This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json) Hash identifier: Fq+uKCw5mOpT5PaWvdWFEvntp1Hv4F8W0Jq9zK/fRQ0= Subject key identifier: A8:F6:7F:56:6F:46:13:81:87:88:8C:E2:42:D9:B1:EA:3A:BE:5C:4F Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945 Certificate serial: 019B307A2017BA8C9643D08D04578E36DB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft Manifest number: 066F Signing time: Thu 18 Dec 2025 08:01:08 +0000 Manifest this update: Thu 18 Dec 2025 08:01:08 +0000 Manifest next update: Fri 19 Dec 2025 08:01:08 +0000 Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: JnVKfuFQrODJbcwD3E6VfercPZq06Uay14IqNoxBOO8=) 2: vy5zTXe1FQxKmoVnLtT-YONwy5w.roa (hash: AqKcisSO89b2UHYN+H37mx/RlCQTo8dhRQYzWSzGyh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:20:17:ba:8c:96:43:d0:8d:04:57:8e:36:db:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945 Validity Not Before: Dec 18 08:01:08 2025 GMT Not After : Dec 19 08:01:08 2025 GMT Subject: CN=a8f67f566f46138187888ce242d9b1ea3abe5c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:f3:f1:f4:65:25:6e:20:68:ae:9d:c8:30: 4f:fb:4f:5d:3f:73:5c:9a:97:ff:3c:ed:4f:6b:f5: da:e9:21:2a:65:49:e7:5d:4a:c6:5f:7e:8c:17:ad: ac:07:1e:12:f5:ec:2f:14:ba:9f:28:f4:20:86:95: 9a:0e:60:d0:d0:ef:1e:95:2a:3e:fc:51:68:cf:a9: 33:e8:8f:d0:7a:7f:b2:2e:0d:72:52:54:56:d4:f6: 20:18:72:b5:88:eb:ac:02:e6:36:23:88:5b:c4:8a: eb:29:8a:f9:59:48:2a:d6:79:6f:c4:3a:f0:90:a3: f0:ff:e2:ee:24:41:8b:28:1f:bb:86:11:45:20:fd: bb:a0:de:ea:de:72:af:93:7a:74:a4:c2:68:e4:0c: b6:db:c6:b1:9f:09:8b:09:cd:b8:7d:8f:00:b0:32: 52:3c:29:d3:1e:42:13:ab:12:92:31:2d:da:9d:b1: ae:29:01:6d:6d:db:fa:87:06:c7:0c:98:e8:b2:92: ee:b0:50:b3:d0:85:51:5e:30:36:62:20:16:48:5f: 01:be:d3:2c:11:cc:93:6f:d4:32:85:54:43:bd:67: bf:c9:6c:88:a6:dd:5d:53:67:c8:78:7b:dd:60:e4: d6:6a:a3:a5:7b:a5:0d:70:7c:fd:19:b1:6e:1e:73: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:7F:56:6F:46:13:81:87:88:8C:E2:42:D9:B1:EA:3A:BE:5C:4F X509v3 Authority Key Identifier: keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:80:2f:9b:8b:7d:07:bd:17:0c:15:81:de:3a:fe:5c:71:e0: f6:60:98:69:55:b5:0d:fb:3b:a0:e6:4a:7f:86:a4:c9:b8:05: dc:53:46:17:6e:71:b4:09:b1:60:68:82:69:ec:a3:74:30:82: 56:bf:55:02:25:c1:c7:2b:13:88:3d:62:a1:c7:88:46:2d:b9: 4e:45:c0:af:ae:cb:87:e8:ae:69:47:8b:ee:06:dc:0d:61:9f: d5:bd:38:72:7f:97:e9:cd:0e:96:4f:25:98:cc:2b:7f:ff:87: 8d:93:86:02:2a:b6:92:87:ac:e9:52:b2:3a:e3:5c:7b:13:64: b8:a1:87:81:5a:57:cf:a3:64:73:22:33:50:da:82:e9:56:a0: 61:ce:3e:9c:27:3f:41:1b:d1:ea:d9:e1:ae:d0:cb:01:e9:27: c7:93:17:f9:de:70:3a:c7:e7:e1:f7:93:b2:73:02:02:0c:46: 8d:58:38:95:5d:49:44:79:33:3f:52:52:61:9a:ff:d4:1a:8c: 71:75:f9:e5:7e:02:43:ac:61:f7:6a:3d:66:d5:2b:86:8f:4d: 5e:bd:b8:5a:ff:4a:42:c3:09:d2:34:c0:ff:9c:55:80:3a:49: df:df:68:98:b2:24:a2:bf:aa:ad:8e:fd:01:d1:59:a8:5f:cd: 78:7b:7d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweiAXuoyWQ9CNBFeONtt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWFiMTgwY2IzNTE3MTg2MjIxYjM5OTliMDhiODNhZjRm NjY5NDUwHhcNMjUxMjE4MDgwMTA4WhcNMjUxMjE5MDgwMTA4WjAzMTEwLwYDVQQD EyhhOGY2N2Y1NjZmNDYxMzgxODc4ODhjZTI0MmQ5YjFlYTNhYmU1YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF7z8fRlJW4gaK6dyDBP+09dP3Nc mpf/PO1Pa/Xa6SEqZUnnXUrGX36MF62sBx4S9ewvFLqfKPQghpWaDmDQ0O8elSo+ /FFoz6kz6I/Qen+yLg1yUlRW1PYgGHK1iOusAuY2I4hbxIrrKYr5WUgq1nlvxDrw kKPw/+LuJEGLKB+7hhFFIP27oN7q3nKvk3p0pMJo5Ay228axnwmLCc24fY8AsDJS PCnTHkITqxKSMS3anbGuKQFtbdv6hwbHDJjospLusFCz0IVRXjA2YiAWSF8BvtMs EcyTb9QyhVRDvWe/yWyIpt1dU2fIeHvdYOTWaqOle6UNcHz9GbFuHnOgHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj2f1ZvRhOBh4iM4kLZseo6vlxPMB8GA1UdIwQY MBaAFIgasYDLNRcYYiGzmZsIuDr09mlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2Qt M2E2M2JmNzYzMGY1LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2QtM2E2M2JmNzYzMGY1 LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4Avm4t9 B70XDBWB3jr+XHHg9mCYaVW1Dfs7oOZKf4akybgF3FNGF25xtAmxYGiCaeyjdDCC Vr9VAiXBxysTiD1ioceIRi25TkXAr67Lh+iuaUeL7gbcDWGf1b04cn+X6c0Olk8l mMwrf/+HjZOGAiq2koes6VKyOuNcexNkuKGHgVpXz6NkcyIzUNqC6VagYc4+nCc/ QRvR6tnhrtDLAeknx5MX+d5wOsfn4feTsnMCAgxGjVg4lV1JRHkzP1JSYZr/1BqM cXX55X4CQ6xh92o9ZtUrho9NXr24Wv9KQsMJ0jTA/5xVgDpJ399omLIkor+qrY79 AdFZqF/NeHt9Bw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:53:59 2025 by rpki-client