This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json) Hash identifier: zBLSWDoFpEBnOe/wODZFf1uSEZhmlrro1oW6t+13Tms= Subject key identifier: 35:AB:7F:A2:1B:ED:AC:4D:7A:D7:36:FC:23:EA:B1:BF:49:50:46:15 Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Certificate serial: 019B3EDAD2111A40375328C1141703EF4316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft Manifest number: 0C3E Signing time: Sun 21 Dec 2025 03:01:26 +0000 Manifest this update: Sun 21 Dec 2025 03:01:26 +0000 Manifest next update: Mon 22 Dec 2025 03:01:26 +0000 Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: wKnr73RvByjKkW9vJszKpMN2vl8o/VFmZiVPBGfW4AU=) 2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d2:11:1a:40:37:53:28:c1:14:17:03:ef:43:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Validity Not Before: Dec 21 03:01:26 2025 GMT Not After : Dec 22 03:01:26 2025 GMT Subject: CN=35ab7fa21bedac4d7ad736fc23eab1bf49504615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:48:ca:2c:a5:93:a6:18:be:26:f1:ac:85: d6:34:c1:63:12:5b:30:db:91:52:98:10:77:f6:81: 4c:b1:b0:77:46:ae:cb:33:d7:24:8f:04:1e:f8:30: aa:7e:89:17:5c:17:da:37:9a:85:7b:f4:f8:15:75: fa:30:37:9a:18:8c:36:1e:23:be:2f:69:c8:2a:d9: 9a:9b:fb:7c:d8:49:32:d2:d2:41:9b:c6:8d:ac:ad: 2d:2f:d9:72:29:48:71:fe:8d:a6:86:2e:20:fc:d9: fe:98:9b:1f:01:a2:55:f9:9c:d7:45:0d:0c:d3:ff: 61:9f:f6:33:c5:33:23:fc:bd:ad:d7:3f:fb:d0:fd: 59:70:9c:28:2e:cd:5e:0e:a3:73:8b:f8:c0:08:ed: f3:e2:6d:c7:5a:11:d8:a0:6c:be:20:3e:9b:79:be: 30:8f:99:cd:c1:af:87:d3:d7:29:31:84:f8:c7:df: 5f:ea:29:58:62:eb:35:e0:81:a3:d1:0a:b8:9a:6b: 48:59:d4:43:e1:66:dc:79:00:74:0a:ba:86:90:c4: 23:0f:8f:0c:9e:79:7d:a4:30:d9:5f:64:91:04:ed: 60:f3:ee:93:a4:65:13:24:06:d6:47:3e:2c:84:cb: 6d:69:99:32:7b:c3:11:8f:61:93:73:81:c2:ec:31: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AB:7F:A2:1B:ED:AC:4D:7A:D7:36:FC:23:EA:B1:BF:49:50:46:15 X509v3 Authority Key Identifier: keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:57:1c:16:e6:54:8b:bf:3c:b5:20:c1:92:55:f3:e6:d5:07: 48:e9:36:ff:be:b3:b7:2d:63:96:a0:35:15:86:71:6b:65:d8: 17:c9:de:07:73:15:c9:61:aa:b8:5e:b0:9d:58:af:5b:52:3b: 1c:de:da:b9:98:56:f3:18:45:12:8d:c5:26:96:77:aa:fb:7c: 34:5d:6d:09:4c:27:9b:17:cb:08:4f:8a:bc:aa:8a:0a:c3:85: 5f:af:34:c2:6d:5c:21:9b:ba:16:dd:8a:64:68:2e:0b:6e:61: 3e:97:5c:74:69:df:61:be:5a:d6:48:c7:b1:f8:80:4e:b7:a3: 63:a4:ea:fc:5a:26:28:ad:89:7a:dc:cc:5d:94:12:7a:d2:f8: 67:d3:04:82:58:b3:b3:7e:77:55:c1:47:e5:7b:f3:13:41:92: 78:d2:7c:5b:da:85:37:88:09:f5:4b:f6:c2:31:cf:45:2e:b8: b4:02:98:66:9c:d4:e7:f1:36:cd:d4:bb:5c:26:33:05:64:83: f4:9a:03:66:89:77:a6:c0:32:67:99:13:37:15:87:f1:8e:0a: d9:a4:e9:70:96:8f:b7:59:2c:02:26:95:77:b9:2e:fc:98:4f: ed:68:a0:bc:ec:28:24:d7:4d:01:04:cb:9e:1f:eb:c9:5d:dd: 44:94:ba:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2tIRGkA3UyjBFBcD70MWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw YTJhMzkwHhcNMjUxMjIxMDMwMTI2WhcNMjUxMjIyMDMwMTI2WjAzMTEwLwYDVQQD EygzNWFiN2ZhMjFiZWRhYzRkN2FkNzM2ZmMyM2VhYjFiZjQ5NTA0NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquRIyiylk6YYvibxrIXWNMFjElsw 25FSmBB39oFMsbB3Rq7LM9ckjwQe+DCqfokXXBfaN5qFe/T4FXX6MDeaGIw2HiO+ L2nIKtmam/t82Eky0tJBm8aNrK0tL9lyKUhx/o2mhi4g/Nn+mJsfAaJV+ZzXRQ0M 0/9hn/YzxTMj/L2t1z/70P1ZcJwoLs1eDqNzi/jACO3z4m3HWhHYoGy+ID6beb4w j5nNwa+H09cpMYT4x99f6ilYYus14IGj0Qq4mmtIWdRD4WbceQB0CrqGkMQjD48M nnl9pDDZX2SRBO1g8+6TpGUTJAbWRz4shMttaZkye8MRj2GTc4HC7DHx2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWrf6Ib7axNetc2/CPqsb9JUEYVMB8GA1UdIwQY MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt NDg4NzNiYWE2OWE3LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3 LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFccFuZU i788tSDBklXz5tUHSOk2/76zty1jlqA1FYZxa2XYF8neB3MVyWGquF6wnVivW1I7 HN7auZhW8xhFEo3FJpZ3qvt8NF1tCUwnmxfLCE+KvKqKCsOFX680wm1cIZu6Ft2K ZGguC25hPpdcdGnfYb5a1kjHsfiATrejY6Tq/FomKK2JetzMXZQSetL4Z9MEgliz s353VcFH5XvzE0GSeNJ8W9qFN4gJ9Uv2wjHPRS64tAKYZpzU5/E2zdS7XCYzBWSD 9JoDZol3psAyZ5kTNxWH8Y4K2aTpcJaPt1ksAiaVd7ku/JhP7WigvOwoJNdNAQTL nh/ryV3dRJS6SQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:32:02 2025 by rpki-client