This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json) Hash identifier: igHKoXygdAy9IgnNtnSybWKpB3Gh3e/PxbHivTz26fk= Subject key identifier: D2:E5:56:F4:ED:21:F4:1E:3D:DD:41:77:41:C3:D8:54:DB:62:47:CB Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Certificate serial: 019B3DC7A074833D3BF22A14CC2E6E2E95CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 22:00:51 +0000 Manifest this update: Sat 20 Dec 2025 22:00:51 +0000 Manifest next update: Sun 21 Dec 2025 22:00:51 +0000 Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=) 2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: s/Dbih31m7CXPsUsL5fYPVDgFDMA0CGZLWb1gdpG9ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a0:74:83:3d:3b:f2:2a:14:cc:2e:6e:2e:95:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Validity Not Before: Dec 20 22:00:51 2025 GMT Not After : Dec 21 22:00:51 2025 GMT Subject: CN=d2e556f4ed21f41e3ddd417741c3d854db6247cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:4f:b5:f8:97:84:d1:a7:af:1e:3d:8f:24: be:f3:f8:3b:4b:c0:78:45:06:cd:6f:17:58:cb:d7: 09:5d:22:d8:f5:58:c1:85:66:ef:96:3d:4a:29:3e: a1:fc:68:e5:4d:f8:a3:25:97:c2:20:5d:5c:40:00: 9a:44:0f:19:10:bd:77:c6:9a:92:96:51:b6:ee:4b: 55:3a:a5:21:05:94:af:ba:c4:17:90:82:b0:f6:8c: 37:c1:db:5d:c4:81:6b:27:6f:11:8c:15:46:6d:b7: 22:f1:b3:9a:da:76:b4:50:9d:13:eb:98:9b:1f:26: 95:07:90:60:ea:87:a1:49:bf:84:f5:35:c0:56:71: 5b:ba:3b:6e:6d:22:0f:e0:83:11:fd:d7:28:14:d6: a4:ca:68:f4:d1:6c:91:27:d9:a7:1e:e7:21:4e:7e: ba:f6:9a:98:21:0e:3c:6f:a0:4d:4e:70:6b:4e:40: 78:90:c6:82:92:b7:de:f1:f5:d8:7a:86:64:be:56: 4d:cf:49:4e:7b:93:ce:2f:4e:0b:55:c8:12:1b:48: b1:c6:ba:0d:d7:31:a1:82:a3:63:4b:2e:33:de:e0: ba:8c:69:27:dc:1d:3d:bd:b8:14:97:95:8e:43:3e: a7:45:19:e5:b8:6c:83:fa:2a:ad:4a:90:70:3c:33: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:56:F4:ED:21:F4:1E:3D:DD:41:77:41:C3:D8:54:DB:62:47:CB X509v3 Authority Key Identifier: keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:91:ce:4d:49:e1:67:42:20:2e:4c:7b:bb:78:37:bb:83:03: 08:9c:7e:1e:a7:76:c4:c2:cb:b9:4c:ce:c2:1d:87:fb:30:71: cb:45:da:b5:17:5c:a7:9d:65:2f:c1:e3:32:b6:2c:41:ff:b4: 82:6e:49:be:df:95:f1:60:37:e9:cc:f2:ab:1e:25:e2:d5:9f: 81:45:ca:58:15:8d:a2:61:6b:8a:da:e6:eb:74:bf:32:72:d0: e8:04:a2:da:b0:53:d5:57:f2:95:f2:2d:1d:d2:c0:a6:6d:22: 40:9f:52:2d:98:db:ef:3d:b1:8d:55:39:0d:48:e9:d0:09:27: b1:55:e6:a5:49:03:16:bd:f4:e9:30:3f:3e:2f:f9:98:a9:11: b1:73:db:69:a3:cf:53:b5:7b:8c:f5:dd:e7:84:a0:35:df:b7: 5b:64:80:67:fd:1f:69:33:ff:2e:0c:a1:3e:cd:d9:3d:5d:c9: 73:18:87:21:94:d7:6e:62:20:1b:aa:e2:d1:2e:02:50:54:9a: df:bb:d7:11:2d:1a:d9:7e:71:8c:b6:76:5c:39:09:00:8b:1d: ca:33:c9:8b:ee:26:85:91:b8:f2:de:f2:ae:cf:f6:05:1e:07: d4:d4:c5:ab:5b:8b:dc:ef:c6:84:85:3e:70:db:e3:36:7e:58: 14:ae:58:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6B0gz078ioUzC5uLpXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmFhMWYwZWQ0NTk2ZTczM2Y4YjYyZDM5ZTM3YjhkZTUw ODVlZDcwHhcNMjUxMjIwMjIwMDUxWhcNMjUxMjIxMjIwMDUxWjAzMTEwLwYDVQQD EyhkMmU1NTZmNGVkMjFmNDFlM2RkZDQxNzc0MWMzZDg1NGRiNjI0N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjpPtfiXhNGnrx49jyS+8/g7S8B4 RQbNbxdYy9cJXSLY9VjBhWbvlj1KKT6h/GjlTfijJZfCIF1cQACaRA8ZEL13xpqS llG27ktVOqUhBZSvusQXkIKw9ow3wdtdxIFrJ28RjBVGbbci8bOa2na0UJ0T65ib HyaVB5Bg6oehSb+E9TXAVnFbujtubSIP4IMR/dcoFNakymj00WyRJ9mnHuchTn66 9pqYIQ48b6BNTnBrTkB4kMaCkrfe8fXYeoZkvlZNz0lOe5POL04LVcgSG0ixxroN 1zGhgqNjSy4z3uC6jGkn3B09vbgUl5WOQz6nRRnluGyD+iqtSpBwPDN1nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLlVvTtIfQePd1Bd0HD2FTbYkfLMB8GA1UdIwQY MBaAFIlqofDtRZbnM/i2LTnje43lCF7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMt YTI4NmQwMjUzMmQzLzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMtYTI4NmQwMjUzMmQz LzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2pHOTUnh Z0IgLkx7u3g3u4MDCJx+Hqd2xMLLuUzOwh2H+zBxy0XatRdcp51lL8HjMrYsQf+0 gm5Jvt+V8WA36czyqx4l4tWfgUXKWBWNomFritrm63S/MnLQ6ASi2rBT1VfylfIt HdLApm0iQJ9SLZjb7z2xjVU5DUjp0AknsVXmpUkDFr306TA/Pi/5mKkRsXPbaaPP U7V7jPXd54SgNd+3W2SAZ/0faTP/LgyhPs3ZPV3JcxiHIZTXbmIgG6ri0S4CUFSa 37vXES0a2X5xjLZ2XDkJAIsdyjPJi+4mhZG48t7yrs/2BR4H1NTFq1uL3O/GhIU+ cNvjNn5YFK5YEw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:48 2025 by rpki-client