This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json) Hash identifier: JNzvFsbBm+uuytHRiKWD22VSm7vbPSmAs8YlhDLHdV0= Subject key identifier: 46:A4:0A:68:05:7D:39:B6:CD:61:87:87:D8:1F:64:C7:C4:C6:19:4B Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967 Certificate serial: 019B0E5B8881B99BEC1E8CBFBC448C0AA9AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 17:00:38 +0000 Manifest this update: Thu 11 Dec 2025 17:00:38 +0000 Manifest next update: Fri 12 Dec 2025 17:00:38 +0000 Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=) 2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: VvWV/DSxPSUQ9fAfTGWDueLbY2fjuj5ZiJqlce5Jk+s=) 3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:88:81:b9:9b:ec:1e:8c:bf:bc:44:8c:0a:a9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967 Validity Not Before: Dec 11 17:00:38 2025 GMT Not After : Dec 12 17:00:38 2025 GMT Subject: CN=46a40a68057d39b6cd618787d81f64c7c4c6194b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:70:74:eb:3e:b4:d5:02:ef:2d:92:44:98: 97:25:6e:17:da:0c:1b:5b:e9:fd:1b:02:ef:7c:0f: e4:19:55:5b:d8:b8:09:17:ff:c8:d5:11:a4:fb:cb: d3:36:b6:ee:1d:fd:fd:75:3f:02:0d:3f:3c:ed:aa: 4d:b5:a3:20:8b:26:e6:5a:0a:7b:66:d7:f3:0f:82: 08:de:38:db:83:a5:07:39:fa:0c:b4:d0:ad:94:c8: e9:4f:1e:0c:51:cf:16:c2:dc:ff:ef:9f:f4:e3:ce: 76:6f:13:84:a3:ed:29:ef:51:8a:1f:f9:c2:17:70: c3:fc:d0:87:15:34:16:9b:59:d4:22:29:eb:4b:93: e7:61:cd:a3:79:3e:45:8c:e9:8a:44:02:05:1a:4c: d5:7a:73:8f:77:10:e9:46:d7:4a:28:ec:5b:aa:52: 5f:2c:e2:1a:c9:16:4b:a3:fa:d1:7b:e7:43:75:e6: ac:89:9b:b1:49:ec:8e:11:ae:1b:b0:30:65:ef:0d: c6:27:d9:d9:88:ed:b6:91:4c:09:54:a6:59:e6:88: 97:12:14:7e:ac:fd:55:4d:a8:4b:ac:1e:58:2e:3f: 6f:98:ba:f6:b0:96:ab:e5:fd:6e:1c:01:7b:8a:a2: a4:c7:93:1b:3d:65:06:d3:cf:c4:17:fe:9e:ea:fc: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A4:0A:68:05:7D:39:B6:CD:61:87:87:D8:1F:64:C7:C4:C6:19:4B X509v3 Authority Key Identifier: keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:13:e8:27:11:db:28:6b:8d:03:10:9c:16:dd:40:3f:8d:be: 12:87:71:1a:a1:0f:00:f0:92:7d:08:db:be:d4:fb:a2:17:dd: c3:99:4b:e1:b0:42:1b:b9:66:1f:dc:0a:0d:14:66:18:d6:56: f6:29:4e:21:ac:1a:ae:4d:b2:da:ad:0f:c2:a9:a3:f6:49:15: 84:75:dc:04:7a:2b:13:4d:4c:93:fd:78:37:e3:f1:fa:d1:42: 62:2b:54:02:c1:51:97:8b:a9:ad:02:dd:cc:5d:af:6f:7d:d4: bf:3a:bc:85:b9:51:79:4f:85:03:23:27:75:af:4f:60:f7:c5: d9:a2:d3:9d:dd:96:5b:2d:36:3a:fd:a1:48:aa:0a:f6:33:7d: 4f:13:ad:2c:d2:49:0a:28:e3:bd:dd:11:df:81:64:ec:c8:85: 54:17:c5:e5:84:41:43:72:30:31:77:ea:13:08:96:6d:ad:3d: 14:d5:65:91:ca:2a:b4:00:37:73:f6:78:cc:af:1c:c0:0b:f2: 37:62:ca:43:38:b4:d6:34:46:9e:c2:45:98:49:7f:85:1f:a3: bc:b9:48:65:f5:5f:bf:e2:c8:34:ee:8a:d0:c6:71:e8:ed:c2: 4c:f1:f5:53:1b:c2:76:5e:94:aa:8b:07:ed:7b:d9:b7:ad:24: 3d:8d:c0:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW4iBuZvsHoy/vESMCqmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmQ1ODY2YzM1MDkzMzUyZTdiOWUwNzYyYzU5MWUwOGU1 MGY5NjcwHhcNMjUxMjExMTcwMDM4WhcNMjUxMjEyMTcwMDM4WjAzMTEwLwYDVQQD Eyg0NmE0MGE2ODA1N2QzOWI2Y2Q2MTg3ODdkODFmNjRjN2M0YzYxOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu15wdOs+tNUC7y2SRJiXJW4X2gwb W+n9GwLvfA/kGVVb2LgJF//I1RGk+8vTNrbuHf39dT8CDT887apNtaMgiybmWgp7 ZtfzD4II3jjbg6UHOfoMtNCtlMjpTx4MUc8Wwtz/75/04852bxOEo+0p71GKH/nC F3DD/NCHFTQWm1nUIinrS5PnYc2jeT5FjOmKRAIFGkzVenOPdxDpRtdKKOxbqlJf LOIayRZLo/rRe+dDdeasiZuxSeyOEa4bsDBl7w3GJ9nZiO22kUwJVKZZ5oiXEhR+ rP1VTahLrB5YLj9vmLr2sJar5f1uHAF7iqKkx5MbPWUG08/EF/6e6vyZwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEakCmgFfTm2zWGHh9gfZMfExhlLMB8GA1UdIwQY MBaAFIltWGbDUJM1LnueB2LFkeCOUPlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUt Nzg0NjI0YTdiNDdlLzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUtNzg0NjI0YTdiNDdl LzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRPoJxHb KGuNAxCcFt1AP42+EodxGqEPAPCSfQjbvtT7ohfdw5lL4bBCG7lmH9wKDRRmGNZW 9ilOIawark2y2q0Pwqmj9kkVhHXcBHorE01Mk/14N+Px+tFCYitUAsFRl4uprQLd zF2vb33Uvzq8hblReU+FAyMnda9PYPfF2aLTnd2WWy02Ov2hSKoK9jN9TxOtLNJJ Cijjvd0R34Fk7MiFVBfF5YRBQ3IwMXfqEwiWba09FNVlkcoqtAA3c/Z4zK8cwAvy N2LKQzi01jRGnsJFmEl/hR+jvLlIZfVfv+LINO6K0MZx6O3CTPH1UxvCdl6UqosH 7XvZt60kPY3AnQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:16:05 2025 by rpki-client