This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json) Hash identifier: +3G/azdtOG2VgmCcI5M00sStNt7ywZ+2+MbpX8K68AA= Subject key identifier: 23:4F:28:86:54:A3:C2:3F:F2:2C:26:52:CA:F3:FA:24:98:32:28:10 Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178 Certificate serial: 019AF1D1C27FE34AC65EDA5B4BC61E281C0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft Manifest number: 0894 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=) 2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: TZtZe/FJ/tzXLc2SDddxuEAR8hW0glxdWtxBH+YMEOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c2:7f:e3:4a:c6:5e:da:5b:4b:c6:1e:28:1c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=234f288654a3c23ff22c2652caf3fa2498322810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:54:ec:0d:ee:e1:c3:9d:e0:d0:23:71:69: cb:a5:e8:23:b6:57:d0:5e:fd:f4:60:55:ff:91:37: 95:3e:35:51:de:f2:c8:0f:b0:eb:09:77:3f:a5:53: 6f:bd:d7:a1:43:d0:60:48:5c:ae:52:40:94:97:63: 12:f0:16:1f:d3:f7:e3:0b:01:71:94:f6:d9:b8:ad: 6c:72:36:c6:e8:a2:1a:27:13:dc:ed:73:63:4d:11: 99:9f:d8:91:83:3f:f5:40:30:43:86:38:5a:7a:3d: 69:f0:27:0f:fd:61:da:69:ea:aa:89:b0:c9:61:6c: 4a:44:bc:fc:81:4d:c4:a1:34:45:08:08:21:bc:59: c1:c0:76:e6:29:ab:8a:29:3a:e1:32:a5:45:44:c7: 6b:4a:b2:2f:18:1c:45:cd:ff:4a:af:e6:67:e8:f4: 50:04:91:ec:a4:f2:b3:15:32:35:fe:fc:2d:9c:8c: f4:e1:c6:22:e0:1f:66:19:78:20:28:ab:a5:cc:e7: 2a:85:99:8b:de:51:9c:bf:f7:df:d4:05:ea:43:4a: 73:2b:a0:11:ef:66:83:ae:88:91:05:5d:e5:6b:31: bf:6f:b5:df:73:d4:39:d5:c7:ac:6e:1b:51:b4:18: 53:4f:b5:3f:ef:3a:02:bb:b6:47:90:72:75:cf:75: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:28:86:54:A3:C2:3F:F2:2C:26:52:CA:F3:FA:24:98:32:28:10 X509v3 Authority Key Identifier: keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d5:17:32:63:a9:c5:ff:33:09:29:b1:51:ae:17:58:70:dc: 82:bd:90:ba:40:ea:ee:5b:b0:ef:6c:ae:3b:e1:7c:42:76:f2: cd:e0:b9:fa:8a:ab:c3:50:d4:82:71:30:95:db:8a:21:5b:52: fa:10:95:cb:6a:76:9e:20:8b:bd:03:13:bf:f9:34:f0:a7:9a: 1c:aa:4c:cc:69:de:40:04:19:1e:7a:aa:29:34:18:2a:7b:f0: 9a:87:f0:f6:7b:c3:b5:8e:b9:45:73:61:6b:ea:7b:c6:cb:01: b3:03:9b:6d:7a:06:2e:50:e7:07:cb:4e:b1:4f:b6:a8:6c:14: 8f:79:0d:66:97:cf:35:c5:85:13:b8:c2:3d:14:63:d9:a3:a1: cc:0c:21:cf:37:ad:ba:27:3a:dd:35:f3:df:9a:5f:b4:b1:bf: ab:49:dc:12:b0:8b:03:a4:2c:df:3e:10:42:d1:93:36:a8:e2: 87:ff:23:dd:02:74:14:03:3d:60:fe:1d:60:aa:df:c5:b3:89: fd:0c:29:2f:63:6d:f6:61:10:60:d0:db:02:79:74:a1:0c:12: 04:b5:89:f4:ae:9d:3e:13:3a:6b:53:c5:c6:96:58:d4:e1:4b: f6:4d:0c:f3:10:61:86:ea:62:35:29:de:55:4a:d5:4f:f6:36: 11:f9:61:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cJ/40rGXtpbS8YeKBwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4 MzExNzgwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EygyMzRmMjg4NjU0YTNjMjNmZjIyYzI2NTJjYWYzZmEyNDk4MzIyODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdBU7A3u4cOd4NAjcWnLpegjtlfQ Xv30YFX/kTeVPjVR3vLID7DrCXc/pVNvvdehQ9BgSFyuUkCUl2MS8BYf0/fjCwFx lPbZuK1scjbG6KIaJxPc7XNjTRGZn9iRgz/1QDBDhjhaej1p8CcP/WHaaeqqibDJ YWxKRLz8gU3EoTRFCAghvFnBwHbmKauKKTrhMqVFRMdrSrIvGBxFzf9Kr+Zn6PRQ BJHspPKzFTI1/vwtnIz04cYi4B9mGXggKKulzOcqhZmL3lGcv/ff1AXqQ0pzK6AR 72aDroiRBV3lazG/b7Xfc9Q51cesbhtRtBhTT7U/7zoCu7ZHkHJ1z3X0nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNPKIZUo8I/8iwmUsrz+iSYMigQMB8GA1UdIwQY MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtUXMmOp xf8zCSmxUa4XWHDcgr2QukDq7luw72yuO+F8QnbyzeC5+oqrw1DUgnEwlduKIVtS +hCVy2p2niCLvQMTv/k08KeaHKpMzGneQAQZHnqqKTQYKnvwmofw9nvDtY65RXNh a+p7xssBswObbXoGLlDnB8tOsU+2qGwUj3kNZpfPNcWFE7jCPRRj2aOhzAwhzzet uic63TXz35pftLG/q0ncErCLA6Qs3z4QQtGTNqjih/8j3QJ0FAM9YP4dYKrfxbOJ /QwpL2Nt9mEQYNDbAnl0oQwSBLWJ9K6dPhM6a1PFxpZY1OFL9k0M8xBhhupiNSne VUrVT/Y2EflhPA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:11 2025 by rpki-client