This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json) Hash identifier: 3TvupLkqzRWcjhXwTUF94kRi2o6mLH8ZjItUx5ZVhrw= Subject key identifier: 63:74:9A:CC:AF:0F:51:EF:5D:D4:54:36:EB:0C:E0:E0:45:2E:36:CC Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12 Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012 Certificate serial: 019B80F172412770685E060740672B28E460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft Manifest number: 152C Signing time: Fri 02 Jan 2026 23:01:05 +0000 Manifest this update: Fri 02 Jan 2026 23:01:05 +0000 Manifest next update: Sat 03 Jan 2026 23:01:05 +0000 Files and hashes: 1: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: b6obbOwery5xhSV7enWO0+ZxF5aRZz6n2mCT1/sltHo=) 2: iz-s1SV_V4AaMH-6-vZcdBe9_28.roa (hash: AFIMSomYZRZ7dduGJLch69mRqRFbHaPPEtg9WN6niUo=) 3: m9EXLhYWcdpBDX-fRVjeJwFcks4.roa (hash: hO49V1SsoRH71HYWYcEzmHsz7GxUTsYMMr0hhLYqiYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:f1:72:41:27:70:68:5e:06:07:40:67:2b:28:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012 Validity Not Before: Jan 2 23:01:05 2026 GMT Not After : Jan 3 23:01:05 2026 GMT Subject: CN=63749accaf0f51ef5dd45436eb0ce0e0452e36cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:43:70:fa:22:67:a6:bd:f3:64:96:2f:42: 34:18:f7:94:62:6a:a0:f7:7e:f3:5c:86:26:d6:4d: 4f:65:2f:04:96:0f:d8:c1:96:50:25:a1:6c:ad:50: 03:ea:72:8e:a8:ec:70:d9:d3:37:ce:ad:54:4b:ec: 74:0c:a3:af:40:4d:72:f0:6f:d9:22:03:f8:f0:de: 91:4a:e7:5d:37:08:f8:d6:80:26:d1:31:a6:36:52: ec:af:f4:f0:d5:0b:4d:be:cd:95:0e:b8:5c:02:5e: 44:67:61:ae:67:04:7a:9e:a7:0d:bd:02:24:fc:16: c3:e0:0e:d7:33:61:d8:b5:e3:f6:15:1a:05:0b:38: 91:c0:f8:10:51:ac:de:16:7e:99:6f:de:b5:0a:81: 5f:73:95:3e:98:07:20:7f:96:88:94:0d:61:54:e9: 92:32:81:d6:c0:ba:70:d5:21:14:27:b5:2e:8b:33: 47:08:5e:6b:38:64:e1:e0:93:6c:f6:ab:9c:05:e8: ab:c6:2b:1a:65:53:e7:76:72:4c:6a:97:4e:a9:49: be:fe:1c:42:2e:ee:2c:a2:e2:2c:c5:2c:2d:8e:9c: f6:05:51:3c:53:5a:5c:38:72:3a:d6:77:57:c3:87: f8:29:9a:45:cd:4d:76:aa:ad:c7:f7:e1:65:08:33: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:74:9A:CC:AF:0F:51:EF:5D:D4:54:36:EB:0C:E0:E0:45:2E:36:CC X509v3 Authority Key Identifier: keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ce:90:45:59:da:52:61:6f:41:32:31:47:5e:6e:e8:16:17: 0e:f8:b4:63:29:d9:cc:82:fd:2b:4f:fc:d5:e8:e9:b2:f9:70: 2f:76:47:18:22:6f:28:58:cb:85:3a:8d:46:c0:fe:8d:bf:ee: 28:df:1a:ae:06:67:82:45:1b:2e:e7:ba:7b:12:37:59:b9:16: 2e:9a:ed:99:11:3f:fe:5e:92:72:b6:1d:84:d8:c9:6d:74:da: fa:b2:3b:25:45:5a:fd:c7:c1:03:1a:1e:25:a8:f1:1c:69:25: 87:05:da:0e:a4:8d:51:27:42:c4:55:35:ff:62:78:c0:17:4e: 9b:f5:03:da:4b:35:5e:ca:cd:50:3a:81:da:a1:2c:a4:8d:64: d4:c4:61:df:22:62:0f:55:fe:8f:01:f4:fe:20:c9:f3:4c:42: a0:df:b4:27:b4:bb:27:1c:5c:b9:d6:f1:8b:85:05:77:9d:52: 4c:0a:e8:90:68:76:7d:40:14:f1:cd:c4:81:f7:5e:ad:0e:46: ed:3b:2e:30:33:da:ff:48:75:1f:90:2d:00:cd:8d:17:06:e3: b1:dc:33:1a:3b:97:68:19:1c:38:b9:b9:96:b9:66:44:4b:a7: 14:3e:01:4a:9d:c4:4d:9c:0b:20:50:47:e7:d7:d2:32:f2:3b: 72:1c:7a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuA8XJBJ3BoXgYHQGcrKORgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl MDcwMTIwHhcNMjYwMTAyMjMwMTA1WhcNMjYwMTAzMjMwMTA1WjAzMTEwLwYDVQQD Eyg2Mzc0OWFjY2FmMGY1MWVmNWRkNDU0MzZlYjBjZTBlMDQ1MmUzNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBBDcPoiZ6a982SWL0I0GPeUYmqg 937zXIYm1k1PZS8Elg/YwZZQJaFsrVAD6nKOqOxw2dM3zq1US+x0DKOvQE1y8G/Z IgP48N6RSuddNwj41oAm0TGmNlLsr/Tw1QtNvs2VDrhcAl5EZ2GuZwR6nqcNvQIk /BbD4A7XM2HYteP2FRoFCziRwPgQUazeFn6Zb961CoFfc5U+mAcgf5aIlA1hVOmS MoHWwLpw1SEUJ7UuizNHCF5rOGTh4JNs9qucBeirxisaZVPndnJMapdOqUm+/hxC Lu4souIsxSwtjpz2BVE8U1pcOHI61ndXw4f4KZpFzU12qq3H9+FlCDP8CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN0msyvD1HvXdRUNusM4OBFLjbMMB8GA1UdIwQY MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt ZjY1NDFmNzc4NTg1LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1 LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs6QRVna UmFvQTIxR15u6BYXDvi0YynZzIL9K0/81ejpsvlwL3ZHGCJvKFjLhTqNRsD+jb/u KN8argZngkUbLue6exI3WbkWLprtmRE//l6ScrYdhNjJbXTa+rI7JUVa/cfBAxoe JajxHGklhwXaDqSNUSdCxFU1/2J4wBdOm/UD2ks1XsrNUDqB2qEspI1k1MRh3yJi D1X+jwH0/iDJ80xCoN+0J7S7Jxxcudbxi4UFd51STArokGh2fUAU8c3EgfderQ5G 7TsuMDPa/0h1H5AtAM2NFwbjsdwzGjuXaBkcOLm5lrlmREunFD4BSp3ETZwLIFBH 59fSMvI7chx6KA== -----END CERTIFICATE-----Generated at Sat Jan 3 03:59:12 2026 by rpki-client