This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json) Hash identifier: 2TSnL6TUlNLWV+2NJC78bUcM9ub42IA3391qvApszFM= Subject key identifier: A6:BC:1B:53:76:95:AE:64:C7:3C:04:98:70:26:83:D5:DF:D3:91:E8 Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Certificate serial: 019B43937016FF21603FA7FE7F7AAFC5BF57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 01:01:34 +0000 Manifest this update: Mon 22 Dec 2025 01:01:34 +0000 Manifest next update: Tue 23 Dec 2025 01:01:34 +0000 Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=) 2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: 1yenxeTU7y1P8hITSc60+3eRF6cegXfdJ0F7MWftxm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:70:16:ff:21:60:3f:a7:fe:7f:7a:af:c5:bf:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Validity Not Before: Dec 22 01:01:34 2025 GMT Not After : Dec 23 01:01:34 2025 GMT Subject: CN=a6bc1b537695ae64c73c0498702683d5dfd391e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d0:e5:17:89:39:a5:bd:e3:ed:11:7f:70:ed: 63:f1:82:7b:dd:db:40:61:12:23:c5:71:e9:53:6e: 12:5c:3b:91:76:42:43:88:79:d5:e2:a6:8b:9d:f6: 9b:1e:2c:37:97:cb:1c:c5:43:0b:c0:ca:5c:70:cb: 15:32:ef:db:d5:d4:96:7d:3b:04:01:26:44:58:87: 62:2d:3a:5e:2f:2a:47:bd:f4:f2:2d:60:a9:6f:d0: 3b:e4:55:b4:bd:a1:25:dc:08:37:16:4a:e1:88:2e: 6e:01:4f:86:0b:d1:4f:6b:c9:f4:ef:c9:2a:6c:4d: fd:3e:7c:01:28:b4:43:bf:4c:d2:ec:d1:1a:1f:63: 3d:03:44:40:3d:bf:9d:af:dd:ef:c4:e3:37:41:df: 00:90:7b:d1:00:69:74:58:e9:25:20:fc:46:00:31: 1d:0d:7c:1d:ec:d3:88:60:a8:b8:56:a4:d0:61:c7: 5f:84:f3:c0:ec:72:ea:a4:5b:af:ab:20:c9:60:48: 62:a9:87:e0:41:c8:5b:5a:76:6e:e6:82:25:7a:2b: 63:45:15:29:13:46:f4:4e:e0:2f:9a:27:04:ae:19: 05:bd:f5:af:4c:d1:c1:e1:7d:08:f1:ff:96:0f:18: f8:c4:aa:09:ed:d4:ac:28:76:31:a1:a2:1a:58:de: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:1B:53:76:95:AE:64:C7:3C:04:98:70:26:83:D5:DF:D3:91:E8 X509v3 Authority Key Identifier: keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5c:38:f0:8d:51:69:f1:2e:42:91:b3:27:de:67:68:5e:a9: 90:9b:32:9b:e4:5c:80:25:06:71:3a:b0:f6:9c:9f:a6:a5:9e: ac:e4:fb:6f:96:e4:51:dd:41:90:51:20:df:67:4c:0f:8c:7b: 49:bd:7e:b1:97:ec:eb:92:5e:6c:6c:df:94:2e:da:97:36:b5: 6b:b9:e7:2e:28:8e:76:f6:9e:e0:1b:d2:7a:cc:ab:ac:72:33: 00:0f:c5:8d:c8:8d:10:46:b9:86:2b:a9:96:46:a9:3b:84:19: c2:98:03:11:13:7c:37:e9:e5:6d:40:97:4a:14:ce:ae:15:a8: 80:54:a0:a4:79:9b:8b:e8:c2:d9:8d:ad:7b:49:fe:d8:fc:ef: 87:82:bd:a2:9d:2b:6e:9b:ea:a9:d2:bd:6a:f1:7c:69:c6:18: 2a:88:06:c4:ae:72:f4:b2:b5:df:51:b2:f2:4a:2e:6f:f8:51: 5d:0f:bb:31:1e:ca:5b:df:84:30:5c:6b:70:20:a0:66:ce:d7: 5a:14:5d:5b:c9:ce:98:45:7b:31:a8:49:47:62:80:db:4c:6c: bf:4f:48:4b:92:cb:97:0e:4c:f4:f6:8d:4b:0f:97:82:0e:b0: 06:f4:02:f9:08:cc:3a:ff:fd:da:61:f5:7d:81:f2:f7:05:e3: cb:92:5a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDk3AW/yFgP6f+f3qvxb9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmFhMWYwZWQ0NTk2ZTczM2Y4YjYyZDM5ZTM3YjhkZTUw ODVlZDcwHhcNMjUxMjIyMDEwMTM0WhcNMjUxMjIzMDEwMTM0WjAzMTEwLwYDVQQD EyhhNmJjMWI1Mzc2OTVhZTY0YzczYzA0OTg3MDI2ODNkNWRmZDM5MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dDlF4k5pb3j7RF/cO1j8YJ73dtA YRIjxXHpU24SXDuRdkJDiHnV4qaLnfabHiw3l8scxUMLwMpccMsVMu/b1dSWfTsE ASZEWIdiLTpeLypHvfTyLWCpb9A75FW0vaEl3Ag3FkrhiC5uAU+GC9FPa8n078kq bE39PnwBKLRDv0zS7NEaH2M9A0RAPb+dr93vxOM3Qd8AkHvRAGl0WOklIPxGADEd DXwd7NOIYKi4VqTQYcdfhPPA7HLqpFuvqyDJYEhiqYfgQchbWnZu5oIleitjRRUp E0b0TuAvmicErhkFvfWvTNHB4X0I8f+WDxj4xKoJ7dSsKHYxoaIaWN7fZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa8G1N2la5kxzwEmHAmg9Xf05HoMB8GA1UdIwQY MBaAFIlqofDtRZbnM/i2LTnje43lCF7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMt YTI4NmQwMjUzMmQzLzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMtYTI4NmQwMjUzMmQz LzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFw48I1R afEuQpGzJ95naF6pkJsym+RcgCUGcTqw9pyfpqWerOT7b5bkUd1BkFEg32dMD4x7 Sb1+sZfs65JebGzflC7alza1a7nnLiiOdvae4BvSesyrrHIzAA/FjciNEEa5hiup lkapO4QZwpgDERN8N+nlbUCXShTOrhWogFSgpHmbi+jC2Y2te0n+2Pzvh4K9op0r bpvqqdK9avF8acYYKogGxK5y9LK131Gy8koub/hRXQ+7MR7KW9+EMFxrcCCgZs7X WhRdW8nOmEV7MahJR2KA20xsv09IS5LLlw5M9PaNSw+Xgg6wBvQC+QjMOv/92mH1 fYHy9wXjy5Jaow== -----END CERTIFICATE-----Generated at Mon Dec 22 06:27:58 2025 by rpki-client