This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft File: iW81xeAyGs0CFn3viAfwu29xwo0.mft (raw, json) Hash identifier: kSTfeAsilWf1K3OV+8TaPYnFHPMMIevbQo0v42GyPqE= Subject key identifier: 7D:41:37:EC:43:0A:CC:BD:FD:D9:9B:B8:71:D7:49:99:EF:6C:4B:21 Authority key identifier: 89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D Certificate issuer: /CN=896f35c5e0321acd02167def8807f0bb6f71c28d Certificate serial: 019AF12E8C1B778FCEDEAF5B11B60B5596D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft Manifest number: 1323 Signing time: Sat 06 Dec 2025 01:02:30 +0000 Manifest this update: Sat 06 Dec 2025 01:02:30 +0000 Manifest next update: Sun 07 Dec 2025 01:02:30 +0000 Files and hashes: 1: KzxZqybvsz4qWRvLNMoGl_b-dg0.roa (hash: waO3ZFTQ9Kiow9t+yCx6WlAToF1IQKM9UgVqX7Ju9ms=) 2: iW81xeAyGs0CFn3viAfwu29xwo0.crl (hash: ZFsqk9SPW8xf/3WHz8WvQYf/M+lUiyTyBo5fEeETe9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8c:1b:77:8f:ce:de:af:5b:11:b6:0b:55:96:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896f35c5e0321acd02167def8807f0bb6f71c28d Validity Not Before: Dec 6 01:02:30 2025 GMT Not After : Dec 7 01:02:30 2025 GMT Subject: CN=7d4137ec430accbdfdd99bb871d74999ef6c4b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:28:2b:21:c4:4b:12:b8:e3:85:d1:24:b2: 3b:69:ff:f7:d7:de:e5:73:2e:97:43:f8:b2:a7:97: a3:c0:17:4b:2f:db:ea:80:8a:4d:ec:1d:77:71:6f: b6:1b:e4:78:e8:6b:2d:dc:20:7c:0c:c3:94:0a:c1: 54:46:0e:23:3e:e2:8e:60:b9:2d:7f:44:6b:a5:ac: 4e:f5:1a:59:ef:c0:cf:fb:32:38:22:5a:dd:fc:6f: d6:82:ca:78:e0:8e:4d:ed:f0:66:66:2e:95:b7:6c: ec:97:76:a0:ab:a4:26:98:a0:94:a0:b6:9e:8f:a6: 49:e0:9b:86:75:a9:cb:d3:49:2b:6d:20:e4:14:9a: 33:3a:91:51:ed:0d:f5:8a:45:f1:72:59:11:67:8d: 34:f1:75:40:18:d9:4b:b4:ea:c9:9d:11:bc:f7:12: a7:be:72:a4:ae:48:70:5b:83:97:db:96:b9:87:84: e5:d2:03:f2:09:74:fd:bf:c6:21:48:ee:81:89:18: 3c:33:46:1f:f1:b2:bc:25:c3:2f:31:75:92:b0:3f: c4:95:c0:5d:b3:74:fa:2c:69:39:cc:a3:78:ae:90: 2c:36:48:c6:06:b7:a1:37:bb:25:fa:26:09:aa:5e: b5:35:c9:0b:53:a8:9b:4c:bc:5a:03:78:40:3b:77: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:37:EC:43:0A:CC:BD:FD:D9:9B:B8:71:D7:49:99:EF:6C:4B:21 X509v3 Authority Key Identifier: keyid:89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:21:93:65:70:c8:18:87:48:2c:80:07:cb:ad:48:db:ab:f3: 2b:94:07:19:83:c3:7e:4a:f3:58:ba:43:dc:53:20:f8:ed:92: 67:bc:a3:1c:3e:d3:ee:15:b6:d5:87:82:f9:d8:67:1f:a9:6c: 57:e4:b5:de:3b:92:31:18:eb:f2:48:7c:1b:e8:3d:30:27:d7: da:dd:cb:db:99:fa:1d:26:bf:28:8b:2a:7f:c4:b2:71:be:61: e6:93:3d:c3:df:86:b7:a6:8a:a4:83:96:1f:bd:2e:d5:5b:6c: fe:92:e7:e9:30:af:02:be:57:f7:78:55:7d:f5:ec:2f:6a:90: 2e:ee:73:ba:9a:31:09:52:40:34:84:31:08:eb:0c:32:98:c4: fe:48:d4:72:bd:39:cc:25:23:5d:ef:f3:aa:3f:b6:9a:e3:0d: 03:0c:5a:02:c6:7a:fb:ac:6c:02:5f:c3:2d:46:20:aa:f1:1f: 91:cd:7d:d6:95:62:79:82:11:ec:cd:c5:9c:c6:a6:a9:0e:02: 4b:ac:ab:43:c0:9e:ae:3b:96:0c:d5:0c:ab:0e:3c:e4:ea:54: d4:9e:88:a4:43:9a:1a:d9:c8:87:dc:78:24:d7:f4:dc:c2:be: 52:52:96:ed:05:6f:52:66:f3:00:6f:ba:8e:e4:88:6f:cf:0d: c7:79:c9:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLowbd4/O3q9bEbYLVZbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmYzNWM1ZTAzMjFhY2QwMjE2N2RlZjg4MDdmMGJiNmY3 MWMyOGQwHhcNMjUxMjA2MDEwMjMwWhcNMjUxMjA3MDEwMjMwWjAzMTEwLwYDVQQD Eyg3ZDQxMzdlYzQzMGFjY2JkZmRkOTliYjg3MWQ3NDk5OWVmNmM0YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HwoKyHESxK444XRJLI7af/3197l cy6XQ/iyp5ejwBdLL9vqgIpN7B13cW+2G+R46Gst3CB8DMOUCsFURg4jPuKOYLkt f0RrpaxO9RpZ78DP+zI4Ilrd/G/Wgsp44I5N7fBmZi6Vt2zsl3agq6QmmKCUoLae j6ZJ4JuGdanL00krbSDkFJozOpFR7Q31ikXxclkRZ4008XVAGNlLtOrJnRG89xKn vnKkrkhwW4OX25a5h4Tl0gPyCXT9v8YhSO6BiRg8M0Yf8bK8JcMvMXWSsD/ElcBd s3T6LGk5zKN4rpAsNkjGBrehN7sl+iYJql61NckLU6ibTLxaA3hAO3eDJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1BN+xDCsy9/dmbuHHXSZnvbEshMB8GA1UdIwQY MBaAFIlvNcXgMhrNAhZ974gH8LtvccKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYt MjI5OWE2N2U2MDAxLzEvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYtMjI5OWE2N2U2MDAx LzEvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSGTZXDI GIdILIAHy61I26vzK5QHGYPDfkrzWLpD3FMg+O2SZ7yjHD7T7hW21YeC+dhnH6ls V+S13juSMRjr8kh8G+g9MCfX2t3L25n6HSa/KIsqf8Sycb5h5pM9w9+Gt6aKpIOW H70u1Vts/pLn6TCvAr5X93hVffXsL2qQLu5zupoxCVJANIQxCOsMMpjE/kjUcr05 zCUjXe/zqj+2muMNAwxaAsZ6+6xsAl/DLUYgqvEfkc191pVieYIR7M3FnMamqQ4C S6yrQ8CerjuWDNUMqw485OpU1J6IpEOaGtnIh9x4JNf03MK+UlKW7QVvUmbzAG+6 juSIb88Nx3nJRA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:53 2025 by rpki-client