This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft File: ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft (raw, json) Hash identifier: 1HmVI6P7e4su9hkN5QWPU4x93tsHgJGKjF0uZZqU4lQ= Subject key identifier: AB:BB:AF:1B:BB:4C:92:06:4C:D3:57:EE:7A:D3:10:45:4F:8B:81:9B Authority key identifier: 89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB Certificate issuer: /CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab Certificate serial: 019AF20984CBEA86619948D7FDFA4D291AD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft Manifest number: 105E Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl (hash: o4+usdyEkYbjh4BG9XrIH4LVEbM6fPupGcaq2eMIxLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:84:cb:ea:86:61:99:48:d7:fd:fa:4d:29:1a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=abbbaf1bbb4c92064cd357ee7ad310454f8b819b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:1a:33:1c:73:70:de:13:e6:68:3c:57:9d: 31:f9:1b:c7:fc:16:4f:42:30:36:f8:8f:fb:ff:91: 2c:64:9f:48:2b:33:19:39:92:94:d9:f9:86:ff:44: b3:46:2f:39:1c:d0:23:1c:32:26:78:8d:f6:c7:aa: 2b:d8:8a:6c:53:b8:29:be:24:45:92:1b:81:19:dc: 71:5b:c9:12:c2:cb:61:36:b6:cd:aa:f5:10:86:2f: 8a:11:81:49:12:c1:3a:16:7a:c3:3f:f6:c4:72:af: da:d7:31:1a:b3:40:ea:a3:11:b8:63:60:0e:42:d1: 6e:66:69:53:8b:13:e7:73:51:0a:7b:fe:0f:ae:1c: 25:86:6b:fe:f0:3d:23:ae:41:5c:ba:2c:a7:9d:53: 68:59:ce:62:fa:60:24:2b:0a:c2:7c:e0:75:0b:a9: 5c:f9:e2:a6:d1:c2:91:c8:1c:b9:a5:96:92:3b:34: 84:b2:7c:48:6c:4e:72:13:18:ff:7f:aa:9e:be:64: c7:5d:1b:ab:b5:20:f3:a7:05:16:41:43:0c:1d:ad: d5:d7:c3:e5:07:d4:86:84:4d:64:1b:79:83:96:83: 14:3e:6d:ed:3a:6d:1c:c8:ac:7f:d1:5d:3f:95:ad: ba:56:8c:c6:82:0b:49:60:09:db:76:80:72:c4:d4: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BB:AF:1B:BB:4C:92:06:4C:D3:57:EE:7A:D3:10:45:4F:8B:81:9B X509v3 Authority Key Identifier: keyid:89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:61:92:fb:c6:05:00:53:99:f4:e6:a4:b8:a1:ea:67:c4:cb: 89:90:52:b2:a6:5c:24:f1:6f:5c:1a:dd:59:69:ba:17:be:14: 9a:33:db:dd:05:92:ac:b1:f6:65:58:b1:e3:80:17:71:88:e4: 04:5e:da:71:43:e6:d2:31:85:48:bb:0e:2f:f6:b5:b1:ee:1a: 19:f6:9e:1e:7b:e7:38:7e:31:65:94:dd:00:80:e5:b8:b6:5a: 51:62:aa:67:63:8f:bc:13:3f:f6:23:5f:d6:20:2f:d4:d4:c1: 50:fc:25:2b:b8:fd:32:05:0a:d1:19:ea:5c:ac:1d:e2:00:01: 80:20:9a:f9:df:bd:b9:ba:9a:f4:33:3b:0b:74:92:99:c1:26: 2e:5f:33:52:c9:98:2a:b5:7f:7d:38:df:5c:bb:ad:ba:b1:a6: 84:90:ff:5c:25:d3:a6:79:0e:ff:ea:e2:7e:2d:35:2c:a0:80: a7:22:77:ec:cc:6b:61:77:65:af:25:c4:93:34:9b:40:65:5f: cf:9f:7f:9a:e6:79:bd:ee:80:5f:4c:85:a1:f8:50:c5:0b:91: 9b:6b:77:94:7d:ed:dc:be:47:e9:71:b9:26:76:24:0a:a8:b0: 39:24:8c:d2:45:d8:ef:6f:26:dd:5b:24:8b:00:74:ae:9c:c7: cf:f9:0d:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYTL6oZhmUjX/fpNKRrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Yjk4YjFkYmM0ZGIwZmJkODY1NmQyYjJiOGE1M2UyYzNk Y2E2YWIwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EyhhYmJiYWYxYmJiNGM5MjA2NGNkMzU3ZWU3YWQzMTA0NTRmOGI4MTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxewaMxxzcN4T5mg8V50x+RvH/BZP QjA2+I/7/5EsZJ9IKzMZOZKU2fmG/0SzRi85HNAjHDImeI32x6or2IpsU7gpviRF khuBGdxxW8kSwsthNrbNqvUQhi+KEYFJEsE6FnrDP/bEcq/a1zEas0DqoxG4Y2AO QtFuZmlTixPnc1EKe/4Prhwlhmv+8D0jrkFcuiynnVNoWc5i+mAkKwrCfOB1C6lc +eKm0cKRyBy5pZaSOzSEsnxIbE5yExj/f6qevmTHXRurtSDzpwUWQUMMHa3V18Pl B9SGhE1kG3mDloMUPm3tOm0cyKx/0V0/la26VozGggtJYAnbdoByxNRbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKu7rxu7TJIGTNNX7nrTEEVPi4GbMB8GA1UdIwQY MBaAFIm5ix28TbD72GVtKyuKU+LD3KarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJtTEhieE5zUHZZWlcwcks0cFQ0c1BjcHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNGI2MDAtNDdhNy00NzA3LTlhOWUt NGRhNTQ0NzE3NjJlLzEvaWJtTEhieE5zUHZZWlcwcks0cFQ0c1BjcHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNGI2MDAtNDdhNy00NzA3LTlhOWUtNGRhNTQ0NzE3NjJl LzEvaWJtTEhieE5zUHZZWlcwcks0cFQ0c1BjcHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWGS+8YF AFOZ9OakuKHqZ8TLiZBSsqZcJPFvXBrdWWm6F74UmjPb3QWSrLH2ZVix44AXcYjk BF7acUPm0jGFSLsOL/a1se4aGfaeHnvnOH4xZZTdAIDluLZaUWKqZ2OPvBM/9iNf 1iAv1NTBUPwlK7j9MgUK0RnqXKwd4gABgCCa+d+9ubqa9DM7C3SSmcEmLl8zUsmY KrV/fTjfXLuturGmhJD/XCXTpnkO/+rifi01LKCApyJ37MxrYXdlryXEkzSbQGVf z59/muZ5ve6AX0yFofhQxQuRm2t3lH3t3L5H6XG5JnYkCqiwOSSM0kXY728m3Vsk iwB0rpzHz/kNEg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:42 2025 by rpki-client