This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: xvVrytGNo4wPokpp99nBDY/IdIIzwMey07lQsg448OM= Subject key identifier: FD:14:A1:96:7B:2C:E3:9A:61:04:BC:97:A0:D2:8B:2C:4C:F1:67:16 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019B3BA2B58EC070C686AC2E11C306B9F0E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1777 Signing time: Sat 20 Dec 2025 12:01:17 +0000 Manifest this update: Sat 20 Dec 2025 12:01:17 +0000 Manifest next update: Sun 21 Dec 2025 12:01:17 +0000 Files and hashes: 1: 5WLg_OQ77v-fOT9qxALPiv6xIJU.roa (hash: Of5ILIgkLOFeAYv4HvRO9bh/m8O2gTiP63LRrjsXyCc=) 2: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (hash: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=) 3: JyckXigwYGV__68AUCYD52rnXo0.roa (hash: SbkH6tPWhWrW/o78zmYE9oC7rLfxWmyocNFH2s//I5E=) 4: LZXNMAIh5rxJ27RzY3-HOC44ze8.roa (hash: a//LkQjUfY/J/vByRTwCkOeaTuhCCphW4WYvKNJGdac=) 5: NCM3clu2kUX1FywCV-rdbSiyAwg.roa (hash: lqUVwqTm2F0EVVgAq9uFKVlQ5ZkdzUvkJ/HuRhL+GWA=) 6: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=) 7: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: KgbBaO4zjIHcQq2v/a9jH5jzeg9uPsXeR63C5mb9/Ek=) 8: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=) 9: kGDG-UIYc6E6yuKmUj9Iy9r4a6I.roa (hash: 1OvwxxMvp2ezbTpQpiEO0qvhRS4iGyD5k7iDnUXEkCY=) 10: q9-vuUKVR4izeN3aoSM_0PGlTLE.roa (hash: 7uTxuawjanQAcGsc+vt8tq396KLmeaMaL6YYUmFethI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b5:8e:c0:70:c6:86:ac:2e:11:c3:06:b9:f0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Dec 20 12:01:17 2025 GMT Not After : Dec 21 12:01:17 2025 GMT Subject: CN=fd14a1967b2ce39a6104bc97a0d28b2c4cf16716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:44:68:d0:8b:ed:1a:d8:b7:31:99:ba:0f: 12:99:5b:b8:b2:9e:d2:07:07:97:c0:1e:55:ff:f5: 5f:c3:cd:cb:94:e8:54:6a:00:20:7a:20:88:bb:40: fb:5e:42:4b:08:90:e9:e5:c4:3c:09:2e:d5:93:38: a2:b8:bf:8b:02:89:8e:d6:1f:8a:0e:69:3e:3a:64: 62:6e:b2:b7:62:cf:8c:7d:51:ca:92:38:ee:e4:9c: 9f:26:50:b8:8e:37:57:e4:07:57:b2:f8:cc:8f:03: a6:f6:5a:0c:02:30:78:44:27:cf:d6:35:f5:eb:b0: 20:4b:39:ef:27:f0:18:18:df:01:ec:34:14:98:0f: 04:3e:a5:88:cf:04:8b:88:4f:85:59:fa:04:70:1b: a0:22:26:8b:b9:aa:50:4d:22:4f:ee:e8:49:54:78: 24:82:eb:f0:d3:ed:83:e0:27:39:0c:77:34:c1:41: 31:e0:38:3d:45:51:98:fc:44:e1:24:5d:4d:e2:93: