This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft File: iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json) Hash identifier: yUy+tWmDrzop7XOCKT9cagTbtPkOORAfjV7jQR5hiTs= Subject key identifier: 78:29:A5:C6:C5:C5:37:B7:4A:65:2B:4F:61:F7:65:BD:C4:0A:B2:58 Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Certificate serial: 019AEE9A1A5C50C7773F916C87AAA64461B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft Manifest number: 0F20 Signing time: Fri 05 Dec 2025 13:01:07 +0000 Manifest this update: Fri 05 Dec 2025 13:01:07 +0000 Manifest next update: Sat 06 Dec 2025 13:01:07 +0000 Files and hashes: 1: 0IndqmA5xgu2CF_jwxX-2bd09ko.roa (hash: CG/Zn9dtirhwk2tnBTHiZTYDu08mvtaBnxe37T6W3lo=) 2: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (hash: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=) 3: Rgi2MqRe28scNXwPSUaBJHXLnRM.roa (hash: miWc+jt8vObsSbUl+pf5rxC6Fyzqxyz42FOUYU27xXk=) 4: htFXYL1G4eCbcC3mPYaIkosKB6Q.roa (hash: oJWFKr4H9EjNjtC5DQyq80O2d4aINMVPyWSnIqkyv3g=) 5: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: Sixh/p9caqNwcOBtOvM15tHMMJ1cUSeJTNda++6e9T4=) 6: r8Kgnsf2CFDkciuWjszh92cUKms.roa (hash: t9GQ5puvq72qcB/c1cjyIxkd1J8pBBNOk+0fmKdIfac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:9a:1a:5c:50:c7:77:3f:91:6c:87:aa:a6:44:61:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Validity Not Before: Dec 5 13:01:07 2025 GMT Not After : Dec 6 13:01:07 2025 GMT Subject: CN=7829a5c6c5c537b74a652b4f61f765bdc40ab258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:61:91:fb:65:b5:5e:c9:dd:7f:53:a6:54: 26:c3:86:58:19:54:92:af:c4:19:bc:c0:8d:79:46: a2:b8:a2:d6:ea:12:40:e7:ae:f5:ed:bd:4c:08:2b: ac:9d:8c:e8:c5:de:95:03:b8:e0:48:2a:b4:b6:5c: 5e:31:65:55:c3:0e:ad:cb:9a:d1:2e:5b:16:29:4e: 81:e8:10:9e:ab:7a:1e:a8:0b:42:ae:41:20:ce:7e: 21:13:34:00:90:30:b6:d8:ea:e2:8a:78:5f:c8:d2: 6c:1b:e8:6f:c8:88:ca:16:ce:d2:8d:f6:0c:90:c8: cb:d9:be:fc:aa:cf:d4:da:f7:4e:ee:cc:75:d1:53: d5:93:da:13:bb:22:86:4e:7c:50:9a:5a:34:64:55: 25:49:12:c1:4a:c0:9d:7d:7e:ef:01:86:1b:59:8d: ad:83:f1:13:ce:c7:4f:43:5c:5b:32:81:0f:a7:0e: cb:3b:76:6d:6a:58:cc:a5:7b:13:4e:2c:af:6b:ff: b8:51:d2:ab:93:c6:11:49:df:1f:37:4a:cb:8b:82: a4:c2:f9:b4:48:43:ed:c1:9b:ad:06:de:ac:77:62: 40:9e:31:97:ea:b5:02:a3:7f:b8:4a:d4:e0:bc:10: 82:95:07:ac:df:12:4c:5d:11:3a:3d:0d:c6:44:23: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:29:A5:C6:C5:C5:37:B7:4A:65:2B:4F:61:F7:65:BD:C4:0A:B2:58 