This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json) Hash identifier: XXhR0yWe6UTGrj+pavAkoSPOUPSoHUxM1flBsnFj2Qg= Subject key identifier: 7C:5D:A5:95:46:15:FF:00:92:5B:E4:9B:67:A3:25:08:D7:67:CB:A2 Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b Certificate serial: 019AF31D19EAC6D09D2E53DBE89C2C071E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft Manifest number: 074F Signing time: Sat 06 Dec 2025 10:02:41 +0000 Manifest this update: Sat 06 Dec 2025 10:02:41 +0000 Manifest next update: Sun 07 Dec 2025 10:02:41 +0000 Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: UwcI62qvrHe6nDcxQCtR5PpMZ0/kQ7XeK29Ye5iavPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:19:ea:c6:d0:9d:2e:53:db:e8:9c:2c:07:1e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b Validity Not Before: Dec 6 10:02:41 2025 GMT Not After : Dec 7 10:02:41 2025 GMT Subject: CN=7c5da5954615ff00925be49b67a32508d767cba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f3:03:90:51:80:85:2f:aa:20:7a:d1:a3:b8: 11:7f:d2:98:fb:cf:09:51:c5:65:46:5a:41:5e:de: e2:dd:ca:fb:a6:f0:20:27:a3:2b:e2:c4:51:a2:33: e6:8d:6b:82:dc:e7:be:86:94:5c:1d:d2:fe:97:9b: 7b:a4:43:19:20:71:92:cc:45:36:25:d0:3f:52:fe: 2f:73:98:62:31:a9:b4:62:40:da:97:59:7a:85:07: 98:d5:50:b5:17:6d:bf:15:b3:8e:bc:01:46:bb:88: 31:3f:c3:20:ad:cf:ce:f1:18:e7:e2:e9:31:db:f0: f1:0b:df:e6:a5:8f:65:a6:a6:43:20:9b:67:10:a4: 35:ab:24:90:8a:34:c1:c3:af:b8:bf:9e:04:d9:de: 01:8b:85:4c:0f:47:c0:70:54:3f:fa:bc:02:a0:90: ce:6a:7b:82:94:c4:8c:04:3e:da:f5:34:48:75:bc: 34:ad:67:e9:59:7b:3b:c9:6e:cd:bb:a1:e7:b0:02: 70:3a:3a:a5:fa:ad:36:08:0d:7f:a3:86:23:66:ac: 21:46:c0:93:28:0b:38:0a:a8:88:21:b3:f1:cd:c7: ac:9d:6d:0d:81:38:30:72:61:51:9a:47:d3:8d:72: 2e:8b:ee:2d:a4:10:96:d7:8d:e6:85:f8:68:18:0b: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5D:A5:95:46:15:FF:00:92:5B:E4:9B:67:A3:25:08:D7:67:CB:A2 X509v3 Authority Key Identifier: keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:cb:40:5a:1f:19:86:71:d7:63:71:80:94:af:13:e5:2f: 5b:ec:45:61:a5:79:62:d1:16:81:2a:c1:d0:38:63:72:91:8c: f5:ee:e3:cc:79:41:44:3f:e5:a7:ed:57:d2:b6:fe:d9:50:50: 0b:98:ad:ab:66:43:87:2a:63:99:c8:40:de:4e:f5:4c:59:6e: c2:57:68:4a:6f:c1:95:41:7a:8f:99:83:2a:2b:b4:3a:f9:57: ef:73:1a:6e:d7:ff:d3:57:69:74:04:d2:0f:42:ff:73:0d:85: 6f:ca:63:3d:7d:9d:d3:8f:08:1d:2f:6a:a8:32:13:98:b2:46: db:29:ed:02:47:2a:96:02:5e:d7:17:76:6a:78:44:62:a4:50: 0d:1d:58:83:7c:39:cf:4a:2a:06:5a:32:66:bc:c5:f9:18:d4: 57:46:40:e4:1d:b0:3d:1f:be:63:ee:01:88:62:b9:24:1a:f0: 9f:b9:80:ec:f8:6a:b4:32:02:71:d3:f4:cc:20:12:fa:74:8b: 76:74:a9:ad:18:a9:ca:a8:c3:31:2f:ec:b7:59:a9:a3:2b:8a: 2f:a6:04:aa:0f:ff:7f:00:be:00:9c:cf:0d:33:73:d0:d2:0d: 01:1a:46:1b:aa:fe:86:1d:f0:43:39:36:3e:e6:dc:82:cc:8b: 65:e2:d9:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRnqxtCdLlPb6JwsBx4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDhlNmFiZTJmZTQzMjIyNjUxY2U5OWVmY2QxMmFmNjBl NjRmNWIwHhcNMjUxMjA2MTAwMjQxWhcNMjUxMjA3MTAwMjQxWjAzMTEwLwYDVQQD Eyg3YzVkYTU5NTQ2MTVmZjAwOTI1YmU0OWI2N2EzMjUwOGQ3NjdjYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/MDkFGAhS+qIHrRo7gRf9KY+88J UcVlRlpBXt7i3cr7pvAgJ6Mr4sRRojPmjWuC3Oe+hpRcHdL+l5t7pEMZIHGSzEU2 JdA/Uv4vc5hiMam0YkDal1l6hQeY1VC1F22/FbOOvAFGu4gxP8Mgrc/O8Rjn4ukx 2/DxC9/mpY9lpqZDIJtnEKQ1qySQijTBw6+4v54E2d4Bi4VMD0fAcFQ/+rwCoJDO anuClMSMBD7a9TRIdbw0rWfpWXs7yW7Nu6HnsAJwOjql+q02CA1/o4YjZqwhRsCT KAs4CqiIIbPxzcesnW0NgTgwcmFRmkfTjXIui+4tpBCW143mhfhoGAvJqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxdpZVGFf8Aklvkm2ejJQjXZ8uiMB8GA1UdIwQY MBaAFIsI5qvi/kMiJlHOme/NEq9g5k9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQt Y2I2YjgwYzllM2Y4LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQtY2I2YjgwYzllM2Y4 LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjt7LQFof GYZx12NxgJSvE+UvW+xFYaV5YtEWgSrB0DhjcpGM9e7jzHlBRD/lp+1X0rb+2VBQ C5itq2ZDhypjmchA3k71TFluwldoSm/BlUF6j5mDKiu0OvlX73Mabtf/01dpdATS D0L/cw2Fb8pjPX2d048IHS9qqDITmLJG2yntAkcqlgJe1xd2anhEYqRQDR1Yg3w5 z0oqBloyZrzF+RjUV0ZA5B2wPR++Y+4BiGK5JBrwn7mA7PhqtDICcdP0zCAS+nSL dnSprRipyqjDMS/st1mpoyuKL6YEqg//fwC+AJzPDTNz0NINARpGG6r+hh3wQzk2 PubcgsyLZeLZXA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:58 2025 by rpki-client