This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json) Hash identifier: DKCt6278Remw/4uMUzuJW4kxqIAAUk8Jt+zwGydQfwo= Subject key identifier: 6D:0B:3A:EC:D3:7B:BD:C5:03:BE:26:99:EC:24:CC:6B:39:5F:58:DB Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Certificate serial: 019B40C8ADC9B46BF7583D4789E329AAB036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft Manifest number: 0C3F Signing time: Sun 21 Dec 2025 12:00:51 +0000 Manifest this update: Sun 21 Dec 2025 12:00:51 +0000 Manifest next update: Mon 22 Dec 2025 12:00:51 +0000 Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: ck36xvMXObLTZMAPjUsnIJiWSc6Opb8LTEgK2scCgMU=) 2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ad:c9:b4:6b:f7:58:3d:47:89:e3:29:aa:b0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39 Validity Not Before: Dec 21 12:00:51 2025 GMT Not After : Dec 22 12:00:51 2025 GMT Subject: CN=6d0b3aecd37bbdc503be2699ec24cc6b395f58db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:47:7e:57:e5:fd:4c:e7:7b:37:45:6a:ab:13: d1:9b:ce:88:df:5e:9b:8d:c0:92:62:c3:70:21:f8: 58:e5:c2:bd:68:c8:ac:cc:84:34:18:1a:b5:8e:76: bf:59:bd:a3:9d:be:60:a7:c2:c9:ce:23:07:06:8e: 0a:ca:f2:77:87:7a:56:99:8d:28:44:b7:3e:1c:4f: a6:c9:fc:b4:86:06:c6:e2:40:19:18:c3:1e:38:2a: c3:6d:ca:af:32:ff:f6:54:49:50:40:fc:54:63:5e: ab:bd:0d:c6:69:59:3d:65:d6:c4:1f:f2:95:15:1d: c4:d6:f7:bf:1b:2f:7d:91:8a:27:4c:b0:5a:7b:aa: c4:b9:f3:fc:d2:a2:9e:fc:8e:25:66:fc:08:d7:f6: 6a:1b:e0:62:02:86:17:df:38:15:b3:7b:1c:8f:53: 0d:d7:b0:c9:81:71:01:b8:a7:e9:e6:51:ae:f6:1f: 4e:eb:56:be:b3:4b:17:2d:d7:32:59:a2:15:3e:54: 22:42:a5:40:bc:42:3c:61:0c:ca:09:ad:5f:f6:16: 3e:db:46:c2:d8:40:4d:e7:fd:84:87:fa:c8:33:bd: 6d:9d:7a:da:98:0a:9d:c2:19:f0:32:b8:dc:f8:64: 16:6d:69:8a:5f:d8:c5:4f:9a:24:5f:47:b7:d5:38: d8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0B:3A:EC:D3:7B:BD:C5:03:BE:26:99:EC:24:CC:6B:39:5F:58:DB X509v3 Authority Key Identifier: keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9c:1e:26:9c:40:fa:c0:7b:ee:d5:eb:da:32:9c:06:29:3e: 04:57:0f:1e:28:a4:bf:24:48:d6:31:a8:8b:dc:cf:ad:be:ee: f7:60:22:3f:ca:b1:ca:6c:bd:ba:ee:c0:01:8d:a8:f1:47:1b: 70:80:da:ce:98:43:ed:79:e5:5f:21:3b:03:d4:00:bf:de:e0: e2:ce:53:45:e0:46:f4:22:64:cf:d0:11:f8:c2:75:c4:62:23: 36:33:39:ee:9a:8f:2c:05:ad:c4:a6:fa:8e:69:4e:36:5c:46: 1f:dd:33:92:bd:b6:0f:6f:e8:b8:0c:92:5f:b0:0c:00:a9:28: c5:69:b4:ae:42:a3:39:2a:1d:1a:e4:23:76:92:9c:9a:39:df: b5:93:9a:c2:5f:7c:aa:a5:64:ce:57:cc:16:5f:3d:17:31:74: bd:57:87:ba:cb:5c:d5:52:0f:55:ad:e9:c8:62:f5:b6:a7:42: 07:c4:be:37:9e:98:32:60:81:a7:52:e0:75:7b:b4:c4:d6:32: 4a:94:c0:5f:45:40:11:b3:db:4c:56:3e:01:32:c6:0a:ac:3c: 91:73:ef:34:60:a0:71:0c:3a:ba:ac:b2:73:76:89:67:d9:22: 1e:be:b9:fd:e9:a2:d6:93:92:45:e4:3e:65:c3:7e:33:a6:25: b6:53:cd:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyK3JtGv3WD1HieMpqrA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTcyMTI4MWZmYmE1NzEzZTlkMDUyYWY2ZmU2ZDFiMDQw YTJhMzkwHhcNMjUxMjIxMTIwMDUxWhcNMjUxMjIyMTIwMDUxWjAzMTEwLwYDVQQD Eyg2ZDBiM2FlY2QzN2JiZGM1MDNiZTI2OTllYzI0Y2M2YjM5NWY1OGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ud+V+X9TOd7N0VqqxPRm86I316b jcCSYsNwIfhY5cK9aMiszIQ0GBq1jna/Wb2jnb5gp8LJziMHBo4KyvJ3h3pWmY0o RLc+HE+myfy0hgbG4kAZGMMeOCrDbcqvMv/2VElQQPxUY16rvQ3GaVk9ZdbEH/KV FR3E1ve/Gy99kYonTLBae6rEufP80qKe/I4lZvwI1/ZqG+BiAoYX3zgVs3scj1MN 17DJgXEBuKfp5lGu9h9O61a+s0sXLdcyWaIVPlQiQqVAvEI8YQzKCa1f9hY+20bC 2EBN5/2Eh/rIM71tnXramAqdwhnwMrjc+GQWbWmKX9jFT5okX0e31TjYbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0LOuzTe73FA74mmewkzGs5X1jbMB8GA1UdIwQY MBaAFIgXISgf+6VxPp0FKvb+bRsECio5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMt NDg4NzNiYWE2OWE3LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84YzgzZmQtNTJiNS00MGJiLTk5NjMtNDg4NzNiYWE2OWE3 LzEvaUJjaEtCXzdwWEUtblFVcTl2NXRHd1FLS2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJweJpxA +sB77tXr2jKcBik+BFcPHiikvyRI1jGoi9zPrb7u92AiP8qxymy9uu7AAY2o8Ucb cIDazphD7XnlXyE7A9QAv97g4s5TReBG9CJkz9AR+MJ1xGIjNjM57pqPLAWtxKb6 jmlONlxGH90zkr22D2/ouAySX7AMAKkoxWm0rkKjOSodGuQjdpKcmjnftZOawl98 qqVkzlfMFl89FzF0vVeHustc1VIPVa3pyGL1tqdCB8S+N56YMmCBp1LgdXu0xNYy SpTAX0VAEbPbTFY+ATLGCqw8kXPvNGCgcQw6uqyyc3aJZ9kiHr65/emi1pOSReQ+ ZcN+M6YltlPNUg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:24 2025 by rpki-client