This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json) Hash identifier: f3InniKf+5stSesheiUp+3AiD/HpZGCpOr2//Zo2Ltk= Subject key identifier: E2:E6:43:63:EC:55:F9:25:80:89:E7:92:FE:DF:09:70:AD:C7:C6:DA Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Certificate serial: 019AF31D45D7B483BBB5F63D46945CD977ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:02:53 +0000 Manifest this update: Sat 06 Dec 2025 10:02:53 +0000 Manifest next update: Sun 07 Dec 2025 10:02:53 +0000 Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=) 2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=) 3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: XsMF824U/riQvKwBM+/O9ewO1bIiRULGS+Z895u4oa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:45:d7:b4:83:bb:b5:f6:3d:46:94:5c:d9:77:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Validity Not Before: Dec 6 10:02:53 2025 GMT Not After : Dec 7 10:02:53 2025 GMT Subject: CN=e2e64363ec55f9258089e792fedf0970adc7c6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:88:dd:ae:d0:99:d4:36:76:e4:ca:07:25: 2f:8a:78:53:41:68:dd:4a:93:b4:57:95:d4:02:31: 92:d2:3f:24:f9:9d:ac:bf:29:13:b3:5d:b6:76:b5: d7:10:01:a0:8b:69:90:d6:02:4b:6e:0f:de:95:fe: bb:b3:cc:05:6c:1f:ec:07:e9:06:8a:b9:0b:aa:e9: 8a:13:b0:90:24:3e:4b:ea:33:9a:58:f0:5d:53:6c: 71:2a:2e:aa:37:cc:ed:78:98:3c:f1:9a:97:8f:85: 35:f4:9e:24:f7:6f:1b:ba:d7:4a:ec:27:d8:02:d9: f8:a9:46:05:48:a0:a8:69:06:18:b7:85:0b:52:44: b1:a6:d3:23:8d:e6:7a:26:e1:b4:0a:d2:61:e8:be: db:cb:5a:6e:06:f5:38:7e:32:cd:5a:29:37:9a:83: bf:b9:50:4f:29:48:79:7e:b9:da:4d:9d:ea:95:57: f9:70:82:1c:62:ed:95:36:b5:4d:1b:06:75:e1:bc: e4:59:f9:59:5e:91:e2:44:fd:f4:7f:a0:4a:86:5d: 44:79:70:bc:a5:21:b5:ca:ee:8c:1d:79:84:6b:dd: ef:13:66:58:d3:0a:ff:74:3a:3d:9c:a0:9f:d8:07: 4d:72:59:b0:54:af:9d:87:5e:d8:e3:f8:cf:83:61: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:43:63:EC:55:F9:25:80:89:E7:92:FE:DF:09:70:AD:C7:C6:DA X509v3 Authority Key Identifier: keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:50:6a:32:a6:ba:d6:21:09:06:57:94:6a:23:bd:c1:0f:e5: 71:d3:19:c3:89:3b:67:53:6f:40:cc:25:d3:64:21:da:aa:f2: c7:e2:63:43:50:11:d2:ad:2c:16:75:36:d7:95:13:b6:e5:eb: b9:9f:ef:73:28:82:89:6b:aa:af:a2:19:0d:22:ee:29:91:bf: 33:b3:ff:ef:93:cc:dc:6d:08:f6:d7:98:51:ba:15:ba:48:73: f5:a8:e8:47:fc:be:45:37:86:1f:63:3c:6d:73:06:d4:5b:ce: a3:92:dd:cc:85:50:cd:8c:93:01:03:b4:90:90:a5:dc:32:57: 41:dd:3a:d7:14:96:a1:d3:8b:18:1e:35:03:56:12:4b:ed:4d: 79:9d:ff:02:ee:be:58:79:bb:15:58:4c:68:aa:16:00:a7:a7: 18:7c:45:e5:34:f2:67:33:00:1c:07:88:45:79:84:6e:ba:54: 49:32:aa:c0:52:79:06:69:e1:b1:3d:1f:50:0b:09:a4:88:1c: b4:79:f6:ba:2d:ae:bf:33:97:cb:5e:63:0f:f3:ea:5c:73:51: d1:23:7f:b2:5a:58:70:32:25:f8:2f:ad:f2:a9:21:56:aa:0e: 7b:ba:8b:77:bc:68:c5:2a:93:c0:26:82:6d:dd:d4:a7:57:c9: ec:2a:ad:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUXXtIO7tfY9RpRc2XftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh MjhmZmIwHhcNMjUxMjA2MTAwMjUzWhcNMjUxMjA3MTAwMjUzWjAzMTEwLwYDVQQD EyhlMmU2NDM2M2VjNTVmOTI1ODA4OWU3OTJmZWRmMDk3MGFkYzdjNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHSI3a7QmdQ2duTKByUvinhTQWjd SpO0V5XUAjGS0j8k+Z2svykTs122drXXEAGgi2mQ1gJLbg/elf67s8wFbB/sB+kG irkLqumKE7CQJD5L6jOaWPBdU2xxKi6qN8zteJg88ZqXj4U19J4k928butdK7CfY Atn4qUYFSKCoaQYYt4ULUkSxptMjjeZ6JuG0CtJh6L7by1puBvU4fjLNWik3moO/ uVBPKUh5frnaTZ3qlVf5cIIcYu2VNrVNGwZ14bzkWflZXpHiRP30f6BKhl1EeXC8 pSG1yu6MHXmEa93vE2ZY0wr/dDo9nKCf2AdNclmwVK+dh17Y4/jPg2HEHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLmQ2PsVfklgInnkv7fCXCtx8baMB8GA1UdIwQY MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct YjQwM2QxMGMzZTkxLzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVBqMqa6 1iEJBleUaiO9wQ/lcdMZw4k7Z1NvQMwl02Qh2qryx+JjQ1AR0q0sFnU215UTtuXr uZ/vcyiCiWuqr6IZDSLuKZG/M7P/75PM3G0I9teYUboVukhz9ajoR/y+RTeGH2M8 bXMG1FvOo5LdzIVQzYyTAQO0kJCl3DJXQd061xSWodOLGB41A1YSS+1NeZ3/Au6+ WHm7FVhMaKoWAKenGHxF5TTyZzMAHAeIRXmEbrpUSTKqwFJ5BmnhsT0fUAsJpIgc tHn2ui2uvzOXy15jD/PqXHNR0SN/slpYcDIl+C+t8qkhVqoOe7qLd7xoxSqTwCaC bd3Up1fJ7CqtNg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:11:47 2025 by rpki-client