This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: 4AkfrgCInZhhPaPjqUDp2k0c9LrFmzkDO2o/H5c866o= Subject key identifier: 30:54:92:E0:A4:62:A1:E9:53:32:13:F5:CF:95:65:AA:FF:46:40:34 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019B2C2F7483365D113B3E5708337AD3CE7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 176F Signing time: Wed 17 Dec 2025 12:01:05 +0000 Manifest this update: Wed 17 Dec 2025 12:01:05 +0000 Manifest next update: Thu 18 Dec 2025 12:01:05 +0000 Files and hashes: 1: 5WLg_OQ77v-fOT9qxALPiv6xIJU.roa (hash: Of5ILIgkLOFeAYv4HvRO9bh/m8O2gTiP63LRrjsXyCc=) 2: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (hash: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=) 3: JyckXigwYGV__68AUCYD52rnXo0.roa (hash: SbkH6tPWhWrW/o78zmYE9oC7rLfxWmyocNFH2s//I5E=) 4: LZXNMAIh5rxJ27RzY3-HOC44ze8.roa (hash: a//LkQjUfY/J/vByRTwCkOeaTuhCCphW4WYvKNJGdac=) 5: NCM3clu2kUX1FywCV-rdbSiyAwg.roa (hash: lqUVwqTm2F0EVVgAq9uFKVlQ5ZkdzUvkJ/HuRhL+GWA=) 6: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=) 7: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: 2YjYhxfyJV0TC0VLIHYdyR02dQT7+9Y/Qa8KuELSnu4=) 8: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=) 9: kGDG-UIYc6E6yuKmUj9Iy9r4a6I.roa (hash: 1OvwxxMvp2ezbTpQpiEO0qvhRS4iGyD5k7iDnUXEkCY=) 10: q9-vuUKVR4izeN3aoSM_0PGlTLE.roa (hash: 7uTxuawjanQAcGsc+vt8tq396KLmeaMaL6YYUmFethI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:74:83:36:5d:11:3b:3e:57:08:33:7a:d3:ce:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Dec 17 12:01:05 2025 GMT Not After : Dec 18 12:01:05 2025 GMT Subject: CN=305492e0a462a1e9533213f5cf9565aaff464034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:f0:4f:5d:7e:1f:7b:8c:39:a2:c0:23:a0: 67:17:ac:b4:62:86:d2:13:8a:eb:1c:7b:56:51:bc: 22:2d:b4:bb:ea:7f:dd:18:b5:9e:d6:93:13:fc:a9: 72:e2:26:cc:4e:70:84:96:88:bd:74:30:d7:55:e3: 73:8f:68:f4:0d:c2:a3:a1:f1:c9:5f:a3:69:d4:12: 3b:8f:28:ce:7a:e9:1d:b3:f2:bf:2f:2e:cf:f8:80: 64:f1:db:69:30:6f:e9:32:e0:cc:f5:e4:88:b3:4d: f1:7b:ab:6c:31:f3:a1:37:d1:68:3d:b2:8f:5b:5c: f1:84:68:69:5f:06:16:63:cf:b6:82:43:ff:25:2f: 31:40:f6:f1:4a:da:0b:30:51:ed:6c:4e:2d:b1:2c: 1c:8a:17:8e:01:e3:32:45:12:52:54:d3:3a:9f:fe: 11:e2:ee:28:fb:a5:50:9c:9b:a8:82:ab:af:30:41: 4d:97:da:d2:02:4e:a5:b8:13:f3:71:d4:0e:23:ca: