This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json) Hash identifier: /N/aMLC1Ra3L9hovZ/elGLmdqEWs2rc1Aptr8PYlWhg= Subject key identifier: 1F:D5:B0:40:67:65:5F:82:AD:F0:6A:46:10:CF:8E:FA:A3:66:14:63 Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1 Certificate serial: 019B39B3D5A6890D36D5D95B693B3DC5A348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft Manifest number: 03AD Signing time: Sat 20 Dec 2025 03:00:45 +0000 Manifest this update: Sat 20 Dec 2025 03:00:45 +0000 Manifest next update: Sun 21 Dec 2025 03:00:45 +0000 Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=) 2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: Iuff3u/yzN1IIe2IBK9HwTC82d+Kj5taQdunG/w7YGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:d5:a6:89:0d:36:d5:d9:5b:69:3b:3d:c5:a3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1 Validity Not Before: Dec 20 03:00:45 2025 GMT Not After : Dec 21 03:00:45 2025 GMT Subject: CN=1fd5b04067655f82adf06a4610cf8efaa3661463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:3d:92:76:1a:ff:a7:ac:7a:3c:e5:86:e0: 50:b2:7d:6b:36:fc:e2:a0:39:a4:95:af:7d:69:ec: 04:2e:fb:09:9a:91:03:65:70:08:34:de:75:35:e6: 29:1c:74:fd:77:02:a9:f7:85:53:90:71:e3:84:34: db:8b:ff:24:58:98:2e:94:15:4f:46:04:99:76:a5: 19:8e:70:2c:ab:9b:8c:87:4b:f1:10:ea:90:c4:4d: 46:ba:aa:b9:98:a6:03:ea:bc:64:9e:bf:61:26:45: d0:70:4e:fc:39:8d:ab:58:67:c9:50:bf:21:52:02: e3:ec:40:a4:42:46:34:37:48:a6:9e:2c:20:7c:a6: 0e:90:60:74:71:30:88:50:63:21:c0:de:c6:f3:3d: d3:58:22:23:52:5d:c7:60:72:e2:14:24:25:87:b9: 26:2f:e6:93:6a:5a:ed:f5:ff:ba:df:6a:c4:69:d0: e4:a5:55:bd:0c:29:af:87:a2:21:3b:36:31:f5:e8: 3c:db:8c:0f:67:29:d6:0e:59:41:4d:f7:d7:0d:81: 53:10:a0:64:d8:af:9e:f2:84:dd:88:4f:4a:8f:a2: 9e:e6:03:b3:2d:9b:8d:ba:08:65:7b:b2:8e:7f:ea: 90:c7:74:b8:bc:b5:e3:d2:37:84:57:7e:b7:66:da: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D5:B0:40:67:65:5F:82:AD:F0:6A:46:10:CF:8E:FA:A3:66:14:63 X509v3 Authority Key Identifier: keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e0:3e:84:ab:7c:98:92:04:b0:12:38:fb:2e:fe:d8:9c:1f: 17:67:9f:06:51:25:7d:e8:33:e7:8f:09:c2:e1:57:17:00:c2: 84:03:a5:bb:83:48:86:61:07:5f:df:5d:a3:45:a4:59:68:2f: 57:a8:b7:6d:1c:ed:51:b8:19:1f:5d:7a:79:c8:e4:72:fe:25: 54:cc:bb:31:78:8e:aa:d0:77:14:c9:1d:6f:6d:e3:80:90:1a: c5:a2:28:3a:1f:6d:44:5f:f1:12:90:52:a1:79:88:8d:f7:71: 8d:b9:e5:08:98:82:88:92:56:60:39:50:69:7b:f5:11:c2:43: 28:c1:b5:10:34:b6:14:5c:1c:49:49:90:af:1c:6f:f0:0c:60: 55:4b:2c:3b:7e:06:8b:74:67:a5:9f:b7:49:6f:74:c0:e5:a1: 9a:33:ea:d5:2e:74:1b:70:27:26:eb:29:3f:f4:72:37:84:b3: 9e:9d:38:74:f1:e6:ac:ca:85:f0:70:19:1d:29:f3:85:ae:a8: 92:cb:67:49:00:06:7d:7b:23:b5:79:a2:cf:51:69:d6:a2:30: 57:fc:4a:97:df:a8:b9:76:7b:ee:33:22:47:1d:3a:f5:57:a9: 3d:db:79:9a:dc:e1:3a:e8:1c:7d:aa:f8:ab:bf:17:2a:69:cf: f1:2b:67:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s9WmiQ021dlbaTs9xaNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Njg4ODM3NjU1NDk5OTFkN2ZmMzc2MTI2ZDU4YTkwOWEx NGI4ZjEwHhcNMjUxMjIwMDMwMDQ1WhcNMjUxMjIxMDMwMDQ1WjAzMTEwLwYDVQQD EygxZmQ1YjA0MDY3NjU1ZjgyYWRmMDZhNDYxMGNmOGVmYWEzNjYxNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w49knYa/6esejzlhuBQsn1rNvzi oDmkla99aewELvsJmpEDZXAINN51NeYpHHT9dwKp94VTkHHjhDTbi/8kWJgulBVP RgSZdqUZjnAsq5uMh0vxEOqQxE1Guqq5mKYD6rxknr9hJkXQcE78OY2rWGfJUL8h UgLj7ECkQkY0N0imniwgfKYOkGB0cTCIUGMhwN7G8z3TWCIjUl3HYHLiFCQlh7km L+aTalrt9f+632rEadDkpVW9DCmvh6IhOzYx9eg824wPZynWDllBTffXDYFTEKBk 2K+e8oTdiE9Kj6Ke5gOzLZuNughle7KOf+qQx3S4vLXj0jeEV363ZtpzNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/VsEBnZV+CrfBqRhDPjvqjZhRjMB8GA1UdIwQY MBaAFIloiDdlVJmR1/83YSbVipCaFLjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQt Y2QwMjdhMDY4MWJkLzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQtY2QwMjdhMDY4MWJk LzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOA+hKt8 mJIEsBI4+y7+2JwfF2efBlElfegz548JwuFXFwDChAOlu4NIhmEHX99do0WkWWgv V6i3bRztUbgZH116ecjkcv4lVMy7MXiOqtB3FMkdb23jgJAaxaIoOh9tRF/xEpBS oXmIjfdxjbnlCJiCiJJWYDlQaXv1EcJDKMG1EDS2FFwcSUmQrxxv8AxgVUssO34G i3RnpZ+3SW90wOWhmjPq1S50G3AnJuspP/RyN4Sznp04dPHmrMqF8HAZHSnzha6o kstnSQAGfXsjtXmiz1Fp1qIwV/xKl9+ouXZ77jMiRx069VepPdt5mtzhOugcfar4 q78XKmnP8StnRw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:43 2025 by rpki-client