This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json) Hash identifier: H/nyZGSb7Q93T97ZJ8Nc7p1bow+IYvSh3L6M01ZDUpY= Subject key identifier: B8:20:5A:04:9C:77:1C:6D:0E:47:16:F9:9C:AF:4F:22:35:59:36:09 Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0 Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0 Certificate serial: 019AF5782B251D16F326FD05A92D1DE8FF61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:01:24 +0000 Manifest this update: Sat 06 Dec 2025 21:01:24 +0000 Manifest next update: Sun 07 Dec 2025 21:01:24 +0000 Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=) 2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: i8bMA/z6B6luiKJD3P+97NY6Lp7NZxaAX4Da2Kzblmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:2b:25:1d:16:f3:26:fd:05:a9:2d:1d:e8:ff:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0 Validity Not Before: Dec 6 21:01:24 2025 GMT Not After : Dec 7 21:01:24 2025 GMT Subject: CN=b8205a049c771c6d0e4716f99caf4f2235593609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:39:0b:dd:cc:94:0e:12:a6:e9:aa:6b:2f: 7e:c6:27:0b:1b:64:a7:c7:f8:2a:4a:f6:83:62:8c: a9:fe:ac:be:b3:d5:46:d4:b8:a5:c2:d3:95:43:32: 45:d9:97:6e:b2:ae:a4:aa:cf:b5:46:d7:a8:7f:2c: c8:3f:91:34:99:26:a1:d4:d2:be:ce:ba:85:c3:72: 7f:d2:5f:83:a0:15:5a:17:20:b0:2c:e2:e0:6f:27: c6:c8:7e:9d:8e:ad:aa:55:88:13:23:78:7e:3b:fe: 1d:cf:3c:b2:9f:96:d6:52:b3:6d:d2:d3:16:07:56: 5e:9f:1d:e8:6c:2c:f8:2d:a9:27:8c:45:3c:6b:03: d2:17:d4:48:58:08:70:66:f9:63:88:32:a9:74:18: b2:23:c1:a7:1a:f9:c1:d6:59:b7:4d:bd:7a:8f:9a: 7d:de:13:ef:2c:c3:d2:dd:3e:b6:4c:ed:18:b3:4b: 66:44:b5:7c:61:5f:fb:0f:51:de:67:8d:03:63:a1: 8b:ad:f7:15:5e:6e:c8:f2:62:ca:b6:47:be:30:c9: a3:ed:92:d2:97:19:4b:64:16:26:51:77:33:8f:81: ac:9a:c0:7d:5b:f4:61:af:6a:09:83:85:2f:42:ec: 43:2a:f1:dc:ef:4b:85:0d:15:65:5b:61:9a:76:f5: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:20:5A:04:9C:77:1C:6D:0E:47:16:F9:9C:AF:4F:22:35:59:36:09 X509v3 Authority Key Identifier: keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f9:a9:c2:25:87:1c:65:11:bf:4a:31:4e:15:08:48:db:14: 8f:64:be:cf:e6:03:7f:e9:e5:28:0c:c6:56:2e:5a:2b:eb:32: d1:29:e0:b0:6a:d7:7c:7c:5e:81:f7:30:65:58:ff:0c:33:b8: 64:33:dc:39:16:7a:bc:59:48:c0:80:5e:46:29:4f:d4:2d:55: 3f:f6:dd:fa:bb:4e:55:a6:5b:43:dc:2b:cc:5a:41:78:75:47: 45:13:82:47:66:21:22:ad:58:b1:c5:7a:48:3d:fb:be:4b:a1: b9:01:79:d3:ba:81:bb:0a:c1:31:cf:4b:3e:60:6d:39:1f:f3: 08:59:11:3e:e9:2c:70:05:cb:4c:d3:25:24:3a:9c:e1:40:3d: 10:a5:87:4e:30:58:3d:67:60:d1:0c:27:a4:fc:8b:6f:cb:2e: e3:32:6a:ef:e9:75:9b:96:d7:ba:ed:87:9d:79:ce:de:c5:ef: 68:35:43:7c:4d:db:39:07:be:7d:1e:8a:df:4b:7e:24:c4:35: b1:25:f3:20:72:8b:01:8a:d9:38:dd:02:cd:74:30:b4:0f:d6: 16:0b:71:68:55:7b:71:f9:2c:24:d8:0b:3d:95:a4:bb:f0:c2: 73:d7:6e:2b:c1:54:3a:07:83:5f:8b:4d:f7:c6:53:d6:b1:6c: ae:b2:c9:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eCslHRbzJv0FqS0d6P9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2 NTAyZjAwHhcNMjUxMjA2MjEwMTI0WhcNMjUxMjA3MjEwMTI0WjAzMTEwLwYDVQQD EyhiODIwNWEwNDljNzcxYzZkMGU0NzE2Zjk5Y2FmNGYyMjM1NTkzNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjI5C93MlA4Spumqay9+xicLG2Sn x/gqSvaDYoyp/qy+s9VG1LilwtOVQzJF2Zdusq6kqs+1RteofyzIP5E0mSah1NK+ zrqFw3J/0l+DoBVaFyCwLOLgbyfGyH6djq2qVYgTI3h+O/4dzzyyn5bWUrNt0tMW B1Zenx3obCz4LaknjEU8awPSF9RIWAhwZvljiDKpdBiyI8GnGvnB1lm3Tb16j5p9 3hPvLMPS3T62TO0Ys0tmRLV8YV/7D1HeZ40DY6GLrfcVXm7I8mLKtke+MMmj7ZLS lxlLZBYmUXczj4GsmsB9W/Rhr2oJg4UvQuxDKvHc70uFDRVlW2GadvXq1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLggWgScdxxtDkcW+ZyvTyI1WTYJMB8GA1UdIwQY MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/mpwiWH HGURv0oxThUISNsUj2S+z+YDf+nlKAzGVi5aK+sy0SngsGrXfHxegfcwZVj/DDO4 ZDPcORZ6vFlIwIBeRilP1C1VP/bd+rtOVaZbQ9wrzFpBeHVHRROCR2YhIq1YscV6 SD37vkuhuQF507qBuwrBMc9LPmBtOR/zCFkRPukscAXLTNMlJDqc4UA9EKWHTjBY PWdg0QwnpPyLb8su4zJq7+l1m5bXuu2HnXnO3sXvaDVDfE3bOQe+fR6K30t+JMQ1 sSXzIHKLAYrZON0CzXQwtA/WFgtxaFV7cfksJNgLPZWku/DCc9duK8FUOgeDX4tN 98ZT1rFsrrLJ1w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:09 2025 by rpki-client