This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json) Hash identifier: kqxLAje4lUbSI43nTVGdFvJvcysmZyTi992S1z2iOpM= Subject key identifier: 71:49:03:35:81:F2:3C:E4:EE:E8:CF:A6:69:91:E5:AD:5E:04:57:CB Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Certificate serial: 019AF088C1A847164EF5807AF407142E8397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=) 2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: D4taYzwpiCMcZkXcsdq9S8GsCRdJBewIIir4bwALY6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c1:a8:47:16:4e:f5:80:7a:f4:07:14:2e:83:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7 Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=7149033581f23ce4eee8cfa66991e5ad5e0457cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:46:8f:ee:18:06:df:b9:ed:08:ff:0e:73:29: 51:21:0e:07:83:cc:8a:55:69:5a:41:f9:1f:8a:c6: d6:50:8b:5a:10:17:4e:93:a3:75:ac:8e:ff:59:d0: 74:d1:dc:bd:ab:c5:c1:0d:e1:ed:7c:d3:d5:35:fd: 41:b4:16:b8:ee:93:e0:78:bf:67:55:85:2c:b6:94: 19:c7:08:37:52:a8:50:c7:6a:a5:5a:8c:f5:57:86: 38:f7:60:8f:c8:54:9f:be:b1:eb:13:fa:d3:ea:db: d1:3a:1f:82:f3:ba:12:69:d8:f8:1e:ee:6d:28:af: 41:9d:37:9f:c1:79:4e:43:7c:21:5d:cd:2c:bc:63: d3:9b:59:84:89:7a:13:fe:58:79:96:fd:2b:a9:18: fd:96:1a:a4:1b:4a:72:4e:74:9f:80:37:be:a9:ac: c4:8c:f3:4e:6f:4f:d4:59:0c:e1:c6:06:38:d9:3f: d9:4a:94:c5:90:d4:ec:7b:20:db:b3:ff:3b:46:6a: f1:99:a3:b1:97:6c:22:f5:0f:d6:0b:cc:05:ac:ff: b7:bc:11:33:44:dc:92:bb:19:f3:d7:d1:fb:23:16: 5d:e4:f8:8d:20:60:4b:3f:b9:52:e9:b9:17:f4:0b: 46:83:fc:1c:75:01:5f:55:42:d3:a8:6c:58:2e:f6: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:49:03:35:81:F2:3C:E4:EE:E8:CF:A6:69:91:E5:AD:5E:04:57:CB X509v3 Authority Key Identifier: keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:83:e3:4c:93:b5:05:cb:c8:a6:95:de:87:99:d6:2d:6a:2b: 77:90:6c:b9:90:ce:77:a0:f5:d2:a9:f8:e9:c8:78:3f:30:f9: 76:00:52:af:2e:b4:e0:ee:70:eb:dd:95:ca:37:d4:ee:ff:4e: 0d:43:5a:89:ad:35:8e:49:0b:1b:1d:bb:4a:09:53:36:fb:16: 51:e5:1e:3d:99:70:43:b4:c4:14:fa:fa:bb:07:15:10:d0:4e: fa:b9:ba:25:e7:3d:ed:8f:fa:0d:42:4a:fe:4f:5f:3b:ca:f7: 19:21:f6:8c:0d:c6:f0:ac:b0:03:18:84:2c:0a:d7:82:2d:1b: a0:98:3b:91:01:bb:5a:9c:bd:0d:45:4a:96:c5:01:ca:29:7a: 33:db:7a:b2:67:b8:6c:a0:f3:4f:c4:9f:3f:40:30:69:a1:d0: b5:aa:57:ad:f1:f0:69:32:fc:5c:37:64:51:a8:19:03:0d:03: f5:a0:7d:0d:c8:53:78:5b:13:9c:63:c6:f2:b0:3c:66:c7:0a: 14:56:d4:08:58:12:e6:ad:83:f8:a9:49:c6:91:9e:66:c3:86: 06:d4:6e:ce:aa:80:60:5c:eb:3f:b2:be:0c:ea:cf:47:eb:98: f8:3c:41:e6:e4:c4:b7:79:dc:88:4b:21:db:f7:b2:b9:0f:40: 5e:43:f3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMGoRxZO9YB69AcULoOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmFhMWYwZWQ0NTk2ZTczM2Y4YjYyZDM5ZTM3YjhkZTUw ODVlZDcwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD Eyg3MTQ5MDMzNTgxZjIzY2U0ZWVlOGNmYTY2OTkxZTVhZDVlMDQ1N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kaP7hgG37ntCP8OcylRIQ4Hg8yK VWlaQfkfisbWUItaEBdOk6N1rI7/WdB00dy9q8XBDeHtfNPVNf1BtBa47pPgeL9n VYUstpQZxwg3UqhQx2qlWoz1V4Y492CPyFSfvrHrE/rT6tvROh+C87oSadj4Hu5t KK9BnTefwXlOQ3whXc0svGPTm1mEiXoT/lh5lv0rqRj9lhqkG0pyTnSfgDe+qazE jPNOb0/UWQzhxgY42T/ZSpTFkNTseyDbs/87RmrxmaOxl2wi9Q/WC8wFrP+3vBEz RNySuxnz19H7IxZd5PiNIGBLP7lS6bkX9AtGg/wcdQFfVULTqGxYLvZv9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFJAzWB8jzk7ujPpmmR5a1eBFfLMB8GA1UdIwQY MBaAFIlqofDtRZbnM/i2LTnje43lCF7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMt YTI4NmQwMjUzMmQzLzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMtYTI4NmQwMjUzMmQz LzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3YPjTJO1 BcvIppXeh5nWLWord5BsuZDOd6D10qn46ch4PzD5dgBSry604O5w692VyjfU7v9O DUNaia01jkkLGx27SglTNvsWUeUePZlwQ7TEFPr6uwcVENBO+rm6Jec97Y/6DUJK /k9fO8r3GSH2jA3G8KywAxiELArXgi0boJg7kQG7Wpy9DUVKlsUByil6M9t6sme4 bKDzT8SfP0AwaaHQtapXrfHwaTL8XDdkUagZAw0D9aB9DchTeFsTnGPG8rA8ZscK FFbUCFgS5q2D+KlJxpGeZsOGBtRuzqqAYFzrP7K+DOrPR+uY+DxB5uTEt3nciEsh 2/eyuQ9AXkPzMg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:11 2025 by rpki-client