This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json) Hash identifier: /r7HmHkLXmw44fCb1ghM5Bay/9dZeyf6HraOb9WsHyY= Subject key identifier: 1E:A9:2A:C5:BE:5E:D3:35:14:7E:67:6F:49:95:9A:7A:18:F4:09:38 Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Certificate serial: 019B2F6726BC543A2A0F9E61490929D376C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft Manifest number: 17D5 Signing time: Thu 18 Dec 2025 03:00:47 +0000 Manifest this update: Thu 18 Dec 2025 03:00:47 +0000 Manifest next update: Fri 19 Dec 2025 03:00:47 +0000 Files and hashes: 1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=) 2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: 4ShjDJbqH8r1/q/7lM9FA+LcPmSmYPCAGFndszPx0UE=) 3: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=) 4: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=) 5: bt-PMEtT1IwN0eDJCO5vE7NIDdQ.roa (hash: sPgTyfptj00zzq62H1SqHfdWzrVXbflq204bOJGhoUw=) 6: knF5z7M4UIvC6eeoTXUGhnRxT0k.roa (hash: XFbD7w0kWLSfVZ1roO0o5/UKd6EksNenbK+US1bpOhU=) 7: l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa (hash: qHA/WOgfb5PSClEW7ipNBpljR8hRqs+26OIpJqnzQCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:26:bc:54:3a:2a:0f:9e:61:49:09:29:d3:76:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Validity Not Before: Dec 18 03:00:47 2025 GMT Not After : Dec 19 03:00:47 2025 GMT Subject: CN=1ea92ac5be5ed335147e676f49959a7a18f40938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:02:85:16:96:17:e1:c2:50:98:9a:73:58: 73:e9:27:45:d3:88:09:f3:58:fd:19:20:ec:79:2b: e5:57:84:7f:db:b6:f8:48:65:15:cf:b5:70:47:c3: b4:ba:ac:b2:aa:a8:b7:f9:7b:52:e0:42:f9:d3:61: 9b:02:4b:8a:34:fa:a4:1e:7d:95:aa:e8:f6:7f:aa: 6d:f4:da:98:ba:45:b7:32:89:0c:eb:c7:f3:cb:ac: bb:7f:ed:21:ae:d7:e5:6f:cf:75:81:fa:9b:02:d1: 80:a0:46:df:42:f3:40:71:d0:15:0a:ed:21:da:9a: 3a:e7:44:51:39:8a:87:8c:72:bf:70:e6:9d:d0:10: ed:b0:80:fc:56:50:b2:cd:43:f9:7a:d8:b9:61:5e: 17:cf:77:31:58:8f:d5:5b:cb:ba:ba:3c:77:c7:9b: f8:92:82:30:d2:9e:80:b9:f7:04:64:23:f7:f1:ad: ec:bb:06:fc:aa:8c:7a:e7:dd:b4:2a:be:74:2a:02: 51:85:c0:2e:b5:94:ca:6b:ea:55:b2:77:85:59:0a: 8a:9c:d2:84:dc:86:cd:99:f0:e0:53:ba:13:cb:f7: 2b:6d:57:32:2b:a0:5b:78:71:ec:e7:8d:09:32:be: 59:9d:88:40:a4:68:cd:a9:56:2f:2d:0c:dd:5b:08: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:2A:C5:BE:5E:D3:35:14:7E:67:6F:49:95:9A:7A:18:F4:09:38 X509v3 Authority Key Identifier: keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4a:fb:f4:fb:6b:a1:43:d6:f4:60:ff:21:76:cb:00:8e:c3: bc:6e:ca:3b:c1:95:37:71:19:9e:b4:c5:9c:a5:a4:d3:34:6e: 35:9f:36:b1:85:0f:d9:c8:02:ce:8d:4f:d6:37:ff:b7:7c:43: f1:85:a5:70:e9:5a:46:72:49:bd:92:95:cf:01:dd:e4:f8:c1: 0b:32:62:b8:29:89:5c:4b:14:55:93:01:ef:77:ce:fb:37:ca: 55:a5:19:ef:08:29:87:59:e4:4c:f4:89:24:14:b1:fd:04:56: 66:30:de:0a:8e:f0:f7:71:53:fe:10:c0:cb:a6:41:84:7a:43: 45:eb:ac:79:18:77:a6:70:22:46:b7:45:dc:4e:21:6e:00:3c: bf:18:05:d7:06:dc:4f:e4:be:06:61:d1:13:89:c8:9a:ec:2e: cb:1d:f9:89:c3:98:90:38:92:fd:bc:37:95:5b:ff:f2:5b:47: 7c:ee:11:77:8f:42:74:4f:6f:5d:aa:3e:66:9b:de:f1:d8:4d: ff:9a:ab:44:48:a8:ff:77:87:e2:7f:30:0e:f4:bf:1a:75:32: af:e5:21:1d:b9:be:cd:56:b4:bd:95:2f:50:23:46:06:18:22: c0:14:9d:75:0b:3c:ac:81:31:4d:91:fd:71:19:a0:49:ee:cf: 8e:ac:5b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZya8VDoqD55hSQkp03bFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw ZDQxZTUwHhcNMjUxMjE4MDMwMDQ3WhcNMjUxMjE5MDMwMDQ3WjAzMTEwLwYDVQQD EygxZWE5MmFjNWJlNWVkMzM1MTQ3ZTY3NmY0OTk1OWE3YTE4ZjQwOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw38ChRaWF+HCUJiac1hz6SdF04gJ 81j9GSDseSvlV4R/27b4SGUVz7VwR8O0uqyyqqi3+XtS4EL502GbAkuKNPqkHn2V quj2f6pt9NqYukW3MokM68fzy6y7f+0hrtflb891gfqbAtGAoEbfQvNAcdAVCu0h 2po650RROYqHjHK/cOad0BDtsID8VlCyzUP5eti5YV4Xz3cxWI/VW8u6ujx3x5v4 koIw0p6AufcEZCP38a3suwb8qox65920Kr50KgJRhcAutZTKa+pVsneFWQqKnNKE 3IbNmfDgU7oTy/crbVcyK6BbeHHs540JMr5ZnYhApGjNqVYvLQzdWwgliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6pKsW+XtM1FH5nb0mVmnoY9Ak4MB8GA1UdIwQY MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt M2RmN2ZhZjM1MzVkLzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkr79Ptr oUPW9GD/IXbLAI7DvG7KO8GVN3EZnrTFnKWk0zRuNZ82sYUP2cgCzo1P1jf/t3xD 8YWlcOlaRnJJvZKVzwHd5PjBCzJiuCmJXEsUVZMB73fO+zfKVaUZ7wgph1nkTPSJ JBSx/QRWZjDeCo7w93FT/hDAy6ZBhHpDReuseRh3pnAiRrdF3E4hbgA8vxgF1wbc T+S+BmHRE4nImuwuyx35icOYkDiS/bw3lVv/8ltHfO4Rd49CdE9vXao+Zpve8dhN /5qrREio/3eH4n8wDvS/GnUyr+UhHbm+zVa0vZUvUCNGBhgiwBSddQs8rIExTZH9 cRmgSe7Pjqxbtw== -----END CERTIFICATE-----Generated at Thu Dec 18 12:00:17 2025 by rpki-client