This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json) Hash identifier: Vtmo2el5gSPH5NuYgC2ZOvbAMK8evJd3Gepk+rZNobs= Subject key identifier: 5D:70:A4:1B:F6:44:DB:FA:7E:50:A0:10:B4:6E:55:54:FF:B2:90:09 Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Certificate serial: 019AF389ABFF1C057F613576670D6D024785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft Manifest number: 17B6 Signing time: Sat 06 Dec 2025 12:01:17 +0000 Manifest this update: Sat 06 Dec 2025 12:01:17 +0000 Manifest next update: Sun 07 Dec 2025 12:01:17 +0000 Files and hashes: 1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=) 2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: 7zBHNw8JpwJ2+CddkYw+E3PCzWT7lv7hpS5AHlPcaU8=) 3: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=) 4: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=) 5: bt-PMEtT1IwN0eDJCO5vE7NIDdQ.roa (hash: sPgTyfptj00zzq62H1SqHfdWzrVXbflq204bOJGhoUw=) 6: knF5z7M4UIvC6eeoTXUGhnRxT0k.roa (hash: XFbD7w0kWLSfVZ1roO0o5/UKd6EksNenbK+US1bpOhU=) 7: l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa (hash: qHA/WOgfb5PSClEW7ipNBpljR8hRqs+26OIpJqnzQCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ab:ff:1c:05:7f:61:35:76:67:0d:6d:02:47:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Validity Not Before: Dec 6 12:01:17 2025 GMT Not After : Dec 7 12:01:17 2025 GMT Subject: CN=5d70a41bf644dbfa7e50a010b46e5554ffb29009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:7b:83:f3:e2:fd:5a:f8:19:6a:54:aa:5a: 39:e6:b3:41:19:fd:23:c0:14:ed:c2:20:1b:fb:4a: f5:b9:f6:87:77:4d:dd:83:ad:3d:ec:be:1b:c5:26: be:fa:c8:41:5f:c9:7c:a2:e9:f0:78:b2:4a:df:b3: 1a:f4:28:e8:6c:6d:da:1a:29:b9:d9:bd:f0:a5:65: 78:3b:dc:1f:c4:f6:df:03:69:0d:58:de:4f:90:e8: c9:5a:e2:76:80:3b:69:01:05:5b:60:a7:45:66:cf: e6:52:aa:17:21:c8:10:df:f7:95:0a:ed:e6:14:a0: 1a:cb:bc:86:1d:36:68:ce:d5:d5:e7:cf:5b:79:73: a6:f6:a5:a1:e2:87:e0:53:b5:1f:b6:62:39:45:55: 3f:2c:e5:4d:a7:26:d6:37:c7:2c:8c:7e:0e:18:46: f5:1e:57:2d:23:d3:f6:43:4c:5a:60:1d:f2:30:dc: 6b:14:46:c9:e2:8f:f3:7b:84:4f:a3:7a:c4:09:6b: 93:10:70:11:df:7f:4e:84:74:3d:1a:b6:bf:a4:4c: 0c:b6:11:d7:2c:fa:c7:07:26:5e:07:61:57:80:bc: 7b:95:9c:01:53:03:d9:78:98:be:de:64:3e:e5:54: 65:80:17:db:cf:b6:fe:bd:1f:54:38:50:03:38:d8: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:70:A4:1B:F6:44:DB:FA:7E:50:A0:10:B4:6E:55:54:FF:B2:90:09 X509v3 Authority Key Identifier: keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:53:3d:80:4e:5e:56:d9:4f:cc:79:8c:50:82:f1:17:52:0a: 7f:1c:8d:41:d4:ba:7e:49:1a:75:42:cf:a4:c9:a7:d4:b3:c0: c2:db:b5:a0:db:2c:e8:d4:c7:ac:6d:f4:45:5a:b5:83:96:d8: 03:e8:f0:22:49:30:e9:4e:71:ba:b3:aa:1a:2e:3e:79:2f:3c: 5c:07:65:29:4b:bb:39:2c:33:94:a2:7c:c3:4e:d4:33:9a:e8: 18:e6:ab:83:96:24:7b:5e:7d:70:da:90:10:ce:da:48:f3:a3: c8:db:21:27:7c:94:03:8a:82:9a:d7:a5:07:43:ba:f3:3b:3b: c8:b6:2e:d5:88:97:96:da:c5:56:d4:2f:57:0d:a2:5b:9f:6b: 52:95:31:d1:62:80:27:d0:9e:ec:9c:6a:55:ec:b9:f5:26:d7: 39:e0:1a:6a:75:e4:30:a4:62:54:c4:53:f3:d6:f2:a0:ab:c6: 2c:5b:83:41:75:48:dc:f4:6e:26:00:da:2b:cc:88:de:77:35: 25:fb:05:13:27:64:35:3f:60:34:d2:83:eb:8d:2f:6b:c0:6a: 1e:ee:49:86:e4:66:f1:ef:67:8f:39:b2:73:d4:21:aa:52:a2: 5d:83:22:bd:b8:d0:01:7f:fa:e2:a8:6a:e1:f8:98:0e:c8:5b: e7:22:65:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziav/HAV/YTV2Zw1tAkeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw ZDQxZTUwHhcNMjUxMjA2MTIwMTE3WhcNMjUxMjA3MTIwMTE3WjAzMTEwLwYDVQQD Eyg1ZDcwYTQxYmY2NDRkYmZhN2U1MGEwMTBiNDZlNTU1NGZmYjI5MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtet7g/Pi/Vr4GWpUqlo55rNBGf0j wBTtwiAb+0r1ufaHd03dg6097L4bxSa++shBX8l8ounweLJK37Ma9CjobG3aGim5 2b3wpWV4O9wfxPbfA2kNWN5PkOjJWuJ2gDtpAQVbYKdFZs/mUqoXIcgQ3/eVCu3m FKAay7yGHTZoztXV589beXOm9qWh4ofgU7UftmI5RVU/LOVNpybWN8csjH4OGEb1 HlctI9P2Q0xaYB3yMNxrFEbJ4o/ze4RPo3rECWuTEHAR339OhHQ9Gra/pEwMthHX LPrHByZeB2FXgLx7lZwBUwPZeJi+3mQ+5VRlgBfbz7b+vR9UOFADONjoYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1wpBv2RNv6flCgELRuVVT/spAJMB8GA1UdIwQY MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt M2RmN2ZhZjM1MzVkLzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVM9gE5e VtlPzHmMUILxF1IKfxyNQdS6fkkadULPpMmn1LPAwtu1oNss6NTHrG30RVq1g5bY A+jwIkkw6U5xurOqGi4+eS88XAdlKUu7OSwzlKJ8w07UM5roGOarg5Yke159cNqQ EM7aSPOjyNshJ3yUA4qCmtelB0O68zs7yLYu1YiXltrFVtQvVw2iW59rUpUx0WKA J9Ce7JxqVey59SbXOeAaanXkMKRiVMRT89byoKvGLFuDQXVI3PRuJgDaK8yI3nc1 JfsFEydkNT9gNNKD640va8BqHu5JhuRm8e9njzmyc9QhqlKiXYMivbjQAX/64qhq 4fiYDshb5yJlfA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:12 2025 by rpki-client