This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json) Hash identifier: pVCWfDH5NyZ+6GZnlDt/k26w0kgN3eFfY67uHIDX12c= Subject key identifier: 60:F5:F5:53:70:A4:A5:CA:EF:26:4F:3B:40:BB:C3:22:6D:A6:79:2A Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Certificate serial: 019B39B40D0C82BBBF531E058ABFDA227FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 03:00:59 +0000 Manifest this update: Sat 20 Dec 2025 03:00:59 +0000 Manifest next update: Sun 21 Dec 2025 03:00:59 +0000 Files and hashes: 1: Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa (hash: 4IG2rPSclxVb9yuX8BnAS143KaJ4+m9FFie+h4KMN4U=) 2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: AuffKFam0q5/NNoZabAoluyler+0guZPkagW61t8sLA=) 3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=) 4: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=) 5: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:0d:0c:82:bb:bf:53:1e:05:8a:bf:da:22:7f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Validity Not Before: Dec 20 03:00:59 2025 GMT Not After : Dec 21 03:00:59 2025 GMT Subject: CN=60f5f55370a4a5caef264f3b40bbc3226da6792a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bd:e7:6e:53:8c:58:f8:2a:38:f9:8b:1c:3a: 38:85:d1:18:fb:c3:25:e3:fd:38:da:a4:d7:bb:1f: 35:a2:b8:65:0b:fe:05:cd:30:71:f3:5a:9c:45:d5: 7e:ca:50:9f:58:e8:b5:af:f5:7e:0d:b3:0b:b5:b0: 11:14:4e:2c:b4:fb:14:bf:1e:f2:23:a3:71:ad:5e: 1f:f6:40:33:0f:55:5a:a7:eb:19:85:eb:7a:08:41: 6b:cd:c3:4c:05:f3:6d:16:88:8f:70:27:f4:bd:43: 90:d0:68:9f:cb:ec:d5:ec:63:bf:22:54:3a:53:3d: fc:6b:ee:70:87:b6:ab:cb:f0:88:f6:fe:6b:82:03: 3d:e9:60:1d:23:75:23:c5:6a:72:df:a6:2d:6b:21: 27:dd:bf:7d:d7:31:3b:26:4c:dc:26:f7:e2:08:96: dd:ad:18:08:30:5f:a3:19:87:b9:1b:6e:fb:f9:c5: bb:a9:0b:74:26:34:5e:d1:79:d6:13:24:9f:2d:54: c4:25:30:e0:20:5a:b6:db:de:2a:29:4c:7d:eb:e6: 82:cc:3c:9d:4f:46:d4:6a:8e:cd:e8:75:bd:f3:80: 50:cc:dd:48:5f:ea:64:25:0c:ea:c2:1c:d1:56:a6: ce:ca:5a:41:31:df:d6:92:95:0d:44:ea:1f:32:cc: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F5:F5:53:70:A4:A5:CA:EF:26:4F:3B:40:BB:C3:22:6D:A6:79:2A X509v3 Authority Key Identifier: keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:70:06:e9:a9:d2:09:c4:54:84:e9:f0:f1:30:bd:6f:0f:1d: 28:32:fe:f7:75:01:62:0a:f9:c0:36:0a:c9:c5:c6:ff:e9:32: d1:1e:7e:5b:e6:f0:c5:8b:91:76:71:51:e7:3e:87:e3:91:15: 8d:8e:a7:74:54:40:76:f9:14:9d:08:06:71:e3:2a:e9:27:b1: 47:c0:d3:46:77:b2:a6:f5:05:02:c0:e1:99:ee:66:52:e5:08: f4:61:3f:3e:bd:e1:7b:b5:c8:51:f1:ef:50:20:38:a0:94:80: 67:20:7a:20:82:64:44:9e:25:79:ba:67:d2:4c:f5:4c:81:a2: 3a:b0:c0:b9:b9:fe:7f:9b:a4:63:c8:44:bd:e7:80:78:a8:d3: 68:d1:83:5d:01:01:50:f8:2b:ba:9d:dd:ec:c2:7e:de:21:0a: d8:3d:06:06:9b:26:1e:43:76:66:5e:ad:d2:5f:25:62:f6:0d: 11:06:db:fb:cf:69:b2:56:66:12:49:4b:11:ec:e3:0e:76:f5: f1:9b:8c:b8:7b:e2:cf:c3:3c:c8:16:d1:1d:fc:0c:7f:df:b5: 79:08:1d:5b:65:ec:3d:aa:55:75:ed:dc:8c:b2:ba:37:03:5a: ef:82:96:07:a9:52:52:59:8d:6b:17:85:ae:1b:65:0f:e2:ca: a5:77:25:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tA0Mgru/Ux4Fir/aIn/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4 YjJkZTcwHhcNMjUxMjIwMDMwMDU5WhcNMjUxMjIxMDMwMDU5WjAzMTEwLwYDVQQD Eyg2MGY1ZjU1MzcwYTRhNWNhZWYyNjRmM2I0MGJiYzMyMjZkYTY3OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA373nblOMWPgqOPmLHDo4hdEY+8Ml 4/042qTXux81orhlC/4FzTBx81qcRdV+ylCfWOi1r/V+DbMLtbARFE4stPsUvx7y I6NxrV4f9kAzD1Vap+sZhet6CEFrzcNMBfNtFoiPcCf0vUOQ0Gify+zV7GO/IlQ6 Uz38a+5wh7ary/CI9v5rggM96WAdI3UjxWpy36YtayEn3b991zE7JkzcJvfiCJbd rRgIMF+jGYe5G277+cW7qQt0JjRe0XnWEySfLVTEJTDgIFq2294qKUx96+aCzDyd T0bUao7N6HW984BQzN1IX+pkJQzqwhzRVqbOylpBMd/WkpUNROofMsw9zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGD19VNwpKXK7yZPO0C7wyJtpnkqMB8GA1UdIwQY MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHAG6anS CcRUhOnw8TC9bw8dKDL+93UBYgr5wDYKycXG/+ky0R5+W+bwxYuRdnFR5z6H45EV jY6ndFRAdvkUnQgGceMq6SexR8DTRneypvUFAsDhme5mUuUI9GE/Pr3he7XIUfHv UCA4oJSAZyB6IIJkRJ4lebpn0kz1TIGiOrDAubn+f5ukY8hEveeAeKjTaNGDXQEB UPgrup3d7MJ+3iEK2D0GBpsmHkN2Zl6t0l8lYvYNEQbb+89pslZmEklLEezjDnb1 8ZuMuHviz8M8yBbRHfwMf9+1eQgdW2XsPapVde3cjLK6NwNa74KWB6lSUlmNaxeF rhtlD+LKpXclOw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:42 2025 by rpki-client