This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json) Hash identifier: 1cQixHoBWdNgo6LjhSBGGizup4A9gk3HePHVNu/yizo= Subject key identifier: B7:00:84:0C:8F:F8:40:88:3A:08:4D:76:4B:8D:0F:1A:D5:97:E8:F7 Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98 Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98 Certificate serial: 019B3569A6E140859AC5CC3FFB89D39BCF05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 07:01:14 +0000 Manifest this update: Fri 19 Dec 2025 07:01:14 +0000 Manifest next update: Sat 20 Dec 2025 07:01:14 +0000 Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: mNOcrXXnygjye3ukBBwnfxz+AjVkip8EcGWTGWkUSHY=) 2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:a6:e1:40:85:9a:c5:cc:3f:fb:89:d3:9b:cf:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98 Validity Not Before: Dec 19 07:01:14 2025 GMT Not After : Dec 20 07:01:14 2025 GMT Subject: CN=b700840c8ff840883a084d764b8d0f1ad597e8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:bd:38:43:38:f4:a6:28:22:c3:67:ac:73: c0:c2:37:75:3c:94:9d:36:1c:4e:f9:47:12:56:57: 66:3d:77:ea:3d:c0:0a:ec:51:fb:83:5b:e7:73:ba: 5d:d2:78:bf:9f:44:3e:dd:19:31:f7:ff:0c:e3:77: d5:84:d1:11:8e:50:4a:c5:c6:f6:55:e2:69:87:32: 29:a4:c5:50:70:9d:6d:35:40:f0:a9:6b:6d:cf:b1: 58:63:2a:f2:28:e0:9b:96:f9:af:18:88:bf:af:49: 4d:a3:a3:a3:61:07:6d:b8:1b:d0:0d:c2:95:77:11: 12:1f:da:5f:d6:fa:8e:94:ba:25:da:c3:28:46:8c: 8b:c4:36:89:f3:f7:16:0e:36:8b:2f:2e:75:51:9e: 3a:a0:dd:0b:d2:5a:29:2e:30:06:f3:df:4e:c2:5b: 20:2b:0f:2b:e4:c1:79:8f:63:2b:e2:ce:b2:b9:82: 75:df:d4:2e:ef:3f:e1:37:f4:c0:71:b4:db:06:4c: f6:eb:56:a0:e1:23:24:af:a8:18:cf:3f:c7:d2:98: be:97:69:04:37:43:99:72:bd:04:b9:d0:c0:8b:1c: 2d:87:70:6c:c4:a0:f0:72:83:83:98:0c:0e:29:7e: 13:46:01:b9:8b:05:c5:fa:c9:e9:79:c8:88:94:25: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:84:0C:8F:F8:40:88:3A:08:4D:76:4B:8D:0F:1A:D5:97:E8:F7 X509v3 Authority Key Identifier: keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:eb:c1:86:d2:25:e8:1d:d6:c3:5f:bc:bb:3e:83:d5:1f:73: 96:35:8d:ff:5a:c5:d2:e6:83:cc:4c:70:52:ac:21:83:71:21: 5b:bc:45:d5:9a:e6:0d:c8:04:54:1b:f3:88:d6:09:9b:56:f9: 66:61:dc:fb:94:ee:09:0b:cb:55:10:98:2e:23:11:ca:e3:5c: fe:f5:16:87:55:7a:18:ff:04:0d:e6:b2:7b:3f:3d:e3:a5:64: d6:9c:94:3b:d4:fc:e5:cd:32:74:0b:09:e2:28:d2:c3:c2:b2: 31:9e:92:08:0b:d6:6b:4f:f4:4b:6e:9b:6f:84:e0:93:87:45: 5b:5a:48:97:65:42:9f:fc:a3:f7:5c:fe:e3:02:39:0d:b3:69: 90:4c:b7:50:77:cd:95:f0:cb:0f:e6:d8:e3:4b:ed:35:9e:a1: 34:f3:e2:fc:b2:d5:7f:dd:4d:74:49:2b:8e:90:78:d5:5d:59: 9e:2c:9c:21:c8:bb:0e:0b:34:7e:36:75:0a:8a:2f:b4:cf:30: 10:ac:b7:dc:75:7c:6c:de:bf:56:7f:86:12:44:c2:22:d3:b0: 79:64:c4:56:80:e7:7d:73:c4:ff:25:dd:89:1c:ea:cf:c7:67: e0:63:16:e2:bd:ae:c6:fb:17:40:e7:c9:96:37:84:f8:27:22: 14:05:f2:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aabhQIWaxcw/+4nTm88FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMGM3MGQzNmUwMTNiMDdlNGU2ZDhlYzNlYTRlZTQxM2I0 YWFhOTgwHhcNMjUxMjE5MDcwMTE0WhcNMjUxMjIwMDcwMTE0WjAzMTEwLwYDVQQD EyhiNzAwODQwYzhmZjg0MDg4M2EwODRkNzY0YjhkMGYxYWQ1OTdlOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZa9OEM49KYoIsNnrHPAwjd1PJSd NhxO+UcSVldmPXfqPcAK7FH7g1vnc7pd0ni/n0Q+3Rkx9/8M43fVhNERjlBKxcb2 VeJphzIppMVQcJ1tNUDwqWttz7FYYyryKOCblvmvGIi/r0lNo6OjYQdtuBvQDcKV dxESH9pf1vqOlLol2sMoRoyLxDaJ8/cWDjaLLy51UZ46oN0L0lopLjAG899Owlsg Kw8r5MF5j2Mr4s6yuYJ139Qu7z/hN/TAcbTbBkz261ag4SMkr6gYzz/H0pi+l2kE N0OZcr0EudDAixwth3BsxKDwcoODmAwOKX4TRgG5iwXF+snpeciIlCXW3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcAhAyP+ECIOghNdkuNDxrVl+j3MB8GA1UdIwQY MBaAFCAMcNNuATsH5ObY7D6k7kE7SqqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUt MTU4MDNmZmIxNzQ2LzEvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUtMTU4MDNmZmIxNzQ2 LzEvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPevBhtIl 6B3Ww1+8uz6D1R9zljWN/1rF0uaDzExwUqwhg3EhW7xF1ZrmDcgEVBvziNYJm1b5 ZmHc+5TuCQvLVRCYLiMRyuNc/vUWh1V6GP8EDeayez8946Vk1pyUO9T85c0ydAsJ 4ijSw8KyMZ6SCAvWa0/0S26bb4Tgk4dFW1pIl2VCn/yj91z+4wI5DbNpkEy3UHfN lfDLD+bY40vtNZ6hNPPi/LLVf91NdEkrjpB41V1ZniycIci7Dgs0fjZ1CoovtM8w EKy33HV8bN6/Vn+GEkTCItOweWTEVoDnfXPE/yXdiRzqz8dn4GMW4r2uxvsXQOfJ ljeE+CciFAXybQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:15 2025 by rpki-client