This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json) Hash identifier: bi00Q0+Q1QVzZJq4UrB1qJefjDxhk9RoL7qNK+21ykQ= Subject key identifier: 04:3D:9F:CF:7B:F4:24:A5:3D:77:4E:8C:FD:B4:73:3B:CE:3E:EB:AB Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Certificate serial: 019AF12E97C18716F83AEADE56822B8C0FFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft Manifest number: 1774 Signing time: Sat 06 Dec 2025 01:02:33 +0000 Manifest this update: Sat 06 Dec 2025 01:02:33 +0000 Manifest next update: Sun 07 Dec 2025 01:02:33 +0000 Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=) 2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=) 3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: xOEGqx/1zsKhEAbKzPBLHGAA5wzEvkLSS2i7CmaovZk=) 4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:97:c1:87:16:f8:3a:ea:de:56:82:2b:8c:0f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Validity Not Before: Dec 6 01:02:33 2025 GMT Not After : Dec 7 01:02:33 2025 GMT Subject: CN=043d9fcf7bf424a53d774e8cfdb4733bce3eebab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:e7:86:ae:4f:d8:1b:69:e5:df:9d:d4:a7: 83:69:4f:7a:d1:02:8a:70:d7:b3:aa:b9:bf:1f:9e: bf:92:15:fd:a1:d2:51:03:71:14:55:41:99:b1:32: be:08:a6:78:62:d0:22:b3:3d:2a:c4:15:b4:bc:0a: b4:2f:74:43:9d:53:54:91:17:41:d4:51:b9:4c:98: 0a:df:7e:08:d9:ef:ad:48:ac:65:25:59:91:3a:65: 50:3e:b4:1b:3f:85:99:ca:03:7a:33:5f:25:24:a3: fc:1f:2c:09:0e:bb:a7:eb:23:f3:30:eb:d3:d1:3a: 59:5e:f4:6f:29:4d:32:1b:a5:10:93:90:ab:ce:f6: ab:71:38:81:44:af:4f:eb:3d:b8:b8:29:df:e6:78: 6a:4f:1e:01:5a:5a:88:93:e2:2d:d9:e7:c5:07:46: b7:af:04:c5:a8:63:f1:96:90:26:6b:e0:13:85:52: 5c:8a:c8:2d:26:f3:08:38:0e:6a:82:f5:b2:7d:9e: a3:40:59:2d:cd:fc:0a:49:41:14:b1:36:e2:36:b8: 8f:01:03:af:2b:8c:78:1b:e3:c0:f5:2b:cd:e6:67: 59:7c:d0:e1:11:f2:96:c9:61:ff:b0:ba:b9:ad:c1: 13:7c:ed:55:4d:c6:e9:52:47:04:eb:f1:71:49:d5: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3D:9F:CF:7B:F4:24:A5:3D:77:4E:8C:FD:B4:73:3B:CE:3E:EB:AB X509v3 Authority Key Identifier: keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e3:b1:1e:09:34:df:42:c0:2c:72:9b:fd:b6:7c:58:0d:22: 6a:ee:57:2f:0e:96:7e:ee:6a:4f:4c:2e:ab:8d:98:85:76:e8: 7a:58:c4:f6:bb:03:7b:4f:67:48:9d:84:ed:23:50:ec:73:0a: d6:22:5a:8a:0a:d8:2a:1b:1d:5c:f5:fe:dd:c5:78:be:fc:60: d2:5f:06:82:a6:05:08:20:e9:2e:f1:22:6b:70:a1:a7:82:f2: b6:c7:a3:08:a0:a7:ce:68:0f:11:ef:6e:83:c2:fc:dd:54:90: 24:9a:d5:27:a9:1d:20:b2:6c:9c:c2:28:0f:22:fd:52:16:57: 2e:8d:05:a6:6d:ca:86:df:3c:3d:82:a4:4f:a4:3d:06:88:82: 56:4f:0a:4f:ef:96:29:9f:b0:c5:09:b0:1d:ef:33:66:50:91: 1e:1d:73:85:d4:87:cd:f1:e4:1d:7a:fe:51:13:32:dc:72:44: f7:da:45:19:0d:41:d6:13:85:2e:99:4d:a2:83:cf:16:fd:3d: ca:89:9e:75:42:69:1c:a4:b6:eb:06:07:c3:1c:19:bb:ba:83: 4f:89:ca:d2:e1:74:25:4e:be:10:97:2b:5c:c1:fa:be:41:1e: 2b:35:2a:01:61:41:8c:77:7e:5b:ec:78:ec:6f:91:72:98:53: 2e:88:b4:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpfBhxb4OureVoIrjA/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk NGMzZjEwHhcNMjUxMjA2MDEwMjMzWhcNMjUxMjA3MDEwMjMzWjAzMTEwLwYDVQQD EygwNDNkOWZjZjdiZjQyNGE1M2Q3NzRlOGNmZGI0NzMzYmNlM2VlYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx33nhq5P2Btp5d+d1KeDaU960QKK cNezqrm/H56/khX9odJRA3EUVUGZsTK+CKZ4YtAisz0qxBW0vAq0L3RDnVNUkRdB 1FG5TJgK334I2e+tSKxlJVmROmVQPrQbP4WZygN6M18lJKP8HywJDrun6yPzMOvT 0TpZXvRvKU0yG6UQk5CrzvarcTiBRK9P6z24uCnf5nhqTx4BWlqIk+It2efFB0a3 rwTFqGPxlpAma+AThVJcisgtJvMIOA5qgvWyfZ6jQFktzfwKSUEUsTbiNriPAQOv K4x4G+PA9SvN5mdZfNDhEfKWyWH/sLq5rcETfO1VTcbpUkcE6/FxSdUTUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ9n8979CSlPXdOjP20czvOPuurMB8GA1UdIwQY MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt NDI1MGNlNTUxN2Q5LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5 LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguOxHgk0 30LALHKb/bZ8WA0iau5XLw6Wfu5qT0wuq42YhXboeljE9rsDe09nSJ2E7SNQ7HMK 1iJaigrYKhsdXPX+3cV4vvxg0l8GgqYFCCDpLvEia3Chp4LytsejCKCnzmgPEe9u g8L83VSQJJrVJ6kdILJsnMIoDyL9UhZXLo0Fpm3Kht88PYKkT6Q9BoiCVk8KT++W KZ+wxQmwHe8zZlCRHh1zhdSHzfHkHXr+URMy3HJE99pFGQ1B1hOFLplNooPPFv09 yomedUJpHKS26wYHwxwZu7qDT4nK0uF0JU6+EJcrXMH6vkEeKzUqAWFBjHd+W+x4 7G+RcphTLoi0SA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:33 2025 by rpki-client