This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft File: IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json) Hash identifier: nbFmXwuEcNilkpo4R5BdKv8Ae5vFjDZu7VitukLvP7s= Subject key identifier: C4:A1:24:2A:C3:9B:B4:A8:D1:50:74:CB:8B:EE:D4:CD:80:67:21:CA Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65 Certificate issuer: /CN=20105484f187f2087d120cad971d682db3159965 Certificate serial: 019AF42E164F1E625F0D5EF7CD2681B4A8D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft Manifest number: 0305 Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: 0VO6rJI+snjapMqA5wsLnppTOSvTBpKojInstxRYP+E=) 2: Rh0IEx7nLGjWZjM91m5L9ROERFI.roa (hash: ueZbxYCJshLwHxcAfnLZtqfa1hKKEGpxZF9hNshflTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:16:4f:1e:62:5f:0d:5e:f7:cd:26:81:b4:a8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20105484f187f2087d120cad971d682db3159965 Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=c4a1242ac39bb4a8d15074cb8beed4cd806721ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:fc:81:dd:7c:86:d0:a5:2d:1b:29:ef:30: cb:45:23:72:f3:6c:26:b8:ba:e2:dd:a9:16:bc:70: e7:e9:1e:bd:6a:8e:c7:88:e5:04:d0:f2:f0:35:14: 04:0b:25:98:a1:f8:fe:61:97:be:42:4e:26:24:20: 91:08:52:03:5e:55:fe:d9:5b:67:07:0d:bb:50:28: 30:b7:e2:4c:21:20:3a:7d:ab:91:74:70:6a:38:32: 69:2a:6c:81:70:7d:12:f9:00:09:bd:40:61:69:4a: d8:b4:23:76:36:6a:f9:d1:a5:81:ce:e2:44:2e:60: d3:46:34:f9:6f:84:82:b5:02:5d:fa:3e:8a:67:b5: c2:ef:85:66:d3:eb:da:e4:7e:f2:8e:e2:7b:b4:04: 65:c8:aa:fa:67:99:9a:08:4f:94:23:13:3e:00:12: c7:4b:74:ab:f7:d3:1f:93:ae:85:bc:d3:7d:4a:db: b7:85:0e:f6:ed:6c:5a:a7:fb:9f:40:2f:0e:e8:f9: 35:ce:ee:90:62:a1:d2:46:d7:8a:13:4b:5d:52:f7: 96:1d:86:cd:fe:3b:2e:f5:5d:44:06:23:71:8e:d9: ae:6a:cb:2c:ad:0c:57:04:39:bc:23:27:ad:4b:58: 0e:42:2f:f1:97:12:9d:11:49:a5:8e:77:bd:84:a4: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:24:2A:C3:9B:B4:A8:D1:50:74:CB:8B:EE:D4:CD:80:67:21:CA X509v3 Authority Key Identifier: keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:31:66:52:5e:18:22:db:dd:47:ac:78:5c:c6:ae:1d:22:23: cf:cb:22:a7:59:cf:c5:eb:75:2c:ba:1f:e4:a4:ac:02:9b:f6: c4:03:a8:2b:ce:28:2f:ba:d7:1d:96:b6:0e:a1:1d:24:1e:29: 15:f7:ff:2c:5c:97:37:2f:a5:6f:5e:7d:a6:e8:41:c9:a6:03: 30:c1:89:dc:ec:95:2f:58:4e:2f:8c:08:e8:ea:7f:70:eb:dc: f0:e8:d3:79:b6:61:56:6c:49:19:63:5c:e6:8a:78:17:d7:5a: 11:7b:f9:86:b8:6e:bd:a4:53:2e:78:42:30:72:ca:5f:d6:d8: 19:2e:d4:13:8d:f0:ae:16:2f:02:c8:d8:7e:c3:e3:b5:19:62: 69:9b:e7:a6:a5:0b:86:cb:33:a5:64:ee:c3:b0:c2:51:4e:7a: f5:d7:64:f1:0d:3b:e5:ae:6b:1f:7e:ef:05:e7:96:90:b7:fd: 42:9c:b2:93:77:aa:d0:9e:32:55:3e:20:d3:98:cc:b9:13:69: 35:aa:97:fe:6d:06:5f:53:16:0a:c0:2a:33:4a:f6:f8:e1:8e: ef:90:e3:a6:bd:99:88:2a:3d:89:5b:a8:9d:e6:a9:a0:28:a2: 3f:3a:1c:ac:27:2f:53:dc:44:39:f8:6e:44:fd:23:5d:4d:02: c8:0e:4a:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhZPHmJfDV73zSaBtKjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMTA1NDg0ZjE4N2YyMDg3ZDEyMGNhZDk3MWQ2ODJkYjMx NTk5NjUwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD EyhjNGExMjQyYWMzOWJiNGE4ZDE1MDc0Y2I4YmVlZDRjZDgwNjcyMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA38gd18htClLRsp7zDLRSNy82wm uLri3akWvHDn6R69ao7HiOUE0PLwNRQECyWYofj+YZe+Qk4mJCCRCFIDXlX+2Vtn Bw27UCgwt+JMISA6fauRdHBqODJpKmyBcH0S+QAJvUBhaUrYtCN2Nmr50aWBzuJE LmDTRjT5b4SCtQJd+j6KZ7XC74Vm0+va5H7yjuJ7tARlyKr6Z5maCE+UIxM+ABLH S3Sr99Mfk66FvNN9Stu3hQ727Wxap/ufQC8O6Pk1zu6QYqHSRteKE0tdUveWHYbN /jsu9V1EBiNxjtmuasssrQxXBDm8IyetS1gOQi/xlxKdEUmljne9hKQdOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMShJCrDm7So0VB0y4vu1M2AZyHKMB8GA1UdIwQY MBaAFCAQVITxh/IIfRIMrZcdaC2zFZllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZWY2ZDAtZjQ4OC00ZDI1LTg2YjUt MjZhZWY4ODJmOTRmLzEvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZWY2ZDAtZjQ4OC00ZDI1LTg2YjUtMjZhZWY4ODJmOTRm LzEvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDFmUl4Y ItvdR6x4XMauHSIjz8sip1nPxet1LLof5KSsApv2xAOoK84oL7rXHZa2DqEdJB4p Fff/LFyXNy+lb159puhByaYDMMGJ3OyVL1hOL4wI6Op/cOvc8OjTebZhVmxJGWNc 5op4F9daEXv5hrhuvaRTLnhCMHLKX9bYGS7UE43wrhYvAsjYfsPjtRliaZvnpqUL hsszpWTuw7DCUU569ddk8Q075a5rH37vBeeWkLf9Qpyyk3eq0J4yVT4g05jMuRNp NaqX/m0GX1MWCsAqM0r2+OGO75Djpr2ZiCo9iVuoneapoCiiPzocrCcvU9xEOfhu RP0jXU0CyA5KoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:03 2025 by rpki-client