This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json) Hash identifier: UbxZIOOrWbEVPf+8dRRNu/oR+un1292viDefvhOk2AA= Subject key identifier: 5C:8F:D7:74:1F:01:D8:45:BB:20:CC:EF:90:30:34:BE:18:DC:19:60 Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019B34C4A8984375A8353E6498680B88C23D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft Manifest number: 144B Signing time: Fri 19 Dec 2025 04:01:01 +0000 Manifest this update: Fri 19 Dec 2025 04:01:01 +0000 Manifest next update: Sat 20 Dec 2025 04:01:01 +0000 Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=) 2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: y84GQdrvsMZ1S3uc7UxiJ3jrjo0RlilP50hBo9sr0Ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:a8:98:43:75:a8:35:3e:64:98:68:0b:88:c2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Dec 19 04:01:01 2025 GMT Not After : Dec 20 04:01:01 2025 GMT Subject: CN=5c8fd7741f01d845bb20ccef903034be18dc1960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:9a:dc:91:e0:00:3b:c3:6d:b4:a2:f4:cc: c7:14:78:e2:81:3b:8d:b1:1b:bd:98:b0:19:a3:15: cd:ed:30:a6:a3:d1:46:7f:e7:c4:14:ea:01:b0:3c: 24:c1:7b:e7:67:88:93:7e:57:82:36:02:a8:2a:3e: de:cc:41:a6:a2:6a:ff:b2:d8:53:9e:f2:72:2f:1b: a8:95:3a:36:a7:96:fd:f2:f5:e2:80:71:39:37:fb: 21:7a:6a:42:25:cc:d0:ae:6d:e2:a7:40:fd:6a:4a: a5:d1:b8:93:7f:9c:90:b8:9b:e6:f3:53:54:36:26: eb:16:17:12:37:94:3c:23:bc:66:bd:83:a3:51:94: b3:18:68:d6:c6:d3:57:bd:0c:ca:de:08:07:d1:6a: 7b:6a:48:4e:a1:10:94:29:40:95:58:fe:1e:19:a3: a1:ab:7c:56:70:26:5b:7e:68:46:ea:1e:bf:11:a8: 37:1d:e1:71:ab:32:2a:e1:a5:3b:47:e8:d1:83:31: a1:42:73:e3:b1:4c:c1:a7:83:f1:15:24:20:f6:0a: a5:2c:70:c4:22:14:3d:4e:60:ae:f3:25:cd:8e:fd: fe:58:38:25:68:8d:1c:37:53:08:b3:03:f0:85:00: bc:e9:31:59:82:c1:5c:e0:81:7b:ee:63:d3:63:63: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8F:D7:74:1F:01:D8:45:BB:20:CC:EF:90:30:34:BE:18:DC:19:60 X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:18:45:a9:9a:a9:51:f3:0f:c3:80:44:a1:d4:6f:88:81:f5: d3:a9:08:54:0d:7a:79:ff:66:42:48:5c:f0:41:3c:13:29:28: 14:c7:29:e2:1b:3a:c5:71:18:4e:2a:66:ff:2e:87:97:cc:4e: b6:63:82:16:b6:f1:4e:fa:a6:13:a1:13:3e:63:42:b8:36:fc: de:2d:e9:98:ad:02:c8:45:b3:41:bb:bc:b9:92:a6:b4:09:cc: b9:0a:51:05:e8:de:7d:65:98:63:58:69:03:40:7b:23:6e:8e: 6d:a8:4e:94:10:b5:46:1b:b2:97:73:91:35:b8:98:4f:1e:44: 8c:12:4a:7e:15:a4:83:38:d1:99:43:79:bf:2f:29:83:a1:cf: d5:cb:a9:8e:88:88:48:5b:23:d2:31:ac:58:22:98:45:d4:96: 8f:4a:c9:fb:43:48:4c:21:15:13:77:c4:5d:67:17:88:7a:19: fa:18:f8:13:8e:99:e0:c7:98:2e:e9:d4:b2:82:b9:a5:41:fe: a6:f4:3f:25:21:4f:e8:ef:76:eb:75:92:8b:c8:1f:bc:a9:21: bb:42:f7:c9:71:79:1d:b8:df:2b:a5:dc:42:8b:0c:c8:c5:c9: 28:d2:b7:e4:aa:7f:42:5b:6d:c1:32:1a:29:b1:b2:8c:ed:97: 1a:91:55:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xKiYQ3WoNT5kmGgLiMI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjUxMjE5MDQwMTAxWhcNMjUxMjIwMDQwMTAxWjAzMTEwLwYDVQQD Eyg1YzhmZDc3NDFmMDFkODQ1YmIyMGNjZWY5MDMwMzRiZTE4ZGMxOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LGa3JHgADvDbbSi9MzHFHjigTuN sRu9mLAZoxXN7TCmo9FGf+fEFOoBsDwkwXvnZ4iTfleCNgKoKj7ezEGmomr/sthT nvJyLxuolTo2p5b98vXigHE5N/shempCJczQrm3ip0D9akql0biTf5yQuJvm81NU NibrFhcSN5Q8I7xmvYOjUZSzGGjWxtNXvQzK3ggH0Wp7akhOoRCUKUCVWP4eGaOh q3xWcCZbfmhG6h6/Eag3HeFxqzIq4aU7R+jRgzGhQnPjsUzBp4PxFSQg9gqlLHDE IhQ9TmCu8yXNjv3+WDglaI0cN1MIswPwhQC86TFZgsFc4IF77mPTY2McXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyP13QfAdhFuyDM75AwNL4Y3BlgMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBhFqZqp UfMPw4BEodRviIH106kIVA16ef9mQkhc8EE8EykoFMcp4hs6xXEYTipm/y6Hl8xO tmOCFrbxTvqmE6ETPmNCuDb83i3pmK0CyEWzQbu8uZKmtAnMuQpRBejefWWYY1hp A0B7I26ObahOlBC1Rhuyl3ORNbiYTx5EjBJKfhWkgzjRmUN5vy8pg6HP1cupjoiI SFsj0jGsWCKYRdSWj0rJ+0NITCEVE3fEXWcXiHoZ+hj4E46Z4MeYLunUsoK5pUH+ pvQ/JSFP6O9263WSi8gfvKkhu0L3yXF5HbjfK6XcQosMyMXJKNK35Kp/QlttwTIa KbGyjO2XGpFVVw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:37:57 2025 by rpki-client