This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json) Hash identifier: WAwfhhYlBFylFf2Lnwcwa9jvqFLTy2Zh9S1h0XTvMZY= Subject key identifier: 6C:57:53:27:75:E0:3F:B1:EE:12:F3:60:85:B5:22:AE:19:5E:B6:37 Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48 Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48 Certificate serial: 019B529840DD617888F8DE43EEF819124BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 23:01:08 +0000 Manifest this update: Wed 24 Dec 2025 23:01:08 +0000 Manifest next update: Thu 25 Dec 2025 23:01:08 +0000 Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=) 2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: 7aG4WEFg6vF6ttB8flFKB1mQUZQt6UC1Y+1Bb+jBn9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:40:dd:61:78:88:f8:de:43:ee:f8:19:12:4b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48 Validity Not Before: Dec 24 23:01:08 2025 GMT Not After : Dec 25 23:01:08 2025 GMT Subject: CN=6c57532775e03fb1ee12f36085b522ae195eb637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:e5:25:a4:10:bd:6a:04:ee:4e:19:00:9f: 8a:1e:95:d9:f2:03:e9:fd:79:ee:34:1f:17:a7:cd: 8c:8f:c9:0f:a9:fa:c6:a3:59:34:50:96:04:33:b2: de:6c:fc:23:c8:1f:4a:cc:08:dc:bb:93:a7:06:dc: 32:55:98:f8:cb:8d:85:0b:47:7a:f9:6b:f1:c5:b9: d9:03:69:2e:a8:0c:5a:9b:e3:b0:51:d8:37:e5:66: b9:7c:68:b3:27:5a:7f:f9:07:45:57:f7:fc:df:70: 26:96:28:c1:83:09:8f:6d:c0:0e:fb:59:0f:72:17: f1:e6:71:2c:ff:8b:56:fc:41:1b:57:0a:91:d2:a8: 49:ca:c9:1f:fe:5e:a9:ce:67:5e:2e:b6:b8:c0:b3: dc:f8:2d:42:23:62:9b:47:3a:30:d0:8f:76:e7:a2: ba:e0:23:dd:99:4d:f7:80:53:24:af:fb:b9:75:13: 8e:95:27:5b:f4:c2:6e:e3:89:20:29:ef:aa:1e:14: 13:20:8c:07:86:4d:93:52:de:79:29:14:83:52:18: e8:cd:2e:d1:d6:94:9c:2f:82:d3:a9:19:1a:29:83: 92:88:17:ed:b0:28:81:6f:70:5b:25:c9:79:26:a3: 30:86:bc:71:b4:db:34:8d:5c:0c:07:9a:6c:4d:0a: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:53:27:75:E0:3F:B1:EE:12:F3:60:85:B5:22:AE:19:5E:B6:37 X509v3 Authority Key Identifier: keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f4:8d:ba:96:fd:32:54:b9:cf:0f:9e:04:9a:e5:86:99:19: 50:05:0f:5c:39:d4:bd:59:e8:71:8a:86:37:0c:82:85:81:ef: 91:6e:23:89:b2:46:2c:bb:67:26:db:af:a9:32:ed:8d:26:65: 83:ab:e8:fe:8d:09:84:6c:22:a0:86:29:cb:85:02:49:a1:ad: 1c:ca:c0:f0:16:fe:41:1b:fc:f1:13:a7:7e:25:60:d6:ce:52: 04:ea:e4:5d:7c:d6:81:81:64:14:89:c8:e4:32:0c:70:93:0b: 5a:ee:2d:67:f5:04:2b:83:4d:0b:29:b0:cc:7a:1f:d4:cb:ff: 89:b9:f2:d2:23:ce:24:62:65:61:94:47:71:c8:a0:36:0c:b8: 98:98:f1:8d:9d:68:82:e0:b9:f9:aa:c1:18:ff:ee:e9:e9:d6: 24:c9:26:88:ea:63:7d:9e:f8:a2:93:ed:3b:8b:26:99:8f:88: d2:90:1a:25:f1:bb:fa:86:2f:7c:98:09:51:fc:7b:df:8d:1b: a9:ab:43:d2:c5:e5:e8:40:0b:be:76:d2:d3:ad:7f:e4:ed:3f: 6e:33:fb:04:ef:4a:7b:c0:5f:ab:0a:cd:b0:5d:d8:5c:7b:fd: 2e:8e:86:37:b5:ed:56:45:f1:9c:64:5b:72:2d:9d:e7:3b:00: 81:6f:07:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmEDdYXiI+N5D7vgZEkvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5N2MxYTg4YzljODlhZTk0MjU0ZTIyNDFjNzg4ZTk3YzFm ZjNlNDgwHhcNMjUxMjI0MjMwMTA4WhcNMjUxMjI1MjMwMTA4WjAzMTEwLwYDVQQD Eyg2YzU3NTMyNzc1ZTAzZmIxZWUxMmYzNjA4NWI1MjJhZTE5NWViNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTTlJaQQvWoE7k4ZAJ+KHpXZ8gPp /XnuNB8Xp82Mj8kPqfrGo1k0UJYEM7LebPwjyB9KzAjcu5OnBtwyVZj4y42FC0d6 +WvxxbnZA2kuqAxam+OwUdg35Wa5fGizJ1p/+QdFV/f833AmlijBgwmPbcAO+1kP chfx5nEs/4tW/EEbVwqR0qhJyskf/l6pzmdeLra4wLPc+C1CI2KbRzow0I9256K6 4CPdmU33gFMkr/u5dROOlSdb9MJu44kgKe+qHhQTIIwHhk2TUt55KRSDUhjozS7R 1pScL4LTqRkaKYOSiBftsCiBb3BbJcl5JqMwhrxxtNs0jVwMB5psTQr3xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxXUyd14D+x7hLzYIW1Iq4ZXrY3MB8GA1UdIwQY MBaAFIl8GojJyJrpQlTiJBx4jpfB/z5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYjNlMDMtMzk2OC00ZGIyLWJmODAt NDNmNmFlNTIwYjFhLzEvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lYjNlMDMtMzk2OC00ZGIyLWJmODAtNDNmNmFlNTIwYjFh LzEvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/SNupb9 MlS5zw+eBJrlhpkZUAUPXDnUvVnocYqGNwyChYHvkW4jibJGLLtnJtuvqTLtjSZl g6vo/o0JhGwioIYpy4UCSaGtHMrA8Bb+QRv88ROnfiVg1s5SBOrkXXzWgYFkFInI 5DIMcJMLWu4tZ/UEK4NNCymwzHof1Mv/ibny0iPOJGJlYZRHccigNgy4mJjxjZ1o guC5+arBGP/u6enWJMkmiOpjfZ74opPtO4smmY+I0pAaJfG7+oYvfJgJUfx7340b qatD0sXl6EALvnbS061/5O0/bjP7BO9Ke8BfqwrNsF3YXHv9Lo6GN7XtVkXxnGRb ci2d5zsAgW8HfQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:22:59 2025 by rpki-client