This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json) Hash identifier: +T9bvmIAihdZ7RG0Ypdo5Z9wkGCaouCIOvsyVBj4yJg= Subject key identifier: 0F:21:39:83:5A:2D:0E:C4:4B:44:CF:E5:DF:37:33:44:31:51:B2:1C Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157 Certificate serial: 019B269AE9D2A83DA593EEDD2DB9800D0CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 10:00:44 +0000 Manifest this update: Tue 16 Dec 2025 10:00:44 +0000 Manifest next update: Wed 17 Dec 2025 10:00:44 +0000 Files and hashes: 1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=) 2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: CQW2U6DxGhuVT1O0OeyQoNlYiA7//3gBVpv+3H0jQM4=) 3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9a:e9:d2:a8:3d:a5:93:ee:dd:2d:b9:80:0d:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157 Validity Not Before: Dec 16 10:00:44 2025 GMT Not After : Dec 17 10:00:44 2025 GMT Subject: CN=0f2139835a2d0ec44b44cfe5df3733443151b21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:75:f0:29:4f:70:8d:bd:43:42:34:fb:47: 9f:9a:db:0e:55:c8:39:e5:5d:37:7f:f2:4e:ec:f1: fe:a7:65:c0:39:17:ce:87:48:f4:f0:6b:19:db:87: e1:9f:50:e6:d6:51:70:d1:16:fa:7f:81:bf:94:bc: e1:4a:6d:0b:b2:64:b0:bc:a4:57:ce:a5:54:49:f6: 49:1c:6e:25:34:4a:3a:94:48:bf:9c:05:56:e3:3b: 3e:8e:34:71:82:48:9f:16:fa:23:da:45:d9:9c:4e: f8:c6:ce:5d:f7:c0:50:93:e2:bb:79:65:80:44:a0: 5f:43:e9:e9:70:de:d6:5c:46:d8:d7:7a:24:cb:00: c2:a7:df:66:69:56:df:50:2e:72:17:90:82:08:7f: f7:7d:90:e4:66:0d:4d:5b:26:c9:01:03:0d:46:29: 93:9b:68:86:32:b3:c7:73:bf:4c:94:4b:d3:fc:10: e7:8f:00:39:86:c9:f6:9d:78:5f:4d:aa:12:24:92: 0e:af:3f:11:c6:bf:e2:40:1d:f5:3b:8a:f6:fc:f8: d6:df:5c:76:d6:74:56:09:11:3b:b3:c4:67:c8:38: 4e:bb:ce:40:56:10:46:d7:0e:b3:05:2c:50:3f:61: a6:0e:dc:9b:f5:d0:ba:87:2a:d6:52:8b:11:e9:21: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:39:83:5A:2D:0E:C4:4B:44:CF:E5:DF:37:33:44:31:51:B2:1C X509v3 Authority Key Identifier: keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:21:dc:b3:93:55:01:db:25:c9:06:e1:7a:7e:3e:00:18:e9: 0c:e6:31:dc:fa:14:31:38:30:70:24:59:8f:61:a0:e3:2a:d3: bd:1a:ea:ff:b4:0e:62:18:c8:ba:96:20:1e:58:e9:5a:ea:f7: 25:ee:ea:06:bf:f3:5b:48:cc:0a:b8:8a:d1:bc:9b:11:57:7d: f6:17:1c:06:36:3f:43:12:29:6c:d5:e0:e5:dc:bd:51:24:f7: 76:b2:45:24:8e:00:98:2d:a2:65:ca:15:3e:32:bd:c9:95:35: 82:8d:96:f0:f9:01:e0:9c:0c:39:5c:37:3b:05:40:ab:02:13: 39:7a:8c:25:8d:8f:4a:11:1d:78:2a:18:43:39:e6:10:5b:6d: 85:eb:f4:63:fc:35:36:a9:8f:10:c7:00:8a:c8:e4:af:89:9a: a7:47:d3:34:7d:57:93:f9:01:11:4d:e1:9a:d5:5e:3b:e0:b5: 72:fa:a3:9a:b1:d4:ae:9a:eb:cd:46:13:45:04:33:73:62:a4: 74:b1:d4:91:c3:ec:a5:36:b2:61:ea:90:82:1e:29:53:5f:1f: 92:bc:12:a3:c3:5c:54:14:4c:2a:00:92:c3:f1:8e:e4:ed:c8: af:cb:e0:a4:0c:e3:b2:d3:13:b3:42:7d:cc:55:49:3b:db:eb: 4e:28:3f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmunSqD2lk+7dLbmADQzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmQyMTU2NmNjZmMzYmIwNzllYzU4NTRiMDQ0YWI4MDk4 MDQxNTcwHhcNMjUxMjE2MTAwMDQ0WhcNMjUxMjE3MTAwMDQ0WjAzMTEwLwYDVQQD EygwZjIxMzk4MzVhMmQwZWM0NGI0NGNmZTVkZjM3MzM0NDMxNTFiMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodN18ClPcI29Q0I0+0efmtsOVcg5 5V03f/JO7PH+p2XAORfOh0j08GsZ24fhn1Dm1lFw0Rb6f4G/lLzhSm0LsmSwvKRX zqVUSfZJHG4lNEo6lEi/nAVW4zs+jjRxgkifFvoj2kXZnE74xs5d98BQk+K7eWWA RKBfQ+npcN7WXEbY13okywDCp99maVbfUC5yF5CCCH/3fZDkZg1NWybJAQMNRimT m2iGMrPHc79MlEvT/BDnjwA5hsn2nXhfTaoSJJIOrz8Rxr/iQB31O4r2/PjW31x2 1nRWCRE7s8RnyDhOu85AVhBG1w6zBSxQP2GmDtyb9dC6hyrWUosR6SFXsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8hOYNaLQ7ES0TP5d83M0QxUbIcMB8GA1UdIwQY MBaAFIktIVZsz8O7B57FhUsESrgJgEFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMt NGViOGIwYjQ5YzRhLzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMtNGViOGIwYjQ5YzRh LzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCHcs5NV AdslyQbhen4+ABjpDOYx3PoUMTgwcCRZj2Gg4yrTvRrq/7QOYhjIupYgHljpWur3 Je7qBr/zW0jMCriK0bybEVd99hccBjY/QxIpbNXg5dy9UST3drJFJI4AmC2iZcoV PjK9yZU1go2W8PkB4JwMOVw3OwVAqwITOXqMJY2PShEdeCoYQznmEFtthev0Y/w1 NqmPEMcAisjkr4map0fTNH1Xk/kBEU3hmtVeO+C1cvqjmrHUrprrzUYTRQQzc2Kk dLHUkcPspTayYeqQgh4pU18fkrwSo8NcVBRMKgCSw/GO5O3Ir8vgpAzjstMTs0J9 zFVJO9vrTig/IA== -----END CERTIFICATE-----Generated at Tue Dec 16 13:31:24 2025 by rpki-client