This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json) Hash identifier: uRqMZcl4WaYjsrzSRK4cRv1icLef5LJpfzh0ZFzrdEg= Subject key identifier: FF:31:4F:6D:DA:61:A4:7E:8B:32:B1:92:61:44:4C:54:CF:25:83:0C Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Certificate serial: 019B3CB4A6147D27B2218294B97B764498D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 17:00:30 +0000 Manifest this update: Sat 20 Dec 2025 17:00:30 +0000 Manifest next update: Sun 21 Dec 2025 17:00:30 +0000 Files and hashes: 1: EaH2QQHBEDcGaNdJtYZj2ZFNJ5k.roa (hash: 4+/I2Hjrn0j9dA2Zz00LeWlJdI1vEoPYq2H+FkwWxIU=) 2: VU8Lnit5-5bWS_B3iU2pbUqjD3A.roa (hash: f9Jbrulzf/covwNo8YJa0VovFN79QafWnPSPZ8cv6CI=) 3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: X82QSh9Y42apyO5KLiloXviV3X9AX7w+ERyNLpKPHL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a6:14:7d:27:b2:21:82:94:b9:7b:76:44:98:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Validity Not Before: Dec 20 17:00:30 2025 GMT Not After : Dec 21 17:00:30 2025 GMT Subject: CN=ff314f6dda61a47e8b32b19261444c54cf25830c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:cf:d5:4b:95:ab:fb:c0:8b:69:c4:8e:99: b0:03:23:ba:94:dc:27:cc:2c:7a:a4:b3:75:88:34: d7:b6:b8:46:b0:d2:41:41:f8:f9:6f:07:2c:8f:b2: 29:84:62:2f:11:20:1c:3c:49:74:bd:65:6d:7a:dc: 4b:69:ff:a9:05:43:39:ed:b6:ba:97:7d:ac:e0:e7: 72:1b:eb:e7:04:b5:de:7e:20:5a:f2:91:cb:28:5c: 85:05:d1:bf:ba:49:49:f5:18:f4:dc:d1:ab:7e:68: 34:91:ab:6d:05:b0:2c:6f:26:d7:96:ab:e0:46:26: 7c:b7:77:69:a4:80:fc:2d:38:e4:c3:19:f2:72:a4: 3e:1b:54:b5:a8:ce:06:e3:d0:76:f8:20:16:d6:26: e6:ff:2a:eb:43:d0:f1:7b:c1:c7:6c:0a:f0:1c:37: 79:30:d1:1d:d5:56:6a:d6:99:34:71:35:f5:13:b9: a8:b0:35:02:7a:95:c0:9b:8a:68:47:12:65:64:97: b1:e0:b6:67:35:43:a0:ce:2f:63:cd:84:77:b4:b3: 33:80:ea:fc:57:b1:44:7a:ac:23:f4:8b:00:b3:c7: ae:9a:33:83:07:0b:cc:30:b2:5a:80:64:08:0c:98: 4d:9d:15:72:f8:11:01:fd:cf:68:f2:52:3a:aa:64: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:31:4F:6D:DA:61:A4:7E:8B:32:B1:92:61:44:4C:54:CF:25:83:0C X509v3 Authority Key Identifier: keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9c:15:fb:ad:d8:06:17:ef:dd:62:58:73:8b:fa:27:8d:91: dc:9b:3e:dc:97:a4:f6:30:9b:0f:0c:e9:e1:ca:76:87:a8:23: 4b:ca:0b:67:03:d9:19:db:0b:79:e2:cd:29:aa:0d:bb:b0:78: 9e:9b:6b:a5:0b:4a:68:23:3b:69:d2:0f:81:a6:f8:b0:6e:fb: f7:5e:f6:3c:05:67:d3:0d:a5:82:76:9e:81:e7:53:01:1b:27: 48:4e:9e:46:ff:d0:cc:12:73:70:f7:60:c1:41:f0:c7:35:62: af:30:b2:18:13:99:e6:9c:b3:1a:3f:03:be:60:36:7d:fe:f9: 39:0c:9f:50:fc:3f:0a:07:db:a7:0a:c4:aa:79:76:0a:92:33: 21:dd:63:f5:ac:40:95:d8:82:f0:d7:fc:25:6a:6b:b4:66:2c: 19:b3:22:a4:c1:e4:d6:80:1e:f1:0b:d8:09:27:95:dd:b3:16: c3:31:b9:35:29:92:38:05:85:0f:9d:10:2e:a3:f0:28:c2:81: e8:ef:73:0e:c1:cd:7c:1c:89:b4:7d:74:75:ac:07:ff:ba:65: 8e:07:81:fa:3d:75:e6:cd:72:3e:4f:44:a0:26:9e:62:96:89: fe:d5:c8:02:7d:53:79:f5:4c:ba:d5:6e:8c:ac:cb:cd:ee:0c: 26:bc:1d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKYUfSeyIYKUuXt2RJjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy M2Q1YjgwHhcNMjUxMjIwMTcwMDMwWhcNMjUxMjIxMTcwMDMwWjAzMTEwLwYDVQQD EyhmZjMxNGY2ZGRhNjFhNDdlOGIzMmIxOTI2MTQ0NGM1NGNmMjU4MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9fP1UuVq/vAi2nEjpmwAyO6lNwn zCx6pLN1iDTXtrhGsNJBQfj5bwcsj7IphGIvESAcPEl0vWVtetxLaf+pBUM57ba6 l32s4OdyG+vnBLXefiBa8pHLKFyFBdG/uklJ9Rj03NGrfmg0kattBbAsbybXlqvg RiZ8t3dppID8LTjkwxnycqQ+G1S1qM4G49B2+CAW1ibm/yrrQ9Dxe8HHbArwHDd5 MNEd1VZq1pk0cTX1E7mosDUCepXAm4poRxJlZJex4LZnNUOgzi9jzYR3tLMzgOr8 V7FEeqwj9IsAs8eumjODBwvMMLJagGQIDJhNnRVy+BEB/c9o8lI6qmQchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8xT23aYaR+izKxkmFETFTPJYMMMB8GA1UdIwQY MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJwV+63Y Bhfv3WJYc4v6J42R3Js+3Jek9jCbDwzp4cp2h6gjS8oLZwPZGdsLeeLNKaoNu7B4 nptrpQtKaCM7adIPgab4sG779172PAVn0w2lgnaegedTARsnSE6eRv/QzBJzcPdg wUHwxzVirzCyGBOZ5pyzGj8DvmA2ff75OQyfUPw/CgfbpwrEqnl2CpIzId1j9axA ldiC8Nf8JWprtGYsGbMipMHk1oAe8QvYCSeV3bMWwzG5NSmSOAWFD50QLqPwKMKB 6O9zDsHNfByJtH10dawH/7pljgeB+j115s1yPk9EoCaeYpaJ/tXIAn1TefVMutVu jKzLze4MJrwd7g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:36:10 2025 by rpki-client