This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft File: IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json) Hash identifier: 21xDSZ86SuKx+FYfLrY5bPxqvfqMgp5NpuPcepmALAw= Subject key identifier: 79:B4:69:41:79:07:6E:AA:8D:1D:CA:6E:2F:BF:B6:E4:8B:F2:1C:50 Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e Certificate serial: 019AF31C86492FB43636C8542C9D805F9255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:04 +0000 Manifest this update: Sat 06 Dec 2025 10:02:04 +0000 Manifest next update: Sun 07 Dec 2025 10:02:04 +0000 Files and hashes: 1: AYkoB-e1MzcctAIB25MUBAI3Gw8.roa (hash: RhXb3K21xkSfp4wHDHnklvRvJi1oEc1FzHYwM8s92WA=) 2: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: voFrdA5RntDp9JEnqu3Je4sWlYixf2DbP+KRKFR4CaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:86:49:2f:b4:36:36:c8:54:2c:9d:80:5f:92:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e Validity Not Before: Dec 6 10:02:04 2025 GMT Not After : Dec 7 10:02:04 2025 GMT Subject: CN=79b4694179076eaa8d1dca6e2fbfb6e48bf21c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:ab:4a:39:81:eb:fa:c1:97:c4:25:80:c4: 99:ce:e2:48:fc:60:cf:81:8f:39:ed:cf:8a:b3:e1: 59:d0:4b:02:8a:f2:51:2e:b5:2b:6a:cd:90:c4:13: 89:8c:f2:01:a0:69:36:0b:ed:1d:90:f4:cf:4e:32: 39:08:70:45:39:72:4f:34:ba:92:b3:de:9b:61:a6: 74:58:6b:b2:7e:5c:4e:46:c6:91:dc:c1:bf:06:c9: 32:d0:1c:a5:ac:bf:60:2d:fd:6f:7b:24:47:4a:af: 9b:fa:33:ef:72:f7:9e:a2:11:f9:50:e4:cb:22:26: 8d:80:08:81:49:c2:6f:6c:02:ad:ae:c1:4d:cf:38: 41:b8:00:59:8d:2e:15:9f:4a:89:00:4f:66:da:7c: f2:87:07:33:1f:28:ed:83:0e:a5:62:a7:a1:31:ca: 32:eb:1f:e6:af:2d:30:ec:4b:b5:d6:4e:2f:ff:f5: 68:a3:b9:52:ec:14:51:a3:bb:cf:9d:e5:69:5e:b9: b9:db:d7:72:3d:ec:d0:ff:68:48:f6:a2:9a:65:ba: af:30:52:5c:68:65:d9:5e:ff:ee:d3:f9:7f:fe:04: 4a:0c:5c:8f:e8:89:09:a6:9a:a7:69:83:45:ae:54: d8:4f:d6:70:a2:bb:70:ca:bb:1a:9c:f1:7f:d4:14: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:69:41:79:07:6E:AA:8D:1D:CA:6E:2F:BF:B6:E4:8B:F2:1C:50 X509v3 Authority Key Identifier: keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ba:b5:0b:67:89:ca:96:e3:6a:57:52:41:e2:df:ee:14:5f: 57:cc:e4:56:03:c5:94:6f:7e:bb:0b:d0:29:d8:12:05:da:2a: 06:9a:29:5f:6f:aa:d5:c9:ab:f3:c5:e1:ca:dd:ba:23:a1:93: 9e:e3:76:db:e5:ff:b1:19:b2:f0:eb:60:a6:4f:69:cd:b0:c5: 19:f1:f7:ad:9e:6e:41:28:e1:a0:84:ff:b4:8b:ee:9b:20:b5: a6:6d:ac:69:14:ab:4d:f0:99:cc:45:68:eb:00:d3:54:65:d9: 41:e9:5e:bb:2c:cd:33:ce:30:12:02:75:60:52:ec:c6:dd:90: 80:f1:2a:5f:40:4e:60:40:46:82:ec:79:16:d5:60:ee:ee:2b: 48:92:10:42:0f:e6:19:42:47:de:35:47:97:83:92:20:c6:66: bb:0f:d5:0c:ea:92:22:d3:01:f9:dd:64:a7:03:04:7d:20:65: ae:0d:e2:55:75:b5:e9:c8:c1:2f:13:ea:42:69:99:69:a3:5f: 7a:19:52:07:ed:a1:87:ba:98:ca:39:7e:cf:1f:f5:f0:a1:00: a2:7f:a3:d1:01:f6:a6:fd:04:33:43:fa:36:37:e9:16:f1:a2: 4b:83:6c:12:2c:eb:e4:a5:39:42:7c:c0:7f:26:31:9f:f6:58: 76:3f:2f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIZJL7Q2NshULJ2AX5JVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDVhZTA2MjEyZjNjMmY4ZjU3M2EwYjU0OTI0NDFlNThm MjFjNGUwHhcNMjUxMjA2MTAwMjA0WhcNMjUxMjA3MTAwMjA0WjAzMTEwLwYDVQQD Eyg3OWI0Njk0MTc5MDc2ZWFhOGQxZGNhNmUyZmJmYjZlNDhiZjIxYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8CrSjmB6/rBl8QlgMSZzuJI/GDP gY857c+Ks+FZ0EsCivJRLrUras2QxBOJjPIBoGk2C+0dkPTPTjI5CHBFOXJPNLqS s96bYaZ0WGuyflxORsaR3MG/Bsky0BylrL9gLf1veyRHSq+b+jPvcveeohH5UOTL IiaNgAiBScJvbAKtrsFNzzhBuABZjS4Vn0qJAE9m2nzyhwczHyjtgw6lYqehMcoy 6x/mry0w7Eu11k4v//Voo7lS7BRRo7vPneVpXrm529dyPezQ/2hI9qKaZbqvMFJc aGXZXv/u0/l//gRKDFyP6IkJppqnaYNFrlTYT9ZwortwyrsanPF/1BR0TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm0aUF5B26qjR3Kbi+/tuSL8hxQMB8GA1UdIwQY MBaAFCMFrgYhLzwvj1c6C1SSRB5Y8hxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEt Y2Y2YjIzZDI2MTdjLzEvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEtY2Y2YjIzZDI2MTdj LzEvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrq1C2eJ ypbjaldSQeLf7hRfV8zkVgPFlG9+uwvQKdgSBdoqBpopX2+q1cmr88Xhyt26I6GT nuN22+X/sRmy8Otgpk9pzbDFGfH3rZ5uQSjhoIT/tIvumyC1pm2saRSrTfCZzEVo 6wDTVGXZQeleuyzNM84wEgJ1YFLsxt2QgPEqX0BOYEBGgux5FtVg7u4rSJIQQg/m GUJH3jVHl4OSIMZmuw/VDOqSItMB+d1kpwMEfSBlrg3iVXW16cjBLxPqQmmZaaNf ehlSB+2hh7qYyjl+zx/18KEAon+j0QH2pv0EM0P6NjfpFvGiS4NsEizr5KU5QnzA fyYxn/ZYdj8v6A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:06 2025 by rpki-client