ba:7d:bf:30:ce:1d:16:3a:ee:bd:29:bf:2f:28:cd: 86:a7:04:81:3d:86:cf:fd:72:97:6d:d8:47:8e:a4: 74:1a:b6:57:e9:3f:5a:a6:59:f3:bc:8c:33:7a:29: 5a:5d:b4:fb:44:3d:a7:d5:59:7e:02:c7:86:3a:21: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:14:A1:96:7B:2C:E3:9A:61:04:BC:97:A0:D2:8B:2C:4C:F1:67:16 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f7:0d:24:29:60:9c:cc:62:a8:3e:6c:e5:35:08:7a:8d:42: 34:1b:0f:09:a9:25:de:11:c7:56:c4:b8:f3:1a:d2:67:50:9b: 3a:5c:58:6b:4c:2c:ef:0c:48:90:b7:b8:e9:65:f8:42:19:9e: d9:36:15:91:a1:3f:12:6b:4c:fb:5a:94:13:71:cf:a2:6a:b8: 7b:e2:3b:b3:32:d5:a7:d7:68:e8:2d:08:1c:d1:dc:62:28:3a: 4b:7c:73:26:a2:70:67:15:d2:1d:7f:ae:c7:75:15:17:35:f6: 33:dc:69:67:93:45:94:e7:be:3d:ca:0f:95:c7:25:e4:06:fe: b6:5c:3b:e9:cd:4c:d2:21:ef:f5:e5:86:fe:ca:97:18:b8:3b: 21:bd:1d:47:f9:76:c3:4e:df:41:5a:9e:00:91:33:aa:c2:6f: 25:42:a7:b3:d2:c3:21:da:71:00:9e:34:00:d9:d9:0e:54:3f: ca:ce:dc:d2:6c:a0:a4:c6:f3:ba:c8:c3:84:51:c6:b6:b1:1b: 1f:09:a9:e3:c6:42:a9:01:b0:1c:48:b8:8a:8d:2d:aa:eb:5c: 0c:d0:4a:32:8d:99:10:dd:8c:cb:39:a9:5f:33:0f:51:36:49: 6c:a4:3c:6a:6b:84:e0:6d:14:c9:62:b7:4d:e4:b7:38:96:55: ee:56:ac:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7orWOwHDGhqwuEcMGufDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjUxMjIwMTIwMTE3WhcNMjUxMjIxMTIwMTE3WjAzMTEwLwYDVQQD EyhmZDE0YTE5NjdiMmNlMzlhNjEwNGJjOTdhMGQyOGIyYzRjZjE2NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vFEaNCL7RrYtzGZug8SmVu4sp7S BweXwB5V//Vfw83LlOhUagAgeiCIu0D7XkJLCJDp5cQ8CS7VkziiuL+LAomO1h+K Dmk+OmRibrK3Ys+MfVHKkjju5JyfJlC4jjdX5AdXsvjMjwOm9loMAjB4RCfP1jX1 67AgSznvJ/AYGN8B7DQUmA8EPqWIzwSLiE+FWfoEcBugIiaLuapQTSJP7uhJVHgk guvw0+2D4Cc5DHc0wUEx4Dg9RVGY/EThJF1N4pO6fb8wzh0WOu69Kb8vKM2GpwSB PYbP/XKXbdhHjqR0GrZX6T9aplnzvIwzeilaXbT7RD2n1Vl+AseGOiFF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0UoZZ7LOOaYQS8l6DSiyxM8WcWMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPcNJClg nMxiqD5s5TUIeo1CNBsPCakl3hHHVsS48xrSZ1CbOlxYa0ws7wxIkLe46WX4Qhme 2TYVkaE/EmtM+1qUE3HPomq4e+I7szLVp9do6C0IHNHcYig6S3xzJqJwZxXSHX+u x3UVFzX2M9xpZ5NFlOe+PcoPlccl5Ab+tlw76c1M0iHv9eWG/sqXGLg7Ib0dR/l2 w07fQVqeAJEzqsJvJUKns9LDIdpxAJ40ANnZDlQ/ys7c0mygpMbzusjDhFHGtrEb Hwmp48ZCqQGwHEi4io0tqutcDNBKMo2ZEN2MyzmpXzMPUTZJbKQ8amuE4G0UyWK3 TeS3OJZV7las4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:44:07 2025 by rpki-client