This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json) Hash identifier: O3iO9CBv07Gr2KT3oRrqngRflXYfJWGMUR2aR/qkPtg= Subject key identifier: 23:80:0F:06:3E:79:ED:ED:9C:FC:64:AF:12:BF:E8:39:DA:EE:08:EE Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019AF1646FC0C5A1C043140AB7FC82417435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 02:01:22 +0000 Manifest this update: Sat 06 Dec 2025 02:01:22 +0000 Manifest next update: Sun 07 Dec 2025 02:01:22 +0000 Files and hashes: 1: 1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa (hash: R4A5i2N8JYKg21Uc7Bt5Hjz+LtBEOYUw0Vl9yYmvj1U=) 2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=) 3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: 6rMrCE2BrKtHMvh99lmjTypV71SZptaEhNOYM99X+ig=) 4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=) 5: escRk3d2NjI3vOhsunfMskewVFU.roa (hash: zPSViHW+zBVRTJi3BUxGbJ65sQUAitf2bEnfu5wf6oI=) 6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=) 7: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6f:c0:c5:a1:c0:43:14:0a:b7:fc:82:41:74:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Dec 6 02:01:22 2025 GMT Not After : Dec 7 02:01:22 2025 GMT Subject: CN=23800f063e79eded9cfc64af12bfe839daee08ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:79:3f:bf:b9:5e:c8:46:7f:21:2a:51:5f: 12:be:17:d5:b0:39:97:98:9f:d7:df:b3:6c:e4:5f: 61:d7:84:26:e9:c3:d5:6a:51:a2:d9:e3:56:73:23: e3:a8:53:35:d3:35:0a:e4:2d:16:ba:ae:b9:9e:eb: 5b:25:94:86:7b:41:cd:a5:cb:d9:43:0e:23:fe:3b: 9a:9e:6d:bb:d9:98:61:64:0f:4a:38:7f:69:5e:70: e7:64:2f:da:18:45:53:9c:7b:e7:92:f4:e0:58:f0: bc:a7:43:5c:8d:04:d3:ab:aa:f5:fa:7d:db:53:a0: eb:38:08:0d:e2:81:36:b5:d2:a1:29:7c:63:66:1c: d6:e6:97:a6:09:bb:b3:2b:df:e3:1e:39:23:5c:49: ab:c0:3f:1c:a0:e5:b4:6b:81:b9:9a:78:4a:28:de: 3f:c8:e1:7d:17:54:ad:f3:a7:fd:68:64:b5:13:66: c6:6c:72:a8:d0:50:ca:1c:a3:9a:f1:c6:59:c9:54: 3a:ae:62:5e:a7:6b:04:ad:7b:c9:58:5b:30:a8:85: 19:98:f7:e1:ce:0e:4d:03:fb:2c:30:3c:55:97:22: d5:49:d6:31:99:12:4a:1f:2b:ac:79:38:ed:dc:25: 21:f8:70:94:f7:3d:0b:6c:f5:2e:94:d9:03:72:ba: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:80:0F:06:3E:79:ED:ED:9C:FC:64:AF:12:BF:E8:39:DA:EE:08:EE X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1a:82:d4:19:5f:1e:c2:70:33:e0:a4:37:27:6e:37:f1:7f: b4:e5:17:fe:98:82:99:55:86:d6:8d:22:ef:19:07:66:38:a5: da:3d:82:d5:b8:e1:b3:b1:9d:0f:81:e9:08:27:60:f7:ab:67: ec:77:3d:f5:4b:96:4e:17:87:25:10:62:a6:54:b4:0d:1d:da: c2:9b:a4:0e:4f:6c:40:ec:a8:f2:70:cb:45:18:eb:48:82:5e: 90:23:52:16:9f:97:41:b1:38:18:17:5c:98:f6:35:c5:0c:48: 04:f7:93:d6:db:c6:6c:23:3a:e5:9e:0d:e8:94:cb:b0:cc:d1: 01:0f:4c:ee:d6:be:35:c0:05:89:4f:de:d1:e8:df:d2:20:a4: 70:04:76:e5:cd:99:ef:9a:a3:eb:99:b3:57:81:55:9c:aa:37: d7:f0:ae:bd:91:c6:b7:fa:e5:3d:50:04:aa:d8:5d:b7:fb:10: af:b1:4b:9c:94:fd:ca:e0:5c:78:a6:7d:63:c1:de:ea:0a:17: 1d:57:bd:a4:ee:5c:a8:6c:40:10:ef:11:1c:13:63:75:dd:28: a3:6b:54:fb:c5:e7:4b:24:6e:f4:9e:3f:f7:f3:bf:37:f8:23: 64:10:cd:1f:e9:7f:66:ac:a7:3d:6c:d8:d8:50:8d:59:27:57: f4:5e:7a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG/AxaHAQxQKt/yCQXQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD EygyMzgwMGYwNjNlNzllZGVkOWNmYzY0YWYxMmJmZTgzOWRhZWUwOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7B5P7+5XshGfyEqUV8SvhfVsDmX mJ/X37Ns5F9h14Qm6cPValGi2eNWcyPjqFM10zUK5C0Wuq65nutbJZSGe0HNpcvZ Qw4j/juanm272ZhhZA9KOH9pXnDnZC/aGEVTnHvnkvTgWPC8p0NcjQTTq6r1+n3b U6DrOAgN4oE2tdKhKXxjZhzW5pemCbuzK9/jHjkjXEmrwD8coOW0a4G5mnhKKN4/ yOF9F1St86f9aGS1E2bGbHKo0FDKHKOa8cZZyVQ6rmJep2sErXvJWFswqIUZmPfh zg5NA/ssMDxVlyLVSdYxmRJKHyuseTjt3CUh+HCU9z0LbPUulNkDcrr8OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOADwY+ee3tnPxkrxK/6Dna7gjuMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghqC1Blf HsJwM+CkNyduN/F/tOUX/piCmVWG1o0i7xkHZjil2j2C1bjhs7GdD4HpCCdg96tn 7Hc99UuWTheHJRBiplS0DR3awpukDk9sQOyo8nDLRRjrSIJekCNSFp+XQbE4GBdc mPY1xQxIBPeT1tvGbCM65Z4N6JTLsMzRAQ9M7ta+NcAFiU/e0ejf0iCkcAR25c2Z 75qj65mzV4FVnKo31/CuvZHGt/rlPVAEqthdt/sQr7FLnJT9yuBceKZ9Y8He6goX HVe9pO5cqGxAEO8RHBNjdd0oo2tU+8XnSyRu9J4/9/O/N/gjZBDNH+l/ZqynPWzY 2FCNWSdX9F56HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:37 2025 by rpki-client