This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json) Hash identifier: kUR/GwX+e/nLtRUuPbPFjERIEOq+Zb2ujCIEtCyIGN0= Subject key identifier: C7:E2:68:C0:A6:DA:19:43:EE:09:D3:E7:82:45:EA:9C:F0:E3:7D:FD Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59 Certificate serial: 019B337AE78E24A47DFCB2C577DF594796E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft Manifest number: 088E Signing time: Thu 18 Dec 2025 22:00:51 +0000 Manifest this update: Thu 18 Dec 2025 22:00:51 +0000 Manifest next update: Fri 19 Dec 2025 22:00:51 +0000 Files and hashes: 1: 7M8D3IxMWjzAgVSAuyFX2gLMxAs.roa (hash: MD3KP2LMgWTsm6lhsmms5WwgB8xDS3rVO74n7Xs0hs0=) 2: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: rhm8ELQR3RKmFaLkK8JxWpxeO3TMgjpESdZ0UQomGZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:e7:8e:24:a4:7d:fc:b2:c5:77:df:59:47:96:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59 Validity Not Before: Dec 18 22:00:51 2025 GMT Not After : Dec 19 22:00:51 2025 GMT Subject: CN=c7e268c0a6da1943ee09d3e78245ea9cf0e37dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:f5:77:53:d7:3d:a9:b5:e5:e1:d9:68:80: 70:b6:41:30:0e:2d:8f:e9:f9:37:4e:6a:f3:f0:a6: 8c:e5:d2:5c:ff:50:04:61:9a:f3:35:73:3b:22:31: b7:cb:67:af:d5:80:03:99:b8:26:69:7f:76:92:6e: 10:a8:59:87:82:cf:fd:56:29:80:7d:c9:b9:7d:31: 0f:fb:fd:84:f6:fd:fc:00:7b:62:95:5b:63:2d:5b: 5b:5a:9f:9b:ba:90:89:28:87:12:fd:32:c2:cf:cb: 43:9b:d1:20:f1:00:c1:c5:9f:d4:36:65:4d:07:46: 9d:5e:94:8b:2a:49:98:da:55:6f:18:28:db:42:d8: fd:d1:2d:b3:a3:58:2e:0a:6d:1e:3e:60:c5:17:76: 1d:3c:5e:c1:e6:89:62:6b:6d:5a:38:f4:dc:1b:11: 4b:6d:71:10:47:29:57:a6:e6:00:1c:22:b5:05:44: 1e:e1:88:65:1b:15:54:f5:50:a3:8a:85:3c:31:c6: af:90:40:bf:d5:c3:e1:59:77:97:55:f2:4b:13:a3: ca:45:f4:d1:b9:6a:f5:4e:bb:f2:f4:f1:b5:12:62: 5a:96:15:0b:ff:09:8e:d1:77:4a:ec:96:81:2b:5e: 08:14:bf:5a:1f:4d:11:1f:ae:e4:45:78:52:19:c8: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E2:68:C0:A6:DA:19:43:EE:09:D3:E7:82:45:EA:9C:F0:E3:7D:FD X509v3 Authority Key Identifier: keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:16:f9:cb:4c:e2:77:df:7b:6d:5f:27:ec:51:36:fd:1a:31: 8f:56:a9:d4:86:2c:90:97:53:10:de:2b:c4:0a:54:04:d0:30: 3a:ed:b5:92:35:12:02:ac:65:0a:ce:18:da:7f:b6:4f:ab:a1: 39:20:f1:a0:33:9e:cd:a5:49:97:61:53:f0:64:da:64:7e:04: b7:83:b7:a1:f9:78:bd:3e:2a:46:de:96:ba:52:d6:a9:49:df: db:b6:48:ac:7a:cb:04:42:c4:c8:0c:14:59:4a:46:1a:f5:e3: 4c:28:0f:77:37:f8:f5:43:30:37:76:a4:a0:65:4e:33:c4:db: d9:3a:3a:e6:a5:b9:ab:e7:e3:aa:99:2a:09:a8:f3:35:8e:b2: a3:91:a6:f1:e2:cf:a3:61:98:34:9f:27:28:91:f2:74:84:06: 3c:c8:8f:e0:31:2f:f5:2f:4a:a9:e4:2c:ff:e7:48:06:e9:62: c1:24:bf:45:8c:3e:ab:06:3a:a8:22:ee:2d:c7:c8:1c:a4:96: 0b:c9:e8:1e:c8:1f:d9:c6:be:86:53:0d:eb:f4:5d:8c:0b:70: 1a:05:2a:0b:ec:bf:f9:a9:32:85:93:24:01:e2:9f:38:29:30: ad:c8:2b:4b:22:48:b7:3b:ef:12:c0:b9:99:cd:20:41:75:ee: 55:ae:2c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeueOJKR9/LLFd99ZR5bhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDNkY2E3NjMxOTkwMzE1MmYyNDZlMDVjMDY5ZmQxYTFk YjVjNTkwHhcNMjUxMjE4MjIwMDUxWhcNMjUxMjE5MjIwMDUxWjAzMTEwLwYDVQQD EyhjN2UyNjhjMGE2ZGExOTQzZWUwOWQzZTc4MjQ1ZWE5Y2YwZTM3ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkb1d1PXPam15eHZaIBwtkEwDi2P 6fk3Tmrz8KaM5dJc/1AEYZrzNXM7IjG3y2ev1YADmbgmaX92km4QqFmHgs/9VimA fcm5fTEP+/2E9v38AHtilVtjLVtbWp+bupCJKIcS/TLCz8tDm9Eg8QDBxZ/UNmVN B0adXpSLKkmY2lVvGCjbQtj90S2zo1guCm0ePmDFF3YdPF7B5olia21aOPTcGxFL bXEQRylXpuYAHCK1BUQe4YhlGxVU9VCjioU8McavkEC/1cPhWXeXVfJLE6PKRfTR uWr1Trvy9PG1EmJalhUL/wmO0XdK7JaBK14IFL9aH00RH67kRXhSGcg+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfiaMCm2hlD7gnT54JF6pzw4339MB8GA1UdIwQY MBaAFIsD3KdjGZAxUvJG4FwGn9Gh21xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQt MDI5ZTYzZjA4ODlhLzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQtMDI5ZTYzZjA4ODlh LzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBb5y0zi d997bV8n7FE2/Roxj1ap1IYskJdTEN4rxApUBNAwOu21kjUSAqxlCs4Y2n+2T6uh OSDxoDOezaVJl2FT8GTaZH4Et4O3ofl4vT4qRt6WulLWqUnf27ZIrHrLBELEyAwU WUpGGvXjTCgPdzf49UMwN3akoGVOM8Tb2To65qW5q+fjqpkqCajzNY6yo5Gm8eLP o2GYNJ8nKJHydIQGPMiP4DEv9S9KqeQs/+dIBuliwSS/RYw+qwY6qCLuLcfIHKSW C8noHsgf2ca+hlMN6/RdjAtwGgUqC+y/+akyhZMkAeKfOCkwrcgrSyJItzvvEsC5 mc0gQXXuVa4s5A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:21:29 2025 by rpki-client