This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json) Hash identifier: NYU5rSoqeb4JhQyq9eMUgGC161oNxgXZ9KWzVVQSPGI= Subject key identifier: CD:63:89:9B:5C:3C:4A:A7:28:C7:0E:E4:5A:F5:71:0D:D8:7F:03:13 Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019B1BE01A7A5B813D2B0E7CB306A9605569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 08:00:30 +0000 Manifest this update: Sun 14 Dec 2025 08:00:30 +0000 Manifest next update: Mon 15 Dec 2025 08:00:30 +0000 Files and hashes: 1: 1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa (hash: R4A5i2N8JYKg21Uc7Bt5Hjz+LtBEOYUw0Vl9yYmvj1U=) 2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=) 3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: fGD6X8kXjpY8LAtsw5Tfb58twuohkO8Kzxj5LVp97ak=) 4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=) 5: escRk3d2NjI3vOhsunfMskewVFU.roa (hash: zPSViHW+zBVRTJi3BUxGbJ65sQUAitf2bEnfu5wf6oI=) 6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=) 7: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:1a:7a:5b:81:3d:2b:0e:7c:b3:06:a9:60:55:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Dec 14 08:00:30 2025 GMT Not After : Dec 15 08:00:30 2025 GMT Subject: CN=cd63899b5c3c4aa728c70ee45af5710dd87f0313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:bc:60:e5:61:b9:7f:ac:86:4a:52:d5:7c: 1d:59:08:12:d5:d2:a3:f0:e2:4c:d5:59:fb:ac:3c: 10:2c:15:e8:7d:ff:57:a4:01:ad:03:88:78:1e:69: 4a:79:cd:24:6a:04:92:f2:7a:98:27:7f:db:6b:c0: c0:9b:1e:9e:3b:5a:d5:5f:80:fc:9c:67:c6:f8:57: ff:bc:93:dc:23:c5:85:c9:28:38:ce:88:d0:56:1c: 7e:56:ac:0f:cb:d4:59:71:81:bc:fe:8e:09:dd:71: 8f:ee:da:da:7a:af:bc:3d:df:7d:f0:64:0d:05:7d: 33:10:9b:b6:13:ac:bb:1a:20:03:1e:ae:50:1f:a3: 20:9d:9e:12:bd:fd:ad:54:71:2e:7e:ac:75:61:ec: 19:ba:76:72:d9:d7:09:e7:8b:78:ea:d7:40:3e:5b: e4:d9:cf:2f:b1:94:d4:f2:33:a0:26:16:30:1a:a0: 69:21:22:d7:c6:ff:c8:20:98:7d:25:8d:77:9c:68: 3b:9a:4f:2d:10:29:3e:7d:e4:06:d9:bf:4d:58:22: 69:a7:68:cd:70:69:fd:e7:d2:5c:dd:e5:b4:4f:e1: d0:ad:55:ff:9e:13:4d:59:dc:db:97:64:06:e7:f9: 77:30:70:c2:8b:56:e8:36:ec:91:45:a2:1f:d6:5d: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:63:89:9B:5C:3C:4A:A7:28:C7:0E:E4:5A:F5:71:0D:D8:7F:03:13 X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1c:5e:fd:7a:a3:73:70:eb:d4:c4:0b:e0:d2:6c:0a:bd:19: 70:32:4d:ef:e2:29:10:2b:87:dd:97:74:73:df:ad:c6:6b:f5: 25:34:a5:49:38:1a:55:25:e7:d2:70:8f:46:2d:2d:6a:97:ae: 61:9a:87:33:60:1a:67:c3:02:ff:9e:c1:69:05:61:82:70:c5: 2d:dd:4b:e7:9a:ea:d0:e9:97:bb:01:23:df:c6:df:60:62:ed: 09:8e:ff:ad:cb:2b:d1:a3:28:be:05:b6:3f:65:0b:a8:0d:e4: f2:f4:88:8b:62:69:d9:d1:59:c7:8c:6a:40:74:38:9c:08:02: 54:03:7f:a3:33:38:6e:be:98:87:a5:59:40:63:fc:c6:87:5d: 38:14:dc:58:ae:a9:93:b2:1d:f0:f9:7a:68:1a:be:0c:63:d1: aa:7e:03:af:02:62:56:8f:e4:fa:d1:3c:de:4a:50:53:5e:57: 7c:47:15:d3:66:8f:30:70:62:fc:9e:7d:e0:d1:c5:01:b8:1e: cf:8a:81:99:56:e8:9a:f6:d7:a4:29:79:31:aa:e4:bf:d1:08: ab:c3:11:d7:88:3c:06:81:52:6a:43:98:36:42:ea:46:0b:46: b1:26:9e:18:23:f8:13:15:cc:71:b5:87:f5:a1:b9:1a:b1:13: 49:19:ab:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4Bp6W4E9Kw58swapYFVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjUxMjE0MDgwMDMwWhcNMjUxMjE1MDgwMDMwWjAzMTEwLwYDVQQD EyhjZDYzODk5YjVjM2M0YWE3MjhjNzBlZTQ1YWY1NzEwZGQ4N2YwMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokK8YOVhuX+shkpS1XwdWQgS1dKj 8OJM1Vn7rDwQLBXoff9XpAGtA4h4HmlKec0kagSS8nqYJ3/ba8DAmx6eO1rVX4D8 nGfG+Ff/vJPcI8WFySg4zojQVhx+VqwPy9RZcYG8/o4J3XGP7traeq+8Pd998GQN BX0zEJu2E6y7GiADHq5QH6MgnZ4Svf2tVHEufqx1YewZunZy2dcJ54t46tdAPlvk 2c8vsZTU8jOgJhYwGqBpISLXxv/IIJh9JY13nGg7mk8tECk+feQG2b9NWCJpp2jN cGn959Jc3eW0T+HQrVX/nhNNWdzbl2QG5/l3MHDCi1boNuyRRaIf1l3H/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1jiZtcPEqnKMcO5Fr1cQ3YfwMTMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhxe/Xqj c3Dr1MQL4NJsCr0ZcDJN7+IpECuH3Zd0c9+txmv1JTSlSTgaVSXn0nCPRi0tapeu YZqHM2AaZ8MC/57BaQVhgnDFLd1L55rq0OmXuwEj38bfYGLtCY7/rcsr0aMovgW2 P2ULqA3k8vSIi2Jp2dFZx4xqQHQ4nAgCVAN/ozM4br6Yh6VZQGP8xoddOBTcWK6p k7Id8Pl6aBq+DGPRqn4DrwJiVo/k+tE83kpQU15XfEcV02aPMHBi/J594NHFAbge z4qBmVbomvbXpCl5Markv9EIq8MR14g8BoFSakOYNkLqRgtGsSaeGCP4ExXMcbWH 9aG5GrETSRmrJQ== -----END CERTIFICATE-----Generated at Sun Dec 14 17:15:24 2025 by rpki-client