This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: OvclUzIu1G5GXzb/gt4K/D5aYwLhx9cu7UCyBVSue7A= Subject key identifier: 2A:B2:A1:E0:9B:FE:32:1D:F9:C4:01:2D:83:B0:A3:D9:5A:15:94:B3 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019AF1D1E215591D2E7DBF09808E71C6A5BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 4: K-N36rOGMrajAoKgQRnFws3cYZQ.roa (hash: nuImM5LcJvcHXxZcDwo2uunodGLbKRgkWdkeXxE++0Y=) 5: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: qJtms3jHtV0WQEHYO18vzYcdy4C3/5gQtqkPWui854Y=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e2:15:59:1d:2e:7d:bf:09:80:8e:71:c6:a5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=2ab2a1e09bfe321df9c4012d83b0a3d95a1594b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:c0:17:fd:63:b6:63:6b:5b:9e:e3:4b:f4: ff:01:08:95:f6:51:3a:72:68:a4:a1:56:18:b1:25: 04:6b:e9:2c:4f:80:e3:42:a1:e4:53:19:07:96:84: b8:8d:6e:f0:9d:11:cc:e3:70:b5:9e:d1:49:a7:ea: b1:4d:24:db:c5:e4:6b:ed:34:89:c5:ac:02:8a:0b: 75:9d:11:c5:fa:35:ef:37:8b:db:54:02:95:9e:2f: 03:f6:d8:0d:b9:c4:98:aa:2a:16:d4:d6:20:f8:c1: ce:9d:c4:4c:b7:d9:7b:c2:af:a2:3a:6c:7e:e2:81: e4:5d:55:0d:5e:78:04:6a:03:f0:fd:09:9c:b8:71: 3f:16:57:d7:80:8d:5d:98:d9:0b:6c:08:ab:06:92: 0b:e8:f1:14:da:ee:ee:64:d6:5a:93:76:e8:7a:fc: 68:85:9d:83:67:98:6b:3b:9a:0f:56:c4:1c:02:98: 50:03:77:13:da:ae:15:b3:fd:03:a3:39:17:d4:93: 85:4f:21:29:7e:cc:96:bd:f9:39:02:ac:3f:79:0a: 75:a0:b4:f8:cc:11:09:67:b4:b9:96:74:39:95:47: b6:5b:0a:11:2d:78:f7:38:37:58:ea:77:6d:27:cf: 1e:26:cd:d6:55:3c:7d:63:75:39:b4:79:01:58:f5: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:A1:E0:9B:FE:32:1D:F9:C4:01:2D:83:B0:A3:D9:5A:15:94:B3 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:fb:9c:bb:b0:65:93:50:66:8a:90:49:48:3c:27:eb:69:a1: 54:01:57:85:fd:93:a0:92:2d:a5:cb:8a:ab:97:66:79:a1:10: 53:f3:c6:ef:4b:16:1a:a5:24:cd:b0:f5:07:d9:57:af:00:78: 98:eb:15:5d:1f:c6:c5:79:48:4f:1a:d2:86:be:cd:91:bb:d4: b3:fa:6b:4d:47:9c:ac:06:fd:52:66:fb:ea:40:a3:3c:28:4a: b0:45:9e:e1:e8:a0:dc:62:ff:a4:02:d8:1a:59:71:8d:9b:af: 11:66:6e:e1:0c:50:b2:5a:28:30:38:bb:dd:12:84:61:0c:56: 68:d0:bf:d9:74:03:fb:7c:bb:fb:ad:8c:4d:23:69:d8:e2:84: 33:e2:7f:7b:f8:aa:78:83:35:38:01:4d:fb:0c:f7:0c:20:71: 56:07:2d:b1:22:19:34:7c:d0:a6:00:37:1c:5c:8a:d3:95:f9: 43:20:dd:91:f5:2c:f8:0f:0e:64:a6:c0:e1:3b:44:c2:99:d9: 9b:73:c2:9b:68:36:27:72:f9:44:a6:b3:8a:5f:2d:a5:fe:4e: 91:d8:76:07:b9:13:21:65:a0:f3:c3:7c:07:3e:43:cd:47:3a: f7:73:5c:52:76:fd:77:9d:56:a9:95:0d:2f:8e:1d:e1:93:f7: 70:fe:f3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eIVWR0ufb8JgI5xxqW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EygyYWIyYTFlMDliZmUzMjFkZjljNDAxMmQ4M2IwYTNkOTVhMTU5NGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAvAF/1jtmNrW57jS/T/AQiV9lE6 cmikoVYYsSUEa+ksT4DjQqHkUxkHloS4jW7wnRHM43C1ntFJp+qxTSTbxeRr7TSJ xawCigt1nRHF+jXvN4vbVAKVni8D9tgNucSYqioW1NYg+MHOncRMt9l7wq+iOmx+ 4oHkXVUNXngEagPw/QmcuHE/FlfXgI1dmNkLbAirBpIL6PEU2u7uZNZak3boevxo hZ2DZ5hrO5oPVsQcAphQA3cT2q4Vs/0DozkX1JOFTyEpfsyWvfk5Aqw/eQp1oLT4 zBEJZ7S5lnQ5lUe2WwoRLXj3ODdY6ndtJ88eJs3WVTx9Y3U5tHkBWPVuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqyoeCb/jId+cQBLYOwo9laFZSzMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvucu7Bl k1BmipBJSDwn62mhVAFXhf2ToJItpcuKq5dmeaEQU/PG70sWGqUkzbD1B9lXrwB4 mOsVXR/GxXlITxrShr7NkbvUs/prTUecrAb9Umb76kCjPChKsEWe4eig3GL/pALY GllxjZuvEWZu4QxQslooMDi73RKEYQxWaNC/2XQD+3y7+62MTSNp2OKEM+J/e/iq eIM1OAFN+wz3DCBxVgctsSIZNHzQpgA3HFyK05X5QyDdkfUs+A8OZKbA4TtEwpnZ m3PCm2g2J3L5RKazil8tpf5Okdh2B7kTIWWg88N8Bz5DzUc693NcUnb9d51WqZUN L44d4ZP3cP7z9g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:49 2025 by rpki-client