This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json) Hash identifier: U0ZpK4cFWL3Z+Gmgrs6Chb0mETyuAkV6qUx27yyJ9Co= Subject key identifier: D4:B8:27:40:52:51:1A:E8:DE:3A:BA:06:B7:E1:67:B7:5A:FE:59:57 Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Certificate serial: 019AF16433006A376DEF9C30CA355B17792F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: EaH2QQHBEDcGaNdJtYZj2ZFNJ5k.roa (hash: 4+/I2Hjrn0j9dA2Zz00LeWlJdI1vEoPYq2H+FkwWxIU=) 2: VU8Lnit5-5bWS_B3iU2pbUqjD3A.roa (hash: f9Jbrulzf/covwNo8YJa0VovFN79QafWnPSPZ8cv6CI=) 3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: 4kXmkIJ8KJKszfslFRcA8lLeG7F/KrN3FuUJSWeYEVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:33:00:6a:37:6d:ef:9c:30:ca:35:5b:17:79:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=d4b8274052511ae8de3aba06b7e167b75afe5957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:a3:7a:d8:1d:63:90:70:13:83:68:fc:a1: ea:98:c9:d3:2b:63:7f:8d:9e:67:5f:64:4f:1c:c7: 37:2f:9e:6d:6d:ea:ae:d0:66:da:ac:bc:14:b4:b7: 3b:8d:34:d9:dd:cf:6c:eb:34:a1:e9:fe:65:a0:79: 7a:d4:0f:f1:99:86:75:91:2b:fd:67:63:1b:6b:78: 84:be:9f:75:ae:9c:af:12:de:6b:1e:dd:cf:40:c4: 12:43:12:20:9c:81:be:e9:94:24:15:3f:7f:b4:83: f7:fb:2e:7b:70:1f:8d:02:07:18:77:7e:ff:c4:75: ca:40:e1:6b:21:e3:d1:48:a9:c5:4f:9d:7a:72:13: 7f:64:4c:47:ea:1a:4c:5f:c0:99:c8:42:9a:98:8c: 76:62:b2:53:68:30:92:93:2e:cb:e4:37:5c:72:f4: c3:4f:5f:a1:de:8f:3e:29:57:ab:b7:74:7d:ff:4c: 63:8a:0a:d0:2a:bb:4b:34:68:c4:79:06:8a:38:bf: f2:6b:af:ba:cf:f6:49:fa:da:cd:91:13:0b:a3:76: e3:66:a5:5f:12:94:41:3a:2b:26:56:4a:dd:d2:31: 98:51:70:ca:60:51:83:48:05:35:3c:1f:b2:73:16: 7b:ec:c9:3c:f3:fa:ab:8b:85:c0:6e:35:64:28:76: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B8:27:40:52:51:1A:E8:DE:3A:BA:06:B7:E1:67:B7:5A:FE:59:57 X509v3 Authority Key Identifier: keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:91:c5:55:4e:cf:bd:4e:7f:cc:b1:04:e9:d3:20:6a:fe:fe: 73:06:ad:91:d0:32:32:5f:a6:2e:0d:2b:ad:82:61:20:d6:26: e0:44:f2:a0:da:60:70:43:d5:66:57:0c:3c:26:2c:c1:0c:5f: 94:1d:e6:84:4d:b0:cd:c5:3f:85:60:9e:39:ed:64:be:8a:63: d2:46:e2:25:21:31:a6:eb:28:4c:e9:7a:b3:81:88:08:fc:70: 51:fb:ec:d7:75:ca:35:45:29:63:cc:f8:c8:a5:ad:8c:9f:d5: 66:ea:27:3d:e5:c4:e7:63:6e:2d:58:78:26:d6:01:83:db:d8: 80:bd:55:ac:1c:c5:33:66:f1:3e:16:64:ec:91:5b:0c:a4:42: be:8d:13:fa:7f:5e:65:b5:80:88:74:f0:57:f6:d6:e8:99:93: 38:4f:fe:d4:7f:55:0c:ff:68:1d:3e:17:fc:87:bc:02:0d:91: 74:7a:c3:30:47:24:83:20:95:45:f2:b2:2b:0d:ac:a0:14:84: 0b:cb:15:fe:bd:ae:a7:d0:f6:b2:e4:6d:8e:22:6d:7f:05:0f: 90:b0:6d:36:bc:a7:f6:41:d8:ec:ce:da:37:59:e8:ff:0a:ea: 16:76:60:e5:7f:22:49:4c:89:a9:d9:f4:da:d6:7f:e0:d2:af: 03:63:63:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDMAajdt75wwyjVbF3kvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy M2Q1YjgwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD EyhkNGI4Mjc0MDUyNTExYWU4ZGUzYWJhMDZiN2UxNjdiNzVhZmU1OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFGjetgdY5BwE4No/KHqmMnTK2N/ jZ5nX2RPHMc3L55tbequ0GbarLwUtLc7jTTZ3c9s6zSh6f5loHl61A/xmYZ1kSv9 Z2Mba3iEvp91rpyvEt5rHt3PQMQSQxIgnIG+6ZQkFT9/tIP3+y57cB+NAgcYd37/ xHXKQOFrIePRSKnFT516chN/ZExH6hpMX8CZyEKamIx2YrJTaDCSky7L5DdccvTD T1+h3o8+KVert3R9/0xjigrQKrtLNGjEeQaKOL/ya6+6z/ZJ+trNkRMLo3bjZqVf EpRBOismVkrd0jGYUXDKYFGDSAU1PB+ycxZ77Mk88/qri4XAbjVkKHatzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS4J0BSURro3jq6BrfhZ7da/llXMB8GA1UdIwQY MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5HFVU7P vU5/zLEE6dMgav7+cwatkdAyMl+mLg0rrYJhINYm4ETyoNpgcEPVZlcMPCYswQxf lB3mhE2wzcU/hWCeOe1kvopj0kbiJSExpusoTOl6s4GICPxwUfvs13XKNUUpY8z4 yKWtjJ/VZuonPeXE52NuLVh4JtYBg9vYgL1VrBzFM2bxPhZk7JFbDKRCvo0T+n9e ZbWAiHTwV/bW6JmTOE/+1H9VDP9oHT4X/Ie8Ag2RdHrDMEckgyCVRfKyKw2soBSE C8sV/r2up9D2suRtjiJtfwUPkLBtNryn9kHY7M7aN1no/wrqFnZg5X8iSUyJqdn0 2tZ/4NKvA2NjTw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:43 2025 by rpki-client