This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft File: iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json) Hash identifier: /nCSx5A7IxwMwMhKq5u3vMaX6f+Xq9hpvkyHF8c/MI8= Subject key identifier: EC:F3:B1:A6:91:A5:7C:BD:ED:7A:86:87:B3:86:DD:41:23:EB:8E:A5 Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Certificate serial: 019AF2769A9C3DA7C7B8FBABFE22E26FE081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft Manifest number: 0F22 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 0IndqmA5xgu2CF_jwxX-2bd09ko.roa (hash: CG/Zn9dtirhwk2tnBTHiZTYDu08mvtaBnxe37T6W3lo=) 2: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (hash: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=) 3: Rgi2MqRe28scNXwPSUaBJHXLnRM.roa (hash: miWc+jt8vObsSbUl+pf5rxC6Fyzqxyz42FOUYU27xXk=) 4: htFXYL1G4eCbcC3mPYaIkosKB6Q.roa (hash: oJWFKr4H9EjNjtC5DQyq80O2d4aINMVPyWSnIqkyv3g=) 5: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: R1U54+H1x05X6O7/+wJwW/gc0MjI0RL4FCzQclyuvTo=) 6: r8Kgnsf2CFDkciuWjszh92cUKms.roa (hash: t9GQ5puvq72qcB/c1cjyIxkd1J8pBBNOk+0fmKdIfac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9a:9c:3d:a7:c7:b8:fb:ab:fe:22:e2:6f:e0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=ecf3b1a691a57cbded7a8687b386dd4123eb8ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:4b:99:33:5b:93:b1:44:f6:4d:ca:a2:fe: d1:e0:7a:51:7f:36:77:56:1f:d4:5a:df:7c:e3:9e: 4a:ae:09:a4:45:38:9e:a7:50:a0:9e:da:3f:f9:ab: cc:65:75:e1:0f:40:46:c1:03:6a:0e:fc:66:07:1f: f0:70:2c:5c:1f:f5:a3:90:40:8c:63:cd:a1:16:3b: b9:d7:de:c3:47:94:4b:a8:89:15:87:b8:b9:35:15: 2b:40:8b:ed:a3:cc:71:c0:34:47:ab:e2:26:c6:1b: 34:03:f2:7e:d2:6b:38:5d:ea:b4:3f:a6:f4:a4:40: 12:b9:04:56:8b:dc:a1:32:24:8f:02:e7:19:14:66: c0:da:1b:21:04:0f:8c:f1:47:5d:6a:30:28:dc:ee: 61:50:5a:23:6d:ff:f6:e6:f8:ec:3d:45:ad:b5:05: 32:d8:53:86:d9:64:68:3f:81:c4:db:b0:73:e9:40: 8f:e6:04:9a:bf:8b:76:66:7a:e4:08:15:e2:e6:48: d5:13:d7:00:b6:42:61:91:8d:09:f2:4a:34:9b:df: 40:a6:ad:bb:af:ae:64:7e:c5:eb:74:22:3b:ed:07: 5f:d1:32:5a:91:d4:ce:83:cd:75:75:fd:6c:3d:0e: 22:f5:3c:aa:2b:f1:a9:1c:27:c1:d1:76:11:a9:88: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F3:B1:A6:91:A5:7C:BD:ED:7A:86:87:B3:86:DD:41:23:EB:8E:A5 X509v3 Authority Key Identifier: keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:ce:c5:3e:80:68:21:fd:89:ad:d6:2b:2d:ef:10:b8:b7:10: 18:95:68:de:c2:e7:98:5d:cf:4a:5b:b5:0b:73:df:d9:cf:df: 70:81:8e:f9:fd:d8:c9:78:79:6b:af:f6:96:bf:64:a3:5f:11: 5a:9d:78:c9:d1:a7:88:a5:3e:ed:4a:2c:9b:58:88:0c:da:01: d7:d6:b0:84:fb:ba:31:c5:cf:86:2a:e9:8b:9b:54:2a:8a:d6: 43:af:8c:21:a9:1c:0f:50:a8:35:5d:2b:25:b4:b3:ba:3a:e2: 1b:af:fc:77:f0:dc:4a:e8:dd:b5:b4:34:1e:00:b4:6b:fb:04: dd:f0:3f:e6:2f:af:fc:bb:46:71:22:e1:9e:5d:ec:51:19:a5: 13:0b:e6:91:b5:09:a3:9a:11:0b:59:c7:86:a0:fe:29:c0:89: 35:fb:ad:d2:ba:b8:de:82:c4:52:1f:97:d5:0f:3f:23:0f:40: 0e:8b:b9:e6:59:b1:6d:8b:e0:1c:15:8a:af:ca:e0:53:cb:4a: 18:dd:fb:6b:41:d0:a9:b3:8e:3c:ce:27:cf:36:bd:2d:03:01: cf:a3:87:d4:51:de:c4:05:d2:08:e7:24:0e:07:ae:2f:2b:8f: 9b:b4:19:2f:6d:6a:d4:5c:0d:46:42:46:e7:54:59:59:59:d1: aa:12:ec:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpqcPafHuPur/iLib+CBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmVkNmU0YjVjN2MxOWRiOThjNTc0MzJhZjRkY2Y2MzBi ZjYwYWUwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EyhlY2YzYjFhNjkxYTU3Y2JkZWQ3YTg2ODdiMzg2ZGQ0MTIzZWI4ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpRLmTNbk7FE9k3Kov7R4HpRfzZ3 Vh/UWt98455KrgmkRTiep1Cgnto/+avMZXXhD0BGwQNqDvxmBx/wcCxcH/WjkECM Y82hFju5197DR5RLqIkVh7i5NRUrQIvto8xxwDRHq+Imxhs0A/J+0ms4Xeq0P6b0 pEASuQRWi9yhMiSPAucZFGbA2hshBA+M8UddajAo3O5hUFojbf/25vjsPUWttQUy 2FOG2WRoP4HE27Bz6UCP5gSav4t2ZnrkCBXi5kjVE9cAtkJhkY0J8ko0m99Apq27 r65kfsXrdCI77Qdf0TJakdTOg811df1sPQ4i9TyqK/GpHCfB0XYRqYhZtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzzsaaRpXy97XqGh7OG3UEj646lMB8GA1UdIwQY MBaAFIlu1uS1x8GduYxXQyr03PYwv2CuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYt ZGMxZmY2NzQ2ZDJlLzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYtZGMxZmY2NzQ2ZDJl LzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6s7FPoBo If2JrdYrLe8QuLcQGJVo3sLnmF3PSlu1C3Pf2c/fcIGO+f3YyXh5a6/2lr9ko18R Wp14ydGniKU+7Uosm1iIDNoB19awhPu6McXPhirpi5tUKorWQ6+MIakcD1CoNV0r JbSzujriG6/8d/DcSujdtbQ0HgC0a/sE3fA/5i+v/LtGcSLhnl3sURmlEwvmkbUJ o5oRC1nHhqD+KcCJNfut0rq43oLEUh+X1Q8/Iw9ADou55lmxbYvgHBWKr8rgU8tK GN37a0HQqbOOPM4nzza9LQMBz6OH1FHexAXSCOckDgeuLyuPm7QZL21q1FwNRkJG 51RZWVnRqhLsoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:02 2025 by rpki-client