This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json) Hash identifier: 4Y5zxCI9NuTfv+iYpUhtjmcUv86RGD3K/9rCFqFxLNQ= Subject key identifier: CD:50:51:25:9B:28:26:59:B3:E8:5C:55:91:D9:18:72:AB:C4:1A:F6 Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79 Certificate serial: 019B3ED9FC7CCD4F3037CF6FBC4287EE7506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft Manifest number: 0D7A Signing time: Sun 21 Dec 2025 03:00:31 +0000 Manifest this update: Sun 21 Dec 2025 03:00:31 +0000 Manifest next update: Mon 22 Dec 2025 03:00:31 +0000 Files and hashes: 1: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (hash: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=) 2: W0D9WIXmr4DG_xEj-xUZT82-dxQ.roa (hash: fBvWuzB9wp05SoO5x+Vb/EneDFqD/kJHT0KgvrAsF24=) 3: aheTt6_pS0K22xA67glREELod8A.roa (hash: qWC2pzWM7a75jc5rNLOSS10p2/VCBqYrjSpxRU7D9zI=) 4: g_SxF-_E_VpwVrwNdmKsnzbOYaM.roa (hash: wSo0WU3KC/Wo2i+eQ7vlG4IlKtTmfnJLRouHYXZqnO4=) 5: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: 3YJvXReeK2FoPfE1Rl35XjESlZek4G/sFGzKsXNL+0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:d9:fc:7c:cd:4f:30:37:cf:6f:bc:42:87:ee:75:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79 Validity Not Before: Dec 21 03:00:31 2025 GMT Not After : Dec 22 03:00:31 2025 GMT Subject: CN=cd5051259b282659b3e85c5591d91872abc41af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:f6:59:30:a4:d8:69:b2:da:78:ef:02:58: fe:cc:f7:d7:46:d3:b7:2d:75:35:17:2a:aa:22:df: 21:53:c6:c4:6e:86:88:d5:a5:09:1b:fe:81:f9:68: e8:ce:73:bd:b0:d4:bf:e7:e3:c9:13:17:cf:31:dd: 7c:24:5c:d8:2c:c4:18:b2:cc:cd:93:51:56:94:e5: 73:fa:20:fa:de:8c:d8:eb:38:04:98:db:1a:f4:ee: 43:1c:c9:ef:dd:7f:4e:55:d0:5d:bd:c3:40:1f:29: ca:70:45:7b:89:62:5c:98:a7:ff:a3:51:f5:b1:42: 44:f8:8a:0f:ba:55:82:18:96:f0:c5:8c:d3:9f:f4: f2:96:d8:81:1b:3f:d6:4c:a3:13:45:07:7d:ae:2c: 5c:14:4f:1d:33:1a:38:08:b5:a4:cc:43:a6:36:b8: 6f:19:ef:ef:a3:dc:47:08:5a:a5:03:ea:88:b6:28: c9:0b:7f:98:88:41:c2:f6:08:ca:e5:08:84:1f:e2: 32:f3:4c:bd:a8:68:9d:b3:f3:a1:eb:04:19:37:df: d4:b5:80:45:a3:12:ae:26:19:44:c4:ee:f8:59:2d: ef:db:81:03:c3:94:9e:f2:d5:0d:83:4e:9a:71:1c: be:43:05:a6:be:7a:f3:76:d1:95:36:ae:37:ed:47: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:51:25:9B:28:26:59:B3:E8:5C:55:91:D9:18:72:AB:C4:1A:F6 X509v3 Authority Key Identifier: keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:5a:c8:ae:5c:2f:ad:5e:4d:7a:0c:db:bf:49:d1:a8:49: 83:bf:22:e3:c0:af:a5:6e:31:69:88:d9:2d:31:2f:b3:d3:fe: 58:04:6d:80:12:fb:d0:38:bd:0a:91:41:2c:80:b5:9e:b6:3d: 7a:73:87:92:83:45:83:9b:67:12:ac:67:2b:c4:18:73:ac:d2: 02:10:6f:1f:2a:b5:18:5a:85:90:63:a9:e0:df:47:d8:54:82: 3e:80:34:ed:44:e0:ef:dd:03:6a:0f:ed:c0:1e:89:42:23:d3: 0e:51:d9:7f:d9:40:e9:79:11:2a:dc:a1:11:c6:c0:81:55:a2: d4:9b:d1:27:11:e0:14:82:89:96:c1:f0:70:26:56:c8:b7:b1: 60:5c:cc:28:86:35:50:b1:92:6e:cf:95:21:f1:2e:1e:eb:00: 32:0f:b2:b4:3e:c4:07:cb:10:05:de:ed:38:b2:94:c2:5f:a8: 5e:94:02:65:06:62:84:42:69:7d:95:88:b6:60:52:43:e1:48: 3a:35:45:7b:fc:97:57:f9:0e:f0:58:8b:3b:18:b4:8e:a1:40: c1:17:e1:bf:c9:35:fb:31:7d:5b:c7:31:ad:6d:ed:df:10:a3: 99:dd:21:56:45:c7:2f:cb:34:4e:53:29:d9:f6:b8:52:9c:70: 7a:f8:61:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2fx8zU8wN89vvEKH7nUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1 MDRmNzkwHhcNMjUxMjIxMDMwMDMxWhcNMjUxMjIyMDMwMDMxWjAzMTEwLwYDVQQD EyhjZDUwNTEyNTliMjgyNjU5YjNlODVjNTU5MWQ5MTg3MmFiYzQxYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnD2WTCk2Gmy2njvAlj+zPfXRtO3 LXU1FyqqIt8hU8bEboaI1aUJG/6B+WjoznO9sNS/5+PJExfPMd18JFzYLMQYsszN k1FWlOVz+iD63ozY6zgEmNsa9O5DHMnv3X9OVdBdvcNAHynKcEV7iWJcmKf/o1H1 sUJE+IoPulWCGJbwxYzTn/TyltiBGz/WTKMTRQd9rixcFE8dMxo4CLWkzEOmNrhv Ge/vo9xHCFqlA+qItijJC3+YiEHC9gjK5QiEH+Iy80y9qGids/Oh6wQZN9/UtYBF oxKuJhlExO74WS3v24EDw5Se8tUNg06acRy+QwWmvnrzdtGVNq437UdOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1QUSWbKCZZs+hcVZHZGHKrxBr2MB8GA1UdIwQY MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt NmJjMzkwOTk1Y2FiLzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2VayK5c L61eTXoM279J0ahJg78i48CvpW4xaYjZLTEvs9P+WARtgBL70Di9CpFBLIC1nrY9 enOHkoNFg5tnEqxnK8QYc6zSAhBvHyq1GFqFkGOp4N9H2FSCPoA07UTg790Dag/t wB6JQiPTDlHZf9lA6XkRKtyhEcbAgVWi1JvRJxHgFIKJlsHwcCZWyLexYFzMKIY1 ULGSbs+VIfEuHusAMg+ytD7EB8sQBd7tOLKUwl+oXpQCZQZihEJpfZWItmBSQ+FI OjVFe/yXV/kO8FiLOxi0jqFAwRfhv8k1+zF9W8cxrW3t3xCjmd0hVkXHL8s0TlMp 2fa4Upxwevhhhg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:52:32 2025 by rpki-client