This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft File: ib1U59acFH1rVvjGognT3q6id90.mft (raw, json) Hash identifier: qyy2DXqk/0bJ0rtoXSbu5/Lre3UNSNukbGCY6jfRs10= Subject key identifier: D3:D4:6A:D9:B4:A1:B4:47:BC:89:9B:62:E5:8F:3A:0C:73:96:1B:FA Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd Certificate serial: 019AF2ADDA60AE49E0D11D0D0ACFC431A3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft Manifest number: 120F Signing time: Sat 06 Dec 2025 08:01:11 +0000 Manifest this update: Sat 06 Dec 2025 08:01:11 +0000 Manifest next update: Sun 07 Dec 2025 08:01:11 +0000 Files and hashes: 1: 3TtQeJqIixTVaSWBRgJKRyJiMtM.roa (hash: +aaxMIBwckBc+5Nn6sLOaOsjDThvNfT/bDobAmTCJB8=) 2: 8GtdV5vXVwAD_7uzLpWTP9X8Eis.roa (hash: va61wvJzxODdeX2y1RUDtdwQklO+DI+rxflcf0q3NHg=) 3: ib1U59acFH1rVvjGognT3q6id90.crl (hash: IaO0E7u2bG6fqiAFSfvta7hjgjvgdmzsTrFWFp2X1BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:da:60:ae:49:e0:d1:1d:0d:0a:cf:c4:31:a3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd Validity Not Before: Dec 6 08:01:11 2025 GMT Not After : Dec 7 08:01:11 2025 GMT Subject: CN=d3d46ad9b4a1b447bc899b62e58f3a0c73961bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:52:ed:a2:d7:41:78:1f:4c:03:93:60:07: 53:f2:93:ee:99:f1:63:4e:20:7c:09:e3:dc:66:44: 31:44:11:f3:23:0e:6f:98:3b:e7:88:e2:40:57:0d: 25:5c:aa:d8:0e:81:ea:89:99:51:5b:33:9c:e2:94: 8e:e0:0d:12:e4:26:cb:de:e7:65:47:06:69:73:cc: a8:18:72:d9:5e:ef:9e:f5:d4:83:6e:67:9d:fd:a2: 7b:f5:61:70:ba:37:d7:d7:17:8e:c8:87:d8:18:c9: f6:10:a0:18:28:10:40:86:a9:35:6c:8a:98:2c:b8: 8a:87:08:99:04:e8:c7:27:21:4a:18:16:d4:28:5d: f1:5f:f7:bd:e5:c9:b8:b0:0b:65:af:a0:19:bf:70: 8c:bd:2d:cf:51:e0:0b:f7:0e:75:fc:44:d0:10:57: 46:8f:78:3c:93:c3:13:7b:c2:b3:9b:5b:74:a2:d9: 87:e8:33:8b:b5:7d:9f:52:c9:df:aa:7a:d9:15:22: 85:3d:a5:90:94:0d:ad:1c:8a:0b:69:4d:52:42:52: 67:df:f5:51:0e:62:7b:91:ba:15:46:36:57:58:c2: 0f:d6:21:41:a7:f4:11:eb:72:9e:5c:5a:fd:91:eb: ee:f6:29:9d:e2:02:38:68:5b:e0:b3:f0:4c:99:97: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:6A:D9:B4:A1:B4:47:BC:89:9B:62:E5:8F:3A:0C:73:96:1B:FA X509v3 Authority Key Identifier: keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e6:da:2d:ee:d9:fb:fc:27:7b:d6:0e:d1:9e:17:5f:1e:7b: 9b:b0:0d:31:30:d3:f4:52:d1:42:92:9b:80:2d:10:b1:60:43: 6f:09:7b:71:b1:f5:a7:3b:de:2a:de:bc:36:4b:0a:4c:c8:97: d6:6c:50:b4:8e:2a:2c:77:7f:4b:ac:8a:04:ff:96:54:79:e1: cd:cf:1a:f0:e5:46:4d:47:a6:c9:9e:d1:42:b0:fb:7c:98:e4: 67:fa:97:5f:98:50:f8:c0:68:76:34:e3:12:a0:dc:df:86:cc: b5:a9:fa:93:c8:de:b7:d6:53:8d:12:20:7c:8f:5a:f3:2c:96: 83:33:5d:c7:98:a3:1e:d3:91:d6:c0:e6:30:48:38:f1:cf:e7: 3a:c9:6a:97:e0:dc:ad:0c:8a:ff:53:36:d0:0c:32:ff:08:11: 91:b6:d7:05:38:f2:d9:6d:02:99:b0:14:ad:e6:19:d9:f2:dc: ac:11:1c:9b:f6:dd:d4:30:83:55:4e:5c:d0:1b:20:1f:53:d4: 2c:53:b6:74:6d:6d:86:e1:e8:24:26:c4:d3:d0:e9:ba:2d:ab: d7:ae:48:95:be:f7:c3:3b:f9:ac:0e:0c:74:d1:1a:90:d6:da: 9b:28:7c:33:57:9b:e7:ed:e8:6e:e3:c8:89:42:0e:61:ec:ce: 7e:46:50:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdpgrkng0R0NCs/EMaPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YmQ1NGU3ZDY5YzE0N2Q2YjU2ZjhjNmEyMDlkM2RlYWVh Mjc3ZGQwHhcNMjUxMjA2MDgwMTExWhcNMjUxMjA3MDgwMTExWjAzMTEwLwYDVQQD EyhkM2Q0NmFkOWI0YTFiNDQ3YmM4OTliNjJlNThmM2EwYzczOTYxYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApylS7aLXQXgfTAOTYAdT8pPumfFj TiB8CePcZkQxRBHzIw5vmDvniOJAVw0lXKrYDoHqiZlRWzOc4pSO4A0S5CbL3udl RwZpc8yoGHLZXu+e9dSDbmed/aJ79WFwujfX1xeOyIfYGMn2EKAYKBBAhqk1bIqY LLiKhwiZBOjHJyFKGBbUKF3xX/e95cm4sAtlr6AZv3CMvS3PUeAL9w51/ETQEFdG j3g8k8MTe8Kzm1t0otmH6DOLtX2fUsnfqnrZFSKFPaWQlA2tHIoLaU1SQlJn3/VR DmJ7kboVRjZXWMIP1iFBp/QR63KeXFr9kevu9imd4gI4aFvgs/BMmZdauQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPUatm0obRHvImbYuWPOgxzlhv6MB8GA1UdIwQY MBaAFIm9VOfWnBR9a1b4xqIJ096uonfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kODAwYmUtNGFjZi00OWYyLTk2OWQt ZGIyMjdjNDk2ODA0LzEvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kODAwYmUtNGFjZi00OWYyLTk2OWQtZGIyMjdjNDk2ODA0 LzEvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+baLe7Z +/wne9YO0Z4XXx57m7ANMTDT9FLRQpKbgC0QsWBDbwl7cbH1pzveKt68NksKTMiX 1mxQtI4qLHd/S6yKBP+WVHnhzc8a8OVGTUemyZ7RQrD7fJjkZ/qXX5hQ+MBodjTj EqDc34bMtan6k8jet9ZTjRIgfI9a8yyWgzNdx5ijHtOR1sDmMEg48c/nOslql+Dc rQyK/1M20Awy/wgRkbbXBTjy2W0CmbAUreYZ2fLcrBEcm/bd1DCDVU5c0BsgH1PU LFO2dG1thuHoJCbE09Dpui2r165Ilb73wzv5rA4MdNEakNbamyh8M1eb5+3obuPI iUIOYezOfkZQ5g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:23 2025 by rpki-client