This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json) Hash identifier: bw/FliwcD3B9GoekTNzlAhqWVLiyzyRi5bzQkF1Ty5M= Subject key identifier: 7C:99:21:76:D4:7B:6C:87:A0:84:F1:59:E3:EC:82:FC:58:B0:38:FB Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545 Certificate serial: 019B3C7FC55EF433633100BF3E899912403B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft Manifest number: 139A Signing time: Sat 20 Dec 2025 16:02:44 +0000 Manifest this update: Sat 20 Dec 2025 16:02:44 +0000 Manifest next update: Sun 21 Dec 2025 16:02:44 +0000 Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=) 2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: pKx+GRhQ4mfNzJjqE05LvSExGKf4qNkm3s16AF8S7sk=) 3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:c5:5e:f4:33:63:31:00:bf:3e:89:99:12:40:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545 Validity Not Before: Dec 20 16:02:44 2025 GMT Not After : Dec 21 16:02:44 2025 GMT Subject: CN=7c992176d47b6c87a084f159e3ec82fc58b038fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:ff:bd:25:5c:df:b7:62:83:8c:d5:06:47: 64:6f:e2:d3:28:0e:6a:ca:f8:4c:4b:c0:c2:ea:59: d3:fe:7c:49:b4:ef:ab:57:a3:4f:92:7d:2f:00:68: 07:20:6d:ca:bb:18:98:ea:cc:54:44:4a:32:c8:ea: 6f:99:0a:00:0b:b9:d4:90:e7:b5:49:43:6f:3b:35: 00:dc:76:c4:bb:a9:ca:63:70:d0:19:ee:bd:79:ec: 7d:93:d1:80:07:7d:d4:bf:23:39:14:9d:4f:24:d3: ce:31:3b:26:d8:81:9a:f9:88:9e:d5:b0:a3:7d:99: 50:5d:fe:96:b8:ee:dc:02:6c:2c:3e:4b:94:7a:31: c9:20:56:f8:3c:52:f5:02:d3:de:ac:a3:73:e3:58: 64:d9:39:d8:33:9b:3a:f6:27:9b:0a:0b:57:03:0e: 73:16:e3:95:1a:41:bc:71:2a:8c:ed:84:ee:1d:76: 90:f8:ec:21:e7:54:9f:51:51:d3:fe:9e:43:0f:ee: 5c:cd:31:28:5d:35:b5:45:72:8b:6d:8b:0a:a1:fe: 37:ca:9a:72:24:36:56:b0:44:df:3c:5c:98:ae:2a: 15:b3:cb:69:dd:e9:1b:4e:af:24:09:87:03:8a:a6: 16:47:6b:44:3a:cd:a3:51:c7:44:af:91:f3:ee:2f: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:99:21:76:D4:7B:6C:87:A0:84:F1:59:E3:EC:82:FC:58:B0:38:FB X509v3 Authority Key Identifier: keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:75:1e:55:16:18:55:27:56:4b:9f:88:e7:82:6f:fc:51:10: 12:9e:31:cd:bf:ec:04:26:58:23:65:23:9c:10:a3:5f:13:cb: a4:2e:e0:a7:95:4b:0a:13:46:89:cd:2b:23:c0:79:28:0a:77: cc:39:04:75:5f:ac:bc:f5:56:f5:31:ae:cc:d7:c8:ba:9a:58: f2:57:c7:71:0a:2c:c1:d2:bf:14:91:10:c0:bd:98:66:03:18: 5c:1a:a7:a9:75:8e:25:b4:6b:a3:f4:6f:83:82:1e:08:af:c9: cc:4a:05:73:57:56:8a:5e:9b:c1:0d:06:79:15:2a:54:6e:80: 84:f8:e2:c1:bd:63:df:0a:ed:98:93:fe:6d:25:6b:d7:9e:73: a2:55:04:60:cc:12:a7:04:d5:4e:cf:b1:16:06:79:1e:47:84: 60:e5:a6:97:68:0e:ec:0e:f5:53:5f:4c:85:39:1a:96:99:8f: 4c:a4:74:a8:d2:64:a7:7a:30:ee:f7:ba:c2:96:3f:e5:a6:74: eb:55:ae:31:0a:4b:b8:d4:ed:d0:ab:8d:e5:6a:37:e4:b0:4b: cc:c8:76:aa:ef:25:29:e7:f7:84:9c:17:db:1d:ed:04:b3:66: ee:06:69:1a:2a:8e:0b:b7:1a:98:fd:15:52:60:e9:ef:f5:26: 2b:58:16:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8Ve9DNjMQC/PomZEkA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5 M2Q1NDUwHhcNMjUxMjIwMTYwMjQ0WhcNMjUxMjIxMTYwMjQ0WjAzMTEwLwYDVQQD Eyg3Yzk5MjE3NmQ0N2I2Yzg3YTA4NGYxNTllM2VjODJmYzU4YjAzOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcv/vSVc37dig4zVBkdkb+LTKA5q yvhMS8DC6lnT/nxJtO+rV6NPkn0vAGgHIG3KuxiY6sxUREoyyOpvmQoAC7nUkOe1 SUNvOzUA3HbEu6nKY3DQGe69eex9k9GAB33UvyM5FJ1PJNPOMTsm2IGa+Yie1bCj fZlQXf6WuO7cAmwsPkuUejHJIFb4PFL1AtPerKNz41hk2TnYM5s69iebCgtXAw5z FuOVGkG8cSqM7YTuHXaQ+Owh51SfUVHT/p5DD+5czTEoXTW1RXKLbYsKof43yppy JDZWsETfPFyYrioVs8tp3ekbTq8kCYcDiqYWR2tEOs2jUcdEr5Hz7i9zIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyZIXbUe2yHoITxWePsgvxYsDj7MB8GA1UdIwQY MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt OTM3ZGNmZjUxZTJkLzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnUeVRYY VSdWS5+I54Jv/FEQEp4xzb/sBCZYI2UjnBCjXxPLpC7gp5VLChNGic0rI8B5KAp3 zDkEdV+svPVW9TGuzNfIuppY8lfHcQoswdK/FJEQwL2YZgMYXBqnqXWOJbRro/Rv g4IeCK/JzEoFc1dWil6bwQ0GeRUqVG6AhPjiwb1j3wrtmJP+bSVr155zolUEYMwS pwTVTs+xFgZ5HkeEYOWml2gO7A71U19MhTkalpmPTKR0qNJkp3ow7ve6wpY/5aZ0 61WuMQpLuNTt0KuN5Wo35LBLzMh2qu8lKef3hJwX2x3tBLNm7gZpGiqOC7camP0V UmDp7/UmK1gWIw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:36 2025 by rpki-client