This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft File: iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json) Hash identifier: 7m/TKCOPr8d6IzSgbiYee1WxOKuRSR4819vEkNm2OzI= Subject key identifier: 62:8C:5D:58:B5:05:E9:00:45:20:9C:CF:37:EB:3C:6A:FA:4B:CA:8F Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA Certificate issuer: /CN=8812e924fcacb862cf3b64f56e767bc326f27fca Certificate serial: 019AF088B01EC0E939C7A62A5A88DA3BF4BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 22:01:21 +0000 Manifest this update: Fri 05 Dec 2025 22:01:21 +0000 Manifest next update: Sat 06 Dec 2025 22:01:21 +0000 Files and hashes: 1: QKCpBgruuyz3i6ikVFdg6qQ3F0Y.roa (hash: G88p/gWLQ6tFindRbDEI4oT0jR5gYy6dY2FWfseB5AQ=) 2: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: KtIigkkNxUt0Frbgw/ZekwG7J81TgQshm1gRKAhA6xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b0:1e:c0:e9:39:c7:a6:2a:5a:88:da:3b:f4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca Validity Not Before: Dec 5 22:01:21 2025 GMT Not After : Dec 6 22:01:21 2025 GMT Subject: CN=628c5d58b505e90045209ccf37eb3c6afa4bca8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:4c:d3:60:a2:2a:c2:d9:de:32:5d:2d:0b: 2f:5f:c4:ea:03:11:26:30:b4:8a:05:4d:83:de:62: dd:94:b9:85:77:af:67:74:b5:c1:5d:67:1a:36:75: e7:39:98:f7:3e:b3:c2:ed:6a:9d:87:d7:d6:11:0e: 34:62:a0:4b:5b:9a:00:7a:44:4e:16:b6:be:b4:b9: f6:1a:4f:34:64:f3:59:c6:79:40:17:08:ce:e6:8c: 9c:f6:87:cb:63:60:02:e1:44:61:f3:d9:7e:ea:fb: 0a:7b:05:e8:af:66:3c:b0:ad:90:a1:5b:c4:92:7d: 33:36:aa:9c:61:c9:b4:5b:8e:19:27:00:fc:32:38: 37:8b:86:85:93:61:34:b2:42:09:fa:1f:61:49:8e: fa:a7:6c:63:31:64:b8:1c:69:59:13:06:d0:b1:9a: c6:54:ea:7a:95:29:94:8b:39:75:d7:e5:5c:71:3a: 57:47:24:47:7e:1a:1d:03:9f:09:d1:8a:7f:55:73: 06:93:bd:4a:1d:d3:be:f7:9f:a9:ba:14:67:b7:4b: ed:a8:bd:60:2c:aa:db:40:7d:1e:27:9b:55:00:bf: 13:54:53:00:45:8e:39:00:f1:9e:aa:9f:c5:42:60: 75:54:7e:65:e2:4f:6d:57:2b:df:9f:12:97:d5:a6: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8C:5D:58:B5:05:E9:00:45:20:9C:CF:37:EB:3C:6A:FA:4B:CA:8F X509v3 Authority Key Identifier: keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9c:46:b1:ac:19:0e:e4:f1:91:82:a3:bc:ab:0c:e3:1b:bb: 54:c2:69:60:34:2d:c3:cc:40:1b:32:d4:89:31:6e:b1:60:98: 5c:a6:be:46:f0:c5:bf:ba:13:65:dd:11:c3:02:b1:5d:79:d0: be:d3:2c:59:b0:a9:f7:c4:f0:66:f7:e5:14:a2:93:8d:6f:b6: b2:53:07:d4:c5:cb:a6:13:7b:e3:c7:d7:94:1e:55:67:ac:5c: b3:e5:b9:23:19:b5:ef:d2:e5:7b:95:83:59:e0:f6:22:6d:8c: 27:52:97:a0:4b:24:15:5c:17:28:2a:e8:36:86:3d:02:41:13: a4:ff:1a:fd:83:22:2d:da:60:8b:b3:09:df:b0:6b:68:42:2d: b3:bb:5b:23:7e:41:03:3f:10:d7:e1:4e:7c:1d:1b:31:59:82: 1a:7c:3f:f1:5f:3b:90:19:f7:14:31:f0:f7:e4:43:c3:b6:8c: 15:75:8e:e2:0b:67:d8:34:8d:20:52:2f:99:59:1a:b2:d5:8c: 11:d1:a0:2e:fb:de:5e:2f:cb:23:88:6d:ae:33:9c:79:57:34: f2:34:77:38:59:e9:42:6e:dc:bc:59:75:10:a1:b4:ff:7d:c0: b1:fc:2a:62:d0:b5:6f:4a:cd:a2:e3:73:15:84:07:6a:5f:92: 15:90:17:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLAewOk5x6YqWojaO/S9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTJlOTI0ZmNhY2I4NjJjZjNiNjRmNTZlNzY3YmMzMjZm MjdmY2EwHhcNMjUxMjA1MjIwMTIxWhcNMjUxMjA2MjIwMTIxWjAzMTEwLwYDVQQD Eyg2MjhjNWQ1OGI1MDVlOTAwNDUyMDljY2YzN2ViM2M2YWZhNGJjYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru1M02CiKsLZ3jJdLQsvX8TqAxEm MLSKBU2D3mLdlLmFd69ndLXBXWcaNnXnOZj3PrPC7Wqdh9fWEQ40YqBLW5oAekRO Fra+tLn2Gk80ZPNZxnlAFwjO5oyc9ofLY2AC4URh89l+6vsKewXor2Y8sK2QoVvE kn0zNqqcYcm0W44ZJwD8Mjg3i4aFk2E0skIJ+h9hSY76p2xjMWS4HGlZEwbQsZrG VOp6lSmUizl11+VccTpXRyRHfhodA58J0Yp/VXMGk71KHdO+95+puhRnt0vtqL1g LKrbQH0eJ5tVAL8TVFMARY45APGeqp/FQmB1VH5l4k9tVyvfnxKX1aYnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKMXVi1BekARSCczzfrPGr6S8qPMB8GA1UdIwQY MBaAFIgS6ST8rLhizztk9W52e8Mm8n/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJMcEpQeXN1R0xQTzJUMWJuWjd3eWJ5ZjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zYTk4ZTItOGFlOC00NzIzLTg5NTkt Y2UyZDhlM2ZjODA0LzEvaUJMcEpQeXN1R0xQTzJUMWJuWjd3eWJ5ZjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zYTk4ZTItOGFlOC00NzIzLTg5NTktY2UyZDhlM2ZjODA0 LzEvaUJMcEpQeXN1R0xQTzJUMWJuWjd3eWJ5ZjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZxGsawZ DuTxkYKjvKsM4xu7VMJpYDQtw8xAGzLUiTFusWCYXKa+RvDFv7oTZd0RwwKxXXnQ vtMsWbCp98TwZvflFKKTjW+2slMH1MXLphN748fXlB5VZ6xcs+W5Ixm179Lle5WD WeD2Im2MJ1KXoEskFVwXKCroNoY9AkETpP8a/YMiLdpgi7MJ37BraEIts7tbI35B Az8Q1+FOfB0bMVmCGnw/8V87kBn3FDHw9+RDw7aMFXWO4gtn2DSNIFIvmVkastWM EdGgLvveXi/LI4htrjOceVc08jR3OFnpQm7cvFl1EKG0/33AsfwqYtC1b0rNouNz FYQHal+SFZAXqg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:10 2025 by rpki-client