This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json) Hash identifier: 6GsGI8Dj2x0R5ipMWcMNW52z6kXfkYP89k95f9ctk14= Subject key identifier: 5E:E7:82:C4:66:33:4C:E7:A5:94:E2:C5:06:26:54:07:48:50:23:04 Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Certificate serial: 019AF5782F50E0FD68A15D6204E1403BDBE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft Manifest number: 0C18 Signing time: Sat 06 Dec 2025 21:01:25 +0000 Manifest this update: Sat 06 Dec 2025 21:01:25 +0000 Manifest next update: Sun 07 Dec 2025 21:01:25 +0000 Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: a+NrbA8pKRNqkUhsXLYOFqo/7xH+DJY8rNATGgejfUI=) 2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:2f:50:e0:fd:68:a1:5d:62:04:e1:40:3b:db:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Validity Not Before: Dec 6 21:01:25 2025 GMT Not After : Dec 7 21:01:25 2025 GMT Subject: CN=5ee782c466334ce7a594e2c50626540748502304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:08:49:57:14:40:02:c8:2f:2e:4b:78:c0: 2c:e4:ee:c6:51:70:85:df:fa:f8:f9:d9:94:5c:d8: 84:4e:56:b9:03:7a:13:d4:53:83:68:f2:75:11:7c: 51:21:5c:c6:bd:ba:bb:43:ad:90:a3:f9:25:26:4e: f7:4f:94:37:45:b6:d6:74:5f:f6:98:80:10:2a:f1: 03:7c:af:bd:a8:9e:82:70:09:d3:e1:a2:01:23:5f: c8:cf:77:0d:16:36:36:8c:8d:7d:0e:6d:e5:c8:9b: 2a:e0:0e:ba:c2:55:13:67:ba:09:d6:86:72:2b:e2: 76:16:c8:f5:49:0b:36:dd:72:a8:c9:73:42:03:4e: 47:99:a8:91:67:32:ec:01:79:5e:18:09:c8:45:70: 66:67:f0:0d:0b:13:15:c7:0b:6e:10:f1:39:db:2c: 09:99:20:ba:4a:0a:5e:40:7e:f4:1f:d2:85:02:ca: 9b:a0:72:b2:32:81:75:11:10:05:b7:a8:12:1e:c8: 13:28:e3:f2:80:32:df:af:73:b0:4f:2c:d4:2e:20: 49:d7:48:29:73:5b:ba:56:f1:b9:23:84:b2:69:c7: dc:4b:bc:0d:73:d6:5e:b2:50:b5:28:69:07:51:a8: b6:3e:5b:50:22:bf:3b:fe:58:96:87:13:d5:9b:4a: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E7:82:C4:66:33:4C:E7:A5:94:E2:C5:06:26:54:07:48:50:23:04 X509v3 Authority Key Identifier: keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:66:ec:d7:61:88:3b:66:90:00:08:d3:52:b5:f6:fe:fc: b3:0b:95:7c:0d:82:66:07:c3:f6:67:28:31:58:e6:fa:56:23: 19:a7:27:fe:8a:9d:0a:01:c9:22:64:20:25:bb:58:7a:66:4e: bf:bb:a1:5b:0a:f4:d4:f7:16:b6:9e:af:b3:e5:5e:50:9c:51: 74:c7:32:e9:a1:15:f4:14:e8:4d:db:b2:86:31:ca:3c:7e:3f: 32:36:e3:a3:56:1b:20:e2:b8:22:62:b3:cb:83:e5:76:64:ee: aa:92:c4:f8:6a:8a:51:22:87:4c:35:d7:54:53:2a:3e:e5:c5: db:72:7a:7c:0b:5e:7d:40:8b:02:14:f5:fa:7a:94:25:94:0a: c0:b8:b9:61:28:79:44:d8:3a:36:f2:1c:b3:d5:a5:d9:1b:04: fa:21:2d:3d:aa:4c:84:ed:73:a4:94:5e:b9:3e:67:89:b6:fc: da:9d:18:88:a3:7f:c9:99:17:2e:4d:ff:bf:7b:67:8a:a4:49: dd:a0:38:e9:5b:fb:f9:5a:f3:61:a4:3c:35:a0:c0:3b:24:ef: a7:5e:bb:2b:61:f5:9b:48:a5:44:3c:c3:3f:71:11:2d:7a:88: a0:6b:19:e5:51:5b:a6:37:9d:6a:f1:2c:ef:95:07:cf:f0:7a: 86:c4:32:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eC9Q4P1ooV1iBOFAO9vmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw YTJhMzkwHhcNMjUxMjA2MjEwMTI1WhcNMjUxMjA3MjEwMTI1WjAzMTEwLwYDVQQD Eyg1ZWU3ODJjNDY2MzM0Y2U3YTU5NGUyYzUwNjI2NTQwNzQ4NTAyMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5cISVcUQALILy5LeMAs5O7GUXCF 3/r4+dmUXNiETla5A3oT1FODaPJ1EXxRIVzGvbq7Q62Qo/klJk73T5Q3RbbWdF/2 mIAQKvEDfK+9qJ6CcAnT4aIBI1/Iz3cNFjY2jI19Dm3lyJsq4A66wlUTZ7oJ1oZy K+J2Fsj1SQs23XKoyXNCA05HmaiRZzLsAXleGAnIRXBmZ/ANCxMVxwtuEPE52ywJ mSC6SgpeQH70H9KFAsqboHKyMoF1ERAFt6gSHsgTKOPygDLfr3OwTyzULiBJ10gp c1u6VvG5I4SyacfcS7wNc9ZeslC1KGkHUai2PltQIr87/liWhxPVm0rTcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7ngsRmM0znpZTixQYmVAdIUCMEMB8GA1UdIwQY MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt NDg4NzNiYWE2OWE3LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3 LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC9m7Ndh iDtmkAAI01K19v78swuVfA2CZgfD9mcoMVjm+lYjGacn/oqdCgHJImQgJbtYemZO v7uhWwr01PcWtp6vs+VeUJxRdMcy6aEV9BToTduyhjHKPH4/Mjbjo1YbIOK4ImKz y4PldmTuqpLE+GqKUSKHTDXXVFMqPuXF23J6fAtefUCLAhT1+nqUJZQKwLi5YSh5 RNg6NvIcs9Wl2RsE+iEtPapMhO1zpJReuT5nibb82p0YiKN/yZkXLk3/v3tniqRJ 3aA46Vv7+VrzYaQ8NaDAOyTvp167K2H1m0ilRDzDP3ERLXqIoGsZ5VFbpjedavEs 75UHz/B6hsQyZw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:16 2025 by rpki-client