This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft File: iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json) Hash identifier: Ahdr663kQc5KqLPt9hIyc7wYnMnZuvb8+iRLAx1lzfM= Subject key identifier: B9:D9:16:CA:3C:C0:1B:40:BC:ED:4B:3A:84:1C:1D:9E:4A:B3:6F:F8 Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Certificate serial: 019AF5AF21438DB02701ED3F56B820F7C1DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft Manifest number: 0254 Signing time: Sat 06 Dec 2025 22:01:26 +0000 Manifest this update: Sat 06 Dec 2025 22:01:26 +0000 Manifest next update: Sun 07 Dec 2025 22:01:26 +0000 Files and hashes: 1: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: Va3OYluSK/N9Nzvwk7rV8Z/+dehdUzMZyEh49vEspN8=) 2: qZNiFnxeUzz5XEPun42Fz9FodnU.roa (hash: utLDo2wO1yHKyt0UAzXgcGw7rn24hRMAbyeC1uhL2cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:21:43:8d:b0:27:01:ed:3f:56:b8:20:f7:c1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Validity Not Before: Dec 6 22:01:26 2025 GMT Not After : Dec 7 22:01:26 2025 GMT Subject: CN=b9d916ca3cc01b40bced4b3a841c1d9e4ab36ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:b1:f8:18:39:ff:a6:c2:b5:dd:ac:21:2b: 9c:ff:ac:48:f0:ef:d6:52:ac:fd:54:e4:2f:dc:cc: 57:ae:0e:77:fb:b8:5f:42:9b:4c:10:b7:89:50:e5: c3:93:c9:d2:d8:00:7d:a3:c9:c0:61:b8:1e:ff:e9: 01:16:ed:2a:10:e3:07:dd:34:c8:78:71:8f:2a:07: f2:e1:40:60:3e:bd:da:b1:9d:3c:79:41:c6:a6:3c: dc:48:91:c9:7f:48:83:a8:5f:82:94:b0:2d:8d:37: 7f:3f:d9:09:cd:2b:41:b0:0b:7f:9b:6d:a9:59:e3: b0:31:aa:94:14:ca:c7:b3:ef:54:0b:aa:12:f5:44: 1e:6e:6f:ab:99:64:97:ed:20:a6:3f:f7:ee:6a:1f: c9:a2:b8:40:38:a2:9b:b7:48:fe:89:3d:53:eb:1f: c0:04:e9:7a:98:50:53:bb:7a:1a:b2:ff:c6:da:71: 23:4e:3c:7b:0a:d2:53:76:1b:b9:b3:15:a5:e2:33: 73:c1:75:28:00:28:f5:e8:a1:48:a5:3f:c3:e4:81: c0:77:17:ae:5a:db:41:3b:23:68:de:27:26:5a:c4: fc:a4:1b:dd:09:44:18:51:0e:69:84:2c:c7:e3:4c: 5e:16:a0:b7:30:ba:5b:8e:47:49:5a:9c:94:b8:bf: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D9:16:CA:3C:C0:1B:40:BC:ED:4B:3A:84:1C:1D:9E:4A:B3:6F:F8 X509v3 Authority Key Identifier: keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:04:5d:fa:6f:49:0f:ea:4e:42:d0:ab:3b:7f:5f:dd:6a:2e: 72:6b:38:9d:bb:7b:49:be:07:aa:7e:a0:f8:03:dd:ae:4b:ee: 98:90:d9:24:f6:b2:c6:66:a9:90:d9:37:37:55:60:a9:e9:17: cb:26:97:64:8c:c9:d4:91:6f:01:f9:97:32:57:fa:cb:b3:20: 8e:2a:8d:ce:3c:ce:bd:0f:41:30:05:49:e5:96:fa:2e:c3:04: 5e:2c:44:86:7a:fb:cd:2e:b6:3d:34:a8:c5:ea:6e:41:d9:69: d3:fc:44:78:52:bc:f7:07:68:8c:a5:01:8d:38:9c:74:61:bf: 34:02:65:82:e2:4a:5a:00:f0:a5:94:59:52:18:67:23:4c:18: 89:7b:50:81:f2:c9:e6:c8:86:bf:2b:64:f4:13:a0:af:45:bb: 73:41:5d:af:f0:58:7a:96:25:f1:77:7b:78:35:a8:97:54:06: e3:58:b7:15:06:14:f7:9c:17:37:d7:c9:c8:4e:19:d6:42:15: 3d:92:ce:24:b6:c0:60:9c:70:c9:de:9c:c1:5e:19:d6:a9:e3: 2b:cd:f5:e0:73:25:ce:17:eb:79:aa:7b:8d:49:bd:de:5a:bb: c2:3a:7a:da:34:8c:7b:f0:aa:5a:a8:54:e1:7e:bd:c8:58:20: d3:b7:e4:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ryFDjbAnAe0/Vrgg98HeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWUzMTk5M2ZhODU4NzU2OGIzZmNkZTViN2ZlZTk2ZGI0 M2E5YjcwHhcNMjUxMjA2MjIwMTI2WhcNMjUxMjA3MjIwMTI2WjAzMTEwLwYDVQQD EyhiOWQ5MTZjYTNjYzAxYjQwYmNlZDRiM2E4NDFjMWQ5ZTRhYjM2ZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswqx+Bg5/6bCtd2sISuc/6xI8O/W Uqz9VOQv3MxXrg53+7hfQptMELeJUOXDk8nS2AB9o8nAYbge/+kBFu0qEOMH3TTI eHGPKgfy4UBgPr3asZ08eUHGpjzcSJHJf0iDqF+ClLAtjTd/P9kJzStBsAt/m22p WeOwMaqUFMrHs+9UC6oS9UQebm+rmWSX7SCmP/fuah/JorhAOKKbt0j+iT1T6x/A BOl6mFBTu3oasv/G2nEjTjx7CtJTdhu5sxWl4jNzwXUoACj16KFIpT/D5IHAdxeu WttBOyNo3icmWsT8pBvdCUQYUQ5phCzH40xeFqC3MLpbjkdJWpyUuL9l4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnZFso8wBtAvO1LOoQcHZ5Ks2/4MB8GA1UdIwQY MBaAFIgeMZk/qFh1aLP83lt/7pbbQ6m3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2Yt NTEzOGYzNDJlOWY1LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2YtNTEzOGYzNDJlOWY1 LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgRd+m9J D+pOQtCrO39f3Woucms4nbt7Sb4Hqn6g+APdrkvumJDZJPayxmapkNk3N1VgqekX yyaXZIzJ1JFvAfmXMlf6y7MgjiqNzjzOvQ9BMAVJ5Zb6LsMEXixEhnr7zS62PTSo xepuQdlp0/xEeFK89wdojKUBjTicdGG/NAJlguJKWgDwpZRZUhhnI0wYiXtQgfLJ 5siGvytk9BOgr0W7c0Fdr/BYepYl8Xd7eDWol1QG41i3FQYU95wXN9fJyE4Z1kIV PZLOJLbAYJxwyd6cwV4Z1qnjK8314HMlzhfreap7jUm93lq7wjp62jSMe/CqWqhU 4X69yFgg07fkEg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:56 2025 by rpki-client