This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json) Hash identifier: UZOCUv5PJ3IkiHqiqMULZUxoHgwpCWIFO7Q/us/zASo= Subject key identifier: 2C:07:2C:90:5A:39:51:83:A1:B3:E6:52:47:95:A9:FE:B0:30:0B:C8 Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Certificate serial: 019AF12DD8741E3E6552BE09A8678C58ECB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft Manifest number: 1027 Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=) 2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: ZVcmV94N6ykOO5nuovKsHC5J1vGNoSxSqI4tHCjpjhM=) 3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=) 4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d8:74:1e:3e:65:52:be:09:a8:67:8c:58:ec:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=2c072c905a395183a1b3e6524795a9feb0300bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:35:e9:6d:3c:6c:1e:a5:b7:5a:d2:44:8a: 9b:2d:72:ab:45:ae:04:37:49:2f:a2:14:0c:94:f2: fa:9c:7c:ab:ad:09:fb:a5:3e:61:78:3c:1f:8c:4f: e6:90:e8:9c:1a:48:d9:cc:2c:a2:9d:b9:81:2b:eb: 84:17:2b:c7:19:12:d8:6a:7c:61:98:df:7f:27:fb: 0e:52:72:05:5d:50:86:72:d0:f1:c0:43:40:fa:b7: da:ff:43:2b:d5:14:28:a0:e2:4d:85:b1:4d:69:30: de:c2:b5:1a:10:2d:d8:0d:87:9c:2a:1e:c0:f9:4a: 25:e4:6e:cd:4f:23:1b:6f:aa:f8:c5:36:0a:6e:7f: 2a:5c:51:e2:6a:22:1e:ec:bf:8b:45:80:58:0d:62: 24:b6:b0:6b:c6:d3:d3:4f:0a:2c:e9:77:97:8d:95: ce:02:f7:f4:c1:3a:7e:67:8b:ea:0c:73:14:25:63: 67:98:26:06:9f:a0:b7:ce:89:8f:93:b1:bb:95:0d: 63:57:a0:be:83:11:8a:d2:2c:21:69:c2:20:f2:20: 67:54:e4:c4:2e:79:5b:c2:ad:a4:f2:f5:01:cd:f2: 2e:ff:f9:a8:42:d7:74:b2:6f:e7:19:be:5a:3d:ca: 48:b5:7d:7c:87:53:58:f9:41:ed:2c:9b:91:9a:a2: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:07:2C:90:5A:39:51:83:A1:B3:E6:52:47:95:A9:FE:B0:30:0B:C8 X509v3 Authority Key Identifier: keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8e:1f:a6:e1:ce:61:1b:cb:22:df:4a:ae:08:33:f8:e0:cf: 7b:80:f5:69:f4:0e:54:ca:ee:48:bf:c8:36:b6:1e:f3:b1:b6: c3:7d:49:a4:55:bd:49:f9:a1:ef:50:d7:2f:16:78:1f:dc:c8: a8:52:01:35:49:b3:de:19:d4:c5:50:a0:5c:fe:ff:6b:66:38: 71:96:db:5c:23:33:33:cb:fe:78:8a:c3:2e:aa:e8:ef:2b:ec: 3e:1e:fd:3b:07:db:11:c4:53:9a:53:86:d6:27:9b:90:38:bb: 8f:16:99:66:bc:db:c4:0a:ef:32:51:16:0b:4e:cc:0a:d6:a3: b5:75:65:d3:b5:c9:d8:16:08:a9:ae:25:aa:db:d4:ff:e5:34: 35:e1:6c:88:09:9b:74:a6:90:0b:d9:e2:a5:93:db:19:43:fa: 88:06:c4:94:80:37:1b:87:cb:d3:6b:a3:be:d8:5d:18:d4:0f: a6:a6:97:c2:a7:02:db:50:a4:c1:09:e5:71:95:47:1c:70:71: a5:02:fc:ca:90:b4:cc:6f:a5:b3:d8:6d:95:b2:5c:b7:8a:95: 42:85:5d:bc:33:d1:57:6e:15:a6:bb:7e:1a:c4:ce:bd:d1:7b: c2:71:08:53:b2:ef:72:be:31:81:60:88:ed:79:43:c3:9f:54: 8a:98:4f:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdh0Hj5lUr4JqGeMWOy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4 ZTI0YTYwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD EygyYzA3MmM5MDVhMzk1MTgzYTFiM2U2NTI0Nzk1YTlmZWIwMzAwYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKo16W08bB6lt1rSRIqbLXKrRa4E N0kvohQMlPL6nHyrrQn7pT5heDwfjE/mkOicGkjZzCyinbmBK+uEFyvHGRLYanxh mN9/J/sOUnIFXVCGctDxwENA+rfa/0Mr1RQooOJNhbFNaTDewrUaEC3YDYecKh7A +Uol5G7NTyMbb6r4xTYKbn8qXFHiaiIe7L+LRYBYDWIktrBrxtPTTwos6XeXjZXO Avf0wTp+Z4vqDHMUJWNnmCYGn6C3zomPk7G7lQ1jV6C+gxGK0iwhacIg8iBnVOTE Lnlbwq2k8vUBzfIu//moQtd0sm/nGb5aPcpItX18h1NY+UHtLJuRmqL4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwHLJBaOVGDobPmUkeVqf6wMAvIMB8GA1UdIwQY MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt N2EwYjE0NWNmNjJiLzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao4fpuHO YRvLIt9Krggz+ODPe4D1afQOVMruSL/INrYe87G2w31JpFW9Sfmh71DXLxZ4H9zI qFIBNUmz3hnUxVCgXP7/a2Y4cZbbXCMzM8v+eIrDLqro7yvsPh79OwfbEcRTmlOG 1iebkDi7jxaZZrzbxArvMlEWC07MCtajtXVl07XJ2BYIqa4lqtvU/+U0NeFsiAmb dKaQC9nipZPbGUP6iAbElIA3G4fL02ujvthdGNQPpqaXwqcC21CkwQnlcZVHHHBx pQL8ypC0zG+ls9htlbJct4qVQoVdvDPRV24Vprt+GsTOvdF7wnEIU7Lvcr4xgWCI 7XlDw59UiphPbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:31 2025 by rpki-client