This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json) Hash identifier: x2tNGtBstEBmAU8/w3s0K9E1K+sZ0y/WT8lpeRNU1GU= Subject key identifier: F6:9A:88:CD:AA:A3:78:88:36:0A:96:A2:38:55:44:97:A1:78:7A:20 Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Certificate serial: 019AF2E42C8740029BC67FEA8CF464BB55E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft Manifest number: 012E Signing time: Sat 06 Dec 2025 09:00:30 +0000 Manifest this update: Sat 06 Dec 2025 09:00:30 +0000 Manifest next update: Sun 07 Dec 2025 09:00:30 +0000 Files and hashes: 1: 6oN7ugLAK3Erp9jqnMQdNrMVNOw.roa (hash: 2OE5X924UyTs73uKq2L0IicxfY1Ja9/xXAEDVVNFHY8=) 2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: 5XCIZCVQEEzPsEKU1iDZ+SUkk6GYSA2c9xHNl6bmaSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:2c:87:40:02:9b:c6:7f:ea:8c:f4:64:bb:55:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Validity Not Before: Dec 6 09:00:30 2025 GMT Not After : Dec 7 09:00:30 2025 GMT Subject: CN=f69a88cdaaa37888360a96a238554497a1787a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:c6:d6:81:53:45:33:6a:5b:8c:b3:03:86: 04:e5:a2:d8:56:d9:26:0b:84:a8:66:89:68:5e:a2: 8d:5b:bd:f8:a1:5b:b6:14:7f:fe:ad:36:67:c5:c5: af:20:b2:04:9d:2d:c7:f7:6c:b3:20:08:66:95:34: d2:99:73:1e:6f:2e:cc:04:6d:11:a9:08:de:a4:12: 13:80:b3:1c:19:5a:d2:bd:79:bd:16:77:3b:21:da: 33:06:9b:dd:95:af:6c:89:43:fb:dd:ae:45:9e:cc: d6:75:27:c4:41:05:af:cc:f8:92:8a:81:58:26:37: 2c:44:af:73:e8:92:5a:c9:f6:fc:2d:66:c0:96:ab: 96:f5:6b:6e:e4:34:05:af:da:e7:1b:38:d5:ec:0c: 94:32:af:93:3b:83:76:af:bc:5a:3b:d2:34:0b:59: e9:2a:ae:c1:48:15:50:ac:ef:70:43:cd:61:4d:59: cc:c4:ea:80:bb:7b:8a:f4:87:21:17:ba:7a:94:34: 67:34:fa:ab:30:58:3b:d6:42:0a:4c:65:17:15:d1: 41:46:c1:39:c7:38:0d:39:40:69:19:bf:19:2a:0e: b2:78:49:f9:63:ff:a2:ea:67:6d:6c:e4:75:f8:9b: fb:56:3a:cb:1c:00:a1:35:a9:8a:3f:b1:58:7c:05: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9A:88:CD:AA:A3:78:88:36:0A:96:A2:38:55:44:97:A1:78:7A:20 X509v3 Authority Key Identifier: keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:0f:fa:35:e9:21:e7:95:d1:22:ba:32:bd:19:70:33:8d:a7: a1:06:08:87:38:6d:82:e8:fb:d4:8f:3a:5b:54:17:60:41:d7: 77:03:16:d2:fe:f7:fb:66:1f:8c:34:96:6b:72:5e:9e:e0:69: ac:96:ca:7c:b8:9e:cd:6f:30:8f:f1:d2:4c:e2:72:3e:89:89: b5:f7:2a:53:60:bc:a6:3e:a0:0d:33:c6:df:08:05:18:49:de: 6b:94:4e:d2:27:8b:0f:a0:8f:0c:dc:2f:8d:d1:1a:85:f0:a2: 1e:6f:d9:dd:3c:37:52:4e:cc:fc:a3:0c:65:9f:1e:cd:93:5b: 76:7c:a9:50:3a:56:d5:a3:8e:a7:9e:09:46:0b:77:30:10:81: 39:83:f7:c0:83:d8:99:9e:a2:e4:e0:92:c8:b6:f5:54:68:b3: e7:ab:03:4b:d7:5e:7d:97:ee:65:ef:2b:c8:b4:c6:86:94:1e: c0:71:92:b7:56:9d:be:cd:0b:7c:77:2e:a0:5f:1e:71:2f:6f: 40:bb:26:2c:25:48:0a:04:db:fd:c6:23:e5:26:34:4a:92:03: de:aa:b0:3e:29:8d:66:58:4f:86:f7:fa:2a:f0:30:69:8d:3f: e6:be:41:eb:78:e4:2f:8c:74:79:ea:09:a6:47:25:f8:33:24: 3f:b1:e4:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CyHQAKbxn/qjPRku1XkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYjlmMmE4MjZhY2Y3NjdhNTBlNTliMjllYzFmZjA5MmNm ZDNjMWMwHhcNMjUxMjA2MDkwMDMwWhcNMjUxMjA3MDkwMDMwWjAzMTEwLwYDVQQD EyhmNjlhODhjZGFhYTM3ODg4MzYwYTk2YTIzODU1NDQ5N2ExNzg3YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5PG1oFTRTNqW4yzA4YE5aLYVtkm C4SoZoloXqKNW734oVu2FH/+rTZnxcWvILIEnS3H92yzIAhmlTTSmXMeby7MBG0R qQjepBITgLMcGVrSvXm9Fnc7IdozBpvdla9siUP73a5FnszWdSfEQQWvzPiSioFY JjcsRK9z6JJayfb8LWbAlquW9Wtu5DQFr9rnGzjV7AyUMq+TO4N2r7xaO9I0C1np Kq7BSBVQrO9wQ81hTVnMxOqAu3uK9IchF7p6lDRnNPqrMFg71kIKTGUXFdFBRsE5 xzgNOUBpGb8ZKg6yeEn5Y/+i6mdtbOR1+Jv7VjrLHAChNamKP7FYfAXedwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaaiM2qo3iINgqWojhVRJeheHogMB8GA1UdIwQY MBaAFCG58qgmrPdnpQ5Zsp7B/wks/TwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAt N2NkY2I1MGVkMGU0LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAtN2NkY2I1MGVkMGU0 LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEw/6Nekh 55XRIroyvRlwM42noQYIhzhtguj71I86W1QXYEHXdwMW0v73+2YfjDSWa3JenuBp rJbKfLiezW8wj/HSTOJyPomJtfcqU2C8pj6gDTPG3wgFGEnea5RO0ieLD6CPDNwv jdEahfCiHm/Z3Tw3Uk7M/KMMZZ8ezZNbdnypUDpW1aOOp54JRgt3MBCBOYP3wIPY mZ6i5OCSyLb1VGiz56sDS9defZfuZe8ryLTGhpQewHGSt1advs0LfHcuoF8ecS9v QLsmLCVICgTb/cYj5SY0SpID3qqwPimNZlhPhvf6KvAwaY0/5r5B63jkL4x0eeoJ pkcl+DMkP7HkEw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:35 2025 by rpki-client