This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json) Hash identifier: yt90FdNuZNRyGAbXdIB48W4I1fOxLdZu+f32XP8a1nM= Subject key identifier: 34:D8:7F:6A:45:0F:12:8A:8C:00:6E:2E:76:8A:23:8C:92:68:E9:BB Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b Certificate serial: 019AF5E57838E28FAAFD014F552843408C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 23:00:47 +0000 Manifest this update: Sat 06 Dec 2025 23:00:47 +0000 Manifest next update: Sun 07 Dec 2025 23:00:47 +0000 Files and hashes: 1: 1-6XFLoPOdCVTnXJMZNU0hBiKubk.roa (hash: OxkphaRHymUnb8SN18Gdla2SO6vLVqs5y/4vbMpFmm4=) 2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: JUdrkq8BQbI83yJUvcUi/NfxOhkH22P5ZIiAF+ZSxDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:78:38:e2:8f:aa:fd:01:4f:55:28:43:40:8c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b Validity Not Before: Dec 6 23:00:47 2025 GMT Not After : Dec 7 23:00:47 2025 GMT Subject: CN=34d87f6a450f128a8c006e2e768a238c9268e9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:33:7a:4c:59:67:4d:68:f2:dd:aa:ab:69: e4:ab:4c:c9:70:4e:ef:a0:85:ea:66:4e:2a:dc:0c: a5:40:e7:83:75:ff:ce:5f:3f:e5:2b:25:a7:f1:fe: c6:d6:cd:85:20:31:44:19:94:05:ee:45:3a:0a:cb: 8a:0d:1f:ac:60:7b:91:82:a3:76:aa:a0:1e:38:9d: 97:ae:f1:37:0f:de:00:26:93:d6:ad:4c:ac:1a:7f: f4:5d:b7:51:3f:52:f2:67:51:d8:d7:c9:c5:c3:c4: 26:a0:87:22:5b:72:34:1d:61:b0:26:1e:31:32:32: 78:2d:56:e4:5a:b2:f9:4a:d4:df:b9:33:c4:3a:b4: e0:29:bc:97:37:67:ba:5c:5a:4e:c6:0d:8a:d8:4b: bc:59:df:0e:42:13:26:48:3a:c9:35:9e:22:38:4c: 2e:97:cf:3c:37:e2:79:32:b4:90:82:12:50:7b:6b: 9f:0e:88:88:ae:4a:06:5b:a1:4a:24:14:b6:b4:ad: 89:fa:69:cf:d1:8c:5f:23:ec:73:ce:88:0c:bd:bc: 95:0d:52:2d:00:db:b8:73:cb:77:e5:ce:77:41:9b: 3d:10:e8:b8:3b:03:dd:d1:0d:67:4e:5f:f4:ac:58: db:92:47:11:07:08:89:d9:37:52:0b:95:18:9c:b9: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D8:7F:6A:45:0F:12:8A:8C:00:6E:2E:76:8A:23:8C:92:68:E9:BB X509v3 Authority Key Identifier: keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7f:3f:b8:09:06:bb:07:bf:30:5f:29:11:69:95:df:77:50: c0:ce:e6:0c:3b:73:a3:35:87:ab:e1:58:00:17:f4:e3:1f:e3: 38:81:16:57:d8:01:c8:62:58:e3:f8:1e:67:c7:0f:57:df:a0: 6f:5c:08:4b:5d:fa:e0:e8:d8:e7:10:43:98:6f:15:1b:10:62: 3c:a6:d5:ec:a3:f6:eb:f8:02:b2:19:3a:86:14:de:59:d1:84: ae:7b:9b:c7:1f:5c:95:ad:70:bb:66:5f:de:1b:d9:70:4f:4d: 48:08:f8:4a:b5:f0:c3:c9:da:ca:de:f9:60:c8:98:8a:ea:b5: 10:5b:78:dc:35:54:46:2b:69:81:06:f9:04:ab:86:e0:61:57: 23:be:c7:8f:01:7c:e7:08:52:21:c3:8f:94:29:fb:52:98:0a: 8a:09:28:97:8e:2d:9b:cd:cc:f2:e5:20:9d:33:6c:1d:4a:50: 71:e2:54:12:2a:cb:ff:d5:90:29:66:16:49:2a:c8:c3:cf:2f: 9f:78:52:ed:41:9a:de:ae:49:93:c5:04:b7:6c:90:75:8a:17: 6e:06:78:72:6d:77:d4:f0:85:ff:4f:f5:f8:b6:f9:e8:6a:97: 09:56:f4:52:6b:58:f1:69:da:6d:ce:3d:17:64:56:12:a8:96: 25:17:d4:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15Xg44o+q/QFPVShDQIxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MzFkNjIxZDE5MmY5MmRiMDkzZDkzMzA5MmMxZTIzNmI0 ZDQ5N2IwHhcNMjUxMjA2MjMwMDQ3WhcNMjUxMjA3MjMwMDQ3WjAzMTEwLwYDVQQD EygzNGQ4N2Y2YTQ1MGYxMjhhOGMwMDZlMmU3NjhhMjM4YzkyNjhlOWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5wzekxZZ01o8t2qq2nkq0zJcE7v oIXqZk4q3AylQOeDdf/OXz/lKyWn8f7G1s2FIDFEGZQF7kU6CsuKDR+sYHuRgqN2 qqAeOJ2XrvE3D94AJpPWrUysGn/0XbdRP1LyZ1HY18nFw8QmoIciW3I0HWGwJh4x MjJ4LVbkWrL5StTfuTPEOrTgKbyXN2e6XFpOxg2K2Eu8Wd8OQhMmSDrJNZ4iOEwu l888N+J5MrSQghJQe2ufDoiIrkoGW6FKJBS2tK2J+mnP0YxfI+xzzogMvbyVDVIt ANu4c8t35c53QZs9EOi4OwPd0Q1nTl/0rFjbkkcRBwiJ2TdSC5UYnLkkwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTYf2pFDxKKjABuLnaKI4ySaOm7MB8GA1UdIwQY MBaAFIgx1iHRkvktsJPZMwksHiNrTUl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYt MmI4NzYxZDhhMTM3LzEvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYtMmI4NzYxZDhhMTM3 LzEvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn8/uAkG uwe/MF8pEWmV33dQwM7mDDtzozWHq+FYABf04x/jOIEWV9gByGJY4/geZ8cPV9+g b1wIS1364OjY5xBDmG8VGxBiPKbV7KP26/gCshk6hhTeWdGErnubxx9cla1wu2Zf 3hvZcE9NSAj4SrXww8nayt75YMiYiuq1EFt43DVURitpgQb5BKuG4GFXI77HjwF8 5whSIcOPlCn7UpgKigkol44tm83M8uUgnTNsHUpQceJUEirL/9WQKWYWSSrIw88v n3hS7UGa3q5Jk8UEt2yQdYoXbgZ4cm131PCF/0/1+Lb56GqXCVb0UmtY8Wnabc49 F2RWEqiWJRfUdg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:20 2025 by rpki-client