This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json) Hash identifier: n9ngqz/cVk9kggl21Mk0p8K+22QIC5h+4TOuv538lCM= Subject key identifier: 1F:B5:AF:F7:97:83:01:A8:0C:36:9C:58:94:84:6D:E6:3D:DD:7F:89 Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178 Certificate serial: 019B5A1A90B7F0A6B3A16C2F873CBC06931A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft Manifest number: 08CA Signing time: Fri 26 Dec 2025 10:00:48 +0000 Manifest this update: Fri 26 Dec 2025 10:00:48 +0000 Manifest next update: Sat 27 Dec 2025 10:00:48 +0000 Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=) 2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: eyou/29yuVJlOfH/p36HiZvJf0pUKUT5+dxdwnadjzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:90:b7:f0:a6:b3:a1:6c:2f:87:3c:bc:06:93:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178 Validity Not Before: Dec 26 10:00:48 2025 GMT Not After : Dec 27 10:00:48 2025 GMT Subject: CN=1fb5aff7978301a80c369c5894846de63ddd7f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:5f:ab:ed:fe:8c:19:84:13:71:23:e1:3e: d5:f7:9b:e6:ac:43:ef:50:a7:ed:95:c0:25:fd:2c: ac:47:31:bc:4d:f4:2a:1d:e9:fa:f3:e2:5a:77:47: 01:8c:b3:28:8b:06:27:a3:d3:40:fe:d4:04:10:4b: 3b:02:ff:69:af:58:a7:b2:6f:71:38:4e:3a:3e:32: 38:50:33:e5:74:c5:55:d8:17:95:9d:8d:8c:d5:ba: 47:ec:3b:0a:2d:81:07:9f:ce:2d:28:ba:7f:a9:f0: 91:6e:8d:83:45:02:66:21:8f:e6:fd:ec:0a:4e:a6: d2:41:0b:39:d6:4f:8a:fc:9a:3a:78:50:35:d6:78: dd:5a:9b:2a:22:90:99:8a:3d:f7:15:70:17:20:f0: 3c:d4:95:f1:dd:6c:5f:ce:4e:93:4d:6d:0f:77:c7: 93:3a:74:cc:22:1c:bd:62:3e:5b:89:97:7e:5b:e2: 26:80:0d:aa:89:1f:b4:29:3b:45:25:f0:b4:0a:fc: 6d:8e:c7:43:57:0e:38:67:ec:60:6c:48:16:45:19: d0:a8:51:c5:5e:fb:6b:1f:a8:d3:f7:f4:25:25:c8: fb:b8:c3:6e:0f:c0:44:5f:c9:c0:46:73:5f:73:f3: 82:d6:d8:3d:9c:5c:db:b0:d2:7b:c2:ab:19:02:aa: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B5:AF:F7:97:83:01:A8:0C:36:9C:58:94:84:6D:E6:3D:DD:7F:89 X509v3 Authority Key Identifier: keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:98:7d:e1:56:08:3c:23:e0:c0:7d:84:da:72:41:aa:e8:4e: b6:f0:a0:2d:96:f9:a3:1c:5f:72:45:cb:09:fe:48:24:c8:9a: de:eb:46:55:1d:8c:8a:5d:ce:59:aa:d0:da:03:7a:8d:be:db: 65:d0:7c:be:c7:a0:4c:75:1f:1a:d4:1c:9c:9e:c7:7a:fb:bf: 29:4b:58:64:ce:49:ff:1c:c2:1b:20:0d:88:d9:55:8e:4d:66: 14:4a:d5:ac:fb:b9:e9:60:80:24:72:a4:15:60:04:1f:39:5c: 3a:60:54:fa:4a:ca:d3:13:93:9e:a1:cd:a6:93:c2:57:6d:41: bd:53:83:a8:7c:71:2b:f7:52:e8:17:31:ca:d1:67:75:4c:9c: 6c:2e:37:4e:5d:95:5a:fa:2d:69:ee:51:ed:bc:bd:db:45:3c: c2:2d:7f:98:a3:69:65:29:c5:67:f8:23:35:85:4c:fd:a1:de: 21:77:2a:3c:ec:73:dd:38:51:0c:f6:4e:a5:bf:d2:c2:78:2d: 00:58:24:7b:bd:50:ea:0a:55:09:76:4f:19:4e:ab:45:32:b0: ff:00:91:cc:88:d3:1b:77:4c:ed:2d:6c:d3:a9:60:da:86:0b: 1f:ef:8b:35:7c:c7:70:9f:e6:3c:e8:fc:09:cd:86:b3:f0:3a: a9:b8:60:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpC38KazoWwvhzy8BpMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4 MzExNzgwHhcNMjUxMjI2MTAwMDQ4WhcNMjUxMjI3MTAwMDQ4WjAzMTEwLwYDVQQD EygxZmI1YWZmNzk3ODMwMWE4MGMzNjljNTg5NDg0NmRlNjNkZGQ3Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLJfq+3+jBmEE3Ej4T7V95vmrEPv UKftlcAl/SysRzG8TfQqHen68+Jad0cBjLMoiwYno9NA/tQEEEs7Av9pr1insm9x OE46PjI4UDPldMVV2BeVnY2M1bpH7DsKLYEHn84tKLp/qfCRbo2DRQJmIY/m/ewK TqbSQQs51k+K/Jo6eFA11njdWpsqIpCZij33FXAXIPA81JXx3Wxfzk6TTW0Pd8eT OnTMIhy9Yj5biZd+W+ImgA2qiR+0KTtFJfC0CvxtjsdDVw44Z+xgbEgWRRnQqFHF XvtrH6jT9/QlJcj7uMNuD8BEX8nARnNfc/OC1tg9nFzbsNJ7wqsZAqpeEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+1r/eXgwGoDDacWJSEbeY93X+JMB8GA1UdIwQY MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJh94VYI PCPgwH2E2nJBquhOtvCgLZb5oxxfckXLCf5IJMia3utGVR2Mil3OWarQ2gN6jb7b ZdB8vsegTHUfGtQcnJ7Hevu/KUtYZM5J/xzCGyANiNlVjk1mFErVrPu56WCAJHKk FWAEHzlcOmBU+krK0xOTnqHNppPCV21BvVODqHxxK/dS6BcxytFndUycbC43Tl2V Wvotae5R7by920U8wi1/mKNpZSnFZ/gjNYVM/aHeIXcqPOxz3ThRDPZOpb/Swngt AFgke71Q6gpVCXZPGU6rRTKw/wCRzIjTG3dM7S1s06lg2oYLH++LNXzHcJ/mPOj8 Cc2Gs/A6qbhgsA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:11 2025 by rpki-client