X509v3 Authority Key Identifier: keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:70:ad:29:b9:a8:22:51:12:62:59:47:56:2a:5d:7e:bd:33: bd:02:e0:73:1e:50:a0:50:9c:6a:f6:17:6f:a8:7a:55:eb:72: ae:75:8b:cb:c8:49:fb:7b:ab:3a:7d:a8:88:47:34:8a:e0:45: d3:1a:c6:a6:a3:db:dd:94:a3:29:e4:53:cc:a8:2c:03:cf:62: fc:ee:50:da:e6:49:d7:8c:84:ca:93:72:ca:c8:8a:04:11:3a: 2b:65:11:63:83:5e:d9:30:a9:50:64:d5:a1:c7:0e:cf:72:c6: 41:d8:c2:9a:aa:51:9b:f7:5f:df:f6:0d:4d:90:76:0e:9c:49: e4:64:93:d0:c7:c9:cd:cf:c4:a5:56:98:3c:80:eb:ff:5a:2c: 97:15:e3:69:39:6e:dc:b2:2b:20:50:ae:16:ce:8d:a0:e0:bd: 61:8e:0e:06:4e:eb:54:44:29:f6:fe:9c:41:0e:84:f8:f9:5d: 09:08:ab:36:98:d4:f9:c5:4a:bf:4a:35:fe:98:d3:2a:a6:66: 5f:c6:af:dc:74:a2:5e:a6:03:03:24:5c:38:3c:f7:cf:17:22: 76:3e:67:8b:8c:27:62:75:b9:28:58:80:ef:c2:cf:df:3b:c8: f2:31:1c:0f:d4:e0:be:f2:9d:51:40:5d:eb:e9:ba:f3:0b:03: db:a9:98:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumhpcUMd3P5Fsh6qmRGG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmVkNmU0YjVjN2MxOWRiOThjNTc0MzJhZjRkY2Y2MzBi ZjYwYWUwHhcNMjUxMjA1MTMwMTA3WhcNMjUxMjA2MTMwMTA3WjAzMTEwLwYDVQQD Eyg3ODI5YTVjNmM1YzUzN2I3NGE2NTJiNGY2MWY3NjViZGM0MGFiMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVhhkftltV7J3X9TplQmw4ZYGVSS r8QZvMCNeUaiuKLW6hJA56717b1MCCusnYzoxd6VA7jgSCq0tlxeMWVVww6ty5rR LlsWKU6B6BCeq3oeqAtCrkEgzn4hEzQAkDC22OriinhfyNJsG+hvyIjKFs7SjfYM kMjL2b78qs/U2vdO7sx10VPVk9oTuyKGTnxQmlo0ZFUlSRLBSsCdfX7vAYYbWY2t g/ETzsdPQ1xbMoEPpw7LO3ZtaljMpXsTTiyva/+4UdKrk8YRSd8fN0rLi4Kkwvm0 SEPtwZutBt6sd2JAnjGX6rUCo3+4StTgvBCClQes3xJMXRE6PQ3GRCMtxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgppcbFxTe3SmUrT2H3Zb3ECrJYMB8GA1UdIwQY MBaAFIlu1uS1x8GduYxXQyr03PYwv2CuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYt ZGMxZmY2NzQ2ZDJlLzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYtZGMxZmY2NzQ2ZDJl LzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3CtKbmo IlESYllHVipdfr0zvQLgcx5QoFCcavYXb6h6VetyrnWLy8hJ+3urOn2oiEc0iuBF 0xrGpqPb3ZSjKeRTzKgsA89i/O5Q2uZJ14yEypNyysiKBBE6K2URY4Ne2TCpUGTV occOz3LGQdjCmqpRm/df3/YNTZB2DpxJ5GST0MfJzc/EpVaYPIDr/1oslxXjaTlu 3LIrIFCuFs6NoOC9YY4OBk7rVEQp9v6cQQ6E+PldCQirNpjU+cVKv0o1/pjTKqZm X8av3HSiXqYDAyRcODz3zxcidj5ni4wnYnW5KFiA78LP3zvI8jEcD9TgvvKdUUBd 6+m68wsD26mY+Q== -----END CERTIFICATE-----Generated at Fri Dec 5 23:04:23 2025 by rpki-client