This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json) Hash identifier: +0Ke7oogXtT+UgoMHHDKtCVN5xWHeNRRYajpqt8B6Eo= Subject key identifier: F5:70:32:BC:C1:51:19:A9:D8:76:71:D4:E7:AB:84:06:35:78:CB:1A Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0 Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0 Certificate serial: 019B3CEC7626A92A22B10E1BFD5B677282A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:28 +0000 Manifest this update: Sat 20 Dec 2025 18:01:28 +0000 Manifest next update: Sun 21 Dec 2025 18:01:28 +0000 Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=) 2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: Tb+wdJcFoFmUw8s1ziTmmdlaaN66d1tta171ToOGkx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:76:26:a9:2a:22:b1:0e:1b:fd:5b:67:72:82:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0 Validity Not Before: Dec 20 18:01:28 2025 GMT Not After : Dec 21 18:01:28 2025 GMT Subject: CN=f57032bcc15119a9d87671d4e7ab84063578cb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:79:cb:a7:fa:f6:45:d9:fd:53:ba:f7:a9: cb:21:9d:1f:59:b7:ce:49:7a:bd:05:d0:4a:d4:24: 5a:76:8f:62:b5:93:c0:ca:5d:6d:d2:92:07:ae:29: 11:74:63:f9:77:b0:b7:c0:1c:58:e8:da:27:05:03: 8d:77:f8:f4:b0:25:43:86:0e:5e:25:50:d4:df:9d: fe:39:d7:1c:6c:86:1b:71:a8:6c:35:03:61:f9:e8: d9:e7:27:60:c3:98:0b:4b:8e:ce:c2:9e:be:40:47: 80:14:93:ea:2c:4b:54:51:58:b1:7d:4d:1d:3c:3b: 9a:7d:d3:7a:0f:aa:8a:1c:71:68:31:83:3e:09:8c: 68:f3:27:22:98:76:3c:33:f9:e1:94:5d:f3:79:c8: c0:a2:e9:e5:e6:ea:8f:62:14:42:82:b4:92:bb:fe: 54:13:38:5a:dc:2e:8d:7e:31:46:b7:3b:7f:d8:d7: 2b:ad:e4:66:6e:d8:44:85:75:c0:a7:ba:23:4d:1d: b9:b8:65:e2:e3:a0:37:56:77:27:d3:9f:d0:9e:a0: d9:61:38:14:54:d1:06:a4:db:44:eb:90:1c:e7:5a: 81:45:ba:87:98:17:7e:58:1b:d8:87:2a:b3:0a:88: 15:86:ea:d0:5a:14:8f:50:ea:88:3c:c4:97:fe:12: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:70:32:BC:C1:51:19:A9:D8:76:71:D4:E7:AB:84:06:35:78:CB:1A X509v3 Authority Key Identifier: keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0b:f3:34:41:e9:55:36:86:98:a3:cf:3d:54:d5:82:05:ce: 7d:64:c1:da:27:fc:3f:54:cd:fc:b9:ac:65:a0:ec:b4:40:2b: 3f:f8:e6:c7:03:c1:df:df:68:aa:e6:96:d3:13:b1:22:dc:5e: ab:0d:f7:11:f5:09:e9:ee:46:1d:96:2b:ae:2a:47:8a:48:8b: 3d:44:11:e0:47:6c:03:bf:c5:c1:4e:86:dc:69:78:41:67:5c: 32:8a:79:b1:2a:f7:3f:79:6f:fb:d4:00:61:19:f6:13:92:6b: 1a:30:4b:47:2c:5c:9f:b1:47:dd:af:b2:33:27:f6:bf:b3:f4: f6:55:1e:e0:71:4c:3e:e4:08:70:db:53:9f:ac:a6:b1:60:33: 55:08:50:b5:97:76:95:b5:b9:bb:1a:fa:03:1c:73:05:af:45: f0:71:6b:51:f9:f8:48:2e:3c:47:30:66:01:06:7d:3d:ce:6d: 97:b6:93:8e:e1:f7:2c:46:91:75:d6:e0:70:10:92:6e:7f:80: 04:0c:04:7c:2f:ce:16:1e:77:32:79:b1:58:64:52:a5:b5:c1: 4a:93:92:93:c2:89:5b:da:83:6d:0e:d0:fd:9e:49:e7:f9:2d: b2:1e:b8:17:5b:d4:ee:21:58:22:a1:6c:4f:ef:16:95:25:82: 94:8f:bc:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HYmqSoisQ4b/VtncoKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2 NTAyZjAwHhcNMjUxMjIwMTgwMTI4WhcNMjUxMjIxMTgwMTI4WjAzMTEwLwYDVQQD EyhmNTcwMzJiY2MxNTExOWE5ZDg3NjcxZDRlN2FiODQwNjM1NzhjYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAred5y6f69kXZ/VO696nLIZ0fWbfO SXq9BdBK1CRado9itZPAyl1t0pIHrikRdGP5d7C3wBxY6NonBQONd/j0sCVDhg5e JVDU353+OdccbIYbcahsNQNh+ejZ5ydgw5gLS47Owp6+QEeAFJPqLEtUUVixfU0d PDuafdN6D6qKHHFoMYM+CYxo8ycimHY8M/nhlF3zecjAounl5uqPYhRCgrSSu/5U Ezha3C6NfjFGtzt/2NcrreRmbthEhXXAp7ojTR25uGXi46A3Vncn05/QnqDZYTgU VNEGpNtE65Ac51qBRbqHmBd+WBvYhyqzCogVhurQWhSPUOqIPMSX/hK84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVwMrzBURmp2HZx1OerhAY1eMsaMB8GA1UdIwQY MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwvzNEHp VTaGmKPPPVTVggXOfWTB2if8P1TN/LmsZaDstEArP/jmxwPB399oquaW0xOxItxe qw33EfUJ6e5GHZYrripHikiLPUQR4EdsA7/FwU6G3Gl4QWdcMop5sSr3P3lv+9QA YRn2E5JrGjBLRyxcn7FH3a+yMyf2v7P09lUe4HFMPuQIcNtTn6ymsWAzVQhQtZd2 lbW5uxr6AxxzBa9F8HFrUfn4SC48RzBmAQZ9Pc5tl7aTjuH3LEaRddbgcBCSbn+A BAwEfC/OFh53MnmxWGRSpbXBSpOSk8KJW9qDbQ7Q/Z5J5/ktsh64F1vU7iFYIqFs T+8WlSWClI+8eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:13 2025 by rpki-client