This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json) Hash identifier: vMNp5Hn54y3yAyRE3BvIS0mvqzdGiPabQWpmmWvjg6o= Subject key identifier: 05:24:30:CD:D2:27:8F:1E:30:48:E5:1B:FF:C4:78:05:D6:67:85:1E Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88 Certificate serial: 019AF1D210FF6C64043861CB3037158FE4ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=) 2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=) 3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: 0yFeWQucO90ZBKRFxORZ8sxaN9ayRtOCeu7NsCmlh8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:10:ff:6c:64:04:38:61:cb:30:37:15:8f:e4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=052430cdd2278f1e3048e51bffc47805d667851e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:a3:eb:c2:b1:30:b7:d3:1e:95:f4:8f:c2: 21:a3:f4:92:5e:4e:d8:68:80:85:a9:21:db:2b:7b: 8c:b9:47:06:2d:78:06:8e:73:9f:7f:90:9c:8f:72: 74:19:39:52:96:03:22:5a:91:81:0e:5c:d5:7f:e9: 17:41:94:0f:4d:57:22:af:db:c3:d7:16:99:06:9b: 5d:46:59:92:28:8f:48:cf:ec:c0:6e:b9:2c:9f:b9: 7d:ed:89:62:62:f9:78:26:39:61:a0:3e:cc:aa:ea: e1:61:8f:a9:30:42:8d:b5:6f:2e:af:d2:de:49:e2: b8:db:0b:15:40:f2:19:68:86:42:be:98:7e:70:eb: 47:de:14:b3:35:f4:0f:00:af:be:d7:1b:1f:9a:e9: 8f:b7:62:8b:49:62:6d:13:ea:33:9a:f2:4d:54:f1: 32:37:f0:f5:d4:6e:42:b0:14:6f:f4:2e:d4:bb:cd: 54:52:3e:d8:a9:13:ad:42:26:21:69:75:e7:7a:5d: da:65:0a:25:fa:55:b1:6c:50:36:48:09:94:eb:ab: e2:5b:82:20:1a:c5:33:11:05:e8:c6:4c:bb:5e:a5: 84:30:cb:3d:16:40:fc:81:90:99:31:9c:bb:d4:5a: 71:f0:29:ef:5a:7a:94:d4:97:f6:de:40:81:2c:49: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:24:30:CD:D2:27:8F:1E:30:48:E5:1B:FF:C4:78:05:D6:67:85:1E X509v3 Authority Key Identifier: keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:79:55:94:64:e9:a3:31:bf:99:fd:1b:d0:fd:e1:2f:5b:9d: 74:ae:f2:a7:90:e5:89:f8:ae:75:3f:4a:04:7c:3a:db:1d:40: 8d:65:7e:35:e4:76:9a:35:6d:1d:72:1c:9c:8a:79:b5:45:5c: ff:48:73:46:a4:79:26:f3:bc:84:bf:0a:6f:04:da:35:f8:a5: 43:f8:4d:aa:d3:d3:01:ab:44:32:ed:b9:5f:70:5b:86:d5:e0: 8d:a0:d7:a6:36:b5:9f:53:4f:43:b5:00:5b:be:56:5b:bf:b6: c9:2f:1f:2c:65:75:2e:c4:09:bf:2b:02:1b:5b:66:b2:4f:a2: 53:35:2d:36:0d:6a:7b:c6:a4:78:14:75:21:bb:6d:c8:8d:14: 01:fe:89:ee:4c:ab:f6:18:b8:25:50:f0:db:ae:66:41:c8:a0: cc:51:d3:72:38:6f:c4:6e:f6:b1:5f:88:62:f0:b4:f3:50:da: 9a:54:7c:2b:95:c8:b5:6c:f7:48:fb:c4:47:71:e6:96:b5:0d: 51:2f:c8:5a:e5:40:29:54:4b:c1:31:6e:c0:8c:03:15:82:74: 08:bf:be:79:e9:86:44:1b:d8:18:6d:34:ed:3d:07:51:35:68: fc:75:48:9d:ab:a5:68:c7:1a:f0:60:3f:c5:2a:cf:4e:6b:96: aa:fb:37:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hD/bGQEOGHLMDcVj+TtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj NzRhODgwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EygwNTI0MzBjZGQyMjc4ZjFlMzA0OGU1MWJmZmM0NzgwNWQ2Njc4NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB6j68KxMLfTHpX0j8Iho/SSXk7Y aICFqSHbK3uMuUcGLXgGjnOff5Ccj3J0GTlSlgMiWpGBDlzVf+kXQZQPTVcir9vD 1xaZBptdRlmSKI9Iz+zAbrksn7l97YliYvl4JjlhoD7MqurhYY+pMEKNtW8ur9Le SeK42wsVQPIZaIZCvph+cOtH3hSzNfQPAK++1xsfmumPt2KLSWJtE+ozmvJNVPEy N/D11G5CsBRv9C7Uu81UUj7YqROtQiYhaXXnel3aZQol+lWxbFA2SAmU66viW4Ig GsUzEQXoxky7XqWEMMs9FkD8gZCZMZy71Fpx8CnvWnqU1Jf23kCBLElnbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUkMM3SJ48eMEjlG//EeAXWZ4UeMB8GA1UdIwQY MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt NDZhMGRmNzc0ZmUxLzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXlVlGTp ozG/mf0b0P3hL1uddK7yp5DlifiudT9KBHw62x1AjWV+NeR2mjVtHXIcnIp5tUVc /0hzRqR5JvO8hL8KbwTaNfilQ/hNqtPTAatEMu25X3BbhtXgjaDXpja1n1NPQ7UA W75WW7+2yS8fLGV1LsQJvysCG1tmsk+iUzUtNg1qe8akeBR1IbttyI0UAf6J7kyr 9hi4JVDw265mQcigzFHTcjhvxG72sV+IYvC081DamlR8K5XItWz3SPvER3HmlrUN US/IWuVAKVRLwTFuwIwDFYJ0CL++eemGRBvYGG007T0HUTVo/HVInaulaMca8GA/ xSrPTmuWqvs3dA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:51 2025 by rpki-client