This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json) Hash identifier: Ed5Oq/2kixMAx4NTq24H7LIJMb2bBWKLH0IBD3e6n0Y= Subject key identifier: B8:CF:23:88:70:8D:74:7F:39:62:7B:03:4E:93:E7:57:ED:71:1A:CA Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178 Certificate serial: 019B44DCA1951E6C965609D21C428E17B924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft Manifest number: 08BF Signing time: Mon 22 Dec 2025 07:01:08 +0000 Manifest this update: Mon 22 Dec 2025 07:01:08 +0000 Manifest next update: Tue 23 Dec 2025 07:01:08 +0000 Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=) 2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: Xp8dxzQxan2RdAreChyWqyK9aVhLGjCVrhsRNkLRscQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:a1:95:1e:6c:96:56:09:d2:1c:42:8e:17:b9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178 Validity Not Before: Dec 22 07:01:08 2025 GMT Not After : Dec 23 07:01:08 2025 GMT Subject: CN=b8cf2388708d747f39627b034e93e757ed711aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:4d:76:f4:80:8a:64:b5:4a:60:3f:bd:ad: cd:d8:db:52:d9:bd:67:43:54:cb:38:ee:7b:63:55: 37:a5:ee:55:96:48:de:d0:fd:2f:a4:db:7f:3c:ea: a2:0b:1e:f8:f6:22:b8:48:ec:73:cc:78:66:74:6d: 85:f3:fd:a9:7e:bf:19:64:c7:1c:fa:d3:a2:71:41: 4a:a1:04:43:e5:2f:3e:91:1e:97:55:c7:25:71:6b: fe:4c:a2:94:93:2d:4d:6a:fe:87:71:79:79:c0:ba: b6:c4:e0:20:43:f7:a5:9b:57:77:2b:de:49:ea:28: 5f:33:c6:fb:a5:e5:76:6d:88:72:9e:4c:77:6f:e2: f4:dc:6c:7f:0f:82:e0:dc:1b:a3:1c:6a:cd:41:6e: 52:22:90:36:a7:8a:8e:a6:62:68:70:9d:22:cf:b0: d5:2c:aa:88:f6:66:46:51:00:08:0f:31:e8:38:09: 0b:0d:f0:47:6c:8c:e3:0b:0c:cc:51:7a:65:ff:70: 61:b1:16:52:77:2f:0e:36:a1:aa:79:a7:4f:e6:1e: 93:d4:9c:5f:6f:21:a6:21:37:f5:23:84:41:24:05: b2:08:cf:7c:7a:16:38:43:79:81:fb:0b:53:cd:50: 8b:12:f6:93:16:11:22:00:d1:73:85:69:2a:04:57: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CF:23:88:70:8D:74:7F:39:62:7B:03:4E:93:E7:57:ED:71:1A:CA X509v3 Authority Key Identifier: keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c9:34:51:f2:13:a2:47:9f:51:3b:74:60:0d:d1:d1:33:57: 25:d6:e3:a4:f2:b6:41:70:9b:46:df:32:64:89:58:15:6a:10: c3:fd:97:70:38:95:7b:c1:c4:d1:77:2e:11:ea:d9:9e:1a:7c: 6b:86:9b:27:80:a9:63:3a:80:e7:03:fd:91:f8:bc:b9:3c:8f: c5:d7:40:7f:a4:fa:d1:97:95:a7:03:50:87:ba:15:89:2b:d2: 65:47:7a:22:9c:3b:37:ea:22:3f:93:49:a8:33:9c:7f:b4:e1: 11:04:20:b1:4e:57:98:d7:13:36:16:23:6b:2f:c9:1d:b9:5d: 92:29:a9:89:f8:81:8f:20:22:0c:77:cc:f1:d5:03:07:2d:5b: 06:3a:34:58:db:04:72:d5:af:96:3b:44:02:87:b0:ec:70:44: a1:b8:bd:cf:bf:bf:b1:32:49:72:09:79:1b:02:37:7c:99:f2: ce:e7:f2:f2:1a:7f:b3:21:9a:3a:73:64:52:30:dd:6e:83:a2: 74:70:93:db:c8:90:49:07:c8:71:3b:54:af:e8:1c:e1:b9:67: f0:05:9b:af:af:69:51:bb:77:20:5e:3a:fe:19:c8:19:c7:3b: 65:1b:4e:58:d1:6a:47:11:1f:fc:4a:1b:76:5a:c0:b7:c2:e4: 58:4d:9a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3KGVHmyWVgnSHEKOF7kkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4 MzExNzgwHhcNMjUxMjIyMDcwMTA4WhcNMjUxMjIzMDcwMTA4WjAzMTEwLwYDVQQD EyhiOGNmMjM4ODcwOGQ3NDdmMzk2MjdiMDM0ZTkzZTc1N2VkNzExYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfRNdvSAimS1SmA/va3N2NtS2b1n Q1TLOO57Y1U3pe5Vlkje0P0vpNt/POqiCx749iK4SOxzzHhmdG2F8/2pfr8ZZMcc +tOicUFKoQRD5S8+kR6XVcclcWv+TKKUky1Nav6HcXl5wLq2xOAgQ/elm1d3K95J 6ihfM8b7peV2bYhynkx3b+L03Gx/D4Lg3BujHGrNQW5SIpA2p4qOpmJocJ0iz7DV LKqI9mZGUQAIDzHoOAkLDfBHbIzjCwzMUXpl/3BhsRZSdy8ONqGqeadP5h6T1Jxf byGmITf1I4RBJAWyCM98ehY4Q3mB+wtTzVCLEvaTFhEiANFzhWkqBFc7hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjPI4hwjXR/OWJ7A06T51ftcRrKMB8GA1UdIwQY MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeck0UfIT okefUTt0YA3R0TNXJdbjpPK2QXCbRt8yZIlYFWoQw/2XcDiVe8HE0XcuEerZnhp8 a4abJ4CpYzqA5wP9kfi8uTyPxddAf6T60ZeVpwNQh7oViSvSZUd6Ipw7N+oiP5NJ qDOcf7ThEQQgsU5XmNcTNhYjay/JHbldkimpifiBjyAiDHfM8dUDBy1bBjo0WNsE ctWvljtEAoew7HBEobi9z7+/sTJJcgl5GwI3fJnyzufy8hp/syGaOnNkUjDdboOi dHCT28iQSQfIcTtUr+gc4bln8AWbr69pUbt3IF46/hnIGcc7ZRtOWNFqRxEf/Eob dlrAt8LkWE2acQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:13:25 2025 by rpki-client