This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json) Hash identifier: pbyqHpD51LXnX9Go7zySJ2zeFrosPcEPTy668hlQLxk= Subject key identifier: 33:00:FF:40:91:5A:C4:94:2F:38:D7:A3:CF:03:0B:1E:3B:3F:3F:EC Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56 Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56 Certificate serial: 019B424B0456C9A45006A0B411B570E0914E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 19:02:51 +0000 Manifest this update: Sun 21 Dec 2025 19:02:51 +0000 Manifest next update: Mon 22 Dec 2025 19:02:51 +0000 Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=) 2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: HsqdKCWZtXpK+SdfIgoLA9Kh0529g/BqamK65Txz1Uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4b:04:56:c9:a4:50:06:a0:b4:11:b5:70:e0:91:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89693344638acb0536582fab089876578ef6bc56 Validity Not Before: Dec 21 19:02:51 2025 GMT Not After : Dec 22 19:02:51 2025 GMT Subject: CN=3300ff40915ac4942f38d7a3cf030b1e3b3f3fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:93:07:20:61:c0:7a:eb:ce:33:2a:c0:5c: cd:3c:0c:c4:80:94:2c:20:7a:5a:11:e8:03:54:28: 42:94:7c:5a:da:22:56:c7:1f:a0:a7:5b:00:2b:af: 6d:a8:f6:60:ff:ba:8f:ee:a6:52:e3:53:ab:ca:bf: cd:74:97:5d:61:62:f6:4f:57:32:50:95:ea:b9:a0: c1:3d:61:d6:f2:53:ba:cc:a4:90:e6:65:d2:65:d6: a7:0f:60:5c:7a:77:2c:6d:29:d9:65:fe:f8:12:23: cb:c7:91:b7:15:e4:8a:52:1b:0b:79:98:ad:dc:6f: 11:ca:45:6b:47:24:2f:8a:d4:9c:10:d0:7d:a4:5a: b3:c3:b4:a0:67:26:5f:e8:2a:c2:16:e5:81:a0:35: 27:4f:30:2f:d9:39:5f:7f:11:11:fa:a8:b6:c1:ca: 4e:8b:f9:48:49:70:de:68:9f:37:fe:57:93:cd:e7: 95:5b:be:39:20:27:5d:d4:0d:a4:3a:4c:cf:7c:d7: b9:c2:d8:61:59:6b:cf:97:9f:77:14:8a:a3:c8:81: 54:d1:39:16:42:3d:fb:e6:67:5f:7c:33:c3:90:7d: a8:b4:94:48:c4:44:37:77:94:bc:0d:27:e4:e3:e6: b4:eb:44:c4:c3:74:b4:a5:49:a2:7c:bc:bc:89:da: 1d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:FF:40:91:5A:C4:94:2F:38:D7:A3:CF:03:0B:1E:3B:3F:3F:EC X509v3 Authority Key Identifier: keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f6:aa:bf:f0:df:bd:f7:47:6e:41:ed:a5:31:4d:2d:76:a3: a7:31:ea:29:2a:63:2e:ac:92:39:b1:33:17:42:28:e4:03:3a: 12:75:d2:66:02:bb:4d:d0:28:57:cc:d6:aa:d7:40:b8:72:cf: ee:bc:a5:df:f2:34:c3:09:ba:15:b3:38:64:be:2b:3b:11:5b: ae:d6:21:a5:c5:74:80:1f:f5:7c:0b:7c:f8:fe:ad:a9:d3:87: 89:dc:bd:d3:ee:e8:b3:21:f5:d2:77:98:cd:9a:49:06:30:dc: 59:7b:ad:52:13:78:c6:ac:6b:f9:03:6f:d8:9e:60:b0:0c:c0: ba:64:db:61:23:dd:48:12:8d:68:5d:68:86:cc:e4:48:93:f8: df:f4:62:4c:4d:69:b2:c1:58:7a:3d:59:4e:73:25:80:c4:61: d9:c2:0b:e7:7b:1e:55:bc:c6:dc:7d:f7:e6:d4:54:2a:b0:36: 55:f1:da:ea:67:63:f3:24:a9:70:b2:75:e6:b7:53:9a:31:11: e8:c3:74:a7:99:ac:d1:ef:3c:5e:2a:b4:c9:ef:cb:52:f0:f2: ab:f3:cf:41:0e:cc:a6:48:66:e8:82:8d:08:00:be:36:ac:69: 25:e8:7d:3d:5e:0f:07:0c:07:70:73:c5:b3:29:36:a6:f8:8e: 61:ce:f4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSwRWyaRQBqC0EbVw4JFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NjkzMzQ0NjM4YWNiMDUzNjU4MmZhYjA4OTg3NjU3OGVm NmJjNTYwHhcNMjUxMjIxMTkwMjUxWhcNMjUxMjIyMTkwMjUxWjAzMTEwLwYDVQQD EygzMzAwZmY0MDkxNWFjNDk0MmYzOGQ3YTNjZjAzMGIxZTNiM2YzZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoOTByBhwHrrzjMqwFzNPAzEgJQs IHpaEegDVChClHxa2iJWxx+gp1sAK69tqPZg/7qP7qZS41Oryr/NdJddYWL2T1cy UJXquaDBPWHW8lO6zKSQ5mXSZdanD2BcencsbSnZZf74EiPLx5G3FeSKUhsLeZit 3G8RykVrRyQvitScENB9pFqzw7SgZyZf6CrCFuWBoDUnTzAv2TlffxER+qi2wcpO i/lISXDeaJ83/leTzeeVW745ICdd1A2kOkzPfNe5wthhWWvPl593FIqjyIFU0TkW Qj375mdffDPDkH2otJRIxEQ3d5S8DSfk4+a060TEw3S0pUmifLy8idodwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMA/0CRWsSULzjXo88DCx47Pz/sMB8GA1UdIwQY MBaAFIlpM0RjissFNlgvqwiYdleO9rxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTkt NzBmOTQzZWFjNGRiLzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTktNzBmOTQzZWFjNGRi LzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPaqv/Df vfdHbkHtpTFNLXajpzHqKSpjLqySObEzF0Io5AM6EnXSZgK7TdAoV8zWqtdAuHLP 7ryl3/I0wwm6FbM4ZL4rOxFbrtYhpcV0gB/1fAt8+P6tqdOHidy90+7osyH10neY zZpJBjDcWXutUhN4xqxr+QNv2J5gsAzAumTbYSPdSBKNaF1ohszkSJP43/RiTE1p ssFYej1ZTnMlgMRh2cIL53seVbzG3H335tRUKrA2VfHa6mdj8ySpcLJ15rdTmjER 6MN0p5ms0e88Xiq0ye/LUvDyq/PPQQ7Mpkhm6IKNCAC+NqxpJeh9PV4PBwwHcHPF syk2pviOYc70rA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:06:19 2025 by rpki-client