This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json) Hash identifier: R4hTnPyoZjUhHBJUe6ATvwTyPoksQSPA3FG2xl+oXFw= Subject key identifier: 33:FC:9A:AE:FC:0D:A7:C4:13:48:AC:75:67:D2:63:9F:86:23:0D:12 Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6 Certificate serial: 019B2CD3B7483C106CCDE9E49FF72562C213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 15:00:31 +0000 Manifest this update: Wed 17 Dec 2025 15:00:31 +0000 Manifest next update: Thu 18 Dec 2025 15:00:31 +0000 Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: 3aF1dLmzVoI84vpattg4MuChFgEelZ2KSrn5T5l3yYw=) 2: UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa (hash: cfx5VG/AEqP8NMaOBqVctXkelvdIOqGDstY0ytuNLZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:d3:b7:48:3c:10:6c:cd:e9:e4:9f:f7:25:62:c2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208b221700b281f823e322a32221a867e5b079a6 Validity Not Before: Dec 17 15:00:31 2025 GMT Not After : Dec 18 15:00:31 2025 GMT Subject: CN=33fc9aaefc0da7c41348ac7567d2639f86230d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a6:33:af:47:a7:f8:f9:23:9a:b3:34:bb:c8: 25:f2:b8:c8:3b:56:24:91:9c:82:b3:38:79:b2:15: 5f:bf:40:24:08:b8:b3:b1:e2:64:82:7e:b5:b8:ae: 7a:0d:99:9e:13:57:3b:9c:a4:b8:88:da:c1:00:3f: 3d:78:37:43:7b:4e:8e:97:a7:47:54:e2:14:a9:38: 1d:31:90:45:6e:1f:f6:d7:2e:ce:d6:ac:88:dc:8f: 56:02:c8:11:30:01:f8:e4:96:ea:22:ed:29:7a:34: 10:f9:9f:ae:d1:0b:13:dc:b2:1e:0a:48:df:1c:92: f8:79:6a:81:24:42:18:5e:95:eb:6c:2b:d1:38:4c: 15:07:f1:22:af:99:0f:b5:8a:b2:ab:6d:b0:10:26: a7:47:2b:a2:a2:b2:50:c8:c3:58:d5:28:a8:a3:ce: 72:8e:3c:6d:87:5a:9f:3b:43:53:52:2f:0c:a2:d0: c3:ee:21:c4:27:7c:e2:db:f4:8e:be:2e:84:f5:08: f6:3b:80:9b:df:a4:2d:d2:ff:5c:99:b7:da:af:e7: 7f:95:5e:82:bd:1e:5d:8f:9b:29:91:3f:1c:c5:42: e4:ed:7d:f3:19:0d:3e:7f:06:eb:d0:79:77:64:72: 3c:74:b2:0f:20:e9:44:34:fe:2b:7a:de:f9:6c:02: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FC:9A:AE:FC:0D:A7:C4:13:48:AC:75:67:D2:63:9F:86:23:0D:12 X509v3 Authority Key Identifier: keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:16:61:f1:29:af:f7:ef:33:79:db:15:a2:cf:e4:a9:ad:bb: 49:c0:bf:42:bc:03:cd:0c:12:77:3a:0e:bb:7f:c6:21:35:be: 3e:7c:11:ce:f4:8c:85:3b:6d:6b:26:dc:35:e0:68:48:79:bb: a8:0d:58:e8:00:4c:7b:10:6a:1d:29:05:58:d1:c2:18:44:fb: 86:98:7a:a9:30:8e:e6:13:e0:b0:c4:1e:33:49:ac:ae:5a:f5: 7b:a6:88:db:11:29:31:99:8c:10:5b:f6:3f:f5:68:ae:55:49: 95:95:39:9f:83:01:4c:58:7c:bd:ed:97:81:b0:69:e5:3a:ef: 4f:3c:03:44:b3:8e:ee:7e:95:54:54:60:fa:4b:e5:07:0d:a8: d5:04:9a:2e:3c:31:59:f4:a5:fb:93:e7:6c:41:08:72:4c:f8: c7:42:17:80:ba:cf:db:91:ce:05:9b:25:e4:1b:b6:a8:f1:99: 5a:99:63:08:8f:e4:42:38:89:e6:78:eb:97:ac:57:fe:8e:b0: 20:bc:41:17:dd:8b:64:cd:24:34:ca:a7:0e:b6:da:b3:53:dc: c0:14:f8:c4:8b:38:73:16:fb:3a:4d:43:a8:5f:df:41:91:ff: 1c:f3:8d:b3:11:46:93:ca:20:ba:1e:5e:14:d8:46:0f:42:e8: f2:84:c1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZss07dIPBBszenkn/clYsITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi MDc5YTYwHhcNMjUxMjE3MTUwMDMxWhcNMjUxMjE4MTUwMDMxWjAzMTEwLwYDVQQD EygzM2ZjOWFhZWZjMGRhN2M0MTM0OGFjNzU2N2QyNjM5Zjg2MjMwZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqYzr0en+PkjmrM0u8gl8rjIO1Yk kZyCszh5shVfv0AkCLizseJkgn61uK56DZmeE1c7nKS4iNrBAD89eDdDe06Ol6dH VOIUqTgdMZBFbh/21y7O1qyI3I9WAsgRMAH45JbqIu0pejQQ+Z+u0QsT3LIeCkjf HJL4eWqBJEIYXpXrbCvROEwVB/Eir5kPtYqyq22wECanRyuiorJQyMNY1Sioo85y jjxth1qfO0NTUi8MotDD7iHEJ3zi2/SOvi6E9Qj2O4Cb36Qt0v9cmbfar+d/lV6C vR5dj5spkT8cxULk7X3zGQ0+fwbr0Hl3ZHI8dLIPIOlENP4ret75bAKLJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP8mq78DafEE0isdWfSY5+GIw0SMB8GA1UdIwQY MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBZh8Smv 9+8zedsVos/kqa27ScC/QrwDzQwSdzoOu3/GITW+PnwRzvSMhTttaybcNeBoSHm7 qA1Y6ABMexBqHSkFWNHCGET7hph6qTCO5hPgsMQeM0msrlr1e6aI2xEpMZmMEFv2 P/VorlVJlZU5n4MBTFh8ve2XgbBp5TrvTzwDRLOO7n6VVFRg+kvlBw2o1QSaLjwx WfSl+5PnbEEIckz4x0IXgLrP25HOBZsl5Bu2qPGZWpljCI/kQjiJ5njrl6xX/o6w ILxBF92LZM0kNMqnDrbas1PcwBT4xIs4cxb7Ok1DqF/fQZH/HPONsxFGk8oguh5e FNhGD0Lo8oTBSw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:09:45 2025 by rpki-client