This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json) Hash identifier: bzRf23Rj01ZwfszoO6UzpKuzr6n9SyeoJbiEtVf9Glc= Subject key identifier: A9:1D:75:D7:F6:EC:2E:6B:CA:30:0B:4A:A2:36:7E:11:3B:0D:12:15 Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1 Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1 Certificate serial: 019B5ED2E4BFE3F040FF976596AB74179611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 08:00:37 +0000 Manifest this update: Sat 27 Dec 2025 08:00:37 +0000 Manifest next update: Sun 28 Dec 2025 08:00:37 +0000 Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=) 2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=) 3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: dFrD86eMwnBv92fpv3/SBQfMVdPryOqbc2jb0Qr96nY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:d2:e4:bf:e3:f0:40:ff:97:65:96:ab:74:17:96:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1 Validity Not Before: Dec 27 08:00:37 2025 GMT Not After : Dec 28 08:00:37 2025 GMT Subject: CN=a91d75d7f6ec2e6bca300b4aa2367e113b0d1215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:66:ea:19:f9:b4:87:f8:02:2f:d0:e5:32: f5:dd:2d:4f:be:84:fb:86:05:5d:0d:7b:0c:47:07: 33:a8:e5:a0:f5:02:3e:73:af:49:d4:49:cb:0f:fd: b7:86:72:c3:d6:05:02:53:c5:5b:1f:a9:64:d0:63: 49:ca:79:df:df:4e:70:bb:db:e1:50:63:fb:f9:c2: 6b:1a:26:9b:67:68:12:63:f3:c2:aa:9b:35:35:c8: 14:f0:e3:f2:9b:30:ad:1c:21:45:d4:5c:5d:64:22: 38:ec:a0:05:c0:d9:ea:b5:de:0d:a4:9d:8e:0f:1d: a0:a1:9d:81:09:76:ce:01:7c:17:3b:d3:01:9c:b7: 12:26:96:90:c3:88:c5:39:b1:ee:bc:30:29:41:c5: cd:7b:86:41:6a:a4:4a:b7:08:d7:05:20:ea:2f:fc: 08:ed:33:40:06:51:e8:22:7e:2d:49:bd:e9:6b:fa: db:d0:b7:89:98:f7:c1:a0:4a:47:9e:89:d2:d0:c5: b2:09:c1:9d:de:89:19:6d:d9:e6:80:e9:e9:95:23: 76:99:e0:1b:c3:0c:ca:11:be:37:6f:a9:32:94:13: 12:ba:8a:8e:d7:0e:1f:11:ed:65:24:3b:f4:dc:ce: ea:45:fc:23:eb:00:cd:39:63:9e:ad:d8:ed:8a:0b: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:75:D7:F6:EC:2E:6B:CA:30:0B:4A:A2:36:7E:11:3B:0D:12:15 X509v3 Authority Key Identifier: keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:22:a4:52:83:8a:07:9e:c3:5e:7c:52:58:5f:8b:ce:34:30: b3:fe:2b:ab:d0:01:7d:83:87:08:25:8c:92:32:0f:73:f0:82: b5:78:1d:9c:fe:ca:db:18:01:5e:bd:05:0f:85:ee:37:ec:c1: a6:27:02:b9:c5:f5:40:fd:1a:30:d7:01:42:88:81:d3:61:f0: 3d:d2:f4:b5:55:85:a5:3a:1e:3d:f1:72:0b:28:98:c5:d6:ec: 88:82:2b:d3:fa:88:4f:67:44:1f:00:19:45:6a:74:9b:fd:e8: ef:19:d7:a5:62:79:a5:ac:38:c3:87:9d:34:2b:22:d3:46:14: b1:d9:c4:06:46:89:c7:68:f1:05:5c:16:32:76:40:31:f4:7c: 45:23:24:2e:01:d5:52:11:27:8b:a6:aa:37:59:6a:7d:f6:1b: 71:d3:cd:a7:d6:60:b4:f8:91:29:e8:d1:db:94:ca:2b:37:6e: 78:9a:f3:65:65:3e:bd:97:55:82:ee:c0:59:bf:81:15:de:57: b6:1e:c3:73:7b:0e:3a:d5:61:a4:c0:06:11:a2:9a:f5:b8:b0: cf:b6:0c:a6:2e:37:28:cd:d8:a5:2d:66:85:4c:99:1e:3e:41: f0:90:f3:46:c9:d3:4c:a9:49:a0:23:5d:dc:1c:f9:fa:c7:31: b0:13:ab:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZte0uS/4/BA/5dllqt0F5YRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk Y2EwZTEwHhcNMjUxMjI3MDgwMDM3WhcNMjUxMjI4MDgwMDM3WjAzMTEwLwYDVQQD EyhhOTFkNzVkN2Y2ZWMyZTZiY2EzMDBiNGFhMjM2N2UxMTNiMGQxMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Nm6hn5tIf4Ai/Q5TL13S1PvoT7 hgVdDXsMRwczqOWg9QI+c69J1EnLD/23hnLD1gUCU8VbH6lk0GNJynnf305wu9vh UGP7+cJrGiabZ2gSY/PCqps1NcgU8OPymzCtHCFF1FxdZCI47KAFwNnqtd4NpJ2O Dx2goZ2BCXbOAXwXO9MBnLcSJpaQw4jFObHuvDApQcXNe4ZBaqRKtwjXBSDqL/wI 7TNABlHoIn4tSb3pa/rb0LeJmPfBoEpHnonS0MWyCcGd3okZbdnmgOnplSN2meAb wwzKEb43b6kylBMSuoqO1w4fEe1lJDv03M7qRfwj6wDNOWOerdjtigtIfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkdddf27C5ryjALSqI2fhE7DRIVMB8GA1UdIwQY MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt NTQ4NGMzOWIyZDRlLzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSKkUoOK B57DXnxSWF+LzjQws/4rq9ABfYOHCCWMkjIPc/CCtXgdnP7K2xgBXr0FD4XuN+zB picCucX1QP0aMNcBQoiB02HwPdL0tVWFpToePfFyCyiYxdbsiIIr0/qIT2dEHwAZ RWp0m/3o7xnXpWJ5paw4w4edNCsi00YUsdnEBkaJx2jxBVwWMnZAMfR8RSMkLgHV UhEni6aqN1lqffYbcdPNp9ZgtPiRKejR25TKKzdueJrzZWU+vZdVgu7AWb+BFd5X th7Dc3sOOtVhpMAGEaKa9biwz7YMpi43KM3YpS1mhUyZHj5B8JDzRsnTTKlJoCNd 3Bz5+scxsBOrwg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:47 2025 by rpki-client