This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json) Hash identifier: axMUeKotGToOoDYGIE7AsWguW/ereWTokuTI8h6hTLM= Subject key identifier: 94:51:FA:94:72:76:28:17:39:5C:FB:F3:07:B6:FA:8F:3B:D8:0E:1D Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967 Certificate serial: 019B330CD754BBB17D598C5C6F08981B690B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 20:00:38 +0000 Manifest this update: Thu 18 Dec 2025 20:00:38 +0000 Manifest next update: Fri 19 Dec 2025 20:00:38 +0000 Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=) 2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: +gBdqp8x26PZXJtzRolK7cOifQ4AdXcENIkqe3FbDMQ=) 3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:d7:54:bb:b1:7d:59:8c:5c:6f:08:98:1b:69:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967 Validity Not Before: Dec 18 20:00:38 2025 GMT Not After : Dec 19 20:00:38 2025 GMT Subject: CN=9451fa9472762817395cfbf307b6fa8f3bd80e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:a0:de:24:41:63:49:6e:b6:76:31:25:4d: b1:79:b6:46:f0:2f:ae:50:ea:eb:a2:17:45:60:58: 99:82:c0:ed:f4:7a:50:fd:d7:50:74:a2:bf:30:5f: 8e:3e:4e:78:ae:e6:1e:e0:9c:64:80:c9:d9:f3:a5: f0:6a:5c:a9:a3:dd:6c:09:62:d2:10:0a:f5:3d:fa: dd:5c:17:f3:1b:6b:2f:5b:05:a5:93:f0:ab:c4:48: e3:50:1b:4d:9a:86:64:7b:23:7b:81:85:1f:f7:a7: 8f:ea:f7:64:54:62:9a:53:a7:c8:9a:64:90:12:e9: e6:3d:19:af:2f:5e:44:92:9c:04:d8:91:e0:27:61: 65:46:76:a3:a1:84:d2:f8:c7:7d:11:f0:b1:5b:47: ee:45:0e:dc:d4:e0:60:b2:fc:3c:1b:d3:5c:59:c9: 52:a4:eb:52:84:ba:c0:19:61:ff:aa:36:75:03:17: 6d:b0:ad:99:b9:f7:ce:45:61:ea:38:6c:5b:e4:41: 29:52:08:a1:e3:03:01:77:b2:da:41:c9:72:43:fb: 3b:bf:62:ca:5f:8a:f0:01:9f:42:e0:bd:81:41:af: 02:c7:7f:da:1c:fb:68:70:c4:63:03:db:23:28:59: 2e:ac:8a:49:0c:d9:8b:d0:05:0d:b2:38:bc:c6:be: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:51:FA:94:72:76:28:17:39:5C:FB:F3:07:B6:FA:8F:3B:D8:0E:1D X509v3 Authority Key Identifier: keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ec:6e:9b:ac:96:35:e4:7b:9e:6f:26:74:01:9d:84:26:9f: 54:e5:cf:4e:83:ac:ed:c2:2e:7d:12:c5:43:93:cc:d9:bf:77: d3:eb:dc:e1:b5:a1:7c:f5:c5:df:92:75:89:ed:01:98:cc:32: 19:85:35:48:50:90:c8:a3:c8:2d:64:b6:07:e2:c5:f2:3e:a3: 62:30:30:7b:bb:dc:1b:b6:1c:62:50:08:51:0f:c0:16:54:ba: f4:0e:bb:54:3c:41:d5:cf:f7:c6:30:a2:d5:05:ed:1c:c7:94: 41:d6:5d:ec:5d:5e:81:be:1e:af:8f:65:78:f9:d9:ee:88:02: 81:88:a8:6b:09:42:f4:54:f3:4d:b7:f0:6d:55:56:53:aa:98: 41:ec:a8:58:27:49:4b:77:d6:80:f0:25:11:a3:01:40:ea:4f: ac:6c:96:15:8c:fb:14:19:53:5e:da:15:e2:be:4e:dd:4c:99: 72:f3:de:ae:d7:fd:93:dc:5f:79:ff:42:f9:a7:1d:5f:cc:f5: a3:a2:87:06:64:75:38:54:d8:ff:39:c0:1b:1e:6f:ce:ea:26: e4:9f:00:7d:2e:f5:ea:94:77:08:bf:e9:8d:05:c2:45:15:12: fd:f3:86:5e:79:a6:8c:4f:67:98:20:51:27:4c:15:1e:e1:52: b7:5c:02:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDNdUu7F9WYxcbwiYG2kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmQ1ODY2YzM1MDkzMzUyZTdiOWUwNzYyYzU5MWUwOGU1 MGY5NjcwHhcNMjUxMjE4MjAwMDM4WhcNMjUxMjE5MjAwMDM4WjAzMTEwLwYDVQQD Eyg5NDUxZmE5NDcyNzYyODE3Mzk1Y2ZiZjMwN2I2ZmE4ZjNiZDgwZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIig3iRBY0lutnYxJU2xebZG8C+u UOrrohdFYFiZgsDt9HpQ/ddQdKK/MF+OPk54ruYe4JxkgMnZ86Xwalypo91sCWLS EAr1PfrdXBfzG2svWwWlk/CrxEjjUBtNmoZkeyN7gYUf96eP6vdkVGKaU6fImmSQ EunmPRmvL15EkpwE2JHgJ2FlRnajoYTS+Md9EfCxW0fuRQ7c1OBgsvw8G9NcWclS pOtShLrAGWH/qjZ1AxdtsK2ZuffORWHqOGxb5EEpUgih4wMBd7LaQclyQ/s7v2LK X4rwAZ9C4L2BQa8Cx3/aHPtocMRjA9sjKFkurIpJDNmL0AUNsji8xr61SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRR+pRydigXOVz78we2+o872A4dMB8GA1UdIwQY MBaAFIltWGbDUJM1LnueB2LFkeCOUPlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUt Nzg0NjI0YTdiNDdlLzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUtNzg0NjI0YTdiNDdl LzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+xum6yW NeR7nm8mdAGdhCafVOXPToOs7cIufRLFQ5PM2b930+vc4bWhfPXF35J1ie0BmMwy GYU1SFCQyKPILWS2B+LF8j6jYjAwe7vcG7YcYlAIUQ/AFlS69A67VDxB1c/3xjCi 1QXtHMeUQdZd7F1egb4er49lePnZ7ogCgYioawlC9FTzTbfwbVVWU6qYQeyoWCdJ S3fWgPAlEaMBQOpPrGyWFYz7FBlTXtoV4r5O3UyZcvPertf9k9xfef9C+acdX8z1 o6KHBmR1OFTY/znAGx5vzuom5J8AfS716pR3CL/pjQXCRRUS/fOGXnmmjE9nmCBR J0wVHuFSt1wCnQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:54:37 2025 by rpki-client