This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json) Hash identifier: i2+cTTfMDDPqkLw02IWEnQyU8x5C9ekubmiIT7ky+kk= Subject key identifier: 37:80:61:4B:B9:EA:D9:48:0E:2B:37:2B:B5:57:C4:1B:E9:AC:19:FA Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Certificate serial: 019B35D7632334E4D1AEF636F7D83EC28128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 09:01:06 +0000 Manifest this update: Fri 19 Dec 2025 09:01:06 +0000 Manifest next update: Sat 20 Dec 2025 09:01:06 +0000 Files and hashes: 1: Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa (hash: 4IG2rPSclxVb9yuX8BnAS143KaJ4+m9FFie+h4KMN4U=) 2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: aHr9hRDgFuL3lJwmQh2X1It6XYzcmWNf+Hy2b9upHzk=) 3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=) 4: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=) 5: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:63:23:34:e4:d1:ae:f6:36:f7:d8:3e:c2:81:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Validity Not Before: Dec 19 09:01:06 2025 GMT Not After : Dec 20 09:01:06 2025 GMT Subject: CN=3780614bb9ead9480e2b372bb557c41be9ac19fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:2e:61:f6:55:2f:fb:37:7a:1d:bc:58:cc: df:63:62:a6:55:c5:14:7a:a0:59:8a:0c:ff:c4:1c: 29:71:5e:a1:67:73:28:3e:a8:9f:c8:7d:9f:9c:3a: 49:97:ab:7b:1d:60:b6:0b:0e:cf:e8:b0:5f:94:1d: cb:0d:1d:92:20:d1:9c:28:f4:6a:88:22:0f:d3:62: a8:80:4a:08:7c:11:cb:f9:d1:1a:fc:23:b8:b8:14: 5f:41:ab:a7:8b:d6:a8:60:26:40:05:97:37:4d:92: 9c:d3:bc:09:cd:bc:8f:6f:cd:d4:1d:0f:db:0a:dc: 24:17:ae:7b:3e:10:6a:15:2e:2e:f7:07:44:a9:a5: b3:51:b6:5d:d0:2e:04:10:ad:3d:4e:a5:a2:df:c1: 81:bd:97:ea:93:6c:16:cd:7f:a7:87:f9:eb:2e:95: 07:99:51:d8:98:34:49:9b:86:34:9c:80:dd:80:82: 8c:56:40:fe:16:d0:10:aa:45:26:8e:dd:0f:e8:e3: 65:88:de:c2:c0:7b:0a:66:f7:b5:2e:2a:90:a1:f3: 48:f9:01:21:17:7d:38:6b:bd:59:c1:26:e4:48:38: d9:44:c8:6d:84:5e:15:4a:01:44:10:ef:2e:00:64: 71:26:7c:65:62:96:3a:59:c2:03:27:61:e7:77:79: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:61:4B:B9:EA:D9:48:0E:2B:37:2B:B5:57:C4:1B:E9:AC:19:FA X509v3 Authority Key Identifier: keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fd:45:88:a7:ba:cf:ff:4e:78:ab:f9:56:cd:6e:a4:57:20: 73:7e:6d:c7:30:08:51:f1:f4:a9:76:b4:2c:ef:43:d2:9d:e9: 07:b1:24:52:18:e9:14:85:d7:ca:9f:9c:d2:f7:37:03:82:b8: 88:ec:af:5d:39:31:36:cf:5e:0f:a7:93:1a:c8:ff:64:59:a0: 0f:93:98:c0:91:de:4b:2b:b8:83:fa:d7:df:65:7d:04:aa:36: 24:7c:6e:51:33:43:06:2d:df:b6:a4:38:8c:e4:00:39:bd:13: e8:71:4f:4e:4d:14:9c:ca:51:b3:d9:cd:af:70:70:e8:0d:e6: e7:fd:85:bb:e9:ef:be:23:71:92:2f:a9:30:88:d8:65:fa:59: d9:01:c8:ac:84:01:d6:bf:02:8d:66:8a:11:47:a4:c0:55:50: cc:96:5d:99:72:5f:d8:c0:17:f2:ac:70:e9:5f:f9:1b:82:08: b2:59:a1:c4:ed:b6:8c:2a:7e:9b:c6:7c:77:14:e1:2a:d8:02: e6:66:f6:7a:c6:f5:ab:76:23:37:46:be:f3:f5:6a:ba:07:39: ae:e8:4e:00:6f:76:81:e6:00:2a:10:0c:77:a2:6c:80:d4:fc: 50:af:68:a0:45:5f:52:40:1f:9e:68:c9:d0:55:ce:82:e8:3f: ea:aa:e0:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs112MjNOTRrvY299g+woEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4 YjJkZTcwHhcNMjUxMjE5MDkwMTA2WhcNMjUxMjIwMDkwMTA2WjAzMTEwLwYDVQQD EygzNzgwNjE0YmI5ZWFkOTQ4MGUyYjM3MmJiNTU3YzQxYmU5YWMxOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lUuYfZVL/s3eh28WMzfY2KmVcUU eqBZigz/xBwpcV6hZ3MoPqifyH2fnDpJl6t7HWC2Cw7P6LBflB3LDR2SINGcKPRq iCIP02KogEoIfBHL+dEa/CO4uBRfQauni9aoYCZABZc3TZKc07wJzbyPb83UHQ/b CtwkF657PhBqFS4u9wdEqaWzUbZd0C4EEK09TqWi38GBvZfqk2wWzX+nh/nrLpUH mVHYmDRJm4Y0nIDdgIKMVkD+FtAQqkUmjt0P6ONliN7CwHsKZve1LiqQofNI+QEh F304a71ZwSbkSDjZRMhthF4VSgFEEO8uAGRxJnxlYpY6WcIDJ2Hnd3lI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeAYUu56tlIDis3K7VXxBvprBn6MB8GA1UdIwQY MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/1FiKe6 z/9OeKv5Vs1upFcgc35txzAIUfH0qXa0LO9D0p3pB7EkUhjpFIXXyp+c0vc3A4K4 iOyvXTkxNs9eD6eTGsj/ZFmgD5OYwJHeSyu4g/rX32V9BKo2JHxuUTNDBi3ftqQ4 jOQAOb0T6HFPTk0UnMpRs9nNr3Bw6A3m5/2Fu+nvviNxki+pMIjYZfpZ2QHIrIQB 1r8CjWaKEUekwFVQzJZdmXJf2MAX8qxw6V/5G4IIslmhxO22jCp+m8Z8dxThKtgC 5mb2esb1q3YjN0a+8/Vqugc5ruhOAG92geYAKhAMd6JsgNT8UK9ooEVfUkAfnmjJ 0FXOgug/6qrg5w== -----END CERTIFICATE-----Generated at Fri Dec 19 13:47:32 2025 by rpki-client