This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json) Hash identifier: mZV1Q6rhTzdnWyNYcPuNbWfu+DV0Z2CpP3q47FE/ccI= Subject key identifier: 4B:72:B6:5A:E2:98:FB:4C:46:95:AB:92:3B:0C:44:DD:AA:B4:2A:01 Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019B25518E5EEF49F98BB0F0803925759173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft Manifest number: 1443 Signing time: Tue 16 Dec 2025 04:01:00 +0000 Manifest this update: Tue 16 Dec 2025 04:01:00 +0000 Manifest next update: Wed 17 Dec 2025 04:01:00 +0000 Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=) 2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: H9xzsAzm5aJ3VuG546zBFa7uEajMJaYVXEGve5zJqAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:8e:5e:ef:49:f9:8b:b0:f0:80:39:25:75:91:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Dec 16 04:01:00 2025 GMT Not After : Dec 17 04:01:00 2025 GMT Subject: CN=4b72b65ae298fb4c4695ab923b0c44ddaab42a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:9c:75:26:94:4b:a0:ca:28:7e:b0:71:f0: c3:78:a0:9a:f1:e9:35:41:7d:be:ea:63:c0:11:61: fa:ba:05:92:8b:61:08:a8:ed:36:52:2f:0f:4d:1f: 85:46:90:8c:e3:cb:47:92:d4:b5:bc:17:6b:7d:a6: 8b:27:f5:61:81:a0:1f:59:f6:99:e6:72:76:ca:7a: f5:a2:8e:f9:0e:d8:89:de:a8:f3:a4:08:9c:3e:ab: c4:26:f7:68:f5:a2:c5:d1:96:6c:b4:0f:a1:99:af: cd:6c:1c:8f:cb:86:70:fb:bb:da:65:09:40:ca:c0: 80:05:36:b2:23:88:b3:8e:ac:5d:80:31:aa:57:a9: 34:97:0f:3c:ec:18:d7:56:ae:d0:c2:d0:c4:78:6a: c0:ed:31:20:fb:57:39:e4:3c:12:41:fa:67:76:86: f3:92:91:ff:b8:e4:a5:fd:74:ea:42:4b:ac:da:68: 4a:9a:7c:71:e4:99:a5:b2:85:ac:56:57:d9:47:bc: 02:bd:97:6d:b8:49:8f:30:5c:54:bf:8f:49:a2:99: ba:ad:cb:d6:9a:11:b3:d0:58:b6:43:9f:e8:9f:f1: bb:19:70:3d:57:c5:8b:f8:03:8b:e6:9f:88:bc:57: f6:23:d5:2c:88:11:3c:7b:44:0f:5e:6c:7b:e7:4c: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:72:B6:5A:E2:98:FB:4C:46:95:AB:92:3B:0C:44:DD:AA:B4:2A:01 X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2d:0d:81:f8:b5:3f:8c:bb:62:57:eb:2e:e1:7f:e1:cf:9d: 76:32:84:20:c8:4f:d2:4b:fe:0c:c6:9c:78:a7:a0:60:ea:d6: 46:06:04:43:15:93:42:43:af:ec:d5:3a:e7:4c:84:59:f3:68: 3e:8a:b6:46:9e:9c:45:ae:90:3c:21:4b:be:1b:93:ae:6e:87: ef:73:a2:7c:f9:30:c2:0c:a9:95:e7:f6:1c:bb:e9:be:06:fa: b3:63:18:3a:d9:1d:56:c6:c4:be:e5:ce:60:5a:7a:9d:b7:df: d1:35:16:25:9d:59:bb:af:08:62:91:53:61:2d:aa:9b:49:4b: 03:c2:01:05:b7:bb:f4:8b:c8:d7:b3:46:03:65:69:e7:8f:a4: 6c:a4:15:bd:bd:e7:ac:9a:1a:5d:6a:19:23:5e:03:5c:3d:01: 2e:1e:51:c4:45:b7:1a:36:04:8e:84:e0:20:eb:ed:86:2d:d4: 13:81:ff:48:ff:fc:d6:59:82:4e:4e:7a:61:42:33:1b:cc:4b: e3:9b:0a:27:bb:14:dc:fe:b3:7f:87:36:b4:20:f3:41:6d:90: 61:80:08:3a:88:2e:b6:c4:c4:b5:19:d7:8a:50:c6:ed:71:a5: fb:28:57:86:b7:b3:d0:b8:3b:b3:5f:7e:7e:45:d6:f4:07:f2: 58:f6:58:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUY5e70n5i7DwgDkldZFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjUxMjE2MDQwMTAwWhcNMjUxMjE3MDQwMTAwWjAzMTEwLwYDVQQD Eyg0YjcyYjY1YWUyOThmYjRjNDY5NWFiOTIzYjBjNDRkZGFhYjQyYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRScdSaUS6DKKH6wcfDDeKCa8ek1 QX2+6mPAEWH6ugWSi2EIqO02Ui8PTR+FRpCM48tHktS1vBdrfaaLJ/VhgaAfWfaZ 5nJ2ynr1oo75DtiJ3qjzpAicPqvEJvdo9aLF0ZZstA+hma/NbByPy4Zw+7vaZQlA ysCABTayI4izjqxdgDGqV6k0lw887BjXVq7QwtDEeGrA7TEg+1c55DwSQfpndobz kpH/uOSl/XTqQkus2mhKmnxx5JmlsoWsVlfZR7wCvZdtuEmPMFxUv49Jopm6rcvW mhGz0Fi2Q5/on/G7GXA9V8WL+AOL5p+IvFf2I9UsiBE8e0QPXmx750wARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtytlrimPtMRpWrkjsMRN2qtCoBMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC0Ngfi1 P4y7YlfrLuF/4c+ddjKEIMhP0kv+DMaceKegYOrWRgYEQxWTQkOv7NU650yEWfNo Poq2Rp6cRa6QPCFLvhuTrm6H73OifPkwwgyplef2HLvpvgb6s2MYOtkdVsbEvuXO YFp6nbff0TUWJZ1Zu68IYpFTYS2qm0lLA8IBBbe79IvI17NGA2Vp54+kbKQVvb3n rJoaXWoZI14DXD0BLh5RxEW3GjYEjoTgIOvthi3UE4H/SP/81lmCTk56YUIzG8xL 45sKJ7sU3P6zf4c2tCDzQW2QYYAIOogutsTEtRnXilDG7XGl+yhXhrez0Lg7s19+ fkXW9AfyWPZYlQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:54:25 2025 by rpki-client