This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json) Hash identifier: sbglrbVcBKkV/q0cOH670/0gvUld7WCAoFzEWrRUdJ4= Subject key identifier: CA:82:CD:A8:8A:B3:AD:B2:A2:92:47:A9:54:3D:9F:AF:D9:1F:AA:BE Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Certificate serial: 019AF12CCB9616FCE3C325A2938A8E6D83C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=) 2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: F2FBkg/i4rgG2lif6E9brnw4OA+7CkJKsS+PsBAedKA=) 3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cb:96:16:fc:e3:c3:25:a2:93:8a:8e:6d:83:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=ca82cda88ab3adb2a29247a9543d9fafd91faabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:5e:93:90:a0:8a:b5:a6:50:b9:00:d1:f8: b8:30:18:d5:c7:de:8f:5a:39:40:47:2b:4d:91:56: b7:79:03:b6:dd:f7:85:d6:76:d6:35:84:49:9e:c5: bb:3b:b3:7a:61:3b:f5:0d:55:a8:26:3d:e7:a8:bb: 5e:5e:d5:31:63:2e:d8:66:20:28:dc:1a:a0:2f:28: 8c:ac:a2:b4:0e:85:08:4a:57:9b:4f:55:dc:c9:73: d7:6c:da:4e:d2:f6:56:85:62:f2:ad:fe:3d:96:1d: 90:3f:ec:07:ab:fb:8b:64:bb:e5:f0:77:b0:97:43: 88:4e:a1:a6:59:fe:9f:72:70:ea:f8:c3:3d:b3:10: b7:d5:c2:c3:06:da:93:b7:2b:3f:35:d3:46:22:0f: 2f:45:8c:f0:0b:8b:3e:a1:52:21:60:d0:d8:63:88: 9b:3c:b1:dc:86:d0:04:9b:2c:b6:97:cb:b2:05:72: 71:91:9a:dd:0f:14:e0:eb:0a:df:31:52:ac:d6:bd: 07:db:73:68:f3:a2:c1:b1:bb:43:0f:ce:23:78:2c: 70:07:be:9d:59:e7:6d:07:8e:b8:6b:0d:25:89:ce: a9:b2:29:13:33:e7:11:97:ad:96:b9:d6:3f:40:f2: 7c:ce:86:ce:c7:90:b0:ee:4e:2d:82:8e:73:03:77: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:82:CD:A8:8A:B3:AD:B2:A2:92:47:A9:54:3D:9F:AF:D9:1F:AA:BE X509v3 Authority Key Identifier: keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3e:2e:d6:fc:3e:f7:0c:2a:f2:57:38:7c:22:95:eb:f6:b7: 1d:51:45:cd:c2:5d:67:dc:6e:94:02:98:1b:dd:70:67:50:8c: 36:fa:8a:6e:00:f0:87:14:29:15:6e:f1:08:48:44:8f:be:26: 15:ad:a8:96:a0:8a:8c:f6:a7:32:36:7d:a4:d5:ca:b0:3c:31: fa:27:ce:ff:30:68:7b:ab:28:f5:1d:48:50:c1:c5:d1:77:71: 0b:4f:43:62:d9:db:5c:d1:7a:d5:1d:43:03:cf:4b:51:2a:53: 20:26:31:b0:1f:a0:a3:fe:78:ea:b7:12:33:03:ee:cb:06:d2: ee:0f:52:c4:93:46:d1:a0:98:b5:12:ac:f7:bd:6b:06:87:c2: 37:30:f8:33:c1:d5:84:d4:d9:b5:96:df:da:2a:6c:41:6c:7e: c2:60:a8:58:41:cb:b6:ee:86:b6:7f:a1:db:dc:8f:e9:e8:15: a3:c9:1e:1f:65:4d:3a:0a:41:ca:a2:a9:f7:56:3b:48:e5:9b: 62:69:34:69:6b:6e:92:43:9c:53:94:15:a6:a7:df:3c:e5:70: b9:07:0f:81:b9:07:ab:b2:bd:c8:00:65:98:3b:46:1f:da:70: 49:97:e6:8f:12:3f:3e:4e:88:5b:6e:63:f6:27:ee:3b:64:8e: c6:17:ae:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMuWFvzjwyWik4qObYPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5 YzE4ZDUwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EyhjYTgyY2RhODhhYjNhZGIyYTI5MjQ3YTk1NDNkOWZhZmQ5MWZhYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudJek5CgirWmULkA0fi4MBjVx96P WjlARytNkVa3eQO23feF1nbWNYRJnsW7O7N6YTv1DVWoJj3nqLteXtUxYy7YZiAo 3BqgLyiMrKK0DoUISlebT1XcyXPXbNpO0vZWhWLyrf49lh2QP+wHq/uLZLvl8Hew l0OITqGmWf6fcnDq+MM9sxC31cLDBtqTtys/NdNGIg8vRYzwC4s+oVIhYNDYY4ib PLHchtAEmyy2l8uyBXJxkZrdDxTg6wrfMVKs1r0H23No86LBsbtDD84jeCxwB76d WedtB464aw0lic6psikTM+cRl62WudY/QPJ8zobOx5Cw7k4tgo5zA3fyDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqCzaiKs62yopJHqVQ9n6/ZH6q+MB8GA1UdIwQY MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt MzM0MTU5NjdjMjEzLzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPz4u1vw+ 9wwq8lc4fCKV6/a3HVFFzcJdZ9xulAKYG91wZ1CMNvqKbgDwhxQpFW7xCEhEj74m Fa2olqCKjPanMjZ9pNXKsDwx+ifO/zBoe6so9R1IUMHF0XdxC09DYtnbXNF61R1D A89LUSpTICYxsB+go/546rcSMwPuywbS7g9SxJNG0aCYtRKs971rBofCNzD4M8HV hNTZtZbf2ipsQWx+wmCoWEHLtu6Gtn+h29yP6egVo8keH2VNOgpByqKp91Y7SOWb Ymk0aWtukkOcU5QVpqffPOVwuQcPgbkHq7K9yABlmDtGH9pwSZfmjxI/Pk6IW25j 9ifuO2SOxheulA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:38 2025 by rpki-client