This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: wle/4+Q1FJj7tiaU8gFgC964xFVHtoiGMQ3AeKbUgOw= Subject key identifier: 0F:FF:F5:08:4E:86:C9:FB:A8:FE:75:24:EF:FD:7C:52:91:C0:46:4F Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019AF16417D0A39A07E29D7D3E0ACD056062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: 5AXDwMNDZZJ0p2E5YCI5vVZD8a4.roa (hash: FFW/pHdY/n3mzgFNkaOSLkOhdoLgzZsHvl8kfEiEWu8=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: HGjL3w9y3t3ClZIU576F3oBS2geYL7sPh20v11zYhOI=) 3: J0xQ_1w-gFpYF0LKQsYsfk-VGSQ.roa (hash: BG3PKtX8/a+ywGlKRJT/ICLStEzmSbRCf01OUsYWJWQ=) 4: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=) 5: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=) 6: Qx2_RHRctf32pDo6Ld_wrMI7fd8.roa (hash: hDrMyW+0exQk+cf4mu6FMV+aN0cWstWHfqosAD9dRy0=) 7: Rlb2tOHsLeLyjP1RSURryd9jvec.roa (hash: jecxIoKlBvw6gWyoJ8u8/wuvD6cFE1AGV7OziEZZTXs=) 8: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=) 9: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=) 10: _zKodDelYzkycuOaCvmIVNehVaU.roa (hash: 06Jd/JDGW6Xe4+7xG76Qs6GUdZwHdMuLomnrIM9Qkbg=) 11: cf3WHfeWDYu7TWnELnXzycteCaY.roa (hash: TcxuwVKWwTiShtI0Unrv/gZ/YwHGK8T1H3ocBzBxMZk=) 12: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:17:d0:a3:9a:07:e2:9d:7d:3e:0a:cd:05:60:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=0ffff5084e86c9fba8fe7524effd7c5291c0464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:a2:d5:ec:aa:75:15:93:76:ab:b9:36:fd: 29:0f:c2:48:49:87:1f:af:d8:0e:de:01:c2:b1:09: d7:2a:5e:03:26:f6:32:f1:36:dc:5e:f1:5a:4e:5b: 7e:4e:6c:68:c4:79:4f:dc:36:59:57:38:c0:33:2f: da:4e:2f:77:cf:6c:05:cd:de:a2:ea:3c:ee:e5:52: 48:dc:50:4b:84:ae:8e:22:98:e1:5f:d4:cd:ca:2b: 5d:83:d0:98:96:c8:6f:23:a5:42:44:a4:a0:62:d2: 76:3d:b6:8f:ae:d6:ed:ea:79:1e:70:78:b2:8a:90: 90:c4:ea:09:9d:b2:5e:3b:12:7b:61:95:89:42:f8: 3e:30:e9:6c:3d:de:87:e5:67:25:08:49:c6:57:79: f3:e7:aa:2a:3e:eb:2b:91:ac:34:8d:46:a6:4a:98: ac:76:27:30:5e:12:19:c5:0d:6b:cb:e9:dd:1f:23: 5a:2f:51:6d:8d:e8:b1:91:bf:83:c4:7d:d4:45:87: 0c:2d:dc:29:92:a4:97:3f:da:69:ca:d7:5d:84:83: c2:99:89:4b:b7:fd:f5:a7:95:bf:bf:18:6b:49:0a: a5:35:07:e4:61:63:96:27:c1:c7:b8:4b:3f:35:e0: 16:03:3c:c1:b2:a1:b4:6c:29:5b:7d:1d:41:2d:4a: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FF:F5:08:4E:86:C9:FB:A8:FE:75:24:EF:FD:7C:52:91:C0:46:4F X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ca:8c:05:bd:f6:0e:a3:75:68:f4:d2:a0:92:f0:7e:8d:9c: 12:db:67:3c:3f:63:9a:3f:29:86:e7:b9:ef:61:8e:37:61:e1: 63:51:14:ce:6a:fe:88:fe:07:57:88:e4:db:85:53:98:2e:25: cb:3f:03:6f:bc:5b:c4:28:cd:e6:81:b7:ca:54:4c:dc:9c:11: 77:40:3a:ae:c3:c5:3e:e8:cc:43:4b:8e:32:76:18:64:87:30: 92:98:74:61:f4:71:ab:19:84:e0:4c:2f:2f:3c:18:16:e9:fc: 72:5e:57:4c:27:09:5c:2b:b7:d2:0a:7c:75:d7:ee:92:0b:5f: b9:8c:80:69:eb:f3:8c:3c:32:e2:74:8b:aa:a9:90:b9:3c:67: 48:d4:62:b3:db:c6:95:c3:51:e1:47:e4:fb:fc:0e:11:6a:c2: 71:f6:88:75:08:d8:a3:38:e3:fb:cd:fb:8a:b9:b6:cc:30:77: a0:b8:75:20:75:8e:58:81:45:ad:1f:73:a5:26:20:ff:6b:81: 34:dc:8c:2a:41:e0:9e:02:be:2e:d7:7d:35:d8:a1:f6:d9:15: b1:be:0a:27:3f:01:5b:5d:7c:3c:95:64:36:eb:47:50:81:91: 87:ff:05:50:99:12:8c:1c:43:5c:ac:98:c8:1c:05:b3:0c:6b: 5c:f1:25:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBfQo5oH4p19PgrNBWBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EygwZmZmZjUwODRlODZjOWZiYThmZTc1MjRlZmZkN2M1MjkxYzA0NjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB2i1eyqdRWTdqu5Nv0pD8JISYcf r9gO3gHCsQnXKl4DJvYy8TbcXvFaTlt+TmxoxHlP3DZZVzjAMy/aTi93z2wFzd6i 6jzu5VJI3FBLhK6OIpjhX9TNyitdg9CYlshvI6VCRKSgYtJ2PbaPrtbt6nkecHiy ipCQxOoJnbJeOxJ7YZWJQvg+MOlsPd6H5WclCEnGV3nz56oqPusrkaw0jUamSpis dicwXhIZxQ1ry+ndHyNaL1Ftjeixkb+DxH3URYcMLdwpkqSXP9ppytddhIPCmYlL t/31p5W/vxhrSQqlNQfkYWOWJ8HHuEs/NeAWAzzBsqG0bClbfR1BLUohJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA//9QhOhsn7qP51JO/9fFKRwEZPMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsqMBb32 DqN1aPTSoJLwfo2cEttnPD9jmj8phue572GON2HhY1EUzmr+iP4HV4jk24VTmC4l yz8Db7xbxCjN5oG3ylRM3JwRd0A6rsPFPujMQ0uOMnYYZIcwkph0YfRxqxmE4Ewv LzwYFun8cl5XTCcJXCu30gp8ddfukgtfuYyAaevzjDwy4nSLqqmQuTxnSNRis9vG lcNR4Ufk+/wOEWrCcfaIdQjYozjj+837irm2zDB3oLh1IHWOWIFFrR9zpSYg/2uB NNyMKkHgngK+Ltd9Ndih9tkVsb4KJz8BW118PJVkNutHUIGRh/8FUJkSjBxDXKyY yBwFswxrXPElYA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:38 2025 by rpki-client