This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json) Hash identifier: BTvMe4HkRPFNM6dGFeWOsXC3RN/OQBHRvZuxqvIlwHw= Subject key identifier: C4:EE:C1:F5:2B:B5:4A:D6:B1:71:BF:6D:F1:16:93:81:36:32:26:A9 Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6 Certificate serial: 019B329EEDADA68AE42356A3F7DD0955D6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 18:00:34 +0000 Manifest this update: Thu 18 Dec 2025 18:00:34 +0000 Manifest next update: Fri 19 Dec 2025 18:00:34 +0000 Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: Ba5yONIsvflBzDq9bBT8OCv+YXWHR9GqqwfdI//CI9s=) 2: UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa (hash: cfx5VG/AEqP8NMaOBqVctXkelvdIOqGDstY0ytuNLZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:ed:ad:a6:8a:e4:23:56:a3:f7:dd:09:55:d6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208b221700b281f823e322a32221a867e5b079a6 Validity Not Before: Dec 18 18:00:34 2025 GMT Not After : Dec 19 18:00:34 2025 GMT Subject: CN=c4eec1f52bb54ad6b171bf6df1169381363226a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:19:22:3c:dd:13:a7:c1:9d:ca:3c:73:ae: fa:b6:91:1f:3e:33:12:df:0a:3f:de:6d:2d:1e:e8: 41:ca:8f:92:53:43:b1:7c:04:60:6b:9b:08:04:c9: 0c:77:63:ae:f3:0e:3e:89:39:ca:a9:98:e9:f9:f8: 51:e8:6f:65:22:6e:a8:eb:31:5b:30:0f:cc:40:df: 41:38:bf:cc:1a:ad:ee:75:d5:d9:8d:24:9b:a5:f4: b2:03:eb:65:38:dc:e0:52:72:d0:b0:69:3c:33:c8: 19:10:2b:16:55:14:50:b4:69:8f:d4:29:63:0a:0a: 22:d4:d9:96:89:73:08:16:81:96:a9:dc:dd:8e:40: f7:70:e6:a6:db:27:c1:c2:1d:0a:ba:cc:f1:51:1c: 60:36:08:bc:11:b7:1a:14:cd:af:65:96:72:01:78: d7:30:a8:f0:d9:23:5e:d7:f7:85:c8:be:25:13:1a: 4b:58:f6:83:e3:ec:8e:98:34:d5:c1:b7:93:51:b8: dc:da:de:ed:5d:c0:1f:5a:09:f6:fa:15:b9:d9:e9: 2c:a7:5d:59:e6:52:68:73:76:7a:3c:8e:9f:24:cb: 6f:41:80:f1:22:05:07:cb:94:40:0d:66:ff:a3:fb: 85:1e:c5:06:95:3a:05:d7:c6:7c:a5:10:43:d1:87: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:C1:F5:2B:B5:4A:D6:B1:71:BF:6D:F1:16:93:81:36:32:26:A9 X509v3 Authority Key Identifier: keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:76:c1:36:48:0d:78:53:79:a0:b5:b6:31:75:e6:5b:27:91: 19:9b:d5:57:d5:79:0c:ee:a1:7d:dd:bb:5f:a0:c8:c2:f0:9b: ae:32:b4:6e:cb:aa:ef:3e:b2:63:b5:f0:a6:bf:d4:70:85:de: 6e:b4:3f:bf:67:a7:e0:5c:28:93:27:ee:c0:dd:76:27:99:5d: f4:cc:a9:d0:69:e7:8f:d9:d6:ac:81:9d:0f:7a:eb:fa:65:05: 84:c7:e8:37:c6:aa:66:08:77:5e:a5:f6:ca:7b:b9:64:ed:bf: ff:58:b2:48:37:7f:b2:71:36:63:b7:e9:ba:70:ae:43:d6:d2: 6f:f3:75:32:a1:29:f9:07:77:c4:64:c0:0e:8b:de:0b:a0:5c: 15:c2:5a:f0:d4:75:c1:c0:80:e5:43:1f:c2:2e:e4:62:19:3a: 95:0f:24:6a:c7:85:f4:d2:30:31:bb:61:de:ba:8d:5b:2e:25: 56:62:7e:12:85:7b:fe:d0:bb:4f:e7:06:f1:10:22:4f:ee:08: 96:a7:f4:d8:1b:02:c3:b3:a4:19:47:12:ed:97:cc:65:5f:79: 1d:2a:22:a6:1d:d1:e9:84:f9:f6:26:58:46:4c:12:d2:48:a9: ef:ef:4d:e2:c5:e3:08:11:f7:29:7b:1d:18:5e:74:83:1a:1a: 37:cc:8c:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynu2tporkI1aj990JVdbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi MDc5YTYwHhcNMjUxMjE4MTgwMDM0WhcNMjUxMjE5MTgwMDM0WjAzMTEwLwYDVQQD EyhjNGVlYzFmNTJiYjU0YWQ2YjE3MWJmNmRmMTE2OTM4MTM2MzIyNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx4ZIjzdE6fBnco8c676tpEfPjMS 3wo/3m0tHuhByo+SU0OxfARga5sIBMkMd2Ou8w4+iTnKqZjp+fhR6G9lIm6o6zFb MA/MQN9BOL/MGq3uddXZjSSbpfSyA+tlONzgUnLQsGk8M8gZECsWVRRQtGmP1Clj Cgoi1NmWiXMIFoGWqdzdjkD3cOam2yfBwh0KuszxURxgNgi8EbcaFM2vZZZyAXjX MKjw2SNe1/eFyL4lExpLWPaD4+yOmDTVwbeTUbjc2t7tXcAfWgn2+hW52eksp11Z 5lJoc3Z6PI6fJMtvQYDxIgUHy5RADWb/o/uFHsUGlToF18Z8pRBD0YfhFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTuwfUrtUrWsXG/bfEWk4E2MiapMB8GA1UdIwQY MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHbBNkgN eFN5oLW2MXXmWyeRGZvVV9V5DO6hfd27X6DIwvCbrjK0bsuq7z6yY7Xwpr/UcIXe brQ/v2en4FwokyfuwN12J5ld9Myp0Gnnj9nWrIGdD3rr+mUFhMfoN8aqZgh3XqX2 ynu5ZO2//1iySDd/snE2Y7fpunCuQ9bSb/N1MqEp+Qd3xGTADoveC6BcFcJa8NR1 wcCA5UMfwi7kYhk6lQ8kaseF9NIwMbth3rqNWy4lVmJ+EoV7/tC7T+cG8RAiT+4I lqf02BsCw7OkGUcS7ZfMZV95HSoiph3R6YT59iZYRkwS0kip7+9N4sXjCBH3KXsd GF50gxoaN8yMdA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:09 2025 by rpki-client