This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: R9OSzDlF9PVUAle1OoLTo9/YsgiPxGEWxbdfrC6YLUI= Subject key identifier: AD:40:61:60:2D:B5:00:C4:B6:FD:45:EC:68:18:03:58:DD:3A:E1:DF Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019AF23FA8C8F9D571AAE93D39BD9E8D452B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1751 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: 5WLg_OQ77v-fOT9qxALPiv6xIJU.roa (hash: Of5ILIgkLOFeAYv4HvRO9bh/m8O2gTiP63LRrjsXyCc=) 2: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (hash: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=) 3: JyckXigwYGV__68AUCYD52rnXo0.roa (hash: SbkH6tPWhWrW/o78zmYE9oC7rLfxWmyocNFH2s//I5E=) 4: LZXNMAIh5rxJ27RzY3-HOC44ze8.roa (hash: a//LkQjUfY/J/vByRTwCkOeaTuhCCphW4WYvKNJGdac=) 5: NCM3clu2kUX1FywCV-rdbSiyAwg.roa (hash: lqUVwqTm2F0EVVgAq9uFKVlQ5ZkdzUvkJ/HuRhL+GWA=) 6: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=) 7: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: ULrJCwwbAAfJM6bC6+mJOCVgpOFGeen+7eta7waGR9Y=) 8: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=) 9: kGDG-UIYc6E6yuKmUj9Iy9r4a6I.roa (hash: 1OvwxxMvp2ezbTpQpiEO0qvhRS4iGyD5k7iDnUXEkCY=) 10: q9-vuUKVR4izeN3aoSM_0PGlTLE.roa (hash: 7uTxuawjanQAcGsc+vt8tq396KLmeaMaL6YYUmFethI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a8:c8:f9:d5:71:aa:e9:3d:39:bd:9e:8d:45:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=ad4061602db500c4b6fd45ec68180358dd3ae1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1f:c4:02:68:d3:1c:da:2f:12:7b:b9:ee:6e: 50:1c:bc:fd:0a:fe:60:3f:bd:f5:00:ed:f3:ab:0a: cf:da:e0:2d:49:c4:65:b3:12:75:77:20:c5:ce:7f: c2:3d:89:83:07:cf:26:08:d6:81:ae:eb:ca:9f:97: 5c:c4:35:11:84:4b:be:6a:40:88:80:f6:31:5d:71: 6e:8f:23:bb:35:07:1d:b7:cb:2f:f6:2c:35:c2:c2: 3a:b2:55:24:c3:7b:82:69:47:97:4c:c8:e4:9a:b1: ea:c6:35:b5:ff:0e:68:cd:0e:74:dc:4a:e7:06:6c: 86:50:f3:08:5b:a4:05:16:bf:3b:82:3b:35:d7:0c: f6:b9:db:83:28:f5:94:58:e5:f3:19:81:e4:9d:5d: f6:f3:cc:aa:7b:04:e8:56:b6:56:47:79:e4:50:9a: 7c:9b:6e:c8:3b:da:03:b9:b4:7f:cd:24:5a:10:e3: 69:0e:73:ea:ad:f4:85:cd:9e:28:fe:da:76:85:2f: 19:f9:51:f4:00:64:b1:f8:b0:02:82:1b:69:72:a4: 53:77:42:3c:6e:cc:82:0f:d0:a7:44:44:73:13:d3: e0:99:b2:7a:81:36:94:ec:9b:2f:ec:b4:01:c8:fb: 31:18:75:17:26:49:ad:88:1c:22:71:21:19:b9:a4: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:40:61:60:2D:B5:00:C4:B6:FD:45:EC:68:18:03:58:DD:3A:E1:DF X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a5:2d:ed:b9:61:22:2e:4f:42:ca:82:d9:9c:e2:b3:67:9f: 74:47:c4:45:66:15:0a:c3:b1:65:0a:b5:69:c3:ef:ab:0b:5e: 8e:02:16:1d:e9:a9:ef:23:34:a8:0a:d6:4f:97:fd:9f:8b:dd: 0b:af:b2:07:cb:7e:67:d1:c9:b3:b2:69:07:9d:54:6e:f4:1f: 8f:5b:ff:d6:8e:1b:bc:0e:c5:c6:38:8d:90:b8:c4:4b:36:e8: 0f:1c:6e:4e:b5:d7:b6:19:dd:e3:0d:b5:72:67:ac:e4:c0:6c: 23:df:1c:d6:9a:0f:9d:dc:89:b4:6b:2c:5c:21:75:61:d7:be: f9:c8:3a:e0:c8:fc:f2:e9:e0:4d:49:6b:dc:69:75:da:42:3b: db:69:12:6f:22:86:d6:46:1c:a0:64:47:cf:c7:e6:aa:2b:1d: 55:97:ed:61:c2:99:bd:8f:47:eb:23:de:5b:cb:9a:18:41:d7: d3:bf:54:f5:29:ea:b3:55:08:31:fb:89:0f:21:95:5c:d4:e2: ae:4f:d8:87:19:12:59:05:4e:fa:93:ff:45:ac:14:7c:b5:78: 65:c7:aa:dc:b4:de:4e:4a:c4:9d:7a:77:05:14:98:a2:e0:11: 4e:2a:fc:41:c5:a1:bf:df:10:bb:48:44:4a:b8:5b:10:a6:0a: 3e:fc:f2:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6jI+dVxquk9Ob2ejUUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhhZDQwNjE2MDJkYjUwMGM0YjZmZDQ1ZWM2ODE4MDM1OGRkM2FlMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh/EAmjTHNovEnu57m5QHLz9Cv5g P731AO3zqwrP2uAtScRlsxJ1dyDFzn/CPYmDB88mCNaBruvKn5dcxDURhEu+akCI gPYxXXFujyO7NQcdt8sv9iw1wsI6slUkw3uCaUeXTMjkmrHqxjW1/w5ozQ503Ern BmyGUPMIW6QFFr87gjs11wz2uduDKPWUWOXzGYHknV3288yqewToVrZWR3nkUJp8 m27IO9oDubR/zSRaEONpDnPqrfSFzZ4o/tp2hS8Z+VH0AGSx+LACghtpcqRTd0I8 bsyCD9CnRERzE9PgmbJ6gTaU7Jsv7LQByPsxGHUXJkmtiBwicSEZuaSVHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1AYWAttQDEtv1F7GgYA1jdOuHfMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKUt7blh Ii5PQsqC2Zzis2efdEfERWYVCsOxZQq1acPvqwtejgIWHemp7yM0qArWT5f9n4vd C6+yB8t+Z9HJs7JpB51UbvQfj1v/1o4bvA7FxjiNkLjESzboDxxuTrXXthnd4w21 cmes5MBsI98c1poPndyJtGssXCF1Yde++cg64Mj88ungTUlr3Gl12kI722kSbyKG 1kYcoGRHz8fmqisdVZftYcKZvY9H6yPeW8uaGEHX079U9Snqs1UIMfuJDyGVXNTi rk/YhxkSWQVO+pP/RawUfLV4Zceq3LTeTkrEnXp3BRSYouARTir8QcWhv98Qu0hE SrhbEKYKPvzy/A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:08 2025 by rpki-client