This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: BDWapmCY0X7GRRLfXZVF3Pg+bIJwPbLwV0tfX344vng= Subject key identifier: 96:BA:95:8C:2A:6B:4A:70:BA:24:A8:72:A5:36:9E:1D:9A:CD:DD:A9 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B300BF4E892109A8A9193E0A650982C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 17A7 Signing time: Thu 18 Dec 2025 06:00:48 +0000 Manifest this update: Thu 18 Dec 2025 06:00:48 +0000 Manifest next update: Fri 19 Dec 2025 06:00:48 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: auHcZmIPvZqMobgdMzRHFKLwHnFW+5wpUeQwmO+gI1Q=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:f4:e8:92:10:9a:8a:91:93:e0:a6:50:98:2c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Dec 18 06:00:48 2025 GMT Not After : Dec 19 06:00:48 2025 GMT Subject: CN=96ba958c2a6b4a70ba24a872a5369e1d9acddda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:2e:d7:01:7e:69:43:69:8a:c8:5d:19:73: 42:54:b4:dd:fb:2b:07:dc:92:8d:6c:f2:f4:a2:da: 2d:3d:e1:da:3b:41:76:bb:c7:55:6d:38:09:d2:43: cc:d2:24:29:ca:f7:ad:0d:c7:6b:17:f4:ec:a1:8e: 99:79:ea:dc:41:3b:25:df:50:00:73:85:00:45:32: 93:ec:d7:d4:4c:ad:63:54:ff:ed:34:d1:e1:13:a3: a4:e0:7c:c9:52:8e:1a:b8:77:51:af:9f:22:85:3e: e4:27:c4:53:27:b2:5e:f1:27:7f:7b:fc:c2:59:14: af:05:79:c0:5d:7a:88:64:b5:ca:a9:ec:19:a1:a3: 53:3b:e2:d1:58:4e:bb:fe:bd:d7:49:9f:82:52:e4: 6f:82:02:ad:37:d2:99:49:5e:42:5e:80:8d:b3:b5: b6:9e:8c:fa:7a:7b:cf:b8:fd:58:b1:d3:cf:1c:61: b3:55:a0:ca:36:f2:53:0c:b3:27:a8:63:1a:6f:99: 8e:7b:eb:55:84:e8:b6:92:04:91:78:a3:3e:c7:6b: f2:3b:62:5a:a6:d6:a0:21:9f:d4:b3:96:d4:d4:f0: a4:67:e9:a4:99:7c:06:22:4f:61:ff:f8:6b:a9:41: 4b:c0:43:54:54:aa:39:7f:0a:75:bf:0b:a9:0c:c1: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:95:8C:2A:6B:4A:70:BA:24:A8:72:A5:36:9E:1D:9A:CD:DD:A9 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:b1:34:9d:e6:4d:6d:69:ab:40:48:b6:da:b9:b9:65:a5: b2:38:4d:00:45:95:94:9a:24:90:97:fa:4c:9f:6a:1e:82:44: 11:d0:d3:15:40:d4:ab:f5:7a:cc:c0:26:bf:1a:5d:f0:ab:ed: 9d:5c:6f:2d:e3:ff:42:f0:15:82:f6:92:72:3f:a6:c0:f7:f2: ca:fc:74:1b:80:38:df:8c:a4:47:7d:fd:c2:ec:3d:68:f4:85: 3e:bf:20:0d:8b:20:ba:5b:c4:95:4e:41:1d:eb:a0:8e:3f:2d: 73:18:e3:17:38:70:00:a3:d4:f9:75:b3:16:02:0c:a0:7a:c8: 98:62:49:67:66:f8:12:45:97:c4:9d:08:51:da:b7:39:af:59: 91:c3:16:4e:3c:4b:af:10:73:3d:0c:87:e5:ab:a7:ae:99:89: 37:8f:0d:1a:95:8f:67:41:8a:5e:1c:05:cd:d5:90:7f:ac:3c: 12:64:9f:cb:46:5c:d1:35:13:4e:4f:ff:ea:1a:7e:29:a7:6f: 31:57:2d:a3:9a:e2:a4:e1:04:f1:1e:14:f8:bf:1d:49:34:05: 57:a1:d4:51:48:b1:ab:c0:ee:81:56:42:a5:a3:5d:1a:c3:06: 0d:af:69:25:bc:6c:2e:be:22:b6:44:3f:31:e1:60:d3:76:69: aa:c6:f2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC/TokhCaipGT4KZQmCw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUxMjE4MDYwMDQ4WhcNMjUxMjE5MDYwMDQ4WjAzMTEwLwYDVQQD Eyg5NmJhOTU4YzJhNmI0YTcwYmEyNGE4NzJhNTM2OWUxZDlhY2RkZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto0u1wF+aUNpishdGXNCVLTd+ysH 3JKNbPL0ototPeHaO0F2u8dVbTgJ0kPM0iQpyvetDcdrF/TsoY6ZeercQTsl31AA c4UARTKT7NfUTK1jVP/tNNHhE6Ok4HzJUo4auHdRr58ihT7kJ8RTJ7Je8Sd/e/zC WRSvBXnAXXqIZLXKqewZoaNTO+LRWE67/r3XSZ+CUuRvggKtN9KZSV5CXoCNs7W2 noz6envPuP1YsdPPHGGzVaDKNvJTDLMnqGMab5mOe+tVhOi2kgSReKM+x2vyO2Ja ptagIZ/Us5bU1PCkZ+mkmXwGIk9h//hrqUFLwENUVKo5fwp1vwupDMHlXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa6lYwqa0pwuiSocqU2nh2azd2pMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeROxNJ3m TW1pq0BIttq5uWWlsjhNAEWVlJokkJf6TJ9qHoJEEdDTFUDUq/V6zMAmvxpd8Kvt nVxvLeP/QvAVgvaScj+mwPfyyvx0G4A434ykR339wuw9aPSFPr8gDYsgulvElU5B Heugjj8tcxjjFzhwAKPU+XWzFgIMoHrImGJJZ2b4EkWXxJ0IUdq3Oa9ZkcMWTjxL rxBzPQyH5aunrpmJN48NGpWPZ0GKXhwFzdWQf6w8EmSfy0Zc0TUTTk//6hp+Kadv MVcto5ripOEE8R4U+L8dSTQFV6HUUUixq8DugVZCpaNdGsMGDa9pJbxsLr4itkQ/ MeFg03ZpqsbyTQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:20 2025 by rpki-client