This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft File: iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json) Hash identifier: pXW70O4GM09HHKHDtuV5xQd5jSOAELiTlNtUFSQWoNA= Subject key identifier: 3F:24:52:73:F7:11:25:83:55:A8:59:17:6D:68:2B:FE:A3:8B:EC:FA Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Certificate serial: 019B341FC37C02BC67EB668C8F6D35697083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft Manifest number: 0F44 Signing time: Fri 19 Dec 2025 01:00:55 +0000 Manifest this update: Fri 19 Dec 2025 01:00:55 +0000 Manifest next update: Sat 20 Dec 2025 01:00:55 +0000 Files and hashes: 1: 0IndqmA5xgu2CF_jwxX-2bd09ko.roa (hash: CG/Zn9dtirhwk2tnBTHiZTYDu08mvtaBnxe37T6W3lo=) 2: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (hash: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=) 3: Rgi2MqRe28scNXwPSUaBJHXLnRM.roa (hash: miWc+jt8vObsSbUl+pf5rxC6Fyzqxyz42FOUYU27xXk=) 4: htFXYL1G4eCbcC3mPYaIkosKB6Q.roa (hash: oJWFKr4H9EjNjtC5DQyq80O2d4aINMVPyWSnIqkyv3g=) 5: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: Cgo7wDDIgZmUp/6h5SWOob6G3Aq0O04j2/t4fQ+kpMM=) 6: r8Kgnsf2CFDkciuWjszh92cUKms.roa (hash: t9GQ5puvq72qcB/c1cjyIxkd1J8pBBNOk+0fmKdIfac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:c3:7c:02:bc:67:eb:66:8c:8f:6d:35:69:70:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Validity Not Before: Dec 19 01:00:55 2025 GMT Not After : Dec 20 01:00:55 2025 GMT Subject: CN=3f245273f711258355a859176d682bfea38becfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:44:40:56:ee:8e:ad:7e:b6:b2:fa:bf:7d: 8f:0b:74:f8:e4:ff:b8:f2:65:cc:70:dc:67:12:ba: 3d:d3:17:cc:c9:2d:c3:76:a3:75:57:11:fb:81:cf: 24:9c:72:ff:f8:73:c0:07:6c:13:01:69:2b:da:76: 8a:b4:13:85:61:63:ad:b7:5b:98:f6:68:db:3b:9c: 22:6b:2d:de:c1:67:c5:a2:e5:17:7d:31:2f:31:e8: 9f:64:33:5c:ee:17:5b:42:02:82:3a:d4:aa:ac:d5: 5f:f4:d2:41:e8:5b:81:0e:0e:e8:80:46:f1:5d:e0: e1:c4:de:7d:ba:1c:f5:e3:96:e4:7c:44:28:96:ba: a5:1c:d6:15:2b:d8:62:cb:f3:8c:2d:38:17:3a:c8: 91:fa:b5:45:93:5c:36:c1:56:8c:78:be:06:2b:40: 62:2c:99:cf:95:5b:53:bb:f7:86:a4:d3:84:4a:93: 9e:9a:60:79:e3:98:23:cf:06:b6:77:66:d4:57:a3: 2c:cd:01:bd:16:5c:da:25:d1:f9:63:29:fd:0d:29: dc:41:03:0c:45:95:dd:eb:73:9d:90:6f:3d:97:cb: b4:cf:4f:bc:a8:d8:90:0f:0f:39:81:a6:7e:7a:56: a1:6f:c0:d6:8d:bb:e8:7c:68:d8:97:a9:ff:ca:03: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:24:52:73:F7:11:25:83:55:A8:59:17:6D:68:2B:FE:A3:8B:EC:FA