f8:a8:97:fc:ec:79:09:a9:b6:d2:48:ea:02:9d:17: c8:9e:17:0c:17:af:56:cd:6a:4c:0b:7a:c4:d6:14: f5:54:b8:6e:19:47:a8:9e:0b:02:6f:d7:9a:f8:52: f4:cf:dc:36:72:ef:7e:81:0a:08:0e:0b:ac:d2:35: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:54:92:E0:A4:62:A1:E9:53:32:13:F5:CF:95:65:AA:FF:46:40:34 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:07:ac:0c:9c:c9:de:aa:9b:54:1a:ec:9c:1c:d7:2c:b9:4c: 4b:aa:ad:cb:2c:f3:ee:ae:17:40:64:ef:0a:e2:0c:c0:da:b6: ba:2f:88:8c:53:12:1a:13:42:b6:84:f6:84:ce:9e:6f:80:bd: e7:cc:43:f3:39:de:8d:77:f5:f7:8e:24:c5:f6:c8:b1:38:0f: f1:5b:da:ce:21:80:69:0a:95:1f:de:67:4a:8e:53:7c:8f:d9: fd:b3:bc:ce:53:ce:b1:6e:4b:89:7e:00:d3:e7:40:ad:94:09: 7b:77:3c:1f:4c:54:2a:45:26:9f:ff:aa:95:87:0c:2e:1b:51: c2:c6:35:a7:1e:3b:fb:71:80:eb:a9:38:84:b6:72:87:aa:90: 5b:80:5a:74:fe:9d:7b:cf:1a:d7:c6:3a:ba:5f:df:a6:da:5c: a0:97:66:83:b9:bd:34:be:66:aa:89:45:ff:22:f5:dd:12:6b: 5a:e0:89:8d:9e:ce:23:34:51:d0:bb:5a:af:8d:43:42:62:2a: 1d:21:e4:f9:92:03:40:ed:be:ec:5e:d6:b3:4b:76:12:60:8a: e9:db:85:87:61:d3:dd:66:3b:31:31:79:21:5a:f8:07:a0:bb: 8d:ea:53:e6:7d:cb:8c:98:d4:ce:d7:76:5b:e5:aa:06:87:c8: ee:3e:ca:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL3SDNl0ROz5XCDN60857MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjUxMjE3MTIwMTA1WhcNMjUxMjE4MTIwMTA1WjAzMTEwLwYDVQQD EygzMDU0OTJlMGE0NjJhMWU5NTMzMjEzZjVjZjk1NjVhYWZmNDY0MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt47wT11+H3uMOaLAI6BnF6y0YobS E4rrHHtWUbwiLbS76n/dGLWe1pMT/Kly4ibMTnCEloi9dDDXVeNzj2j0DcKjofHJ X6Np1BI7jyjOeukds/K/Ly7P+IBk8dtpMG/pMuDM9eSIs03xe6tsMfOhN9FoPbKP W1zxhGhpXwYWY8+2gkP/JS8xQPbxStoLMFHtbE4tsSwciheOAeMyRRJSVNM6n/4R 4u4o+6VQnJuogquvMEFNl9rSAk6luBPzcdQOI8r4qJf87HkJqbbSSOoCnRfInhcM F69WzWpMC3rE1hT1VLhuGUeongsCb9ea+FL0z9w2cu9+gQoIDgus0jVeJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBUkuCkYqHpUzIT9c+VZar/RkA0MB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAesDJzJ 3qqbVBrsnBzXLLlMS6qtyyzz7q4XQGTvCuIMwNq2ui+IjFMSGhNCtoT2hM6eb4C9 58xD8znejXf1944kxfbIsTgP8VvaziGAaQqVH95nSo5TfI/Z/bO8zlPOsW5LiX4A 0+dArZQJe3c8H0xUKkUmn/+qlYcMLhtRwsY1px47+3GA66k4hLZyh6qQW4BadP6d e88a18Y6ul/fptpcoJdmg7m9NL5mqolF/yL13RJrWuCJjZ7OIzRR0Ltar41DQmIq HSHk+ZIDQO2+7F7Ws0t2EmCK6duFh2HT3WY7MTF5IVr4B6C7jepT5n3LjJjUztd2 W+WqBofI7j7K1Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:30:23 2025 by rpki-client