This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json) Hash identifier: qDr4BP76kHVVwOicyALxw9ipVNPJVQKqTIRpMs8joAQ= Subject key identifier: 03:9A:41:D2:BA:42:D6:11:8D:34:B0:51:D4:56:94:2D:CD:68:7A:FD Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59 Certificate serial: 019AF1D1918DF4E57BE7C8FDCD6CBBD9E67E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft Manifest number: 086C Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: 7M8D3IxMWjzAgVSAuyFX2gLMxAs.roa (hash: MD3KP2LMgWTsm6lhsmms5WwgB8xDS3rVO74n7Xs0hs0=) 2: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: otgJr9bsSGIfvqHoNk6RCjzaeoYypAxShxAtyG4C5dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:91:8d:f4:e5:7b:e7:c8:fd:cd:6c:bb:d9:e6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59 Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=039a41d2ba42d6118d34b051d456942dcd687afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:24:51:05:c7:e8:48:67:68:77:88:8d:57: 4b:f3:7d:3a:91:17:30:af:62:e1:e4:8b:d4:85:0e: 06:a7:a2:c8:c0:ea:9c:0f:4c:45:f1:f8:af:64:bf: a0:25:ec:ce:03:25:90:2d:c7:b0:3a:1d:e7:cd:9b: 9c:91:9d:a8:e4:a5:5d:b7:27:71:78:4a:d0:b2:5a: 59:d8:cc:c9:e4:86:26:e3:e7:05:b2:96:98:22:e4: 74:dd:3c:6c:73:60:6f:7c:f9:3e:5b:c9:82:00:c0: 13:f3:16:46:0e:68:d9:eb:8a:49:11:28:61:a1:ef: b8:45:c0:02:97:c8:09:5c:f9:0f:46:ec:ee:3d:b8: d9:a3:c7:89:53:91:c6:b5:02:3e:2e:ea:4c:b7:36: 53:e0:11:93:9d:07:e4:72:81:20:2a:b9:f2:b7:82: 50:ae:4f:3b:40:a8:72:b3:58:b4:c4:d1:d5:54:7b: 5e:3e:0b:a6:64:eb:de:c9:f0:9a:76:c3:0f:cc:29: 4c:63:1c:17:a0:72:d9:e3:3a:4f:55:c2:74:4b:7e: d7:4c:50:68:5d:09:e6:91:e1:26:26:e2:c8:21:eb: 38:2b:f4:f4:f2:67:c4:d3:d1:a4:26:af:ff:96:74: b8:e7:35:a7:48:3b:3f:5f:22:82:7e:66:ba:7e:f9: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9A:41:D2:BA:42:D6:11:8D:34:B0:51:D4:56:94:2D:CD:68:7A:FD X509v3 Authority Key Identifier: keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a6:6d:45:74:a4:4c:91:1f:d8:24:f8:a9:ff:7c:4a:db:fa: 75:5e:47:fa:82:4d:8f:e8:e2:5a:fd:c9:55:0f:38:82:ef:ce: 6f:12:94:f6:13:71:25:f2:21:47:39:ef:78:8e:ad:d8:41:85: 45:7c:a9:fd:01:0b:d0:28:3b:e6:30:f6:ae:49:dd:01:e7:86: 38:87:42:3f:27:2f:9f:58:01:d8:49:83:43:ea:5d:2f:8b:5a: 01:80:92:96:81:df:c4:e0:9f:8f:fc:d7:f1:44:10:6a:ba:a0: 96:0f:14:6a:0c:89:af:ca:c1:48:75:da:3e:81:27:48:32:4c: b9:79:74:3e:ed:dd:11:9e:fe:50:c7:a5:61:e6:42:91:0c:8e: 65:f3:65:a3:52:e3:82:ab:d0:76:af:c4:a9:12:b7:cc:86:1f: 5d:9a:31:b7:70:ae:ab:0d:25:3c:ed:28:31:bd:ec:b1:ec:6d: bc:ba:b0:5f:40:38:db:b6:0d:df:22:38:37:45:b0:80:b9:3b: e9:57:c5:9b:b4:33:e4:38:c2:59:5f:cc:a7:29:94:af:7d:6d: 2d:ad:04:15:09:27:54:a9:2c:ed:9e:4a:82:8d:54:a5:c7:fd: cb:68:87:df:f4:8d:c9:c4:5d:ab:a3:19:68:20:4b:bc:73:ef: 28:8d:49:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZGN9OV758j9zWy72eZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDNkY2E3NjMxOTkwMzE1MmYyNDZlMDVjMDY5ZmQxYTFk YjVjNTkwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD EygwMzlhNDFkMmJhNDJkNjExOGQzNGIwNTFkNDU2OTQyZGNkNjg3YWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIAkUQXH6EhnaHeIjVdL8306kRcw r2Lh5IvUhQ4Gp6LIwOqcD0xF8fivZL+gJezOAyWQLcewOh3nzZuckZ2o5KVdtydx eErQslpZ2MzJ5IYm4+cFspaYIuR03Txsc2BvfPk+W8mCAMAT8xZGDmjZ64pJEShh oe+4RcACl8gJXPkPRuzuPbjZo8eJU5HGtQI+LupMtzZT4BGTnQfkcoEgKrnyt4JQ rk87QKhys1i0xNHVVHtePgumZOveyfCadsMPzClMYxwXoHLZ4zpPVcJ0S37XTFBo XQnmkeEmJuLIIes4K/T08mfE09GkJq//lnS45zWnSDs/XyKCfma6fvmEBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOaQdK6QtYRjTSwUdRWlC3NaHr9MB8GA1UdIwQY MBaAFIsD3KdjGZAxUvJG4FwGn9Gh21xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQt MDI5ZTYzZjA4ODlhLzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQtMDI5ZTYzZjA4ODlh LzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaZtRXSk TJEf2CT4qf98Stv6dV5H+oJNj+jiWv3JVQ84gu/ObxKU9hNxJfIhRznveI6t2EGF RXyp/QEL0Cg75jD2rkndAeeGOIdCPycvn1gB2EmDQ+pdL4taAYCSloHfxOCfj/zX 8UQQarqglg8UagyJr8rBSHXaPoEnSDJMuXl0Pu3dEZ7+UMelYeZCkQyOZfNlo1Lj gqvQdq/EqRK3zIYfXZoxt3Cuqw0lPO0oMb3ssextvLqwX0A427YN3yI4N0WwgLk7 6VfFm7Qz5DjCWV/MpymUr31tLa0EFQknVKks7Z5Kgo1Upcf9y2iH3/SNycRdq6MZ aCBLvHPvKI1JLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:36 2025 by rpki-client