This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json) Hash identifier: WuXylQ7BUQ/Q5PGlLq5qKldKvf0uX6nsGOsgQArzbV0= Subject key identifier: 12:A3:CA:22:33:07:B8:1E:5E:C2:27:52:94:DC:51:24:42:0A:22:3B Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6 Certificate serial: 019B4DA87D4F072DEE85A4A544BCD77467C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 00:00:46 +0000 Manifest this update: Wed 24 Dec 2025 00:00:46 +0000 Manifest next update: Thu 25 Dec 2025 00:00:46 +0000 Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: UfTl+VGfNlFpf73bgU7r6RMTSZ3l72WMV0CJXKRrr48=) 2: UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa (hash: cfx5VG/AEqP8NMaOBqVctXkelvdIOqGDstY0ytuNLZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:a8:7d:4f:07:2d:ee:85:a4:a5:44:bc:d7:74:67:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208b221700b281f823e322a32221a867e5b079a6 Validity Not Before: Dec 24 00:00:46 2025 GMT Not After : Dec 25 00:00:46 2025 GMT Subject: CN=12a3ca223307b81e5ec2275294dc5124420a223b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:6a:3f:25:8d:ea:36:82:41:09:2f:4c:b1: fb:23:df:70:b5:ce:40:77:11:61:84:78:a8:77:a4: bf:e7:a1:b2:fa:5e:c6:ad:97:2c:93:0a:c2:1f:e7: 39:18:c7:fd:0f:fa:b1:6b:1c:12:8f:52:c4:72:fb: a9:6e:e0:32:b5:dd:2f:db:47:23:60:07:d1:cf:85: 32:08:ad:f0:e9:96:43:e6:81:aa:1d:42:da:f2:75: b9:52:5e:16:a0:4b:2a:d1:7e:3c:11:d2:03:aa:b2: 01:79:c7:5c:40:2d:9a:e1:d5:32:1d:bc:c0:e3:99: 41:17:3b:63:15:bd:f9:82:61:f1:86:9e:5f:5c:d5: bc:3c:87:e6:94:12:9a:38:1a:b6:e1:3e:2a:78:b0: d6:49:30:38:f7:03:32:b2:ea:67:8f:0c:ba:d0:2e: 8d:7b:f4:37:46:c6:2a:9c:27:3d:5a:7a:2e:d7:74: 73:0d:35:04:2f:bb:c6:a1:25:46:a3:a8:94:ff:2d: 57:45:46:05:08:a7:9f:3d:1b:29:7c:10:4d:d6:08: d3:bb:67:6f:90:7a:b3:25:95:f2:ff:fe:d9:e5:08: 8b:fe:ad:81:03:95:8c:a9:33:26:3b:b5:8c:07:c2: fd:2d:7f:dc:72:f5:ad:e5:e2:8d:f7:09:05:9a:38: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:CA:22:33:07:B8:1E:5E:C2:27:52:94:DC:51:24:42:0A:22:3B X509v3 Authority Key Identifier: keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:51:f4:40:6a:d9:55:a6:99:a0:d2:15:41:fd:04:ba:58:b0: ae:a7:23:26:80:86:d4:c6:bd:f7:f2:64:d4:2f:22:93:b2:cb: 2e:93:8c:db:a6:ea:bd:56:ce:11:ae:7f:14:fd:1e:b8:58:36: e9:d5:b4:61:92:8d:46:7a:7a:83:d7:e9:cb:5e:8d:3b:3a:c0: 56:6d:6c:b9:16:73:45:92:b1:65:89:41:e0:8b:ba:41:70:1a: ee:36:e3:2f:65:f5:4c:2c:f4:38:61:4a:38:50:1c:9f:4b:40: d9:01:c8:8d:a0:b0:f2:f2:fc:b1:e1:30:36:c5:73:0e:9d:c2: 76:3a:a3:4c:d8:82:03:96:2c:ea:46:23:c5:03:57:16:2d:e6: 4e:7d:e6:7f:ab:71:c3:4e:d1:d6:b2:ea:25:07:9e:88:77:96: 8b:6f:7f:aa:f2:82:f7:9d:70:12:4f:bc:9e:bc:0e:5a:ff:bb: bf:ce:97:ab:f8:18:aa:77:91:4d:3f:f9:4e:ed:cf:61:e1:41: 61:93:1b:fc:e1:fe:9e:51:91:01:3f:0a:31:d4:39:1e:6d:3a: 9e:c8:0b:ed:77:67:3e:c0:ec:e8:08:1f:6d:42:66:30:c5:04: c9:83:59:9b:7c:79:2d:bc:b6:32:45:11:19:1d:ce:ab:c1:c5: 35:20:3e:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNqH1PBy3uhaSlRLzXdGfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi MDc5YTYwHhcNMjUxMjI0MDAwMDQ2WhcNMjUxMjI1MDAwMDQ2WjAzMTEwLwYDVQQD EygxMmEzY2EyMjMzMDdiODFlNWVjMjI3NTI5NGRjNTEyNDQyMGEyMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIxqPyWN6jaCQQkvTLH7I99wtc5A dxFhhHiod6S/56Gy+l7GrZcskwrCH+c5GMf9D/qxaxwSj1LEcvupbuAytd0v20cj YAfRz4UyCK3w6ZZD5oGqHULa8nW5Ul4WoEsq0X48EdIDqrIBecdcQC2a4dUyHbzA 45lBFztjFb35gmHxhp5fXNW8PIfmlBKaOBq24T4qeLDWSTA49wMysupnjwy60C6N e/Q3RsYqnCc9Wnou13RzDTUEL7vGoSVGo6iU/y1XRUYFCKefPRspfBBN1gjTu2dv kHqzJZXy//7Z5QiL/q2BA5WMqTMmO7WMB8L9LX/ccvWt5eKN9wkFmjhBpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKjyiIzB7geXsInUpTcUSRCCiI7MB8GA1UdIwQY MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVH0QGrZ VaaZoNIVQf0EuliwrqcjJoCG1Ma99/Jk1C8ik7LLLpOM26bqvVbOEa5/FP0euFg2 6dW0YZKNRnp6g9fpy16NOzrAVm1suRZzRZKxZYlB4Iu6QXAa7jbjL2X1TCz0OGFK OFAcn0tA2QHIjaCw8vL8seEwNsVzDp3CdjqjTNiCA5Ys6kYjxQNXFi3mTn3mf6tx w07R1rLqJQeeiHeWi29/qvKC951wEk+8nrwOWv+7v86Xq/gYqneRTT/5Tu3PYeFB YZMb/OH+nlGRAT8KMdQ5Hm06nsgL7XdnPsDs6AgfbUJmMMUEyYNZm3x5Lby2MkUR GR3Oq8HFNSA+ow== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:15 2025 by rpki-client