This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json) Hash identifier: GyulJeU4MycdmjocQWh3sOU2eMSnSUqXwaHE05hdUUc= Subject key identifier: 42:1F:5C:85:D3:E2:09:D0:03:44:1C:11:DB:41:8C:AF:69:3F:08:F0 Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c Certificate serial: 019B337B155FCDC4BA9F0B1B486B8DA2F62C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 22:01:02 +0000 Manifest this update: Thu 18 Dec 2025 22:01:02 +0000 Manifest next update: Fri 19 Dec 2025 22:01:02 +0000 Files and hashes: 1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: AWWflWSWmmQgR5EvF2y73FO6rIVj17RXHwbZV50DqnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:15:5f:cd:c4:ba:9f:0b:1b:48:6b:8d:a2:f6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c Validity Not Before: Dec 18 22:01:02 2025 GMT Not After : Dec 19 22:01:02 2025 GMT Subject: CN=421f5c85d3e209d003441c11db418caf693f08f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:cb:6a:65:4b:8f:dd:a3:aa:4f:68:ec:7b: 73:a3:d9:e9:0c:38:8d:ca:f6:6f:c8:53:5d:57:b1: aa:73:c8:8e:83:b8:48:ae:1a:d5:a9:86:61:fc:57: 13:6d:18:b8:be:1f:29:2f:4a:76:6f:c2:9e:8a:24: b5:cb:83:6c:de:1c:35:40:25:8d:81:4d:54:ed:d5: bb:ec:64:bd:2c:43:8c:18:96:6f:7f:b4:ae:c7:fc: 1c:fb:00:80:c7:dd:30:78:50:97:3a:17:30:2a:27: c3:c2:0f:88:03:c4:a6:a0:6e:54:39:ca:99:25:83: 99:23:30:c0:a3:82:2f:fb:d0:86:c6:ae:e0:21:4c: 7d:86:c6:b6:29:ed:61:15:cb:fe:34:ea:fa:d6:c0: fa:5c:4f:6a:1d:64:f7:f6:0e:20:a0:7d:17:76:49: c0:5d:49:47:0e:97:cc:fd:a7:8c:8e:0b:98:cb:49: da:41:b1:4d:52:d1:e6:e9:2b:40:ab:08:c7:5a:ba: aa:5d:9b:eb:7b:70:c3:df:40:e2:4c:6f:17:59:cc: 5a:b7:97:3c:d9:13:7d:d4:9f:0f:73:af:db:bf:92: 31:97:42:24:0a:e6:15:c1:c9:ab:17:75:62:93:7a: e0:91:29:60:0b:38:5b:cf:d3:54:77:79:1b:f6:13: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:5C:85:D3:E2:09:D0:03:44:1C:11:DB:41:8C:AF:69:3F:08:F0 X509v3 Authority Key Identifier: keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b7:ce:db:28:4e:53:b5:2d:7a:81:04:d6:fa:ad:2f:a8:0f: 56:dc:d3:db:45:80:ee:e4:e3:a0:f3:13:04:e9:88:5e:1f:00: 84:9c:d3:61:9a:22:ac:7f:7e:15:80:82:4a:17:84:06:07:ea: 7e:27:96:72:a8:37:9e:04:59:b9:36:c3:00:88:bf:0f:ff:52: de:12:6d:6f:50:34:aa:7a:cf:2d:4b:b3:f2:e8:71:8f:ea:29: 14:0b:29:3d:b3:66:7e:d4:51:31:2a:a8:ab:23:de:c8:70:02: b3:4e:3d:8b:52:79:0a:ad:b9:64:23:92:30:c8:b5:b4:e1:a8: 47:af:c7:57:74:f0:5d:85:1f:20:cc:6c:cb:91:b6:4b:3d:2f: 45:7b:7a:1a:52:b0:1e:9a:6c:ac:ea:96:9d:dd:54:73:eb:74: d5:c2:4b:3a:bc:04:c6:84:8e:1f:99:51:24:97:05:2d:fc:c1: eb:be:97:51:90:2e:f9:84:3c:7f:30:63:67:7b:8b:c5:1d:61: 86:05:fe:3b:f6:e8:72:94:6f:b3:e6:b6:28:07:da:ef:82:ba: 9a:cd:b8:c6:b1:61:2b:0b:d3:9c:84:2e:69:2e:8b:fe:79:d7: 68:d1:c5:51:26:94:06:4d:a5:5d:d4:59:32:eb:fa:89:8a:33: f5:c9:dd:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexVfzcS6nwsbSGuNovYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MjVhZTMyMzRhMmM5N2MyN2Y3NWVmNTFkM2ZmMzI2YmUw NjBlMmMwHhcNMjUxMjE4MjIwMTAyWhcNMjUxMjE5MjIwMTAyWjAzMTEwLwYDVQQD Eyg0MjFmNWM4NWQzZTIwOWQwMDM0NDFjMTFkYjQxOGNhZjY5M2YwOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtjLamVLj92jqk9o7Htzo9npDDiN yvZvyFNdV7Gqc8iOg7hIrhrVqYZh/FcTbRi4vh8pL0p2b8KeiiS1y4Ns3hw1QCWN gU1U7dW77GS9LEOMGJZvf7Sux/wc+wCAx90weFCXOhcwKifDwg+IA8SmoG5UOcqZ JYOZIzDAo4Iv+9CGxq7gIUx9hsa2Ke1hFcv+NOr61sD6XE9qHWT39g4goH0XdknA XUlHDpfM/aeMjguYy0naQbFNUtHm6StAqwjHWrqqXZvre3DD30DiTG8XWcxat5c8 2RN91J8Pc6/bv5Ixl0IkCuYVwcmrF3Vik3rgkSlgCzhbz9NUd3kb9hN9FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIfXIXT4gnQA0QcEdtBjK9pPwjwMB8GA1UdIwQY MBaAFIklrjI0osl8J/de9R0/8ya+Bg4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUt N2U4ZTZlODg4ZGFjLzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUtN2U4ZTZlODg4ZGFj LzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLfO2yhO U7UteoEE1vqtL6gPVtzT20WA7uTjoPMTBOmIXh8AhJzTYZoirH9+FYCCSheEBgfq fieWcqg3ngRZuTbDAIi/D/9S3hJtb1A0qnrPLUuz8uhxj+opFAspPbNmftRRMSqo qyPeyHACs049i1J5Cq25ZCOSMMi1tOGoR6/HV3TwXYUfIMxsy5G2Sz0vRXt6GlKw HppsrOqWnd1Uc+t01cJLOrwExoSOH5lRJJcFLfzB676XUZAu+YQ8fzBjZ3uLxR1h hgX+O/bocpRvs+a2KAfa74K6ms24xrFhKwvTnIQuaS6L/nnXaNHFUSaUBk2lXdRZ Muv6iYoz9cndjg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:43 2025 by rpki-client