This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json) Hash identifier: fs881NfFIf3jWk0J+nLBs/JJpEzfnZonGYSzGvJEpbQ= Subject key identifier: 29:82:6D:B0:A3:B6:BE:9F:06:DF:A2:34:23:4B:ED:5B:26:93:01:63 Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Certificate serial: 019B631DD82F5548779B8DB7283EC3AA4DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft Manifest number: 172E Signing time: Sun 28 Dec 2025 04:00:58 +0000 Manifest this update: Sun 28 Dec 2025 04:00:58 +0000 Manifest next update: Mon 29 Dec 2025 04:00:58 +0000 Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=) 2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=) 3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: R97Ovc+EfWmaj+hYVzflAEbXNwE7/aCeTND/ntMQETM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:d8:2f:55:48:77:9b:8d:b7:28:3e:c3:aa:4d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Validity Not Before: Dec 28 04:00:58 2025 GMT Not After : Dec 29 04:00:58 2025 GMT Subject: CN=29826db0a3b6be9f06dfa234234bed5b26930163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:bd:40:ce:cb:f3:40:94:17:b1:3d:a4:3e: de:b9:77:d6:0e:ce:14:b9:e1:67:9f:54:fb:a5:43: 75:7a:8d:58:e7:db:39:ff:b4:ff:ff:57:63:f5:14: 68:22:f7:88:65:73:b5:f9:a8:14:93:79:0e:9e:4b: f9:4f:f8:fd:91:34:0d:65:7a:aa:91:68:5f:d3:0c: 86:43:c6:2e:04:23:a7:43:0d:05:1c:c1:59:ab:5b: 06:00:8f:36:9b:cb:49:09:39:c6:fd:65:71:18:02: d0:f0:96:f9:63:dc:d8:9c:32:e9:e2:d7:d0:b1:98: 24:57:28:03:a2:2c:92:02:1a:39:c4:41:69:96:16: 19:0b:69:b0:f2:a2:8f:19:cc:30:6f:45:a5:7b:be: 13:b0:22:d1:ae:7a:e0:60:53:b6:1e:52:9b:e4:28: b1:0b:a7:95:c3:3d:c1:39:46:75:6f:3b:ec:16:0c: 4e:b2:eb:f6:73:36:c0:53:d2:4c:67:7a:1b:10:ae: ea:a5:a8:a2:ef:9a:21:df:c6:3b:1d:ec:4a:a0:9c: 01:21:74:ae:e8:2f:21:73:5d:a1:d7:9f:1e:7d:f2: 0f:bf:35:c8:98:3b:fa:23:c9:9e:a3:ce:7a:ce:ed: 8c:17:c8:27:5b:0e:35:82:69:6f:9f:53:35:2d:8f: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:82:6D:B0:A3:B6:BE:9F:06:DF:A2:34:23:4B:ED:5B:26:93:01:63 X509v3 Authority Key Identifier: keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:97:e9:bb:62:7b:3a:c6:2a:d7:43:27:04:f6:bd:b3:74:21: cc:28:b0:7e:59:65:7f:66:21:6c:63:5e:e9:95:10:31:35:f3: 83:7b:f0:29:c2:57:db:b0:83:10:7b:3a:c5:f3:6a:ca:58:90: 98:f8:33:86:6d:0a:a3:98:e7:24:ba:fc:9d:38:e1:66:53:76: ed:b9:d1:59:1b:81:71:ee:01:3e:42:ad:fe:b8:84:68:11:39: 09:8d:6b:24:d0:5f:ea:61:fa:5d:4c:15:af:2a:16:89:c9:f9: c3:6c:25:12:50:3d:74:51:75:bd:60:06:96:00:e9:0e:72:d4: 14:be:44:93:4c:d5:6c:59:1d:18:fd:4e:2b:f6:fd:14:15:18: 3f:b7:3a:bf:d5:c1:85:17:f0:14:ec:8a:41:64:52:96:04:9d: bb:76:21:a0:97:ef:3f:c4:df:56:89:b8:73:e0:16:17:d9:d0: a7:2d:e7:65:31:a6:76:90:58:54:45:83:99:1f:b8:fe:c8:30: 7a:e0:22:ad:bc:d8:56:1f:f2:12:31:31:b1:69:5b:c1:e2:87: 45:75:92:9f:e2:28:af:cd:5d:c8:bc:81:b8:96:7c:cd:c2:a7: e0:bb:82:d6:1d:2f:ff:73:80:f1:9f:d2:0e:05:0b:57:a3:86: 96:8b:4a:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHdgvVUh3m423KD7Dqk27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh MjhmZmIwHhcNMjUxMjI4MDQwMDU4WhcNMjUxMjI5MDQwMDU4WjAzMTEwLwYDVQQD EygyOTgyNmRiMGEzYjZiZTlmMDZkZmEyMzQyMzRiZWQ1YjI2OTMwMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9a9QM7L80CUF7E9pD7euXfWDs4U ueFnn1T7pUN1eo1Y59s5/7T//1dj9RRoIveIZXO1+agUk3kOnkv5T/j9kTQNZXqq kWhf0wyGQ8YuBCOnQw0FHMFZq1sGAI82m8tJCTnG/WVxGALQ8Jb5Y9zYnDLp4tfQ sZgkVygDoiySAho5xEFplhYZC2mw8qKPGcwwb0Wle74TsCLRrnrgYFO2HlKb5Cix C6eVwz3BOUZ1bzvsFgxOsuv2czbAU9JMZ3obEK7qpaii75oh38Y7HexKoJwBIXSu 6C8hc12h158effIPvzXImDv6I8meo856zu2MF8gnWw41gmlvn1M1LY8w5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmCbbCjtr6fBt+iNCNL7VsmkwFjMB8GA1UdIwQY MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct YjQwM2QxMGMzZTkxLzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJfpu2J7 OsYq10MnBPa9s3QhzCiwflllf2YhbGNe6ZUQMTXzg3vwKcJX27CDEHs6xfNqyliQ mPgzhm0Ko5jnJLr8nTjhZlN27bnRWRuBce4BPkKt/riEaBE5CY1rJNBf6mH6XUwV ryoWicn5w2wlElA9dFF1vWAGlgDpDnLUFL5Ek0zVbFkdGP1OK/b9FBUYP7c6v9XB hRfwFOyKQWRSlgSdu3YhoJfvP8TfVom4c+AWF9nQpy3nZTGmdpBYVEWDmR+4/sgw euAirbzYVh/yEjExsWlbweKHRXWSn+Ior81dyLyBuJZ8zcKn4LuC1h0v/3OA8Z/S DgULV6OGlotKbg== -----END CERTIFICATE-----Generated at Sun Dec 28 05:54:32 2025 by rpki-client