This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json) Hash identifier: /OPVwfvFndU1DwME78D+mBHkRKezZhmfEcw6d8RfYqo= Subject key identifier: 04:42:61:63:F0:DB:F5:DD:4B:43:2C:6E:C0:B1:99:1F:DC:F9:2C:E6 Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1 Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1 Certificate serial: 019AF49BBFFE1368BBBB1FC1249EF7636366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:00:39 +0000 Manifest this update: Sat 06 Dec 2025 17:00:39 +0000 Manifest next update: Sun 07 Dec 2025 17:00:39 +0000 Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=) 2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=) 3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 9pXPtteBeQzgYqinzSOB7T2yXZ0JCUf+gBp8ja4HOyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:bf:fe:13:68:bb:bb:1f:c1:24:9e:f7:63:63:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1 Validity Not Before: Dec 6 17:00:39 2025 GMT Not After : Dec 7 17:00:39 2025 GMT Subject: CN=04426163f0dbf5dd4b432c6ec0b1991fdcf92ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:92:8f:78:ef:d3:c3:81:ad:75:48:79:f3: 9c:6c:86:40:d6:c4:cb:7b:38:88:f1:0b:bd:0b:52: 0f:c3:60:5c:cb:f8:9f:77:66:85:88:9e:a9:6e:7a: c5:46:92:c7:76:0e:ba:06:a4:bf:c4:83:da:6d:bc: f1:06:ab:be:1e:a4:24:eb:68:2a:8b:33:23:c9:e7: 7c:18:58:9b:a8:bf:96:cc:dc:26:4b:5a:cf:16:98: 2d:51:b6:17:be:d4:a1:38:40:1c:b5:f7:e8:6c:26: f9:77:eb:12:e8:50:7c:47:86:bb:36:d1:71:c9:02: 5e:6e:15:d2:93:3c:21:6a:3e:b1:7f:d1:7b:cf:f9: 3b:29:af:11:ab:d8:29:32:3b:a5:20:23:cd:f7:97: be:e0:7d:a0:e7:9e:9e:ed:7f:77:fa:f7:f1:85:bd: 6a:bc:86:c7:25:c8:56:75:14:e4:94:1e:98:52:e2: 39:4b:48:16:3e:62:52:d9:fe:85:7b:57:9c:09:81: a8:11:9e:d3:2c:cd:8c:86:f0:ca:1b:79:1d:73:18: 43:9e:e8:30:b6:26:70:bc:28:9d:0f:16:bb:56:de: 17:1b:b6:19:ac:e6:5a:46:cf:e2:79:20:57:f5:5e: 9c:dc:e9:36:32:d7:07:ae:2d:f9:fe:2d:69:9e:c1: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:61:63:F0:DB:F5:DD:4B:43:2C:6E:C0:B1:99:1F:DC:F9:2C:E6 X509v3 Authority Key Identifier: keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1a:87:03:30:0c:bd:26:30:a1:63:8a:b2:ef:4f:8e:63:75: 71:7d:be:16:78:fa:b9:a6:53:40:cf:46:d8:72:f8:23:0f:88: f2:6b:be:f3:fb:d7:c3:33:fc:48:22:6e:47:08:6a:b8:a0:4d: c3:b8:d6:61:9b:a1:fc:0f:c2:68:2d:d9:18:e5:4e:f7:dd:23: 60:10:da:fd:d9:34:ee:2b:61:8d:75:6c:dd:33:8d:0f:2a:57: 1f:93:5f:24:ba:dd:2f:00:c9:88:a6:a2:70:fa:5e:88:16:d4: ca:80:e0:3b:96:a1:0f:38:72:31:8d:3a:f6:ac:12:fa:f1:ed: a9:a6:0e:78:95:9c:cd:f1:4d:62:db:07:06:bb:68:7b:7d:49: 4e:cc:59:0e:b7:e4:8a:b8:83:f2:01:2d:11:f4:87:19:1a:7b: 06:1a:5a:9e:96:b3:21:4b:b2:0e:8e:96:0d:9f:92:f8:6e:e0: fa:73:20:eb:1a:69:ca:66:66:40:29:29:f2:38:d7:99:36:27: 7b:ed:92:1f:ae:b9:05:29:64:ba:d9:c9:f3:03:d9:26:b6:6c: e3:6a:16:0f:f1:91:37:42:9e:11:dc:e8:9b:18:d9:83:45:6d: 43:8b:7a:f7:28:3b:a6:3e:b8:05:1b:b7:d9:27:65:23:4c:df: 0e:02:92:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7/+E2i7ux/BJJ73Y2NmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk Y2EwZTEwHhcNMjUxMjA2MTcwMDM5WhcNMjUxMjA3MTcwMDM5WjAzMTEwLwYDVQQD EygwNDQyNjE2M2YwZGJmNWRkNGI0MzJjNmVjMGIxOTkxZmRjZjkyY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GaSj3jv08OBrXVIefOcbIZA1sTL eziI8Qu9C1IPw2Bcy/ifd2aFiJ6pbnrFRpLHdg66BqS/xIPabbzxBqu+HqQk62gq izMjyed8GFibqL+WzNwmS1rPFpgtUbYXvtShOEActffobCb5d+sS6FB8R4a7NtFx yQJebhXSkzwhaj6xf9F7z/k7Ka8Rq9gpMjulICPN95e+4H2g556e7X93+vfxhb1q vIbHJchWdRTklB6YUuI5S0gWPmJS2f6Fe1ecCYGoEZ7TLM2MhvDKG3kdcxhDnugw tiZwvCidDxa7Vt4XG7YZrOZaRs/ieSBX9V6c3Ok2MtcHri35/i1pnsEzZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARCYWPw2/XdS0MsbsCxmR/c+SzmMB8GA1UdIwQY MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt NTQ4NGMzOWIyZDRlLzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhqHAzAM vSYwoWOKsu9PjmN1cX2+Fnj6uaZTQM9G2HL4Iw+I8mu+8/vXwzP8SCJuRwhquKBN w7jWYZuh/A/CaC3ZGOVO990jYBDa/dk07ithjXVs3TONDypXH5NfJLrdLwDJiKai cPpeiBbUyoDgO5ahDzhyMY069qwS+vHtqaYOeJWczfFNYtsHBrtoe31JTsxZDrfk iriD8gEtEfSHGRp7BhpanpazIUuyDo6WDZ+S+G7g+nMg6xppymZmQCkp8jjXmTYn e+2SH665BSlkutnJ8wPZJrZs42oWD/GRN0KeEdzomxjZg0VtQ4t69yg7pj64BRu3 2SdlI0zfDgKSFw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:20 2025 by rpki-client