fKF7nd8pdRmZR032kIbez97O0FrOJglChStV4HnyNVj7/TDNkgSiOz7tUt/Vgyl7 mUM9pVWaNLfboB7OmZrT6Zn0mWYCmlFnxFTtWcRDMW/L4wO4hW+CF5zxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyLlzd93eINVZ+mt+dXcq+pPj6CMB8GA1UdIwQY MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct YjQwM2QxMGMzZTkxLzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+Rf3FIj 9/efW2Nl+eram/OBEmTtgV4OqWHQG6ABvPYA5A0I3D2OTigU+rzeeRaN2W0lYd7B JNwYbtYs+t/6vUorzspCiCkbJ8oWFkXFHLv/dJqR+BPo4cv1rouR0gNeVMO8/DJP nmLE/rS71t1ZoSuECviCak9f+rvRlFvTLJ+YdGzHbthpvx9LnBw936GRfqS0xUd5 BVzfnDRD70m7qnqvAPOvq11aVBWsgviI73RZ4VwhqDRCQgHO6WYhej5kpZFt8Ak8 a6IY3BroZQf0IyiVMggtcGdCRItySzzIzfiBSjizbVgmuS/U1NLle7zrrLVvx6r0 3y1gN0Gk9TZM8g== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:43 2025 by rpki-client