This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json) Hash identifier: Q/EhcTsPXOHZVkuNspGNirSXtAzGJwaUGTeoPMvH7aY= Subject key identifier: B6:8B:93:D6:64:95:08:8A:C2:08:16:A0:C8:21:02:6D:4D:50:8C:14 Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Certificate serial: 019B3AFE0D614ECC571B003C79F586501743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft Manifest number: 17DB Signing time: Sat 20 Dec 2025 09:01:26 +0000 Manifest this update: Sat 20 Dec 2025 09:01:26 +0000 Manifest next update: Sun 21 Dec 2025 09:01:26 +0000 Files and hashes: 1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=) 2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: tQ2bSFHetTrvdxaJzP8TJeSCtvQABod8npRUNyD0GV4=) 3: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=) 4: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=) 5: bt-PMEtT1IwN0eDJCO5vE7NIDdQ.roa (hash: sPgTyfptj00zzq62H1SqHfdWzrVXbflq204bOJGhoUw=) 6: knF5z7M4UIvC6eeoTXUGhnRxT0k.roa (hash: XFbD7w0kWLSfVZ1roO0o5/UKd6EksNenbK+US1bpOhU=) 7: l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa (hash: qHA/WOgfb5PSClEW7ipNBpljR8hRqs+26OIpJqnzQCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:0d:61:4e:cc:57:1b:00:3c:79:f5:86:50:17:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Validity Not Before: Dec 20 09:01:26 2025 GMT Not After : Dec 21 09:01:26 2025 GMT Subject: CN=b68b93d66495088ac20816a0c821026d4d508c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:60:58:1d:22:68:f2:a4:76:85:8c:3f:60: 7d:95:59:58:6a:52:a9:c5:36:be:34:f2:c4:7e:f1: 08:88:57:c3:bb:a9:74:db:ca:fb:3d:34:a9:70:51: d4:4a:74:bc:98:66:57:f0:9c:fd:30:75:6d:23:e5: 4d:04:3d:45:16:d5:99:4b:c0:ef:dc:d5:73:3d:c6: 96:62:95:20:23:eb:ab:41:d3:f7:b3:4a:79:85:e6: e9:b0:54:ec:be:1a:00:82:68:6c:58:71:59:f1:c9: d0:35:db:81:4b:38:e7:bd:7d:d0:79:ef:a9:51:cb: 00:05:82:9c:4e:52:44:61:00:51:3c:bf:7e:b7:5a: 4b:06:ff:86:61:2b:d4:af:b0:be:b6:a9:56:fa:ba: 4f:1d:68:98:9e:a8:c4:b4:ca:51:79:51:56:2c:d5: 51:95:e8:46:e2:4b:e7:f1:30:bb:1c:8c:c0:a0:12: 63:d2:bf:1b:0c:ab:4d:66:10:fc:35:99:e9:a4:12: 09:f2:64:5b:c6:9c:6e:8c:33:17:2f:d9:34:a0:ba: 66:c1:87:47:a2:a1:67:0a:e7:56:56:20:9c:92:e5: e5:81:60:9b:e8:c5:9c:d9:4c:37:22:b4:e3:f8:25: 5d:d1:5d:68:41:e6:1d:af:95:09:2a:6b:c9:ab:f6: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8B:93:D6:64:95:08:8A:C2:08:16:A0:C8:21:02:6D:4D:50:8C:14 X509v3 Authority Key Identifier: keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:54:84:f8:f9:29:ec:41:27:08:a8:d0:a0:cc:20:44:c1:9e: 72:21:78:aa:90:c9:1b:51:43:01:f0:b4:28:d6:57:00:67:7a: 44:ba:52:fd:ea:e0:1e:c2:92:73:48:02:6e:a4:bd:28:97:22: 7c:d3:e4:9f:ba:2b:01:e0:65:77:fa:0c:c0:3e:9d:1c:7f:da: 17:7b:97:b7:63:89:dd:22:34:66:ba:bb:ca:13:a4:54:12:45: c8:d7:6c:8c:43:b0:45:d5:e6:2e:5b:a0:6f:94:19:4a:bd:aa: d4:a2:c2:ad:d4:f7:52:42:60:d4:2f:a6:f1:fd:ee:4a:f8:d1: 3e:eb:c0:b8:f7:a5:1f:3e:b7:95:35:b5:e6:f2:e3:38:71:2e: bf:48:df:9f:22:33:af:09:70:17:40:30:0b:84:cb:3d:c6:2c: 1c:b2:3c:18:a3:a9:71:d3:18:fb:2d:ee:68:ed:ef:74:12:dd: 79:e7:bf:7a:b0:90:73:be:51:67:59:8c:7c:62:60:bc:0a:1a: 41:bf:70:77:dc:9e:c0:6d:18:6e:82:d7:ef:f5:93:89:ac:c4: d0:4c:36:60:ae:c7:21:cd:bc:ec:16:3b:ec:46:a4:53:7d:af: 47:95:d9:7b:a4:00:ec:53:5f:6f:69:d1:6e:7e:b1:13:d0:42: 95:9f:a0:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/g1hTsxXGwA8efWGUBdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw ZDQxZTUwHhcNMjUxMjIwMDkwMTI2WhcNMjUxMjIxMDkwMTI2WjAzMTEwLwYDVQQD EyhiNjhiOTNkNjY0OTUwODhhYzIwODE2YTBjODIxMDI2ZDRkNTA4YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQZgWB0iaPKkdoWMP2B9lVlYalKp xTa+NPLEfvEIiFfDu6l028r7PTSpcFHUSnS8mGZX8Jz9MHVtI+VNBD1FFtWZS8Dv 3NVzPcaWYpUgI+urQdP3s0p5hebpsFTsvhoAgmhsWHFZ8cnQNduBSzjnvX3Qee+p UcsABYKcTlJEYQBRPL9+t1pLBv+GYSvUr7C+tqlW+rpPHWiYnqjEtMpReVFWLNVR lehG4kvn8TC7HIzAoBJj0r8bDKtNZhD8NZnppBIJ8mRbxpxujDMXL9k0oLpmwYdH oqFnCudWViCckuXlgWCb6MWc2Uw3IrTj+CVd0V1oQeYdr5UJKmvJq/bKNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaLk9ZklQiKwggWoMghAm1NUIwUMB8GA1UdIwQY MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt M2RmN2ZhZjM1MzVkLzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVSE+Pkp 7EEnCKjQoMwgRMGeciF4qpDJG1FDAfC0KNZXAGd6RLpS/ergHsKSc0gCbqS9KJci fNPkn7orAeBld/oMwD6dHH/aF3uXt2OJ3SI0Zrq7yhOkVBJFyNdsjEOwRdXmLlug b5QZSr2q1KLCrdT3UkJg1C+m8f3uSvjRPuvAuPelHz63lTW15vLjOHEuv0jfnyIz rwlwF0AwC4TLPcYsHLI8GKOpcdMY+y3uaO3vdBLdeee/erCQc75RZ1mMfGJgvAoa Qb9wd9yewG0YboLX7/WTiazE0Ew2YK7HIc287BY77EakU32vR5XZe6QA7FNfb2nR bn6xE9BClZ+g8w== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:10 2025 by rpki-client