This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft File: IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json) Hash identifier: Db/Rwiym4N+9zO+uQRhLuBu2rB5U+9ULuGzRHCT3Gy4= Subject key identifier: 9C:37:8A:A7:8E:E6:7F:0D:21:D9:93:A6:D5:79:E2:59:20:93:02:85 Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3 Certificate serial: 019AF2766DE4C8576C7A8FEFE3A476B7CD45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft Manifest number: 04DD Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: 7mBltr6sehx5M3ypSvaMGmsjqYM9o9BxGeuHNLiQ4rg=) 2: YYev6Pek4prQk97zPtNDo2u2KRU.roa (hash: wJZbyHz8STJ6eKcT9ZVX0wVCLZZb2WUlXYfMJ35kaXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6d:e4:c8:57:6c:7a:8f:ef:e3:a4:76:b7:cd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=9c378aa78ee67f0d21d993a6d579e25920930285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:eb:21:fe:b5:d2:07:73:4d:58:3b:9b:19: 0c:0f:02:59:0a:b1:c7:7d:33:cc:dc:6c:a0:92:fe: eb:d7:eb:c2:65:81:96:f5:7b:8f:af:0e:94:70:97: cf:c8:98:ad:d0:a0:6d:3d:eb:a4:c9:d7:39:b4:7b: 38:92:86:d4:c1:64:e6:a8:12:91:1a:dd:5f:08:da: e0:07:29:c8:21:22:c1:de:e3:28:22:5c:40:c1:c7: 8e:ba:6d:1f:7a:28:37:65:6e:83:49:87:14:f7:a8: 8b:57:c2:02:87:73:37:0c:b0:60:08:62:2e:00:c8: ab:5f:79:ed:c7:c3:5d:62:08:45:b5:7e:12:e1:c9: 23:ff:7e:c3:ac:46:cf:24:84:96:ac:ed:f3:87:f7: 23:27:ce:b8:8c:dd:f5:7a:29:0b:6b:c7:1c:19:b5: 20:c5:af:33:79:65:7c:ca:a4:b7:aa:9c:f5:07:21: d9:04:80:e9:6d:dc:d6:b4:42:59:e3:8d:ef:cc:52: 07:8c:f1:c5:92:e7:64:e5:a1:cb:75:1a:7c:7b:f7: 46:d6:89:38:14:58:83:98:9f:d9:b1:d7:ee:a5:ab: 26:40:ef:da:e0:96:77:e3:ed:4c:6a:99:43:d5:7c: f0:00:64:04:a3:23:57:b1:f3:32:ba:9c:94:26:e7: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:37:8A:A7:8E:E6:7F:0D:21:D9:93:A6:D5:79:E2:59:20:93:02:85 X509v3 Authority Key Identifier: keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:29:fa:e7:0a:15:8f:95:54:fa:29:f8:ca:15:b6:5e:87:79: 81:a6:04:48:09:b3:73:ce:30:71:c4:35:ed:70:17:d7:0c:60: 81:a7:af:63:d6:58:25:08:84:8b:b4:8f:6d:02:ea:e7:b2:83: 78:d7:75:f6:d0:c9:61:1d:2c:ed:f8:af:c3:0d:b6:a0:bd:15: 74:9a:d5:a5:6c:48:54:03:19:66:75:eb:a2:ee:92:d4:36:1f: c6:b3:51:60:28:35:78:5f:f0:7f:36:e7:8d:3a:76:ca:68:e6: 4c:cf:b5:34:4f:69:1f:7e:9b:ba:f3:51:78:27:e3:c5:59:04: f8:44:7c:4c:56:dd:7f:e5:e2:91:57:ec:97:c3:07:5e:bd:e4: 6f:7b:6d:f8:aa:09:b3:6e:ad:b9:7d:3b:b9:b4:1b:ad:73:f8: 4f:57:b4:27:c3:98:a3:a1:5e:7d:63:bf:2b:eb:4e:ca:03:6e: 74:56:60:39:50:a7:ae:8c:e0:32:b4:79:7b:98:94:3d:3d:e8: da:66:69:55:4a:e5:42:f3:8c:6b:a6:9a:b2:1c:06:c7:4d:61: 07:a2:90:b3:94:30:45:81:87:d9:2f:19:d9:42:07:56:6b:39: ce:fb:27:6f:e7:b5:2a:8b:38:cf:e9:71:8b:2a:4d:24:df:65: a5:22:90:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm3kyFdseo/v46R2t81FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDZjYjZjY2NkMDllNzVlZDE5ZmMwNmZiNTkyNGNmMjdh Mzk4YzMwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD Eyg5YzM3OGFhNzhlZTY3ZjBkMjFkOTkzYTZkNTc5ZTI1OTIwOTMwMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5PrIf610gdzTVg7mxkMDwJZCrHH fTPM3Gygkv7r1+vCZYGW9XuPrw6UcJfPyJit0KBtPeukydc5tHs4kobUwWTmqBKR Gt1fCNrgBynIISLB3uMoIlxAwceOum0feig3ZW6DSYcU96iLV8ICh3M3DLBgCGIu AMirX3ntx8NdYghFtX4S4ckj/37DrEbPJISWrO3zh/cjJ864jN31eikLa8ccGbUg xa8zeWV8yqS3qpz1ByHZBIDpbdzWtEJZ443vzFIHjPHFkudk5aHLdRp8e/dG1ok4 FFiDmJ/ZsdfupasmQO/a4JZ34+1MaplD1XzwAGQEoyNXsfMyupyUJue1swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw3iqeO5n8NIdmTptV54lkgkwKFMB8GA1UdIwQY MBaAFCMGy2zM0J517Rn8BvtZJM8no5jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kOWRkODItOWJiOS00ODRjLTgxY2It ODNiZGNhZDAyMDQ3LzEvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kOWRkODItOWJiOS00ODRjLTgxY2ItODNiZGNhZDAyMDQ3 LzEvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCn65woV j5VU+in4yhW2Xod5gaYESAmzc84wccQ17XAX1wxggaevY9ZYJQiEi7SPbQLq57KD eNd19tDJYR0s7fivww22oL0VdJrVpWxIVAMZZnXrou6S1DYfxrNRYCg1eF/wfzbn jTp2ymjmTM+1NE9pH36buvNReCfjxVkE+ER8TFbdf+XikVfsl8MHXr3kb3tt+KoJ s26tuX07ubQbrXP4T1e0J8OYo6FefWO/K+tOygNudFZgOVCnrozgMrR5e5iUPT3o 2mZpVUrlQvOMa6aashwGx01hB6KQs5QwRYGH2S8Z2UIHVms5zvsnb+e1Kos4z+lx iypNJN9lpSKQfA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:01 2025 by rpki-client