X509v3 Authority Key Identifier: keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:44:ce:f5:fa:8c:af:81:49:68:4f:33:27:73:93:63:23:ab: f7:ce:37:82:99:f3:86:43:4a:5c:43:f2:83:26:b6:ab:29:a0: 6b:94:1e:14:9a:d6:84:6d:fe:cb:e5:ac:c9:ad:16:48:d0:e7: 39:2f:a5:a7:dc:ec:f6:68:ea:cf:28:9c:45:79:f7:01:38:e5: 74:b0:61:9b:9c:9b:95:7e:24:66:b0:0b:77:d0:d2:83:7b:88: 38:b8:15:c2:09:aa:4e:f7:89:b0:5a:a0:fd:37:a3:af:07:70: b4:85:65:af:04:e9:4c:25:41:f0:d8:9c:3e:f4:3a:10:4a:d9: 9b:7a:3a:0f:76:34:ae:85:a4:00:86:4c:8d:ea:86:ce:3e:c7: 94:8f:5f:03:fb:63:61:4e:11:43:de:c7:35:56:f4:81:80:06: 3c:6d:aa:13:18:cd:91:0e:6c:5f:5a:fa:2b:b3:06:d5:63:9a: 5f:0f:fa:76:8d:8c:cc:0f:07:19:65:65:cc:36:d8:ec:fd:4e: 41:c7:30:c8:ac:23:5f:63:57:78:ba:2c:f5:2c:04:6e:b9:d0: 1a:5f:06:21:46:01:09:82:1f:42:f6:d9:34:5e:7e:04:d4:53: f0:ae:6b:62:b3:c7:3d:1b:93:c4:90:f5:56:db:44:9d:ec:e3: c5:9a:81:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H8N8Arxn62aMj201aXCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmVkNmU0YjVjN2MxOWRiOThjNTc0MzJhZjRkY2Y2MzBi ZjYwYWUwHhcNMjUxMjE5MDEwMDU1WhcNMjUxMjIwMDEwMDU1WjAzMTEwLwYDVQQD EygzZjI0NTI3M2Y3MTEyNTgzNTVhODU5MTc2ZDY4MmJmZWEzOGJlY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzdEQFbujq1+trL6v32PC3T45P+4 8mXMcNxnEro90xfMyS3DdqN1VxH7gc8knHL/+HPAB2wTAWkr2naKtBOFYWOtt1uY 9mjbO5wiay3ewWfFouUXfTEvMeifZDNc7hdbQgKCOtSqrNVf9NJB6FuBDg7ogEbx XeDhxN59uhz145bkfEQolrqlHNYVK9hiy/OMLTgXOsiR+rVFk1w2wVaMeL4GK0Bi LJnPlVtTu/eGpNOESpOemmB545gjzwa2d2bUV6MszQG9FlzaJdH5Yyn9DSncQQMM RZXd63OdkG89l8u0z0+8qNiQDw85gaZ+elahb8DWjbvofGjYl6n/ygND3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8kUnP3ESWDVahZF21oK/6ji+z6MB8GA1UdIwQY MBaAFIlu1uS1x8GduYxXQyr03PYwv2CuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYt ZGMxZmY2NzQ2ZDJlLzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYtZGMxZmY2NzQ2ZDJl LzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARETO9fqM r4FJaE8zJ3OTYyOr9843gpnzhkNKXEPygya2qymga5QeFJrWhG3+y+Wsya0WSNDn OS+lp9zs9mjqzyicRXn3ATjldLBhm5yblX4kZrALd9DSg3uIOLgVwgmqTveJsFqg /TejrwdwtIVlrwTpTCVB8NicPvQ6EErZm3o6D3Y0roWkAIZMjeqGzj7HlI9fA/tj YU4RQ97HNVb0gYAGPG2qExjNkQ5sX1r6K7MG1WOaXw/6do2MzA8HGWVlzDbY7P1O QccwyKwjX2NXeLos9SwEbrnQGl8GIUYBCYIfQvbZNF5+BNRT8K5rYrPHPRuTxJD1 VttEnezjxZqBaw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:30 2025 by rpki-client