This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft File: iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json) Hash identifier: LCllpQMvl6SrteyHu/U/wGeqSVgX05uwnDb3oQX1LFg= Subject key identifier: 43:AB:2F:B1:C6:AA:12:58:17:2D:2E:1D:17:ED:DC:26:10:D1:50:70 Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5 Certificate issuer: /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5 Certificate serial: 019AF42E8337283524AB77EBA2DC54595824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft Manifest number: 0B71 Signing time: Sat 06 Dec 2025 15:01:20 +0000 Manifest this update: Sat 06 Dec 2025 15:01:20 +0000 Manifest next update: Sun 07 Dec 2025 15:01:20 +0000 Files and hashes: 1: HVZZgTt0qImB-OIxZYe0LV_oR4c.roa (hash: CxMOuogiyPkbYMbQPW67m4ttU2r00+UG5PTmwlkEZ0c=) 2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: NFd7O6CKqfKsYkGTNJ7mfiyEq9if7r3+Pv+NaTh7BtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:83:37:28:35:24:ab:77:eb:a2:dc:54:59:58:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5 Validity Not Before: Dec 6 15:01:20 2025 GMT Not After : Dec 7 15:01:20 2025 GMT Subject: CN=43ab2fb1c6aa1258172d2e1d17eddc2610d15070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:25:e5:2e:88:17:f3:b5:03:74:74:7f:e3: dd:53:a7:6a:c1:93:2a:ac:5e:19:f3:a8:cc:9f:9f: ec:ab:38:56:c1:be:fe:aa:c6:68:b9:cf:4b:a8:18: 59:d6:3c:d6:95:50:0d:f3:92:0b:f0:ae:c1:e0:e7: cf:d1:51:86:3b:b5:01:c5:5c:fa:24:8b:ea:59:d3: f6:ab:89:a8:2c:d8:b0:4c:da:b1:dc:ee:16:26:d2: d2:e2:6d:f9:38:54:af:7a:b7:a0:cd:1c:57:a9:bf: 0d:c2:e9:6e:46:b8:30:2c:91:5d:78:ad:63:49:9a: 1c:1f:f5:dd:b8:cb:5a:d5:f1:4d:be:b0:b1:56:34: 8d:c3:5a:4c:56:bd:42:36:17:f8:db:19:e6:34:18: 4d:a0:ad:aa:89:55:1e:6c:4a:6c:e5:3e:2b:a2:1d: a8:f6:1f:3e:b4:48:5c:7b:4c:64:fa:37:78:7d:4e: e7:39:2a:a4:4d:b9:b0:25:e3:8b:40:2f:7f:96:85: 6e:f4:74:6d:b5:a5:66:fe:2a:2f:4a:9f:5a:d6:ab: eb:fa:06:da:90:11:55:6a:52:2f:e2:02:a7:70:0c: 9c:01:fd:6b:d1:0c:bf:01:5f:22:73:1d:16:45:ab: 94:ad:bd:05:99:dd:41:04:ee:38:3d:0e:a2:0d:73: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AB:2F:B1:C6:AA:12:58:17:2D:2E:1D:17:ED:DC:26:10:D1:50:70 X509v3 Authority Key Identifier: keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1d:07:c1:af:17:81:8c:c2:87:ca:a1:a0:95:86:3d:66:7c: eb:26:d6:07:6c:d4:d6:42:6e:1a:85:7e:47:89:4c:d9:3b:54: ec:1f:7c:a0:42:e7:71:97:e9:d5:50:ed:52:33:1c:bc:d5:cb: 57:d0:14:44:78:5f:58:c8:5c:9b:83:ee:03:bb:3c:a0:d1:70: b4:c0:be:49:93:7c:3e:23:01:15:23:89:6c:36:21:62:b2:8a: d5:e2:32:3f:b3:3d:ae:e1:f9:4c:66:59:ad:b1:39:e1:74:21: c7:28:84:97:e9:05:a9:76:7b:f6:33:2e:cc:5e:14:bb:8b:c5: 27:c5:71:e1:75:57:0d:c6:14:4a:6a:dc:20:d7:2b:4b:74:2a: 40:83:5b:03:81:43:f1:15:36:34:c6:1f:ed:b8:44:c6:f5:96: 2e:e2:4e:d7:aa:4a:62:03:60:c1:28:da:19:9b:c9:4c:78:23: 0c:0c:03:a9:91:d1:12:a2:f3:ad:cd:11:9a:cb:b2:52:e0:a1: 35:3a:f4:9c:34:62:cb:0f:a9:b2:6c:5f:5c:87:da:fb:09:99: 9e:b5:9f:2d:8a:5c:86:f1:1a:95:7e:27:ab:87:da:ac:5a:c0: 91:ea:f8:a8:2c:85:f4:2d:02:3f:90:42:85:52:ee:0f:d5:84: 53:6a:ac:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoM3KDUkq3frotxUWVgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NjY4NjFiZTU3ZDM2ZDVmNmQ5ZDlmOGViZjYyODE3NjE2 YTIxZjUwHhcNMjUxMjA2MTUwMTIwWhcNMjUxMjA3MTUwMTIwWjAzMTEwLwYDVQQD Eyg0M2FiMmZiMWM2YWExMjU4MTcyZDJlMWQxN2VkZGMyNjEwZDE1MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkkl5S6IF/O1A3R0f+PdU6dqwZMq rF4Z86jMn5/sqzhWwb7+qsZouc9LqBhZ1jzWlVAN85IL8K7B4OfP0VGGO7UBxVz6 JIvqWdP2q4moLNiwTNqx3O4WJtLS4m35OFSveregzRxXqb8NwuluRrgwLJFdeK1j SZocH/XduMta1fFNvrCxVjSNw1pMVr1CNhf42xnmNBhNoK2qiVUebEps5T4roh2o 9h8+tEhce0xk+jd4fU7nOSqkTbmwJeOLQC9/loVu9HRttaVm/iovSp9a1qvr+gba kBFValIv4gKncAycAf1r0Qy/AV8icx0WRauUrb0Fmd1BBO44PQ6iDXMVWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOrL7HGqhJYFy0uHRft3CYQ0VBwMB8GA1UdIwQY MBaAFIlmhhvlfTbV9tnZ+Ov2KBdhaiH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mNTYyYTQtMmYwNC00NmRkLWIxYzEt MzU2Y2RlYmViODRmLzEvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mNTYyYTQtMmYwNC00NmRkLWIxYzEtMzU2Y2RlYmViODRm LzEvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoB0Hwa8X gYzCh8qhoJWGPWZ86ybWB2zU1kJuGoV+R4lM2TtU7B98oELncZfp1VDtUjMcvNXL V9AURHhfWMhcm4PuA7s8oNFwtMC+SZN8PiMBFSOJbDYhYrKK1eIyP7M9ruH5TGZZ rbE54XQhxyiEl+kFqXZ79jMuzF4Uu4vFJ8Vx4XVXDcYUSmrcINcrS3QqQINbA4FD 8RU2NMYf7bhExvWWLuJO16pKYgNgwSjaGZvJTHgjDAwDqZHREqLzrc0RmsuyUuCh NTr0nDRiyw+psmxfXIfa+wmZnrWfLYpchvEalX4nq4farFrAker4qCyF9C0CP5BC hVLuD9WEU2qs0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:05 2025 by rpki-client