This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json) Hash identifier: uwrheDd7Ezh63K/ZlObW/1dFIdsT0HyjGxy5NOMdu+U= Subject key identifier: 27:26:5F:9D:20:2C:7A:83:AE:01:20:CD:3E:4F:C6:85:5F:B3:1A:FD Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967 Certificate serial: 019AF163E2EC4129629A723119DFC0D48520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=) 2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: IdaC8HhNP8MvV9Du/i3XccOD4ulZ868mGVzeKztqfhE=) 3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e2:ec:41:29:62:9a:72:31:19:df:c0:d4:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967 Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=27265f9d202c7a83ae0120cd3e4fc6855fb31afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:36:c1:c9:d4:31:fd:eb:45:68:9f:cc:b5: ab:c0:33:ab:b0:43:b7:2e:ee:4a:a5:3c:92:aa:0e: 80:0c:09:05:c4:9e:4e:e0:35:d3:54:bc:35:20:5d: 1f:c2:b8:c4:a2:d6:fd:63:36:80:68:88:13:79:59: 11:11:06:bb:09:3c:b6:3a:c3:3c:dd:61:38:66:9b: ba:9a:22:82:bc:ff:21:d9:02:c8:de:b4:0e:d2:d3: f2:16:01:0c:b5:e4:7d:c4:38:02:62:c2:f1:07:72: 37:8d:47:6c:6a:44:f2:94:40:5d:a7:e0:05:2a:bd: 34:15:ff:4b:5e:53:f2:41:f0:07:6c:54:0a:e8:65: f2:dd:3f:02:a7:48:80:15:7a:0a:c6:8c:18:bb:99: 43:08:71:0f:14:41:e5:3e:8f:80:25:1b:aa:f3:1e: 95:2c:26:18:1c:20:9c:eb:da:91:30:e1:b6:23:3b: 07:b4:61:45:d6:1a:2f:c2:fb:d6:e7:b9:fb:9e:57: 8f:43:10:51:5d:f9:13:3f:2b:30:f7:50:26:90:44: 0e:c2:6f:62:01:71:6c:da:74:50:f4:e0:25:a1:8a: d1:34:29:f5:d4:5f:56:59:a5:21:2b:96:0c:2e:37: ec:8e:23:f5:b5:01:cb:37:e0:52:61:78:0c:bb:01: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:26:5F:9D:20:2C:7A:83:AE:01:20:CD:3E:4F:C6:85:5F:B3:1A:FD X509v3 Authority Key Identifier: keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:91:ec:11:75:68:30:44:b7:78:90:a3:fd:21:1c:82:cb: d6:b6:bb:cb:cb:60:89:34:15:71:4f:42:e8:11:eb:37:b5:2a: e2:62:b9:c0:b6:b2:61:cf:8c:aa:35:4f:d9:2f:0f:a5:f8:9b: 36:3c:8c:9d:37:53:20:9c:3f:99:17:d0:79:98:78:bd:46:72: 40:ff:ea:eb:e0:f6:e1:8e:0f:ac:cf:48:ef:f3:da:f8:b9:56: a5:d0:27:f6:59:df:b6:5c:63:01:cf:61:1e:6e:59:b8:09:8f: 89:a8:9b:7e:85:4f:f8:07:8b:38:f4:c1:36:de:f3:da:77:d3: 03:18:dd:61:1c:da:61:f6:6c:4d:16:ce:62:eb:39:0a:56:45: a9:7e:6a:3f:25:5c:b7:1e:7a:ae:d7:cc:2e:2d:63:4a:56:be: 4a:38:14:3a:bd:36:24:af:da:90:40:e4:ea:55:be:af:0b:1b: 66:62:67:b0:8c:88:63:a4:d4:1f:4a:fb:66:a0:33:c8:2c:e9: b4:46:98:59:63:9e:81:e9:e9:c8:69:1c:85:62:57:e3:58:6f: 35:93:d5:43:e4:c7:ec:d5:fc:c1:89:50:ce:37:5b:db:30:3e: c2:39:2d:61:e4:f6:b5:af:28:92:95:2d:d2:4f:16:f9:32:e5: 58:c1:ac:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+LsQSlimnIxGd/A1IUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmQ1ODY2YzM1MDkzMzUyZTdiOWUwNzYyYzU5MWUwOGU1 MGY5NjcwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD EygyNzI2NWY5ZDIwMmM3YTgzYWUwMTIwY2QzZTRmYzY4NTVmYjMxYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ02wcnUMf3rRWifzLWrwDOrsEO3 Lu5KpTySqg6ADAkFxJ5O4DXTVLw1IF0fwrjEotb9YzaAaIgTeVkREQa7CTy2OsM8 3WE4Zpu6miKCvP8h2QLI3rQO0tPyFgEMteR9xDgCYsLxB3I3jUdsakTylEBdp+AF Kr00Ff9LXlPyQfAHbFQK6GXy3T8Cp0iAFXoKxowYu5lDCHEPFEHlPo+AJRuq8x6V LCYYHCCc69qRMOG2IzsHtGFF1hovwvvW57n7nlePQxBRXfkTPysw91AmkEQOwm9i AXFs2nRQ9OAloYrRNCn11F9WWaUhK5YMLjfsjiP1tQHLN+BSYXgMuwH6XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcmX50gLHqDrgEgzT5PxoVfsxr9MB8GA1UdIwQY MBaAFIltWGbDUJM1LnueB2LFkeCOUPlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUt Nzg0NjI0YTdiNDdlLzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUtNzg0NjI0YTdiNDdl LzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmeR7BF1 aDBEt3iQo/0hHILL1ra7y8tgiTQVcU9C6BHrN7Uq4mK5wLayYc+MqjVP2S8Ppfib NjyMnTdTIJw/mRfQeZh4vUZyQP/q6+D24Y4PrM9I7/Pa+LlWpdAn9lnftlxjAc9h Hm5ZuAmPiaibfoVP+AeLOPTBNt7z2nfTAxjdYRzaYfZsTRbOYus5ClZFqX5qPyVc tx56rtfMLi1jSla+SjgUOr02JK/akEDk6lW+rwsbZmJnsIyIY6TUH0r7ZqAzyCzp tEaYWWOegenpyGkchWJX41hvNZPVQ+TH7NX8wYlQzjdb2zA+wjktYeT2ta8okpUt 0k8W+TLlWMGspg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:24 2025 by rpki-client