This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json) Hash identifier: pWhh7Bqd6j/cCrGqu10FTK5Jqo4r9PFH20+3fAcJGCU= Subject key identifier: 03:00:5B:B4:D7:05:BC:77:4B:CA:5F:25:91:5A:C3:D4:E5:88:99:BB Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc Certificate serial: 019B35328012605044DA2FC5B6C09E9556B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft Manifest number: 062C Signing time: Fri 19 Dec 2025 06:01:00 +0000 Manifest this update: Fri 19 Dec 2025 06:01:00 +0000 Manifest next update: Sat 20 Dec 2025 06:01:00 +0000 Files and hashes: 1: XBo1pVVrARNWOJzVGLIS7aXEyvs.roa (hash: LHmi+bbPW6X6RSAyxvQlIttnolx/pGqPJGLDRqAXVIU=) 2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: 4bEcp9c+j7KN1aycCjWmy+7RhmPKX2iulC9rfXPxuiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:80:12:60:50:44:da:2f:c5:b6:c0:9e:95:56:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc Validity Not Before: Dec 19 06:01:00 2025 GMT Not After : Dec 20 06:01:00 2025 GMT Subject: CN=03005bb4d705bc774bca5f25915ac3d4e58899bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:e1:35:e6:b9:7c:29:53:91:88:3b:e7:7a: 7b:34:77:5e:e9:f8:af:0f:fa:71:26:c7:09:b3:43: 80:bb:07:bc:b0:63:65:b2:5c:96:58:2a:89:c8:e6: 50:1e:c3:45:ff:75:9e:25:9a:d3:70:72:93:79:ac: ba:fc:94:af:6d:e9:cb:26:97:a3:54:bf:bc:89:bc: f3:d5:e0:57:a2:8b:9f:41:8b:f0:54:29:46:7a:2f: c9:dc:8f:bd:b7:ce:5c:aa:b3:d9:10:15:20:0c:20: 43:d3:c0:42:ca:91:03:ee:15:7c:82:20:23:43:82: 9b:25:7e:7b:29:16:76:22:34:67:39:bc:b1:15:cd: f6:da:fd:66:f3:05:30:13:3e:17:f4:62:0f:23:7f: 5c:58:2f:70:54:a5:29:2f:3c:9a:e8:08:40:59:b4: fd:7a:2f:d8:1a:6e:b6:dd:84:39:14:ae:6d:84:55: 87:c6:e1:42:4b:62:04:c5:cf:46:9e:0b:70:7d:65: e5:9a:73:2d:74:3a:a8:0a:eb:55:b1:61:11:ef:9d: ea:c2:e3:f1:92:01:29:92:48:ed:0c:5c:4b:6c:a0: 79:4e:12:0c:5a:72:9f:88:78:46:5b:25:18:8f:34: 1f:e3:d1:2d:dd:30:44:ba:a9:16:01:ac:bf:5a:fd: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:00:5B:B4:D7:05:BC:77:4B:CA:5F:25:91:5A:C3:D4:E5:88:99:BB X509v3 Authority Key Identifier: keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f0:0a:b9:ad:58:12:fd:8a:c0:4d:87:23:ff:04:60:33:1c: d9:46:1d:55:37:aa:31:13:d2:f3:91:b5:eb:c7:c0:88:ec:14: b7:cb:a0:fa:5e:01:58:7b:70:1f:04:e6:e7:b9:fb:35:39:a9: 8a:d6:93:c1:c3:33:29:8c:ff:1a:d4:24:5c:87:1b:0c:6b:ec: 5d:c0:6b:8c:5b:94:ac:6e:d6:13:17:54:1d:82:9e:32:26:25: eb:c1:9e:22:88:7a:3e:c2:99:04:f0:47:2c:64:c1:11:ee:9d: 6f:cc:2d:40:16:a8:0f:8f:58:84:c6:30:39:cd:c7:21:97:d7: 78:5f:4f:e0:7e:f0:87:c4:57:08:36:fa:40:83:7d:72:b2:45: 09:07:ab:e4:e4:f5:1e:1c:39:34:ef:3d:e9:0e:a5:96:48:11: 55:6b:bd:96:e0:1e:60:12:43:c9:93:9e:21:b5:f5:47:53:8c: fd:4d:80:b6:78:cb:2f:6b:68:fd:52:a0:e7:fa:b7:6b:61:f1: 1b:8a:06:ea:7e:02:e3:e9:2d:2d:ea:49:8d:67:27:cb:ea:cd: f0:6d:60:82:65:fe:65:57:82:8f:25:59:a4:34:af:c0:62:2e: 0a:65:eb:4c:35:50:75:d8:13:3b:9b:b6:3e:e4:84:7c:94:2c: ef:c3:a5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MoASYFBE2i/FtsCelVazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjdiMGRkOWZmY2EyZjg1NzM0YzUzN2NiZWY1Y2NkMTE5 OWU1YmMwHhcNMjUxMjE5MDYwMTAwWhcNMjUxMjIwMDYwMTAwWjAzMTEwLwYDVQQD EygwMzAwNWJiNGQ3MDViYzc3NGJjYTVmMjU5MTVhYzNkNGU1ODg5OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq/hNea5fClTkYg753p7NHde6fiv D/pxJscJs0OAuwe8sGNlslyWWCqJyOZQHsNF/3WeJZrTcHKTeay6/JSvbenLJpej VL+8ibzz1eBXooufQYvwVClGei/J3I+9t85cqrPZEBUgDCBD08BCypED7hV8giAj Q4KbJX57KRZ2IjRnObyxFc322v1m8wUwEz4X9GIPI39cWC9wVKUpLzya6AhAWbT9 ei/YGm623YQ5FK5thFWHxuFCS2IExc9GngtwfWXlmnMtdDqoCutVsWER753qwuPx kgEpkkjtDFxLbKB5ThIMWnKfiHhGWyUYjzQf49Et3TBEuqkWAay/Wv0egQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMAW7TXBbx3S8pfJZFaw9TliJm7MB8GA1UdIwQY MBaAFIj3sN2f/KL4VzTFN8vvXM0RmeW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kYzhjMDItNGY2ZC00OWY2LTg4MmMt MTM2OTA1ZTJjN2M1LzEvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9kYzhjMDItNGY2ZC00OWY2LTg4MmMtMTM2OTA1ZTJjN2M1 LzEvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/AKua1Y Ev2KwE2HI/8EYDMc2UYdVTeqMRPS85G168fAiOwUt8ug+l4BWHtwHwTm57n7NTmp itaTwcMzKYz/GtQkXIcbDGvsXcBrjFuUrG7WExdUHYKeMiYl68GeIoh6PsKZBPBH LGTBEe6db8wtQBaoD49YhMYwOc3HIZfXeF9P4H7wh8RXCDb6QIN9crJFCQer5OT1 Hhw5NO896Q6llkgRVWu9luAeYBJDyZOeIbX1R1OM/U2AtnjLL2to/VKg5/q3a2Hx G4oG6n4C4+ktLepJjWcny+rN8G1ggmX+ZVeCjyVZpDSvwGIuCmXrTDVQddgTO5u2 PuSEfJQs78OlLA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:41:46 2025 by rpki-client