This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json) Hash identifier: OureDFo3F6rii/lQ3ZT84g4M1cyuCA9lJ/VI2Zq5nXM= Subject key identifier: 61:A7:B4:C2:26:82:71:03:88:63:94:0D:E9:2C:09:01:D3:89:16:36 Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94 Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294 Certificate serial: 019AF31CC8CC696A2780D4790EA76875A25D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft Manifest number: 114D Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: UpvgUbLaqGdMZ+DC9xafh0kucsIvtlM1QoR9KoOrqno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c8:cc:69:6a:27:80:d4:79:0e:a7:68:75:a2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294 Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=61a7b4c2268271038863940de92c0901d3891636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:90:74:c3:eb:6c:ac:99:86:51:89:e7:c6: 74:16:74:81:e9:ad:ea:14:3a:34:70:a7:b3:a5:5b: 0a:da:c4:e2:76:86:ac:09:a0:45:a1:fc:73:8b:94: 00:e4:73:1d:64:74:21:a7:db:ba:aa:dd:d1:9d:72: 35:18:04:fa:de:8d:14:93:c9:34:ad:9d:aa:71:dc: 4f:34:cd:34:f6:15:fc:65:4b:77:b2:53:32:7a:14: f3:78:42:3b:72:f3:9f:84:89:d6:11:f2:5d:05:86: 23:7e:35:20:8e:24:11:08:2e:4a:f9:a3:97:5f:85: c0:e0:3d:8d:ca:b3:dd:84:10:63:0b:7f:6b:ee:7f: f3:ed:ea:90:b0:14:44:f7:4e:11:ad:20:9b:3d:d6: 01:92:6d:f2:c2:20:b4:f1:4b:a0:94:2c:c2:f0:5c: 3c:63:82:85:6e:28:63:6a:9d:20:86:ee:b8:50:37: 7a:eb:ac:7a:15:0c:8d:1a:44:31:89:b0:2d:b3:27: 31:9e:26:a4:a4:d7:ff:1e:c8:44:9e:38:1e:84:1b: 60:25:eb:84:e8:4e:2d:cb:4d:41:98:62:f8:50:6f: 71:90:e3:fb:bf:64:35:aa:7a:7f:9f:c9:ef:24:5e: fe:de:f0:f3:f5:02:54:d6:ee:4d:95:f5:2a:d3:bd: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A7:B4:C2:26:82:71:03:88:63:94:0D:E9:2C:09:01:D3:89:16:36 X509v3 Authority Key Identifier: keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:19:25:65:46:25:77:18:b4:f4:b6:94:9e:2f:b4:f1:fb:44: 6b:fa:f3:70:73:57:9e:4b:14:b1:42:49:03:54:a4:2b:82:7f: 2b:1f:78:30:4a:c2:07:79:54:18:cc:67:60:1e:44:a3:b6:72: 0d:74:22:6b:78:cf:d6:a0:5a:92:9d:c4:28:b1:97:c3:ec:0f: 8f:e7:46:51:ff:e4:1d:d9:e7:97:8c:8a:7d:e3:98:3b:c3:f6: 15:10:2c:04:22:96:9a:d5:c8:56:28:82:13:59:92:85:4d:67: 8a:69:b6:b4:dd:81:ed:0c:92:0e:8c:3d:00:5e:6e:5e:90:38: 9c:2c:63:d4:07:f0:b2:e6:c9:51:63:00:d0:3f:44:89:67:00: 9c:b1:94:b2:2d:a2:e6:79:26:7f:e7:e8:2f:ac:22:1a:18:ae: 7f:20:82:7e:0e:9f:f6:5d:55:78:6b:86:0e:b4:a7:75:ff:36: 7e:e4:7c:02:34:34:46:b5:d4:79:e2:44:f6:2f:ef:e4:5a:42: f4:81:51:bd:0f:b2:e0:c8:20:a1:c6:3d:05:8d:21:16:ad:12: 2a:9a:69:12:80:ee:6c:ad:b1:95:95:16:82:47:a6:82:88:d4: 0f:9d:9c:3d:3f:a1:cb:3e:34:cf:fe:12:ac:da:6a:9f:d6:ea: 7f:c1:e4:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMjMaWongNR5DqdodaJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YmFmNWFmZjFkN2FhYWE1MmVmZTE0OGUwZTIzNDAzMTFk N2MyOTQwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD Eyg2MWE3YjRjMjI2ODI3MTAzODg2Mzk0MGRlOTJjMDkwMWQzODkxNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvReQdMPrbKyZhlGJ58Z0FnSB6a3q FDo0cKezpVsK2sTidoasCaBFofxzi5QA5HMdZHQhp9u6qt3RnXI1GAT63o0Uk8k0 rZ2qcdxPNM009hX8ZUt3slMyehTzeEI7cvOfhInWEfJdBYYjfjUgjiQRCC5K+aOX X4XA4D2NyrPdhBBjC39r7n/z7eqQsBRE904RrSCbPdYBkm3ywiC08UuglCzC8Fw8 Y4KFbihjap0ghu64UDd666x6FQyNGkQxibAtsycxniakpNf/HshEnjgehBtgJeuE 6E4ty01BmGL4UG9xkOP7v2Q1qnp/n8nvJF7+3vDz9QJU1u5NlfUq073WNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGntMImgnEDiGOUDeksCQHTiRY2MB8GA1UdIwQY MBaAFIm69a/x16qqUu/hSODiNAMR18KUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMt NDlhN2NmMTUzZWIwLzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMtNDlhN2NmMTUzZWIw LzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahklZUYl dxi09LaUni+08ftEa/rzcHNXnksUsUJJA1SkK4J/Kx94MErCB3lUGMxnYB5Eo7Zy DXQia3jP1qBakp3EKLGXw+wPj+dGUf/kHdnnl4yKfeOYO8P2FRAsBCKWmtXIViiC E1mShU1nimm2tN2B7QySDow9AF5uXpA4nCxj1AfwsubJUWMA0D9EiWcAnLGUsi2i 5nkmf+foL6wiGhiufyCCfg6f9l1VeGuGDrSndf82fuR8AjQ0RrXUeeJE9i/v5FpC 9IFRvQ+y4MggocY9BY0hFq0SKpppEoDubK2xlZUWgkemgojUD52cPT+hyz40z/4S rNpqn9bqf8HkYw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:35 2025 by rpki-client