This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json) Hash identifier: ZG6dSZlPNZILPBuXRcHgxMmZz23lEBnwhLhtL6JDwlA= Subject key identifier: 9D:15:E0:FA:B7:8E:CD:51:FC:D3:C0:AB:45:29:E5:E7:84:8B:C3:B8 Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa Certificate serial: 019B4626FDBD43AE6C0F7A39D504DF25F32D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft Manifest number: 0F19 Signing time: Mon 22 Dec 2025 13:01:58 +0000 Manifest this update: Mon 22 Dec 2025 13:01:58 +0000 Manifest next update: Tue 23 Dec 2025 13:01:58 +0000 Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: 4gkdnFmOL2G/C135RDOcyJXtU9h9kkfWuuWZ7OkXmMs=) 2: ItUhScrgPwKkKUyhqEMMP6UQG5o.roa (hash: gmpeHaOEVGgSYmwc/n6Xey1Y6I6lJR2qqLtWqmrTzmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:fd:bd:43:ae:6c:0f:7a:39:d5:04:df:25:f3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa Validity Not Before: Dec 22 13:01:58 2025 GMT Not After : Dec 23 13:01:58 2025 GMT Subject: CN=9d15e0fab78ecd51fcd3c0ab4529e5e7848bc3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:21:d5:ac:61:c6:76:62:c8:4a:61:df:49: 0b:31:7f:68:96:9f:42:b1:46:c1:b4:30:b5:73:43: 75:b2:63:2a:45:f3:a5:9b:8f:38:1b:3f:43:bf:13: 9a:89:5c:5b:92:a9:20:f3:c5:c3:3b:fa:09:4a:3a: d5:d3:cc:26:c7:5b:08:51:69:74:63:6b:22:27:71: 61:2e:3e:a4:38:dd:4b:c1:72:c0:a1:98:85:f3:05: 3b:25:29:aa:53:fa:00:cd:29:c9:b6:8e:7c:b3:9c: 7c:45:fc:f5:eb:22:e1:5a:b3:4e:4f:6b:10:28:78: 92:fd:5f:ea:66:a8:09:bc:75:a1:ca:e7:fa:bb:13: 87:1b:22:7b:01:93:51:c6:ad:63:e4:c9:53:74:d3: 76:f9:41:a4:51:62:d5:e7:8a:d3:41:c6:25:0f:8d: 8e:e1:42:9d:69:6f:df:62:a6:30:9d:25:99:2a:16: 37:6c:5e:1d:6f:d5:55:ca:b4:4c:84:8b:b3:2b:6b: 6c:53:fa:1b:fb:09:cb:77:7f:e9:09:c8:67:df:69: a3:82:80:93:e8:9c:7f:db:9d:4d:eb:27:64:f1:40: 74:82:0f:4e:1f:78:f6:3c:14:e8:0f:1b:8e:4f:24: 88:d3:b5:d7:c9:d7:9a:2a:64:cc:1d:cc:06:f6:2a: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:15:E0:FA:B7:8E:CD:51:FC:D3:C0:AB:45:29:E5:E7:84:8B:C3:B8 X509v3 Authority Key Identifier: keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f0:6a:c4:42:a4:51:3c:58:06:fc:16:30:10:13:bf:97:9b: 52:07:09:cd:1c:46:32:a6:5b:36:f5:39:a2:fa:5a:10:b7:75: 50:34:40:95:9c:16:c8:fb:08:6c:1c:d8:30:78:dc:aa:51:f0: 8c:96:20:4b:6e:6b:ef:71:31:d1:62:40:27:a0:07:e9:ec:20: 2e:f7:7c:a7:47:c8:34:c5:ea:18:f6:87:dd:53:56:c6:b4:30: 3e:92:fa:4d:3d:1c:7b:51:93:56:bb:c4:a7:9b:1d:9b:44:0d: 61:9f:64:07:ec:c1:b8:c1:c3:e8:b5:5c:48:db:d7:00:68:89: d8:4b:75:2e:44:d1:5f:7b:a6:d9:12:27:2d:73:a3:84:7c:b1: 09:c2:06:e9:68:7e:dc:a5:d7:01:79:f8:fc:41:50:f7:65:40: da:88:4c:d4:c0:14:16:3f:6a:8a:cc:2b:bd:12:e0:e9:d1:81: 93:3b:a2:d4:c0:8d:e8:b7:98:a8:8b:08:8a:63:04:ab:e2:39: 83:64:54:6f:f1:6e:b3:5a:31:07:56:fa:2e:e9:c5:79:a6:1d: 20:05:2e:68:41:9d:1e:a8:a3:8e:bb:9d:40:30:0a:d2:ce:c9: 64:61:0f:32:b0:97:f5:6c:89:84:66:d8:cb:f6:05:eb:eb:6b: 3b:29:f0:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJv29Q65sD3o51QTfJfMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYjgyZmM4ZWQ4OGY5OWNhYjU3ZDc2ODAzMTc2ZWIyN2E5 ZjBiZmEwHhcNMjUxMjIyMTMwMTU4WhcNMjUxMjIzMTMwMTU4WjAzMTEwLwYDVQQD Eyg5ZDE1ZTBmYWI3OGVjZDUxZmNkM2MwYWI0NTI5ZTVlNzg0OGJjM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXAh1axhxnZiyEph30kLMX9olp9C sUbBtDC1c0N1smMqRfOlm484Gz9DvxOaiVxbkqkg88XDO/oJSjrV08wmx1sIUWl0 Y2siJ3FhLj6kON1LwXLAoZiF8wU7JSmqU/oAzSnJto58s5x8Rfz16yLhWrNOT2sQ KHiS/V/qZqgJvHWhyuf6uxOHGyJ7AZNRxq1j5MlTdNN2+UGkUWLV54rTQcYlD42O 4UKdaW/fYqYwnSWZKhY3bF4db9VVyrRMhIuzK2tsU/ob+wnLd3/pCchn32mjgoCT 6Jx/251N6ydk8UB0gg9OH3j2PBToDxuOTySI07XXydeaKmTMHcwG9iq67QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0V4Pq3js1R/NPAq0Up5eeEi8O4MB8GA1UdIwQY MBaAFCG4L8jtiPmcq1fXaAMXbrJ6nwv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMt YWU1ZmE1M2I5M2IyLzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMtYWU1ZmE1M2I5M2Iy LzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/BqxEKk UTxYBvwWMBATv5ebUgcJzRxGMqZbNvU5ovpaELd1UDRAlZwWyPsIbBzYMHjcqlHw jJYgS25r73Ex0WJAJ6AH6ewgLvd8p0fINMXqGPaH3VNWxrQwPpL6TT0ce1GTVrvE p5sdm0QNYZ9kB+zBuMHD6LVcSNvXAGiJ2Et1LkTRX3um2RInLXOjhHyxCcIG6Wh+ 3KXXAXn4/EFQ92VA2ohM1MAUFj9qiswrvRLg6dGBkzui1MCN6LeYqIsIimMEq+I5 g2RUb/Fus1oxB1b6LunFeaYdIAUuaEGdHqijjrudQDAK0s7JZGEPMrCX9WyJhGbY y/YF6+trOynwlQ== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:32 2025 by rpki-client