This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft File: iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json) Hash identifier: 7+gNQ01S4KniIkIeehUzfuHE5GzZzvUf+ncxu3kUnjw= Subject key identifier: 50:14:04:29:2F:FF:C8:57:5F:FF:4E:A7:06:FF:8B:B8:7C:D3:39:48 Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5 Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5 Certificate serial: 019B4882C33386AAD51AE5E3F640F8AA4268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 00:01:27 +0000 Manifest this update: Tue 23 Dec 2025 00:01:27 +0000 Manifest next update: Wed 24 Dec 2025 00:01:27 +0000 Files and hashes: 1: UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa (hash: C2nYBT6rKIdGBRSYm5JfeMMp+MUUrWzb3x2zB3OMlgE=) 2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: emVCHNa1Uzi6XpZ+w6HDQCMycFozQAfCBBj9Q+JW6OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:c3:33:86:aa:d5:1a:e5:e3:f6:40:f8:aa:42:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5 Validity Not Before: Dec 23 00:01:27 2025 GMT Not After : Dec 24 00:01:27 2025 GMT Subject: CN=501404292fffc8575fff4ea706ff8bb87cd33948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:21:15:fa:0e:ba:27:ec:d4:35:b0:60:0b: bc:07:5a:da:a3:e4:96:1d:5c:09:04:bd:47:02:c5: 48:3e:fe:80:09:d7:eb:33:98:90:c8:9e:7e:cd:b8: 37:11:ba:02:14:51:18:b1:5a:19:79:a6:86:e4:e9: 4d:76:a5:27:60:f2:ce:f7:de:d9:3e:a5:19:c7:30: e4:32:da:67:16:45:67:96:6a:0c:93:6b:f7:76:7a: fd:14:14:82:2a:c5:ae:c1:6a:68:e6:2f:12:c2:c6: ef:5f:53:8b:90:03:eb:ba:1d:57:87:42:26:1c:48: c1:d0:8d:78:18:b7:12:f3:71:a5:f7:93:9f:61:a4: 14:8a:58:13:76:6e:9c:0c:72:e7:30:e7:5b:4e:8b: 25:e2:94:40:bd:4d:00:27:ff:1a:2d:af:4a:09:8d: ff:37:00:34:14:ee:43:30:90:f7:ac:ee:c2:18:94: 8e:f9:3b:c4:de:4b:0e:fd:ed:11:11:55:9a:74:bb: 6c:cf:c2:89:b0:fe:71:6a:ed:2e:96:b4:7b:e5:fd: 2e:ed:92:0e:21:e4:7c:ab:57:a6:a8:06:b9:ac:88: eb:ba:00:81:87:92:a3:b3:e9:fe:b0:03:73:76:91: ec:7f:d7:52:a8:62:7d:32:02:4d:65:f6:32:b2:a9: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:04:29:2F:FF:C8:57:5F:FF:4E:A7:06:FF:8B:B8:7C:D3:39:48 X509v3 Authority Key Identifier: keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:2f:95:32:3c:60:79:19:57:3c:e2:cd:ca:49:08:c3:ae: b6:d7:dc:d9:a5:fd:e7:66:07:e5:c8:03:85:d0:b8:47:c7:4d: 7c:d5:d6:17:4d:57:80:81:2a:2c:6a:1f:2d:3e:39:fd:bf:b0: cc:7d:6b:8f:dc:79:e3:27:12:1a:6d:b4:c6:ce:e9:51:bd:7d: 27:8c:8c:e3:d3:14:a4:e1:6c:dd:03:d2:c6:11:ec:49:c0:f9: 15:b6:dc:2d:28:55:47:24:fe:ae:a8:19:53:76:dc:df:78:b5: ea:a9:5c:29:d3:9a:08:25:52:1c:96:14:da:57:f3:29:7a:9e: fd:9b:88:7a:3c:e3:b5:02:5c:9e:c3:1e:8c:1e:f4:52:a4:d9: 7b:66:b3:26:91:62:ee:0f:e6:62:3d:c0:36:61:31:83:ae:54: b9:76:da:0c:59:2f:03:7f:35:5c:6b:0a:a6:3e:14:ed:32:99: e6:80:7a:80:71:ac:49:07:04:9a:31:03:28:8e:d3:08:dd:29: 7b:61:d3:44:97:37:7c:7c:ab:59:9c:a9:37:35:19:d6:df:44: ad:10:66:fc:e4:8d:b1:f6:dd:63:25:53:1f:55:fc:ca:83:7b: 01:b4:fe:0f:b4:b6:d8:5d:86:c3:43:71:b5:73:a3:86:15:e0: bf:fe:19:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgsMzhqrVGuXj9kD4qkJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWNiODg5M2U5NDE4MDc0N2VlYzE5NzVlZDU2MDRjNGRk YmUwYzUwHhcNMjUxMjIzMDAwMTI3WhcNMjUxMjI0MDAwMTI3WjAzMTEwLwYDVQQD Eyg1MDE0MDQyOTJmZmZjODU3NWZmZjRlYTcwNmZmOGJiODdjZDMzOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJshFfoOuifs1DWwYAu8B1rao+SW HVwJBL1HAsVIPv6ACdfrM5iQyJ5+zbg3EboCFFEYsVoZeaaG5OlNdqUnYPLO997Z PqUZxzDkMtpnFkVnlmoMk2v3dnr9FBSCKsWuwWpo5i8SwsbvX1OLkAPruh1Xh0Im HEjB0I14GLcS83Gl95OfYaQUilgTdm6cDHLnMOdbTosl4pRAvU0AJ/8aLa9KCY3/ NwA0FO5DMJD3rO7CGJSO+TvE3ksO/e0REVWadLtsz8KJsP5xau0ulrR75f0u7ZIO IeR8q1emqAa5rIjrugCBh5Kjs+n+sANzdpHsf9dSqGJ9MgJNZfYysqk6IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAUBCkv/8hXX/9Opwb/i7h80zlIMB8GA1UdIwQY MBaAFImsuIk+lBgHR+7Bl17VYExN2+DFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMt ZjBjZDhiYjU1MmUwLzEvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMtZjBjZDhiYjU1MmUw LzEvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8EvlTI8 YHkZVzzizcpJCMOuttfc2aX952YH5cgDhdC4R8dNfNXWF01XgIEqLGofLT45/b+w zH1rj9x54ycSGm20xs7pUb19J4yM49MUpOFs3QPSxhHsScD5FbbcLShVRyT+rqgZ U3bc33i16qlcKdOaCCVSHJYU2lfzKXqe/ZuIejzjtQJcnsMejB70UqTZe2azJpFi 7g/mYj3ANmExg65UuXbaDFkvA381XGsKpj4U7TKZ5oB6gHGsSQcEmjEDKI7TCN0p e2HTRJc3fHyrWZypNzUZ1t9ErRBm/OSNsfbdYyVTH1X8yoN7AbT+D7S22F2Gw0Nx tXOjhhXgv/4Z+g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:43 2025 by rpki-client