This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json) Hash identifier: iL/2PFSx2u5W94IYdPCQSgs66Qw5Vxry+2we8fopeSw= Subject key identifier: 96:5E:AC:14:62:71:A6:B5:F8:06:A9:AF:D9:0F:20:90:8A:EC:CD:6E Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Certificate serial: 019B3A90369983C66C0D1591827CD9E35D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 07:01:28 +0000 Manifest this update: Sat 20 Dec 2025 07:01:28 +0000 Manifest next update: Sun 21 Dec 2025 07:01:28 +0000 Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=) 2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=) 3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: +kDZHCfThAhICubkxM0MCT/eHi7y+kTyyowmv+b73Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:36:99:83:c6:6c:0d:15:91:82:7c:d9:e3:5d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Validity Not Before: Dec 20 07:01:28 2025 GMT Not After : Dec 21 07:01:28 2025 GMT Subject: CN=965eac146271a6b5f806a9afd90f20908aeccd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:85:25:f9:46:e8:9f:a4:29:75:b4:ab:61:61: 4d:0d:b6:73:cb:95:34:0c:c0:82:ff:dc:be:b7:89: d1:73:97:3d:45:8c:ad:ad:1c:19:c7:97:ad:b3:b8: f9:01:0f:eb:66:4b:54:37:76:c9:df:93:8a:86:7e: 68:30:ea:4e:ab:0c:dc:42:c4:8b:f2:33:a3:6b:d6: a1:93:fa:c4:51:34:b5:d9:bb:27:7d:21:93:b8:f8: 75:2d:40:9c:63:95:f8:9b:c4:70:5e:4f:88:54:05: 0d:4b:0a:09:dd:d3:89:b9:29:1a:66:8c:35:58:5e: ca:5e:45:9f:a8:cd:6d:85:3e:4f:e1:8f:e4:a8:bf: d6:13:de:62:7e:6c:ec:75:6f:46:60:04:9a:b4:14: ed:80:d4:54:1d:64:1e:7b:e3:91:64:4d:77:94:b0: fc:f2:b9:69:c4:5f:b6:17:1c:65:6b:cb:fe:16:70: ac:23:9b:7c:63:7b:29:23:17:c2:c7:8e:26:a9:f2: 4e:2f:61:98:54:ef:80:e4:84:62:26:15:11:e0:64: 8d:4a:e3:88:7d:f5:54:c3:f7:8e:47:8c:1e:ca:e7: c3:b4:72:a3:9f:5a:07:ea:a2:28:a1:13:6f:f4:04: 36:a6:36:98:e9:8d:40:2c:4a:db:ee:60:99:db:3f: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:AC:14:62:71:A6:B5:F8:06:A9:AF:D9:0F:20:90:8A:EC:CD:6E X509v3 Authority Key Identifier: keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:18:df:58:ab:d0:c8:4e:5a:29:d2:54:78:98:8a:b1:a9:a1: 2c:a0:89:32:8f:0a:fd:dd:e5:cd:03:56:24:c8:bf:c2:0c:12: d6:65:16:a2:e3:21:2e:c1:de:2c:0b:5e:28:ee:e7:94:27:a7: 0d:39:7c:e9:bd:c4:a7:e0:3e:98:01:41:1a:94:c4:90:2a:d7: e4:67:0a:c8:11:db:25:24:25:2e:71:eb:8b:f2:ef:52:05:2f: 44:7e:f2:38:41:7d:08:4b:b3:0f:f3:d7:20:b7:3b:a2:8a:2f: 91:e7:99:3a:41:e4:0c:95:21:4c:68:98:1e:80:a1:6a:df:4f: 9f:ec:52:06:d0:d1:75:8a:d2:86:90:54:0f:58:a2:1b:43:e0: 08:66:c9:2f:7d:5a:48:5a:cb:73:da:0e:5d:eb:09:25:17:3e: 97:9f:1a:b3:0b:f8:8c:41:06:66:26:e6:16:eb:4b:c3:3a:f9: 0f:4c:70:42:ac:d0:80:c4:81:b8:69:37:8d:03:55:61:19:98: 0c:ee:d5:3d:41:b4:52:41:ed:00:8d:b1:61:da:8c:72:12:e3: 1c:f9:2d:e9:30:b6:bf:3b:73:1b:44:5b:2c:bf:f4:e1:af:0a: 1f:d0:c8:12:df:aa:0c:db:27:d1:c7:19:a7:82:9c:82:22:c1: 22:48:0c:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kDaZg8ZsDRWRgnzZ411pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh MjhmZmIwHhcNMjUxMjIwMDcwMTI4WhcNMjUxMjIxMDcwMTI4WjAzMTEwLwYDVQQD Eyg5NjVlYWMxNDYyNzFhNmI1ZjgwNmE5YWZkOTBmMjA5MDhhZWNjZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IUl+Ubon6QpdbSrYWFNDbZzy5U0 DMCC/9y+t4nRc5c9RYytrRwZx5ets7j5AQ/rZktUN3bJ35OKhn5oMOpOqwzcQsSL 8jOja9ahk/rEUTS12bsnfSGTuPh1LUCcY5X4m8RwXk+IVAUNSwoJ3dOJuSkaZow1 WF7KXkWfqM1thT5P4Y/kqL/WE95ifmzsdW9GYASatBTtgNRUHWQee+ORZE13lLD8 8rlpxF+2Fxxla8v+FnCsI5t8Y3spIxfCx44mqfJOL2GYVO+A5IRiJhUR4GSNSuOI ffVUw/eOR4weyufDtHKjn1oH6qIooRNv9AQ2pjaY6Y1ALErb7mCZ2z/AUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZerBRicaa1+Aapr9kPIJCK7M1uMB8GA1UdIwQY MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct YjQwM2QxMGMzZTkxLzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohjfWKvQ yE5aKdJUeJiKsamhLKCJMo8K/d3lzQNWJMi/wgwS1mUWouMhLsHeLAteKO7nlCen DTl86b3Ep+A+mAFBGpTEkCrX5GcKyBHbJSQlLnHri/LvUgUvRH7yOEF9CEuzD/PX ILc7ooovkeeZOkHkDJUhTGiYHoChat9Pn+xSBtDRdYrShpBUD1iiG0PgCGbJL31a SFrLc9oOXesJJRc+l58aswv4jEEGZibmFutLwzr5D0xwQqzQgMSBuGk3jQNVYRmY DO7VPUG0UkHtAI2xYdqMchLjHPkt6TC2vztzG0RbLL/04a8KH9DIEt+qDNsn0ccZ p4KcgiLBIkgMHg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:41 2025 by rpki-client