This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json) Hash identifier: F0tXlyHqokRDKzuh15/zcSlcWJRaVZTQAxHN1+XV1FM= Subject key identifier: 1A:A9:B9:9C:03:CF:9A:93:C7:BD:A2:BE:30:41:92:CF:BE:D1:5B:32 Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019B51BC774B586E4876FF73044ABEC47E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft Manifest number: 145A Signing time: Wed 24 Dec 2025 19:01:04 +0000 Manifest this update: Wed 24 Dec 2025 19:01:04 +0000 Manifest next update: Thu 25 Dec 2025 19:01:04 +0000 Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=) 2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: lmS9BRdyS0Dte3s+ys3EosMMmPmNVjh1SajX4XH1vjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:77:4b:58:6e:48:76:ff:73:04:4a:be:c4:7e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Dec 24 19:01:04 2025 GMT Not After : Dec 25 19:01:04 2025 GMT Subject: CN=1aa9b99c03cf9a93c7bda2be304192cfbed15b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:91:5d:75:88:1b:2f:1b:1d:ef:48:4a:c8:a7: 94:73:e9:c8:91:a3:04:d1:61:27:5f:97:a7:ca:40: 51:a0:c2:32:18:94:ac:20:95:20:5c:aa:ba:85:d6: 51:32:ef:3b:5b:a3:e4:f5:8e:d6:8f:41:79:ea:2a: f1:35:44:b9:64:e2:29:84:b1:5e:64:35:e6:0f:44: 81:17:a2:ad:b6:7b:13:3b:4f:11:33:c7:3e:10:fc: 1c:f3:95:6d:27:05:2f:12:fa:17:60:ff:ae:5d:cb: df:7a:bc:79:0b:9c:31:43:59:ae:22:59:d9:2a:26: 23:ca:20:15:f6:e9:5a:8c:ef:97:ff:01:e6:c7:19: 3a:70:55:ab:8f:02:51:c5:1f:21:3c:61:c3:1d:de: a8:d5:a4:7e:aa:c7:36:1a:5b:8d:8e:3d:9d:31:94: 2d:be:d4:5f:11:94:b0:3a:f9:82:d6:8c:f4:ae:68: 16:d3:19:a5:69:47:3e:bb:87:d4:05:50:e7:0c:e1: 51:33:b4:c8:9d:04:28:c9:b9:5f:c8:37:b0:29:32: 33:85:4d:c9:c4:89:6c:41:bf:4d:b3:8e:39:c5:13: 40:e2:cb:1d:07:86:8f:94:c4:f8:ef:15:74:1b:2d: 94:63:78:28:a2:26:bf:2a:ed:90:32:d6:ff:02:41: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:B9:9C:03:CF:9A:93:C7:BD:A2:BE:30:41:92:CF:BE:D1:5B:32 X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b9:03:50:ea:f8:f3:fc:2b:8b:45:b6:a0:57:6b:ce:c3:5d: 48:2e:0e:cd:b6:f7:64:84:6d:ef:8e:d4:95:48:6a:39:c8:55: fc:54:a7:f3:36:83:cb:64:71:45:ca:9c:a2:90:09:ea:64:cf: 09:05:71:5c:3f:ea:83:01:78:3b:1d:b4:b7:90:18:74:2a:a7: 96:59:67:be:b8:74:66:29:93:78:5d:7f:65:9c:60:c4:ff:9f: a7:cc:1a:3f:4c:ac:be:77:44:4c:4e:1b:d2:f5:5a:8b:e1:59: 16:62:01:cd:d6:47:90:7c:ff:6a:1f:74:84:54:92:b6:e5:02: ac:bc:ec:c8:da:5d:7c:df:6e:c1:e0:32:8b:a9:ef:2d:03:6e: 22:9f:1d:be:b3:5b:00:59:b8:20:e4:83:fd:ec:38:7b:c2:ac: f5:2a:9c:b1:80:32:29:da:cf:7b:2a:67:53:ef:56:e7:5b:7a: b4:bd:b8:57:b6:f6:3a:23:93:47:74:7f:d9:9b:a6:a9:d9:40: 47:9d:3b:e7:6d:79:9e:ca:e3:b4:67:16:84:ea:9f:0f:c6:47: c8:ea:a0:d0:b2:5b:0a:5e:b8:65:91:1c:d5:49:86:7e:41:7a: df:5a:53:11:6f:44:91:6a:39:91:0b:5c:41:94:2b:d9:84:08: 44:83:64:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvHdLWG5Idv9zBEq+xH5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjUxMjI0MTkwMTA0WhcNMjUxMjI1MTkwMTA0WjAzMTEwLwYDVQQD EygxYWE5Yjk5YzAzY2Y5YTkzYzdiZGEyYmUzMDQxOTJjZmJlZDE1YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5FddYgbLxsd70hKyKeUc+nIkaME 0WEnX5enykBRoMIyGJSsIJUgXKq6hdZRMu87W6Pk9Y7Wj0F56irxNUS5ZOIphLFe ZDXmD0SBF6KttnsTO08RM8c+EPwc85VtJwUvEvoXYP+uXcvferx5C5wxQ1muIlnZ KiYjyiAV9ulajO+X/wHmxxk6cFWrjwJRxR8hPGHDHd6o1aR+qsc2GluNjj2dMZQt vtRfEZSwOvmC1oz0rmgW0xmlaUc+u4fUBVDnDOFRM7TInQQoyblfyDewKTIzhU3J xIlsQb9Ns445xRNA4ssdB4aPlMT47xV0Gy2UY3gooia/Ku2QMtb/AkFy9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqpuZwDz5qTx72ivjBBks++0VsyMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrkDUOr4 8/wri0W2oFdrzsNdSC4Ozbb3ZIRt747UlUhqOchV/FSn8zaDy2RxRcqcopAJ6mTP CQVxXD/qgwF4Ox20t5AYdCqnlllnvrh0ZimTeF1/ZZxgxP+fp8waP0ysvndETE4b 0vVai+FZFmIBzdZHkHz/ah90hFSStuUCrLzsyNpdfN9uweAyi6nvLQNuIp8dvrNb AFm4IOSD/ew4e8Ks9SqcsYAyKdrPeypnU+9W51t6tL24V7b2OiOTR3R/2ZumqdlA R5075215nsrjtGcWhOqfD8ZHyOqg0LJbCl64ZZEc1UmGfkF631pTEW9EkWo5kQtc QZQr2YQIRINkyQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:30:32 2025 by rpki-client