This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json) Hash identifier: 2dRspaT3na98UrS3fW0HzDW6p160Y0Y/i8cUiZHOHBk= Subject key identifier: D4:2F:CF:9D:2B:D2:1A:39:5F:D7:78:A7:CF:3A:C4:D1:FA:15:14:0C Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945 Certificate serial: 019AF0BF232404AEA7C18290E2A055959FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft Manifest number: 064E Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: /yBUJ5t+GKxnIfxrNhGIdQL4HS/OU5QYoOwRW3nFBEg=) 2: vy5zTXe1FQxKmoVnLtT-YONwy5w.roa (hash: AqKcisSO89b2UHYN+H37mx/RlCQTo8dhRQYzWSzGyh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:23:24:04:ae:a7:c1:82:90:e2:a0:55:95:9f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945 Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=d42fcf9d2bd21a395fd778a7cf3ac4d1fa15140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:12:de:3e:76:33:6f:cc:ba:9e:86:eb:36: 4a:2f:e6:b5:67:59:62:bb:03:da:77:57:9a:53:f4: 70:1c:c3:86:7a:68:09:f0:0a:58:23:3b:84:27:43: a1:68:db:31:0c:c2:25:08:c3:66:78:6d:66:e7:86: 43:cf:5e:5d:f8:13:d1:1e:1f:05:2b:27:b7:f8:b1: d8:e2:39:cd:fa:22:61:ce:77:3b:1b:8f:c7:20:44: b2:5e:20:49:9e:9c:a5:66:90:7d:fc:0f:0c:da:f7: 70:5d:6d:b0:a8:57:aa:24:be:d9:bb:a3:f4:d1:ff: db:94:9b:e1:24:8d:ac:52:d6:29:8d:0a:15:60:08: 34:0b:d2:bb:0e:cf:46:01:53:ce:ca:eb:86:14:14: 9f:84:61:6c:54:0c:fa:de:b9:1d:b8:5e:6a:7a:1c: e9:f2:a2:43:07:a6:80:e2:bd:f0:34:88:40:4e:24: f4:c6:90:08:12:70:a9:a8:59:26:3a:e2:04:aa:bd: eb:23:16:47:b9:af:92:08:97:a6:47:ab:54:2b:78: bc:70:9d:4a:3d:1e:43:77:b0:28:fa:11:a5:60:b4: 8e:8e:21:cd:1b:98:98:15:c1:a9:5b:ab:a3:10:d4: 6b:9b:88:48:f5:da:55:3d:be:44:47:ec:85:a7:f5: d5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2F:CF:9D:2B:D2:1A:39:5F:D7:78:A7:CF:3A:C4:D1:FA:15:14:0C X509v3 Authority Key Identifier: keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d0:78:19:88:18:40:3f:af:89:4c:a1:97:6e:fc:28:cf:e8: 9d:49:30:2a:13:5c:64:44:a0:7e:95:77:76:8d:14:82:2c:f7: 97:bd:83:72:b8:97:82:9d:3e:ca:00:39:92:8b:75:ce:4d:22: b3:62:87:cd:b7:8c:f4:c2:47:01:43:ee:0a:63:43:90:6f:63: f4:9e:6b:1f:bd:34:2e:11:c6:39:c7:88:36:39:ff:58:61:39: 0b:b9:92:60:c7:8d:30:ec:40:16:b1:02:7f:d1:d6:42:e0:14: 5d:01:bb:49:50:90:d7:2b:ee:61:95:51:a0:aa:fd:68:87:e8: c8:4a:d3:5a:23:2e:da:cc:4b:78:76:b0:09:30:ce:ce:7d:57: 61:63:dc:91:e8:a0:36:12:27:64:e7:14:e0:2a:cf:9a:cf:50: 94:a6:35:39:79:5c:83:33:96:0f:31:d8:69:28:8b:ba:63:ef: 90:f3:a8:8d:f1:84:7c:79:fa:13:76:0e:db:c9:61:2a:a3:1a: da:4d:a0:af:0e:f8:1f:d2:86:65:1c:52:75:c4:2b:a1:7d:2d: 5f:f2:a3:8c:3d:94:6e:b4:eb:a4:95:27:ca:b9:1d:9a:d5:5d: 21:a4:5f:50:f1:a7:d2:96:c7:78:9b:ae:ea:f1:fc:b2:c5:51: e5:5e:2f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyMkBK6nwYKQ4qBVlZ+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWFiMTgwY2IzNTE3MTg2MjIxYjM5OTliMDhiODNhZjRm NjY5NDUwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EyhkNDJmY2Y5ZDJiZDIxYTM5NWZkNzc4YTdjZjNhYzRkMWZhMTUxNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8cS3j52M2/Mup6G6zZKL+a1Z1li uwPad1eaU/RwHMOGemgJ8ApYIzuEJ0OhaNsxDMIlCMNmeG1m54ZDz15d+BPRHh8F Kye3+LHY4jnN+iJhznc7G4/HIESyXiBJnpylZpB9/A8M2vdwXW2wqFeqJL7Zu6P0 0f/blJvhJI2sUtYpjQoVYAg0C9K7Ds9GAVPOyuuGFBSfhGFsVAz63rkduF5qehzp 8qJDB6aA4r3wNIhATiT0xpAIEnCpqFkmOuIEqr3rIxZHua+SCJemR6tUK3i8cJ1K PR5Dd7Ao+hGlYLSOjiHNG5iYFcGpW6ujENRrm4hI9dpVPb5ER+yFp/XVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQvz50r0ho5X9d4p886xNH6FRQMMB8GA1UdIwQY MBaAFIgasYDLNRcYYiGzmZsIuDr09mlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2Qt M2E2M2JmNzYzMGY1LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2QtM2E2M2JmNzYzMGY1 LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9B4GYgY QD+viUyhl278KM/onUkwKhNcZESgfpV3do0Ugiz3l72DcriXgp0+ygA5kot1zk0i s2KHzbeM9MJHAUPuCmNDkG9j9J5rH700LhHGOceINjn/WGE5C7mSYMeNMOxAFrEC f9HWQuAUXQG7SVCQ1yvuYZVRoKr9aIfoyErTWiMu2sxLeHawCTDOzn1XYWPckeig NhInZOcU4CrPms9QlKY1OXlcgzOWDzHYaSiLumPvkPOojfGEfHn6E3YO28lhKqMa 2k2grw74H9KGZRxSdcQroX0tX/KjjD2UbrTrpJUnyrkdmtVdIaRfUPGn0pbHeJuu 6vH8ssVR5V4vPA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:44 2025 by rpki-client