This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json) Hash identifier: I9m/dCkSWrSsWDB5AYAv/WklVk2nPsM1bhsTHBTwEoY= Subject key identifier: 33:34:23:86:58:41:55:43:B2:CD:EE:25:D2:9F:74:B4:7B:CA:7B:71 Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019B4BF1799B3D760F9F2CE6296D0D8B12BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft Manifest number: 1457 Signing time: Tue 23 Dec 2025 16:01:15 +0000 Manifest this update: Tue 23 Dec 2025 16:01:15 +0000 Manifest next update: Wed 24 Dec 2025 16:01:15 +0000 Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=) 2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: DcgKF8+Yv1IyMLYWNhsJjSVIO3HTOU22Wa7VqQ1ZlEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:79:9b:3d:76:0f:9f:2c:e6:29:6d:0d:8b:12:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Dec 23 16:01:15 2025 GMT Not After : Dec 24 16:01:15 2025 GMT Subject: CN=3334238658415543b2cdee25d29f74b47bca7b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:b7:94:53:3c:6c:8b:62:ba:02:53:b5:c8: 70:e7:24:88:0b:8b:9b:2e:91:4e:96:9e:58:a5:8b: 38:ca:04:94:b3:be:51:1a:e9:82:ba:9e:f4:17:3a: 42:cc:b2:db:e8:78:cf:e8:2c:78:43:15:59:88:35: af:67:41:db:77:ca:65:03:b1:61:44:1c:4b:00:e3: fa:5a:23:f9:75:d9:c6:b6:c2:64:2f:7c:43:55:36: 2f:6f:65:88:af:ac:ce:30:d1:cd:f3:15:5d:34:2f: 99:3d:da:20:f2:72:e3:d8:7a:cf:ac:ff:ae:df:97: ca:d6:68:ab:c2:01:60:c1:9c:33:75:d3:04:46:03: 13:e3:77:8e:e0:33:69:0c:ca:5a:54:45:d3:85:2f: d2:46:94:dd:88:d0:ca:ea:1c:b3:c1:66:7f:17:2b: 68:cc:24:17:7c:86:21:da:7f:ff:f2:79:45:74:b0: 88:38:aa:40:0c:85:3e:de:de:9a:fc:8e:80:2e:d2: e2:05:f5:0e:a7:ba:2e:af:32:c7:90:b9:13:0d:50: a6:24:e0:6c:cf:d6:41:99:37:62:9c:26:06:08:23: 5d:09:70:33:6c:ba:b4:91:fb:4b:65:cf:3c:88:a4: 1b:a4:3d:1d:cf:d5:07:36:bf:3b:ce:0c:08:e0:3b: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:34:23:86:58:41:55:43:B2:CD:EE:25:D2:9F:74:B4:7B:CA:7B:71 X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:90:86:f3:7f:9f:eb:a3:03:6c:7d:da:d6:e3:25:32:83:67: 14:da:c3:ac:ac:78:de:d6:ae:e3:ea:03:35:b2:e3:71:2e:d6: 51:d6:aa:12:c3:f5:b5:d8:8b:9a:72:06:2f:dc:dc:32:da:64: 98:96:11:0e:61:30:d4:a7:62:af:7d:8b:65:c1:7a:e3:46:e3: fe:35:9b:ec:27:fa:99:69:42:d3:73:71:88:2f:7b:fa:db:b5: 13:67:60:a1:9f:5e:02:b5:50:d4:0c:f2:7d:d2:a7:f8:ce:e5: f2:a0:34:0d:a1:6e:47:a4:10:d0:65:61:21:f9:4d:a5:24:17: d5:2d:4b:9a:95:9b:88:31:f9:71:bc:87:7b:b2:85:09:03:44: 31:eb:04:10:58:37:b9:b4:d7:f4:33:7f:e1:a2:0f:e3:b9:3b: a1:aa:cc:e6:f5:62:f6:22:05:0c:e5:90:f2:09:3e:4b:ec:8d: ee:15:2e:10:9f:e7:8c:4b:5b:1e:41:57:d8:f2:b5:f3:55:29: ff:2b:b4:e6:f4:86:59:1f:93:21:2c:7b:72:25:0e:8c:13:33: 8a:ab:e0:e4:59:93:00:5a:ba:5d:d4:4a:ca:31:03:a2:c3:e7: 96:53:98:d8:7f:af:90:00:20:ed:d3:fe:19:a8:15:25:43:bd: 17:d8:81:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8XmbPXYPnyzmKW0NixK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjUxMjIzMTYwMTE1WhcNMjUxMjI0MTYwMTE1WjAzMTEwLwYDVQQD EygzMzM0MjM4NjU4NDE1NTQzYjJjZGVlMjVkMjlmNzRiNDdiY2E3YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN23lFM8bItiugJTtchw5ySIC4ub LpFOlp5YpYs4ygSUs75RGumCup70FzpCzLLb6HjP6Cx4QxVZiDWvZ0Hbd8plA7Fh RBxLAOP6WiP5ddnGtsJkL3xDVTYvb2WIr6zOMNHN8xVdNC+ZPdog8nLj2HrPrP+u 35fK1mirwgFgwZwzddMERgMT43eO4DNpDMpaVEXThS/SRpTdiNDK6hyzwWZ/Fyto zCQXfIYh2n//8nlFdLCIOKpADIU+3t6a/I6ALtLiBfUOp7ourzLHkLkTDVCmJOBs z9ZBmTdinCYGCCNdCXAzbLq0kftLZc88iKQbpD0dz9UHNr87zgwI4Ds4FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM0I4ZYQVVDss3uJdKfdLR7yntxMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5CG83+f 66MDbH3a1uMlMoNnFNrDrKx43tau4+oDNbLjcS7WUdaqEsP1tdiLmnIGL9zcMtpk mJYRDmEw1Kdir32LZcF640bj/jWb7Cf6mWlC03NxiC97+tu1E2dgoZ9eArVQ1Azy fdKn+M7l8qA0DaFuR6QQ0GVhIflNpSQX1S1LmpWbiDH5cbyHe7KFCQNEMesEEFg3 ubTX9DN/4aIP47k7oarM5vVi9iIFDOWQ8gk+S+yN7hUuEJ/njEtbHkFX2PK181Up /yu05vSGWR+TISx7ciUOjBMziqvg5FmTAFq6XdRKyjEDosPnllOY2H+vkAAg7dP+ GagVJUO9F9iBlQ== -----END CERTIFICATE-----Generated at Tue Dec 23 19:00:26 2025 by rpki-client