This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json) Hash identifier: 7CYCIjBtrCHNBY3Cwo60PexplqvM/pwdM1aJGW4bWO4= Subject key identifier: 7E:02:D4:21:AB:F1:CC:E4:D3:51:94:11:FD:90:55:BD:A1:CC:2F:0E Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45 Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45 Certificate serial: 019B4B4CF45D85BBD8D5F675689A2AAA8376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft Manifest number: 14B4 Signing time: Tue 23 Dec 2025 13:01:32 +0000 Manifest this update: Tue 23 Dec 2025 13:01:32 +0000 Manifest next update: Wed 24 Dec 2025 13:01:32 +0000 Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=) 2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: Q37RVrfMfU6ubhYWs/aQMNw6V82iQLV8Vp9wh4xGtJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:f4:5d:85:bb:d8:d5:f6:75:68:9a:2a:aa:83:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45 Validity Not Before: Dec 23 13:01:32 2025 GMT Not After : Dec 24 13:01:32 2025 GMT Subject: CN=7e02d421abf1cce4d3519411fd9055bda1cc2f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:80:0b:32:58:45:bb:39:81:26:b9:da:2a: d6:7b:dd:d9:1b:32:04:2e:d4:1c:82:9b:52:6c:b6: 36:ee:cd:88:d8:17:5c:6b:a6:25:dd:ff:1b:5b:0d: dd:4e:78:e4:d2:d2:34:1e:e6:8f:f7:98:1d:3a:73: 4e:3f:2d:bf:43:73:0f:68:06:47:d7:7f:da:7e:1a: 90:c6:52:98:c3:08:35:1b:1e:88:67:6d:45:c9:30: c0:70:b9:c0:44:96:ce:cb:dd:99:68:e8:0f:49:ba: 04:cb:e6:41:79:9a:b9:a2:4b:f9:03:9b:7f:8f:5c: 43:10:7d:d3:f6:13:7f:17:da:b9:66:4a:ee:17:eb: 66:4d:5b:48:3c:d2:ac:af:00:17:8d:a6:48:7f:ca: 28:89:b9:0f:04:9a:0f:cf:e3:13:f0:42:69:c8:a8: 47:db:91:04:11:5c:9e:75:19:38:01:2b:78:93:80: 3d:f3:ab:45:be:4a:9a:17:12:5e:c1:4a:37:7d:6a: e0:24:a3:fd:79:78:cb:09:69:b7:9b:48:4c:45:6a: 9a:44:77:74:15:70:56:88:7b:2f:3d:da:65:41:38: 97:bd:9a:e0:02:69:e8:f3:02:e6:8e:a1:80:a9:e1: 3e:2d:4e:78:db:99:69:ca:d5:66:b2:43:03:62:a6: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:02:D4:21:AB:F1:CC:E4:D3:51:94:11:FD:90:55:BD:A1:CC:2F:0E X509v3 Authority Key Identifier: keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4d:61:9d:94:73:85:88:65:23:be:45:2e:c2:f3:2d:8e:73: ba:3d:0d:0a:b9:bd:f6:6e:f9:ff:82:a9:0a:b4:3b:82:c7:17: 3e:44:a9:1c:da:aa:33:00:28:51:dd:4e:d7:d6:08:90:d2:da: 6c:f8:ea:1c:67:e0:3b:43:79:a3:01:dc:18:99:5e:71:e0:fd: 3e:89:cc:aa:8c:5f:9d:59:dd:23:0a:3d:6e:62:f2:29:50:2c: d9:e3:46:86:46:41:b1:2e:78:75:df:21:62:d7:0c:64:7f:fc: 87:e6:94:b6:83:fe:26:66:8a:81:29:4a:89:c0:f0:b7:49:e0: d7:c6:ac:3d:d0:3d:71:1b:e4:02:0b:ac:9c:fa:2b:84:72:26: df:e2:a9:57:54:ee:42:36:11:81:2f:b1:02:ec:ab:59:40:26: dd:99:ea:c7:37:12:67:71:12:37:56:fc:8a:e1:bd:c4:90:25: 2d:46:7a:45:d9:02:de:0e:b3:ca:36:39:6a:40:93:d5:58:f6: 28:45:eb:1e:0f:1c:36:25:e8:8b:4c:16:81:b0:7b:78:76:2a: 7a:93:65:17:a5:0d:89:1b:2a:5f:45:50:8e:02:3f:24:f5:96: 81:c8:f3:11:a7:72:f7:3d:f1:86:1a:ee:f5:58:c4:20:4a:94: 6a:1c:c1:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTPRdhbvY1fZ1aJoqqoN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NjUyZmU2NTI5NjZkNzI4YTUyN2FlZTZlNDNjNDg1YzY5 MzlmNDUwHhcNMjUxMjIzMTMwMTMyWhcNMjUxMjI0MTMwMTMyWjAzMTEwLwYDVQQD Eyg3ZTAyZDQyMWFiZjFjY2U0ZDM1MTk0MTFmZDkwNTViZGExY2MyZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU6ACzJYRbs5gSa52irWe93ZGzIE LtQcgptSbLY27s2I2Bdca6Yl3f8bWw3dTnjk0tI0HuaP95gdOnNOPy2/Q3MPaAZH 13/afhqQxlKYwwg1Gx6IZ21FyTDAcLnARJbOy92ZaOgPSboEy+ZBeZq5okv5A5t/ j1xDEH3T9hN/F9q5ZkruF+tmTVtIPNKsrwAXjaZIf8ooibkPBJoPz+MT8EJpyKhH 25EEEVyedRk4ASt4k4A986tFvkqaFxJewUo3fWrgJKP9eXjLCWm3m0hMRWqaRHd0 FXBWiHsvPdplQTiXvZrgAmno8wLmjqGAqeE+LU5425lpytVmskMDYqb09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4C1CGr8czk01GUEf2QVb2hzC8OMB8GA1UdIwQY MBaAFIhlL+ZSlm1yilJ67m5DxIXGk59FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAt NDk2ZjMwYWM1Mjc1LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAtNDk2ZjMwYWM1Mjc1 LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHE1hnZRz hYhlI75FLsLzLY5zuj0NCrm99m75/4KpCrQ7gscXPkSpHNqqMwAoUd1O19YIkNLa bPjqHGfgO0N5owHcGJleceD9PonMqoxfnVndIwo9bmLyKVAs2eNGhkZBsS54dd8h YtcMZH/8h+aUtoP+JmaKgSlKicDwt0ng18asPdA9cRvkAgusnPorhHIm3+KpV1Tu QjYRgS+xAuyrWUAm3ZnqxzcSZ3ESN1b8iuG9xJAlLUZ6RdkC3g6zyjY5akCT1Vj2 KEXrHg8cNiXoi0wWgbB7eHYqepNlF6UNiRsqX0VQjgI/JPWWgcjzEady9z3xhhru 9VjEIEqUahzBlw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:14 2025 by rpki-client