This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json) Hash identifier: swqoj661NCqQS9i4zNN7LjyL+nbVyhPSKkBYTRRVga0= Subject key identifier: EE:25:C8:14:D7:6A:93:47:4A:85:95:11:ED:A4:3C:41:75:56:41:0E Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79 Certificate serial: 019B0E931C7DD54AD8F7B52F99374AE3FAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft Manifest number: 0D61 Signing time: Thu 11 Dec 2025 18:01:20 +0000 Manifest this update: Thu 11 Dec 2025 18:01:20 +0000 Manifest next update: Fri 12 Dec 2025 18:01:20 +0000 Files and hashes: 1: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (hash: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=) 2: W0D9WIXmr4DG_xEj-xUZT82-dxQ.roa (hash: fBvWuzB9wp05SoO5x+Vb/EneDFqD/kJHT0KgvrAsF24=) 3: aheTt6_pS0K22xA67glREELod8A.roa (hash: qWC2pzWM7a75jc5rNLOSS10p2/VCBqYrjSpxRU7D9zI=) 4: g_SxF-_E_VpwVrwNdmKsnzbOYaM.roa (hash: wSo0WU3KC/Wo2i+eQ7vlG4IlKtTmfnJLRouHYXZqnO4=) 5: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: PvyX7AH9gXymKttdV5qhraXMkI5uC7YPcRASsKGwNvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:1c:7d:d5:4a:d8:f7:b5:2f:99:37:4a:e3:fa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79 Validity Not Before: Dec 11 18:01:20 2025 GMT Not After : Dec 12 18:01:20 2025 GMT Subject: CN=ee25c814d76a93474a859511eda43c417556410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:49:ce:12:34:1b:7a:92:1c:d6:84:91:68: e6:2b:8e:0b:23:fc:68:a6:5c:d2:8a:87:60:fd:bd: f9:61:54:01:18:9d:56:bc:dd:5a:a7:db:e0:ee:99: 34:68:28:68:a1:6e:29:02:30:4c:e2:11:73:be:6f: b4:9e:bf:74:a8:86:bb:37:cb:cc:45:c4:bb:41:7e: 1b:ec:4c:9c:f9:f9:53:97:67:56:ad:fa:44:82:c4: bb:dd:d0:64:f7:78:6d:28:22:35:8f:9e:b6:43:f8: 40:50:e2:15:bb:a6:40:6f:55:82:e6:c8:6e:13:af: 67:0f:41:ad:42:75:8b:13:7d:2d:2e:cf:ec:c1:b5: 58:4f:7d:eb:ec:e3:04:36:4c:06:a7:c9:5a:68:a0: 71:74:06:a6:5a:2b:30:1e:6f:f5:09:ad:42:f4:ce: c1:4b:80:81:7c:90:4a:08:c6:20:31:92:c4:67:88: eb:1b:3e:e7:da:53:1e:40:43:62:e2:6c:1a:de:bd: ac:11:05:bf:e1:9b:24:35:e0:c0:90:c5:09:ad:d1: c7:a2:c4:3a:d1:1d:4a:a6:b4:98:a5:7a:1a:9b:80: a8:3e:1e:f9:11:f6:56:c8:f3:41:41:fd:47:7d:ac: ec:08:8f:12:00:bf:cc:06:67:56:63:4c:b6:ae:a4: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:25:C8:14:D7:6A:93:47:4A:85:95:11:ED:A4:3C:41:75:56:41:0E X509v3 Authority Key Identifier: keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8a:a0:ae:af:3a:e9:a2:be:de:b2:00:64:06:e1:fc:3e:36: 98:33:1d:24:1e:b6:36:d7:75:16:b9:84:09:00:33:fd:dd:54: 60:13:94:6d:f0:53:39:35:bb:fa:ff:3d:e6:aa:c8:2f:47:3f: 83:a1:6e:8c:a7:31:b2:d2:8a:85:d1:14:60:2e:e1:02:e4:e9: a1:5c:b9:16:84:75:39:13:fa:a2:ea:65:6f:62:bf:86:b4:4d: 20:90:e1:8a:7e:ee:aa:81:30:7d:d4:b9:89:f7:ba:03:32:f7: fb:6c:6f:e6:11:17:2a:11:25:99:a3:fd:81:17:6f:8d:1e:71: 52:05:0f:e7:61:67:b9:32:79:23:c0:46:7c:6f:d0:ad:63:41: 58:8e:c9:67:92:22:d8:0c:e1:b8:a1:2d:94:5e:7c:e4:54:40: 8b:42:84:bc:13:60:52:de:c9:0b:d8:8c:c9:6a:6c:ef:ff:99: cd:20:d6:f3:e1:a7:2a:d1:d4:39:03:c7:93:a9:65:f1:de:df: 2b:82:a5:e3:86:ee:e2:57:8e:81:57:9c:d7:21:91:ed:02:66: 62:6f:e3:93:72:59:89:ea:c2:73:91:33:01:04:1d:e9:f1:07: 96:5f:05:22:11:9f:b7:61:5c:d0:d8:b8:29:fd:c2:02:6c:1e: 51:17:6a:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxx91UrY97UvmTdK4/rjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1 MDRmNzkwHhcNMjUxMjExMTgwMTIwWhcNMjUxMjEyMTgwMTIwWjAzMTEwLwYDVQQD EyhlZTI1YzgxNGQ3NmE5MzQ3NGE4NTk1MTFlZGE0M2M0MTc1NTY0MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGBJzhI0G3qSHNaEkWjmK44LI/xo plzSiodg/b35YVQBGJ1WvN1ap9vg7pk0aChooW4pAjBM4hFzvm+0nr90qIa7N8vM RcS7QX4b7Eyc+flTl2dWrfpEgsS73dBk93htKCI1j562Q/hAUOIVu6ZAb1WC5shu E69nD0GtQnWLE30tLs/swbVYT33r7OMENkwGp8laaKBxdAamWiswHm/1Ca1C9M7B S4CBfJBKCMYgMZLEZ4jrGz7n2lMeQENi4mwa3r2sEQW/4ZskNeDAkMUJrdHHosQ6 0R1KprSYpXoam4CoPh75EfZWyPNBQf1HfazsCI8SAL/MBmdWY0y2rqSyqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4lyBTXapNHSoWVEe2kPEF1VkEOMB8GA1UdIwQY MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt NmJjMzkwOTk1Y2FiLzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYqgrq86 6aK+3rIAZAbh/D42mDMdJB62Ntd1FrmECQAz/d1UYBOUbfBTOTW7+v895qrIL0c/ g6FujKcxstKKhdEUYC7hAuTpoVy5FoR1ORP6ouplb2K/hrRNIJDhin7uqoEwfdS5 ife6AzL3+2xv5hEXKhElmaP9gRdvjR5xUgUP52FnuTJ5I8BGfG/QrWNBWI7JZ5Ii 2AzhuKEtlF585FRAi0KEvBNgUt7JC9iMyWps7/+ZzSDW8+GnKtHUOQPHk6ll8d7f K4Kl44bu4leOgVec1yGR7QJmYm/jk3JZierCc5EzAQQd6fEHll8FIhGft2Fc0Ni4 Kf3CAmweURdq8g== -----END CERTIFICATE-----Generated at Thu Dec 11 23:28:03 2025 by rpki-client