This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json) Hash identifier: IwN0iskelxp6CqhepL1NE3C0st76FQk81eojwYUo0KY= Subject key identifier: B9:85:EC:5A:61:CE:49:96:A4:31:35:A3:FB:4B:DF:4B:F1:72:42:BC Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e Certificate serial: 019AF2E44BCD458D310EF381515678C2081C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 09:00:39 +0000 Manifest this update: Sat 06 Dec 2025 09:00:39 +0000 Manifest next update: Sun 07 Dec 2025 09:00:39 +0000 Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=) 2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: hApQiH598SMTvh8B+L1KKXVDALEAG1JmEBYlKhuv2Nw=) 3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=) 4: MDLnzRvtVaDNauKZ3YaGSLWMKyM.roa (hash: MMQjB7y3IaNNZ21WEqRPVuCFVd1+Iw0iUNXJdEC5KBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4b:cd:45:8d:31:0e:f3:81:51:56:78:c2:08:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e Validity Not Before: Dec 6 09:00:39 2025 GMT Not After : Dec 7 09:00:39 2025 GMT Subject: CN=b985ec5a61ce4996a43135a3fb4bdf4bf17242bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:3b:17:6e:54:1a:09:eb:6c:33:24:1e:4f: 36:9c:f0:46:85:cb:5c:b3:24:ab:cf:e1:ba:16:04: 35:9f:00:17:b8:27:fe:0b:a1:a9:f3:a0:75:23:ed: c8:af:1f:cc:74:58:f9:06:90:8d:9b:2b:21:d5:c9: 22:e5:2e:f3:92:ad:df:67:6a:8d:d0:3d:de:3b:51: 27:b3:f0:90:8e:31:d4:af:f9:59:bb:8b:0c:c6:81: 6f:41:5f:1f:24:ba:ac:69:91:2b:04:b7:ac:18:8a: b7:5f:88:58:01:f5:29:43:af:63:14:17:18:73:84: b8:a5:d7:0f:25:c7:11:01:15:83:2f:df:d2:30:da: 6e:33:ac:21:2e:9b:f5:19:6b:ac:d4:de:8a:22:73: b7:25:a3:0b:b6:ea:ee:49:99:e3:d3:20:0c:b7:38: 36:fa:1e:ce:f9:ee:df:62:73:bf:48:3f:ed:92:79: 31:94:6e:1a:27:5c:df:9e:fe:7c:69:97:79:97:9d: e3:59:c7:17:4a:ed:f7:7d:15:3d:b2:76:46:a5:5e: b5:9c:54:f2:6a:ee:17:60:ea:ed:43:3e:27:ba:50: 17:d0:f6:e4:82:36:b7:5b:ff:c4:aa:f9:c0:38:a2: 41:4d:d8:f9:5a:d1:ac:20:f0:f1:dd:c3:b3:d4:6f: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:85:EC:5A:61:CE:49:96:A4:31:35:A3:FB:4B:DF:4B:F1:72:42:BC X509v3 Authority Key Identifier: keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:aa:d7:49:98:c3:12:0c:00:a3:87:c0:b6:48:98:60:00:95: 16:37:3d:f4:37:51:e2:5d:62:7e:e3:a5:b0:c6:c0:f5:b1:69: 20:85:57:2f:f7:9f:0c:59:8d:2a:00:73:cc:68:13:9f:18:9c: 35:8b:6d:99:d6:ab:f7:15:62:c4:9d:35:7b:83:fa:4e:3c:8b: df:7a:59:45:8b:2c:5e:05:e6:c3:b3:fd:cb:b6:c8:ab:3b:2b: d3:5a:64:4b:6a:46:66:09:a1:60:0c:56:3c:b4:30:b8:bd:68: be:55:06:75:f4:4a:ab:31:6c:97:cb:01:be:46:ac:76:e1:39: d4:cf:81:62:ba:35:ca:b4:79:f8:9f:a1:86:f8:d4:e4:bf:ee: ed:b5:ec:ed:eb:fb:ce:87:ef:ad:80:ec:39:6f:a1:90:e5:5d: 01:e4:30:b2:ca:7e:fc:f5:03:3a:12:c7:16:28:67:91:64:38: 6d:33:12:27:3d:3e:c9:58:16:9a:e0:40:06:18:dc:b9:e0:19: ab:b3:1d:35:6b:34:40:35:d5:ed:32:eb:64:91:7e:0c:4c:94: b8:04:62:e9:d4:16:57:ef:e4:d8:de:be:fe:21:48:c6:e2:ad: 8f:50:7e:05:d2:13:00:dd:af:8e:b7:55:c4:61:b5:c4:8c:bb: 3f:1c:10:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EvNRY0xDvOBUVZ4wggcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZjEwZTM0NDIxYmFmZjE3NGQ2MDY3OGYzMmZhNWUzNWNk Zjk1N2UwHhcNMjUxMjA2MDkwMDM5WhcNMjUxMjA3MDkwMDM5WjAzMTEwLwYDVQQD EyhiOTg1ZWM1YTYxY2U0OTk2YTQzMTM1YTNmYjRiZGY0YmYxNzI0MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjA7F25UGgnrbDMkHk82nPBGhctc sySrz+G6FgQ1nwAXuCf+C6Gp86B1I+3Irx/MdFj5BpCNmysh1cki5S7zkq3fZ2qN 0D3eO1Ens/CQjjHUr/lZu4sMxoFvQV8fJLqsaZErBLesGIq3X4hYAfUpQ69jFBcY c4S4pdcPJccRARWDL9/SMNpuM6whLpv1GWus1N6KInO3JaMLturuSZnj0yAMtzg2 +h7O+e7fYnO/SD/tknkxlG4aJ1zfnv58aZd5l53jWccXSu33fRU9snZGpV61nFTy au4XYOrtQz4nulAX0Pbkgja3W//EqvnAOKJBTdj5WtGsIPDx3cOz1G/GmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmF7FphzkmWpDE1o/tL30vxckK8MB8GA1UdIwQY MBaAFCHxDjRCG6/xdNYGePMvpeNc35V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTct OWE5ZWQxZWYyZThkLzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTctOWE5ZWQxZWYyZThk LzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqrXSZjD EgwAo4fAtkiYYACVFjc99DdR4l1ifuOlsMbA9bFpIIVXL/efDFmNKgBzzGgTnxic NYttmdar9xVixJ01e4P6TjyL33pZRYssXgXmw7P9y7bIqzsr01pkS2pGZgmhYAxW PLQwuL1ovlUGdfRKqzFsl8sBvkasduE51M+BYro1yrR5+J+hhvjU5L/u7bXs7ev7 zofvrYDsOW+hkOVdAeQwssp+/PUDOhLHFihnkWQ4bTMSJz0+yVgWmuBABhjcueAZ q7MdNWs0QDXV7TLrZJF+DEyUuARi6dQWV+/k2N6+/iFIxuKtj1B+BdITAN2vjrdV xGG1xIy7PxwQpg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:39 2025 by rpki-client