This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json) Hash identifier: qD3AYg0LPtW+MLWbAwkCdEvcedZDk/y9Hc6L81CJe4k= Subject key identifier: DC:D6:EB:71:12:5F:FB:7F:97:BD:57:CD:EB:D6:47:B9:70:E3:BC:4F Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019AF12D2C8F0365C9D20B888224ECE53578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft Manifest number: 1428 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=) 2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: HpCG9axxMQQGAHX1PyZdqbx/VttnxN99q5g79RNw7xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2c:8f:03:65:c9:d2:0b:88:82:24:ec:e5:35:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=dcd6eb71125ffb7f97bd57cdebd647b970e3bc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:94:13:1b:b1:0d:1c:0f:2d:fd:38:09:1c: 49:eb:cd:44:0d:57:8c:17:53:07:30:6e:72:7c:c1: 92:13:48:80:9d:24:b3:3d:f9:0d:75:64:a3:94:d9: 5a:b0:fd:b0:36:18:9b:7a:f6:e6:e2:4e:49:db:3c: 69:2c:ac:53:e2:8c:59:56:4f:50:04:85:ec:2a:e2: 48:cf:9c:c0:24:27:69:08:40:cc:44:24:f2:76:50: 89:a1:13:8f:e7:70:f5:e2:2d:bf:eb:1d:56:3c:4c: 91:c7:d9:e1:5e:a9:d8:e0:35:8e:e1:ba:2e:66:53: f1:90:94:53:64:aa:8c:f5:35:4d:9a:5c:93:75:63: 66:19:62:e0:ef:f6:8a:7d:c2:e3:e3:6f:4b:a5:6f: 01:2b:f6:0c:95:d7:40:ab:8b:d5:7d:6e:10:41:2f: 0b:c5:dc:67:d6:3c:fc:59:77:97:49:3d:78:4e:f2: 61:bd:e3:4b:32:7d:31:39:4b:c8:a3:0d:3e:6d:ab: 66:3a:33:9c:f8:bd:81:cd:8b:f9:7b:35:b8:c4:f2: b8:bb:17:22:1b:34:ec:b8:d3:bd:27:b4:84:6d:93: d0:8a:fe:8d:39:46:ba:9b:31:86:0d:84:2d:ed:2a: 36:7a:af:60:2d:31:7f:d0:e5:71:76:02:66:55:af: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:EB:71:12:5F:FB:7F:97:BD:57:CD:EB:D6:47:B9:70:E3:BC:4F X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:3b:3b:70:98:d0:2a:7c:1c:2b:b0:50:0f:20:b5:76:33:2a: df:d0:d4:e5:f8:de:28:c5:9f:3f:bc:b5:08:45:70:8d:d6:aa: 9d:5d:34:7d:ea:bf:f6:5b:5b:e6:98:ce:34:97:ea:a8:37:f4: 8e:de:0c:65:8a:1f:f7:18:b2:3a:a5:00:de:79:64:61:2b:e5: bd:1f:93:48:d3:d1:47:51:8d:a0:32:5a:9d:59:15:ff:c4:1a: 0e:ab:2a:f4:c6:7e:6c:b4:9a:f6:54:82:ca:15:46:2d:85:bc: 2e:73:cc:d5:2b:7f:b7:42:2e:55:62:26:eb:46:57:bb:be:67: 3c:64:36:6f:1f:98:f5:ad:44:28:05:7f:54:d7:93:12:17:45: 07:d9:4e:63:60:e5:c7:9c:0e:8e:69:f7:28:ad:a5:fc:27:c8: 50:27:20:ed:b6:fa:59:65:3f:c4:99:f3:f4:ca:60:2b:5e:04: f2:40:ed:a7:46:eb:df:66:05:37:93:4a:46:0c:bc:d5:ec:60: 54:6e:f5:c9:35:81:11:d6:1c:b9:dd:76:dc:5a:65:89:bf:43: cf:6a:38:a1:65:59:f4:0e:22:b7:07:8a:ff:cc:03:85:bb:ca: d0:cd:b6:72:c3:ed:75:26:df:82:ba:72:69:aa:90:1c:8d:bd: eb:7c:46:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSyPA2XJ0guIgiTs5TV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EyhkY2Q2ZWI3MTEyNWZmYjdmOTdiZDU3Y2RlYmQ2NDdiOTcwZTNiYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk6UExuxDRwPLf04CRxJ681EDVeM F1MHMG5yfMGSE0iAnSSzPfkNdWSjlNlasP2wNhibevbm4k5J2zxpLKxT4oxZVk9Q BIXsKuJIz5zAJCdpCEDMRCTydlCJoROP53D14i2/6x1WPEyRx9nhXqnY4DWO4bou ZlPxkJRTZKqM9TVNmlyTdWNmGWLg7/aKfcLj429LpW8BK/YMlddAq4vVfW4QQS8L xdxn1jz8WXeXST14TvJhveNLMn0xOUvIow0+batmOjOc+L2BzYv5ezW4xPK4uxci GzTsuNO9J7SEbZPQiv6NOUa6mzGGDYQt7So2eq9gLTF/0OVxdgJmVa/HUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzW63ESX/t/l71XzevWR7lw47xPMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTs7cJjQ KnwcK7BQDyC1djMq39DU5fjeKMWfP7y1CEVwjdaqnV00feq/9ltb5pjONJfqqDf0 jt4MZYof9xiyOqUA3nlkYSvlvR+TSNPRR1GNoDJanVkV/8QaDqsq9MZ+bLSa9lSC yhVGLYW8LnPM1St/t0IuVWIm60ZXu75nPGQ2bx+Y9a1EKAV/VNeTEhdFB9lOY2Dl x5wOjmn3KK2l/CfIUCcg7bb6WWU/xJnz9MpgK14E8kDtp0br32YFN5NKRgy81exg VG71yTWBEdYcud123Fplib9Dz2o4oWVZ9A4itweK/8wDhbvK0M22csPtdSbfgrpy aaqQHI2963xGsA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:12 2025 by rpki-client