This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft File: iwUOQskY3jwnNm3vQzph8Tw7FrI.mft (raw, json) Hash identifier: FXHF6ftf0XJzOejdQ7SoTKdxwplEXVJ25uTCc0S6N/Q= Subject key identifier: F1:16:63:9A:09:0F:2D:C3:57:F3:39:F4:34:BA:41:3A:94:32:3C:FF Authority key identifier: 8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2 Certificate issuer: /CN=8b050e42c918de3c27366def433a61f13c3b16b2 Certificate serial: 019AF31CA05811EBEDDEAD574B43B8D0CCC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:10 +0000 Manifest this update: Sat 06 Dec 2025 10:02:10 +0000 Manifest next update: Sun 07 Dec 2025 10:02:10 +0000 Files and hashes: 1: iwUOQskY3jwnNm3vQzph8Tw7FrI.crl (hash: EOtkMU4X4IMeGarqxeVuB7gLlh99hrl5MnNrkDCPS68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a0:58:11:eb:ed:de:ad:57:4b:43:b8:d0:cc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b050e42c918de3c27366def433a61f13c3b16b2 Validity Not Before: Dec 6 10:02:10 2025 GMT Not After : Dec 7 10:02:10 2025 GMT Subject: CN=f116639a090f2dc357f339f434ba413a94323cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e5:a2:91:e2:08:e2:b3:4d:f7:40:94:07:7d: 24:6a:3b:9e:a2:3b:c8:d8:2c:cd:1c:d6:b5:96:e9: 26:44:f2:e7:31:5a:96:b3:13:ff:38:1f:bb:fb:f2: 17:5a:c1:bc:2a:97:df:c6:5e:c4:b0:c6:b3:bb:cb: 68:94:3d:b1:59:53:d6:56:c7:65:04:68:70:3a:1f: c9:ec:c4:51:89:59:b4:39:da:b0:21:d9:e5:a2:53: c0:51:47:7d:72:15:ab:45:d9:28:e1:cb:ca:ed:f5: ef:05:10:18:83:34:da:9f:93:56:30:d0:18:ab:b9: 30:f9:1d:e4:98:4b:04:6f:eb:64:08:b1:9f:29:f2: b5:3c:3c:71:b1:14:d6:29:0e:85:81:3b:1e:9c:d7: 1d:22:19:99:51:f4:75:f3:4c:25:b6:52:87:4d:ca: 7d:51:8d:c8:92:29:67:ad:c9:71:e3:86:37:a3:16: 52:13:7c:8d:ed:2e:c2:9e:e9:c7:cb:29:52:d3:21: 70:36:12:a2:b5:83:72:38:91:28:05:83:8c:5d:e7: 46:a2:82:7d:4c:07:c7:e6:5d:97:09:30:2d:c7:1d: 4e:d4:ed:51:b3:61:46:00:a8:93:fb:06:0b:12:70: 22:c5:6b:ad:62:30:a4:e3:dd:4f:7f:f4:c2:66:2a: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:16:63:9A:09:0F:2D:C3:57:F3:39:F4:34:BA:41:3A:94:32:3C:FF X509v3 Authority Key Identifier: keyid:8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b9:80:98:5f:9f:c8:ec:fd:ee:f4:a0:f1:16:ec:ef:c2:b7: 82:a3:2c:7b:1e:51:eb:e7:68:84:a9:3d:71:e5:4a:0a:5f:cf: d3:93:c4:0a:04:d3:8a:d8:94:1f:0f:17:6d:b8:cf:13:c1:5d: a7:b9:f0:e8:ac:05:7e:ac:ca:a0:29:e4:9b:e6:fb:32:7c:6c: 11:0b:b0:f4:05:cd:ef:f9:1f:85:70:a6:5f:33:5f:e3:01:49: fc:14:f9:b9:99:86:85:39:b6:dd:c9:10:d8:d1:d6:3d:9f:9c: b7:0c:23:ec:2e:08:f0:34:3f:d0:9f:22:81:b9:d1:5b:e6:a5: 61:d5:00:49:c3:8e:3c:38:18:a0:e2:ca:c2:e6:81:59:a9:b9: a1:4e:09:fd:55:18:b3:98:07:11:44:88:ff:90:ea:8a:bf:53: 3c:8f:36:4f:ae:af:c7:4f:aa:e8:0f:4f:3a:d7:3e:80:03:99: a5:ef:6e:5b:a3:d2:d4:6f:6a:ea:25:53:fb:7b:c4:60:51:38: b5:04:b9:c2:4a:d1:c7:db:37:b2:4a:c6:b2:81:cd:1b:dc:1e: 35:5d:40:a0:be:3a:e8:59:f9:a6:d0:6e:7a:54:d1:96:7f:2f: ef:6a:e0:42:c6:bf:b3:ff:f6:6c:6c:ca:9d:f1:70:e4:9c:51: b4:fe:d2:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKBYEevt3q1XS0O40MzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDUwZTQyYzkxOGRlM2MyNzM2NmRlZjQzM2E2MWYxM2Mz YjE2YjIwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD EyhmMTE2NjM5YTA5MGYyZGMzNTdmMzM5ZjQzNGJhNDEzYTk0MzIzY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uWikeII4rNN90CUB30kajueojvI 2CzNHNa1lukmRPLnMVqWsxP/OB+7+/IXWsG8Kpffxl7EsMazu8tolD2xWVPWVsdl BGhwOh/J7MRRiVm0OdqwIdnlolPAUUd9chWrRdko4cvK7fXvBRAYgzTan5NWMNAY q7kw+R3kmEsEb+tkCLGfKfK1PDxxsRTWKQ6FgTsenNcdIhmZUfR180wltlKHTcp9 UY3Ikilnrclx44Y3oxZSE3yN7S7CnunHyylS0yFwNhKitYNyOJEoBYOMXedGooJ9 TAfH5l2XCTAtxx1O1O1Rs2FGAKiT+wYLEnAixWutYjCk491Pf/TCZiq/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEWY5oJDy3DV/M59DS6QTqUMjz/MB8GA1UdIwQY MBaAFIsFDkLJGN48JzZt70M6YfE8OxayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdVT1Fza1kzanduTm0zdlF6cGg4VHc3RnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80YTZjNmQtYjg1NS00YjQ2LWIzMmYt Y2FjMmNmZmY2Nzc5LzEvaXdVT1Fza1kzanduTm0zdlF6cGg4VHc3RnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80YTZjNmQtYjg1NS00YjQ2LWIzMmYtY2FjMmNmZmY2Nzc5 LzEvaXdVT1Fza1kzanduTm0zdlF6cGg4VHc3RnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAermAmF+f yOz97vSg8Rbs78K3gqMsex5R6+dohKk9ceVKCl/P05PECgTTitiUHw8XbbjPE8Fd p7nw6KwFfqzKoCnkm+b7MnxsEQuw9AXN7/kfhXCmXzNf4wFJ/BT5uZmGhTm23ckQ 2NHWPZ+ctwwj7C4I8DQ/0J8igbnRW+alYdUAScOOPDgYoOLKwuaBWam5oU4J/VUY s5gHEUSI/5Dqir9TPI82T66vx0+q6A9POtc+gAOZpe9uW6PS1G9q6iVT+3vEYFE4 tQS5wkrRx9s3skrGsoHNG9weNV1AoL466Fn5ptBuelTRln8v72rgQsa/s//2bGzK nfFw5JxRtP7Sgw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:34 2025 by rpki-client