This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: 5l3NwruzyuUjQnXIkhlrKpMJuZkSq1geMgznFNTPyPg= Subject key identifier: EC:D9:B4:D4:27:9E:AC:0B:E0:08:93:99:4F:2D:1F:4B:1E:16:CC:45 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B3D2337108400A858C1EFBC448F670E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1796 Signing time: Sat 20 Dec 2025 19:01:16 +0000 Manifest this update: Sat 20 Dec 2025 19:01:16 +0000 Manifest next update: Sun 21 Dec 2025 19:01:16 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 4: K-N36rOGMrajAoKgQRnFws3cYZQ.roa (hash: nuImM5LcJvcHXxZcDwo2uunodGLbKRgkWdkeXxE++0Y=) 5: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: tnFGBHdGN1PvQ8ktrm8iMiZFfgFlaPYDl/6OajsjV0c=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:37:10:84:00:a8:58:c1:ef:bc:44:8f:67:0e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Dec 20 19:01:16 2025 GMT Not After : Dec 21 19:01:16 2025 GMT Subject: CN=ecd9b4d4279eac0be00893994f2d1f4b1e16cc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:74:89:d2:d5:4f:08:9a:08:46:b1:b7:c4: 86:a4:00:24:e8:62:0d:1b:39:45:d9:db:cb:fb:78: 55:38:0d:4c:a0:53:2d:5e:b3:b6:af:df:67:78:21: e8:5a:a4:ae:75:bb:af:3d:42:db:ea:80:e3:d0:c5: 16:ca:ab:99:80:eb:68:b2:bd:82:7a:bb:80:fe:e9: 26:90:c7:c0:28:e8:e2:3c:f6:2f:ca:47:a5:35:4d: 6d:73:87:5a:39:e7:14:83:80:f3:74:74:4c:99:4e: 5c:70:cb:be:41:31:a9:00:14:b9:81:8c:01:f4:29: e6:e0:32:96:36:f0:9a:b8:0b:e1:9f:ed:43:38:e9: 59:c9:2e:f2:5f:77:d4:85:8f:da:a2:a2:49:cb:04: 93:79:3c:e0:73:68:6f:a1:85:d2:8b:7a:fc:70:85: 43:c2:11:67:fd:db:0b:b1:4d:d5:a1:0e:03:50:d4: 06:b4:6c:f3:ad:91:66:41:1c:79:e4:ab:fa:ba:a8: 74:83:3f:a1:a9:d4:5b:8c:6f:16:e7:fb:e8:6b:4a: 53:02:67:77:89:38:3b:a7:24:cc:29:54:09:e7:f7: 6f:5d:d4:77:53:2b:e4:a3:02:1c:54:ea:0d:6f:bc: 33:75:90:e4:24:e6:40:bc:32:49:54:f9:ab:71:f1: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D9:B4:D4:27:9E:AC:0B:E0:08:93:99:4F:2D:1F:4B:1E:16:CC:45 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:8d:85:09:0b:c1:33:e1:4d:fb:d1:76:2c:37:64:49:f6:e7: 36:41:54:16:6c:17:6c:02:0d:8d:81:16:11:6a:75:26:98:de: ce:61:0a:e8:e2:5b:fc:04:e6:ca:28:55:87:b1:cc:e8:5c:cd: 6a:70:25:7f:8b:a7:58:10:19:d5:7f:49:90:36:ae:e1:de:ee: 4a:da:85:30:cf:78:b3:c6:f8:8b:4f:85:40:bd:dd:8a:68:81: 24:52:fb:02:92:96:80:d0:e4:c6:5a:7c:0d:8b:df:df:dd:68: 2f:5f:0a:de:11:30:07:d5:cb:57:fa:e0:c5:fe:b4:e5:88:79: d0:70:51:93:82:56:98:9a:61:79:16:e1:17:53:87:a9:75:b8: ca:3d:1a:cc:f7:25:1d:9b:a2:4e:18:4d:61:70:7d:71:37:24: c6:3b:06:4c:57:a0:06:9c:9e:18:e1:86:b2:d3:71:f5:cc:56: 65:04:b1:62:78:6c:31:a3:ae:6f:ce:c4:e4:45:eb:2e:cc:64: b0:5a:4e:b5:0d:c4:dd:44:ad:ca:57:0b:6d:60:dd:1f:b2:fe: 46:29:71:56:30:c6:49:9a:c9:3e:a9:72:64:5c:95:99:16:01: fe:49:54:04:d9:94:4a:2b:85:20:53:c1:f4:5a:7b:18:06:ef: b7:ee:2b:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IzcQhACoWMHvvESPZw57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUxMjIwMTkwMTE2WhcNMjUxMjIxMTkwMTE2WjAzMTEwLwYDVQQD EyhlY2Q5YjRkNDI3OWVhYzBiZTAwODkzOTk0ZjJkMWY0YjFlMTZjYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj10idLVTwiaCEaxt8SGpAAk6GIN GzlF2dvL+3hVOA1MoFMtXrO2r99neCHoWqSudbuvPULb6oDj0MUWyquZgOtosr2C eruA/ukmkMfAKOjiPPYvykelNU1tc4daOecUg4DzdHRMmU5ccMu+QTGpABS5gYwB 9Cnm4DKWNvCauAvhn+1DOOlZyS7yX3fUhY/aoqJJywSTeTzgc2hvoYXSi3r8cIVD whFn/dsLsU3VoQ4DUNQGtGzzrZFmQRx55Kv6uqh0gz+hqdRbjG8W5/voa0pTAmd3 iTg7pyTMKVQJ5/dvXdR3UyvkowIcVOoNb7wzdZDkJOZAvDJJVPmrcfEi1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzZtNQnnqwL4AiTmU8tH0seFsxFMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxo2FCQvB M+FN+9F2LDdkSfbnNkFUFmwXbAINjYEWEWp1JpjezmEK6OJb/ATmyihVh7HM6FzN anAlf4unWBAZ1X9JkDau4d7uStqFMM94s8b4i0+FQL3dimiBJFL7ApKWgNDkxlp8 DYvf391oL18K3hEwB9XLV/rgxf605Yh50HBRk4JWmJpheRbhF1OHqXW4yj0azPcl HZuiThhNYXB9cTckxjsGTFegBpyeGOGGstNx9cxWZQSxYnhsMaOub87E5EXrLsxk sFpOtQ3E3UStylcLbWDdH7L+RilxVjDGSZrJPqlyZFyVmRYB/klUBNmUSiuFIFPB 9Fp7GAbvt+4rng== -----END CERTIFICATE-----Generated at Sat Dec 20 21:39:44 2025 by rpki-client