This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json) Hash identifier: nUDfCW/qxhLCy3uOAxWzTJ2eozME9cJeVlhJNdizMeg= Subject key identifier: 5E:33:43:FB:74:85:8E:89:D8:B7:BF:C5:B8:B6:B8:5A:B8:96:4A:6E Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1 Certificate serial: 019B2475CC54DE26BE5384B55CCBEAD55364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft Manifest number: 03A2 Signing time: Tue 16 Dec 2025 00:00:58 +0000 Manifest this update: Tue 16 Dec 2025 00:00:58 +0000 Manifest next update: Wed 17 Dec 2025 00:00:58 +0000 Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=) 2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: 1I4y1m8MxJEar9I8VLrcZEv9+Hj/bTZZMOifLQtZrN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:cc:54:de:26:be:53:84:b5:5c:cb:ea:d5:53:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1 Validity Not Before: Dec 16 00:00:58 2025 GMT Not After : Dec 17 00:00:58 2025 GMT Subject: CN=5e3343fb74858e89d8b7bfc5b8b6b85ab8964a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:4a:13:13:a3:cc:f9:d6:ef:1b:37:bd:f2: c4:35:44:96:b8:e6:b0:0d:27:07:b8:9a:9b:a4:14: 9e:1d:b8:e1:9b:35:6a:0a:dc:de:30:ed:45:b5:50: 93:60:73:37:0f:34:f6:85:5e:d6:d8:ed:57:df:3b: 19:1a:b5:9d:fe:c1:b8:f4:84:2e:ab:3f:13:c4:b2: 8d:0c:16:bb:3a:f6:52:40:d8:dd:ce:c4:44:84:bd: 77:c2:b2:3e:0a:20:00:cd:89:12:01:76:f6:90:79: 67:f5:e1:d8:8c:ab:85:2d:24:bb:16:af:07:93:17: 02:86:7a:93:e1:9d:76:3c:81:54:d5:64:7a:46:d1: 47:b2:65:aa:9e:f7:fb:3a:a4:55:91:1c:45:76:e1: 7d:f4:50:e1:a7:63:98:a3:56:c9:7d:46:12:dd:e8: 62:d6:f7:9d:57:ca:db:bc:5e:77:17:42:ff:ed:69: 66:ce:70:f3:cf:16:b6:e0:cb:d6:88:5e:eb:be:85: 3a:0c:87:04:ae:ab:2f:e4:c2:18:c3:b3:18:87:fb: c1:d9:63:e8:b1:33:4f:b8:be:2a:1e:e0:81:e1:49: 8b:51:a5:a8:1e:1c:17:e5:25:96:3d:b2:3c:0d:23: a1:01:d3:04:a9:0d:73:3f:5f:c5:55:9e:3d:60:13: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:33:43:FB:74:85:8E:89:D8:B7:BF:C5:B8:B6:B8:5A:B8:96:4A:6E X509v3 Authority Key Identifier: keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b1:cb:99:e8:f8:c1:7a:fa:6b:7d:cd:70:b6:e8:99:68:31: 59:f9:52:29:e4:a2:97:9f:3f:8d:ec:d3:97:f7:10:be:fa:d1: ab:94:d8:b2:3f:f2:c5:e8:3f:24:fa:cd:82:2d:ec:9a:df:67: 0b:f4:0e:db:d9:f2:4a:00:97:b7:74:1a:d5:67:3d:22:db:b3: d1:a8:87:b0:f2:45:67:7f:ba:c1:5e:e5:07:02:3d:d4:4e:3f: 50:8f:f2:7c:fe:aa:71:62:3f:90:b7:5e:b4:16:da:84:6e:3d: 1d:ab:52:28:1d:78:f1:18:67:0e:12:94:8b:f0:a5:73:31:d6: ec:54:b4:c1:e4:7a:26:ae:61:62:e2:2a:4c:b9:a5:1a:14:35: 47:a4:56:07:82:d1:d2:53:4e:05:e5:8c:30:be:cc:13:c0:1f: 0e:41:4d:9a:03:bb:f1:8a:71:b4:86:d5:cf:85:5c:6b:69:1c: ce:c4:71:f0:54:e6:9a:f4:55:3d:0f:55:b5:7c:60:ea:77:e3: a5:e5:ec:f5:a1:95:35:b6:bb:b7:37:4e:14:cf:d5:91:77:ae: 3d:3e:0a:71:0b:c7:64:cb:1a:72:5a:5f:2e:eb:58:d9:1d:90: ce:0b:ba:ab:25:bc:b8:ca:1a:05:ee:41:9c:3c:46:3e:e3:6f: 31:2c:cb:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdcxU3ia+U4S1XMvq1VNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Njg4ODM3NjU1NDk5OTFkN2ZmMzc2MTI2ZDU4YTkwOWEx NGI4ZjEwHhcNMjUxMjE2MDAwMDU4WhcNMjUxMjE3MDAwMDU4WjAzMTEwLwYDVQQD Eyg1ZTMzNDNmYjc0ODU4ZTg5ZDhiN2JmYzViOGI2Yjg1YWI4OTY0YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvlKExOjzPnW7xs3vfLENUSWuOaw DScHuJqbpBSeHbjhmzVqCtzeMO1FtVCTYHM3DzT2hV7W2O1X3zsZGrWd/sG49IQu qz8TxLKNDBa7OvZSQNjdzsREhL13wrI+CiAAzYkSAXb2kHln9eHYjKuFLSS7Fq8H kxcChnqT4Z12PIFU1WR6RtFHsmWqnvf7OqRVkRxFduF99FDhp2OYo1bJfUYS3ehi 1vedV8rbvF53F0L/7WlmznDzzxa24MvWiF7rvoU6DIcErqsv5MIYw7MYh/vB2WPo sTNPuL4qHuCB4UmLUaWoHhwX5SWWPbI8DSOhAdMEqQ1zP1/FVZ49YBMhCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4zQ/t0hY6J2Le/xbi2uFq4lkpuMB8GA1UdIwQY MBaAFIloiDdlVJmR1/83YSbVipCaFLjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQt Y2QwMjdhMDY4MWJkLzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQtY2QwMjdhMDY4MWJk LzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbHLmej4 wXr6a33NcLbomWgxWflSKeSil58/jezTl/cQvvrRq5TYsj/yxeg/JPrNgi3smt9n C/QO29nySgCXt3Qa1Wc9Ituz0aiHsPJFZ3+6wV7lBwI91E4/UI/yfP6qcWI/kLde tBbahG49HatSKB148RhnDhKUi/ClczHW7FS0weR6Jq5hYuIqTLmlGhQ1R6RWB4LR 0lNOBeWMML7ME8AfDkFNmgO78YpxtIbVz4Vca2kczsRx8FTmmvRVPQ9VtXxg6nfj peXs9aGVNba7tzdOFM/VkXeuPT4KcQvHZMsaclpfLutY2R2Qzgu6qyW8uMoaBe5B nDxGPuNvMSzLBw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:24:01 2025 by rpki-client