This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json) Hash identifier: Q2qPxCXYcrhT/JelqERxeomICHcfUDRPEcp59Sfy95s= Subject key identifier: 3E:83:3F:D2:4F:5A:4B:26:6F:8D:86:6D:60:ED:F3:69:98:59:B6:E3 Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1 Certificate serial: 019AF61CB0CB767FCCDE1668F55A1D2DD3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft Manifest number: 038A Signing time: Sun 07 Dec 2025 00:01:06 +0000 Manifest this update: Sun 07 Dec 2025 00:01:06 +0000 Manifest next update: Mon 08 Dec 2025 00:01:06 +0000 Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=) 2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: E8LyW9Q1OKJJ/ICdveuD8rN7N4mgVrJzRsAuDEHw8YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:b0:cb:76:7f:cc:de:16:68:f5:5a:1d:2d:d3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1 Validity Not Before: Dec 7 00:01:06 2025 GMT Not After : Dec 8 00:01:06 2025 GMT Subject: CN=3e833fd24f5a4b266f8d866d60edf3699859b6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:40:53:78:43:10:b1:99:02:4c:78:70:6b: 98:e4:5b:40:a9:e3:9d:29:83:0d:01:7a:e4:67:e2: 15:43:20:77:5c:7a:9e:96:72:24:03:0e:5a:81:8d: 41:41:26:79:5c:67:b1:11:ac:9c:50:fa:9b:e3:aa: 80:2f:04:d4:bf:84:14:c6:37:fa:1f:62:6b:25:dc: 4e:f4:ab:ab:bd:3d:60:96:51:0d:0a:7c:ee:0d:b1: 9d:6b:cd:e7:5e:12:13:94:89:16:43:bc:00:d4:76: 29:44:28:c8:cd:79:82:49:fd:cb:09:14:a5:cd:93: 87:b9:12:7e:fe:1b:9f:d8:f2:67:1c:f3:5c:e7:3f: 53:c5:96:21:f1:c9:48:69:42:0f:24:e2:2e:ac:44: 18:c2:65:90:c5:b5:9c:8c:9f:ec:bd:10:a2:1d:a6: 67:46:75:2b:d3:7c:aa:e2:c9:dd:05:3a:94:59:e8: 0d:d1:31:8d:81:71:3b:d4:14:22:cf:62:0e:16:8e: 80:d2:80:09:88:51:f1:98:10:8f:70:bb:e9:cd:db: 2c:e6:75:5a:a5:55:a1:1b:c2:23:86:cf:1b:7c:38: 20:35:b1:1e:ab:75:99:b8:8a:bf:43:9e:ef:66:ad: 3f:20:d6:96:26:99:93:73:2d:f6:89:7a:54:3b:61: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:83:3F:D2:4F:5A:4B:26:6F:8D:86:6D:60:ED:F3:69:98:59:B6:E3 X509v3 Authority Key Identifier: keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:00:39:20:5c:67:e4:2a:ad:50:fe:70:91:97:ff:c8:06:87: 2d:88:63:89:95:41:2d:44:ad:eb:c6:91:97:61:6d:f0:d2:23: 8e:b8:b9:68:96:91:95:c2:13:b0:57:22:da:48:ea:53:5b:58: fd:bf:ef:c2:7b:e3:d0:52:bf:6f:60:53:2f:e8:36:00:7c:05: b2:62:b5:52:19:2e:c8:51:48:80:ec:7f:a9:ba:c1:e5:b2:e7: 9e:88:c1:29:13:60:c1:2e:0a:ad:83:ca:40:95:f0:18:47:a3: 44:fd:fc:21:28:4c:7c:3f:bc:0b:81:48:25:64:40:ae:25:b9: db:63:52:a2:2e:b1:13:ca:0a:75:ea:3f:02:a5:5a:c0:b4:cb: c8:66:28:b1:30:4b:25:1c:ee:4d:8d:8a:dc:99:04:91:32:42: 1c:12:60:13:6b:e5:10:b4:b5:b9:5e:a7:cd:ac:c2:fa:7b:19: db:d8:3e:ca:96:6f:5f:67:be:2a:1d:e8:35:91:f2:4c:53:41: bc:5e:af:b9:ec:38:34:50:a2:95:39:d8:4d:c9:84:44:53:07: b4:1c:38:68:4f:23:29:4a:2a:bf:9e:7e:39:a2:c3:20:90:ad: af:25:1a:53:81:8f:a9:a5:69:28:10:e3:ed:6e:53:ae:e6:4a: 8d:3e:f3:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HLDLdn/M3hZo9VodLdPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Njg4ODM3NjU1NDk5OTFkN2ZmMzc2MTI2ZDU4YTkwOWEx NGI4ZjEwHhcNMjUxMjA3MDAwMTA2WhcNMjUxMjA4MDAwMTA2WjAzMTEwLwYDVQQD EygzZTgzM2ZkMjRmNWE0YjI2NmY4ZDg2NmQ2MGVkZjM2OTk4NTliNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxFAU3hDELGZAkx4cGuY5FtAqeOd KYMNAXrkZ+IVQyB3XHqelnIkAw5agY1BQSZ5XGexEaycUPqb46qALwTUv4QUxjf6 H2JrJdxO9KurvT1gllENCnzuDbGda83nXhITlIkWQ7wA1HYpRCjIzXmCSf3LCRSl zZOHuRJ+/huf2PJnHPNc5z9TxZYh8clIaUIPJOIurEQYwmWQxbWcjJ/svRCiHaZn RnUr03yq4sndBTqUWegN0TGNgXE71BQiz2IOFo6A0oAJiFHxmBCPcLvpzdss5nVa pVWhG8Ijhs8bfDggNbEeq3WZuIq/Q57vZq0/INaWJpmTcy32iXpUO2FTIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6DP9JPWksmb42GbWDt82mYWbbjMB8GA1UdIwQY MBaAFIloiDdlVJmR1/83YSbVipCaFLjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQt Y2QwMjdhMDY4MWJkLzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQtY2QwMjdhMDY4MWJk LzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAA5IFxn 5CqtUP5wkZf/yAaHLYhjiZVBLUSt68aRl2Ft8NIjjri5aJaRlcITsFci2kjqU1tY /b/vwnvj0FK/b2BTL+g2AHwFsmK1UhkuyFFIgOx/qbrB5bLnnojBKRNgwS4KrYPK QJXwGEejRP38IShMfD+8C4FIJWRAriW522NSoi6xE8oKdeo/AqVawLTLyGYosTBL JRzuTY2K3JkEkTJCHBJgE2vlELS1uV6nzazC+nsZ29g+ypZvX2e+Kh3oNZHyTFNB vF6vuew4NFCilTnYTcmERFMHtBw4aE8jKUoqv55+OaLDIJCtryUaU4GPqaVpKBDj 7W5TruZKjT7zfQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:59 2025 by rpki-client