This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft File: iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json) Hash identifier: 3qOxUAetWeQFwhm1AzxIcX24sfNh8Cj4qFm7cog7PHQ= Subject key identifier: 5C:24:F8:A1:DA:72:46:42:3B:7A:95:BE:90:29:E0:6E:63:71:DF:FA Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5 Certificate issuer: /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5 Certificate serial: 019B5A88CA5AFD78385AA224E68C3FD881D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft Manifest number: 0BA6 Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: HVZZgTt0qImB-OIxZYe0LV_oR4c.roa (hash: CxMOuogiyPkbYMbQPW67m4ttU2r00+UG5PTmwlkEZ0c=) 2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: Uew79YwJTmwkcFJA7gIQDQIwyXgWYSC7hgdlHD63tco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ca:5a:fd:78:38:5a:a2:24:e6:8c:3f:d8:81:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5 Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=5c24f8a1da7246423b7a95be9029e06e6371dffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:be:44:3b:60:a0:1a:18:0f:3a:dc:0b:3e:e9: 56:b5:1a:25:f4:9d:fd:6a:66:f2:86:a9:62:d9:8f: 1e:74:d4:2b:03:5d:07:28:e6:2a:0c:95:6d:d9:73: 0a:99:6b:4c:d2:e5:12:78:93:b7:1d:79:38:ac:d9: 48:c0:4b:80:c9:2e:8c:c8:d8:98:0b:0a:a9:8f:ef: 0d:8c:56:7c:e4:89:8e:80:44:42:9d:26:11:c4:74: 38:6a:04:53:6f:f0:5d:05:50:a7:d2:88:8a:05:78: 61:d4:0e:45:ad:71:80:cb:a9:6f:f5:5c:6b:de:cd: f5:77:83:e8:db:13:22:af:b0:9c:08:42:16:0b:79: e8:09:b4:39:c2:26:d1:6a:86:74:f9:66:0c:09:53: 21:04:22:7f:37:e6:51:c9:a0:2d:68:0b:4a:3e:61: 31:5d:f6:29:c5:dc:62:8a:6b:8a:04:92:ff:84:97: 4b:20:2a:89:13:fd:99:74:d8:77:03:ea:af:30:83: f8:29:81:fc:99:7d:8e:20:dc:81:4d:76:9e:be:85: 54:9a:35:9b:b0:12:72:81:81:77:b8:0e:51:e5:a8: 11:d3:57:2f:e5:ed:e1:3d:63:e2:ff:9a:3e:6b:ee: 17:cf:66:dd:6f:82:22:13:85:8e:1d:54:81:5f:57: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:24:F8:A1:DA:72:46:42:3B:7A:95:BE:90:29:E0:6E:63:71:DF:FA X509v3 Authority Key Identifier: keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:73:30:98:cb:84:a8:ed:9d:6d:30:58:41:1f:da:b1:dc:1b: 3e:6d:b7:52:3c:47:66:ee:b0:27:6c:f7:f6:c2:25:62:7b:07: b9:6c:e2:c4:b0:ff:cb:52:2a:6d:66:ae:94:17:fa:12:be:16: e7:69:18:f4:b5:f4:e9:85:fe:ec:08:4e:85:42:3c:f8:f6:19: c6:70:2e:d0:df:76:47:39:6c:1c:b2:c1:ba:57:a8:ec:62:ef: 84:6f:3b:7a:f8:a7:4c:92:99:dd:ca:c3:0f:6b:ec:12:a3:ad: bb:d5:fd:b4:d0:e1:93:a2:72:bd:c4:10:8e:7a:b7:d3:96:57: 40:00:34:b3:a4:89:e0:94:12:3f:f3:5e:32:27:12:16:11:c6: da:8f:a4:e6:34:6d:7b:88:ac:e5:57:74:54:dd:44:9d:6b:07: 62:83:e0:b1:2d:0c:c9:d2:6e:63:11:43:ac:05:30:a6:59:3c: b9:23:0c:35:3c:ed:4a:eb:32:9d:6f:41:ea:5b:de:b1:50:d6: 00:c4:42:53:14:93:1d:5f:78:ca:06:68:ef:1e:db:6c:72:11: 7e:9c:55:38:75:3e:da:fc:22:f4:cd:e0:4a:30:fe:a8:a9:de: 21:ee:dc:c3:48:df:c0:21:aa:b3:c2:eb:ee:5c:9a:4d:67:6e: 75:a0:bf:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMpa/Xg4WqIk5ow/2IHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NjY4NjFiZTU3ZDM2ZDVmNmQ5ZDlmOGViZjYyODE3NjE2 YTIxZjUwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD Eyg1YzI0ZjhhMWRhNzI0NjQyM2I3YTk1YmU5MDI5ZTA2ZTYzNzFkZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b5EO2CgGhgPOtwLPulWtRol9J39 ambyhqli2Y8edNQrA10HKOYqDJVt2XMKmWtM0uUSeJO3HXk4rNlIwEuAyS6MyNiY Cwqpj+8NjFZ85ImOgERCnSYRxHQ4agRTb/BdBVCn0oiKBXhh1A5FrXGAy6lv9Vxr 3s31d4Po2xMir7CcCEIWC3noCbQ5wibRaoZ0+WYMCVMhBCJ/N+ZRyaAtaAtKPmEx XfYpxdxiimuKBJL/hJdLICqJE/2ZdNh3A+qvMIP4KYH8mX2OINyBTXaevoVUmjWb sBJygYF3uA5R5agR01cv5e3hPWPi/5o+a+4Xz2bdb4IiE4WOHVSBX1ecvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwk+KHackZCO3qVvpAp4G5jcd/6MB8GA1UdIwQY MBaAFIlmhhvlfTbV9tnZ+Ov2KBdhaiH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mNTYyYTQtMmYwNC00NmRkLWIxYzEt MzU2Y2RlYmViODRmLzEvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mNTYyYTQtMmYwNC00NmRkLWIxYzEtMzU2Y2RlYmViODRm LzEvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnMwmMuE qO2dbTBYQR/asdwbPm23UjxHZu6wJ2z39sIlYnsHuWzixLD/y1IqbWaulBf6Er4W 52kY9LX06YX+7AhOhUI8+PYZxnAu0N92RzlsHLLBuleo7GLvhG87evinTJKZ3crD D2vsEqOtu9X9tNDhk6JyvcQQjnq305ZXQAA0s6SJ4JQSP/NeMicSFhHG2o+k5jRt e4is5Vd0VN1EnWsHYoPgsS0MydJuYxFDrAUwplk8uSMMNTztSusynW9B6lvesVDW AMRCUxSTHV94ygZo7x7bbHIRfpxVOHU+2vwi9M3gSjD+qKneIe7cw0jfwCGqs8Lr 7lyaTWdudaC/og== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:41 2025 by rpki-client