This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json) Hash identifier: AZrKsw1JAmO7k83nbDc3Tlij7MWvR3WNZxFtunJ8ZFk= Subject key identifier: 43:82:C0:3B:D7:74:57:17:83:F7:02:E2:38:F2:0C:57:56:5F:4D:3F Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Certificate serial: 019B3E356A49E51FBA575CC65BAD071585F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft Manifest number: 0155 Signing time: Sun 21 Dec 2025 00:00:46 +0000 Manifest this update: Sun 21 Dec 2025 00:00:46 +0000 Manifest next update: Mon 22 Dec 2025 00:00:46 +0000 Files and hashes: 1: 6oN7ugLAK3Erp9jqnMQdNrMVNOw.roa (hash: 2OE5X924UyTs73uKq2L0IicxfY1Ja9/xXAEDVVNFHY8=) 2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: H5FhwGpnlKm34Nz2io63dLqqmOeCs2Ms9k4598J8k9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:6a:49:e5:1f:ba:57:5c:c6:5b:ad:07:15:85:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Validity Not Before: Dec 21 00:00:46 2025 GMT Not After : Dec 22 00:00:46 2025 GMT Subject: CN=4382c03bd774571783f702e238f20c57565f4d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:0b:f2:8a:f4:f7:fd:05:c9:69:b7:dd:4c: a5:c4:a8:b7:99:92:e1:37:33:a8:c4:d5:d5:9f:1e: dd:88:b5:d0:37:f9:40:bc:60:d2:4c:b5:ba:bf:07: 1c:ec:52:a8:4c:21:42:e1:78:28:88:1f:0c:9d:23: 5d:75:dc:67:c3:73:ef:88:23:89:4e:c3:4e:0a:87: 3f:83:09:7a:40:00:7d:bd:91:21:d0:67:ce:f9:4e: 86:08:55:5e:7f:e1:53:0c:20:29:b4:76:9f:77:c1: ab:14:2a:c3:47:16:fb:dd:af:09:36:e8:f2:b2:0c: 9c:0f:a1:60:b9:13:00:e7:56:60:dd:78:8a:c5:9d: 6e:75:2b:54:8a:04:e8:25:cc:30:a7:92:fa:48:29: c4:77:0e:37:06:a4:95:e4:91:28:29:fb:14:7f:2e: 49:4c:66:dd:3d:73:28:14:e6:77:0c:ad:b5:34:22: 7e:24:e0:cc:de:8d:58:8f:3c:8e:2c:8e:08:94:83: b6:b3:9f:a1:12:fd:c4:69:98:4e:8a:5c:d0:70:b0: db:8a:fe:bc:2e:f2:ea:7b:ce:05:23:70:f4:6a:ff: 5a:e0:58:9d:52:4c:fd:13:d9:c1:eb:dd:a5:dc:31: 31:64:e2:c1:72:6a:36:cb:40:c1:96:d3:09:8e:f1: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:82:C0:3B:D7:74:57:17:83:F7:02:E2:38:F2:0C:57:56:5F:4D:3F X509v3 Authority Key Identifier: keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2f:b7:6e:e4:1d:94:a8:4e:b7:46:c2:d3:30:aa:6f:02:7d: 8b:fe:ae:e6:d6:06:ea:1d:68:a3:fc:29:f9:01:73:e7:f4:90: 79:c1:ef:84:63:47:3d:ab:5a:c3:7c:58:e0:b1:10:2c:1c:d0: d7:63:79:54:c7:b5:0a:fb:fb:82:3e:cd:4a:2d:e5:59:45:14: 5b:c7:df:27:1c:2a:eb:27:56:97:3f:06:06:64:d8:f2:36:aa: 2c:98:3e:4f:6c:32:c9:9e:51:1f:fd:80:9a:7f:62:0c:e0:c4: c5:33:2d:d7:bb:26:22:38:02:a2:69:9b:1f:5f:86:3a:88:79: c3:6f:2c:9e:96:9e:b4:eb:a2:24:87:ac:ac:1c:36:67:f6:7d: 05:65:f0:6e:df:73:16:7f:f7:40:46:3f:de:9b:17:c1:91:97: 9e:7b:ac:21:c0:63:4b:ef:db:68:af:4f:8f:77:12:ab:52:f8: 9b:17:b3:cc:81:e4:ac:24:d8:4e:94:d2:30:ee:7f:ab:52:07: 36:d0:aa:d5:06:65:c4:8f:e1:60:1c:65:da:42:28:51:c5:63: 5c:d2:42:75:48:b0:69:9b:e8:22:96:30:cc:90:ae:8e:2d:2a: cb:89:fc:8a:b3:fe:0a:9b:0d:88:cc:0b:38:2c:d2:13:86:77: 0a:9d:8d:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NWpJ5R+6V1zGW60HFYXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYjlmMmE4MjZhY2Y3NjdhNTBlNTliMjllYzFmZjA5MmNm ZDNjMWMwHhcNMjUxMjIxMDAwMDQ2WhcNMjUxMjIyMDAwMDQ2WjAzMTEwLwYDVQQD Eyg0MzgyYzAzYmQ3NzQ1NzE3ODNmNzAyZTIzOGYyMGM1NzU2NWY0ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEcL8or09/0FyWm33UylxKi3mZLh NzOoxNXVnx7diLXQN/lAvGDSTLW6vwcc7FKoTCFC4XgoiB8MnSNdddxnw3PviCOJ TsNOCoc/gwl6QAB9vZEh0GfO+U6GCFVef+FTDCAptHafd8GrFCrDRxb73a8JNujy sgycD6FguRMA51Zg3XiKxZ1udStUigToJcwwp5L6SCnEdw43BqSV5JEoKfsUfy5J TGbdPXMoFOZ3DK21NCJ+JODM3o1YjzyOLI4IlIO2s5+hEv3EaZhOilzQcLDbiv68 LvLqe84FI3D0av9a4FidUkz9E9nB692l3DExZOLBcmo2y0DBltMJjvEFPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOCwDvXdFcXg/cC4jjyDFdWX00/MB8GA1UdIwQY MBaAFCG58qgmrPdnpQ5Zsp7B/wks/TwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAt N2NkY2I1MGVkMGU0LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAtN2NkY2I1MGVkMGU0 LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi+3buQd lKhOt0bC0zCqbwJ9i/6u5tYG6h1oo/wp+QFz5/SQecHvhGNHPataw3xY4LEQLBzQ 12N5VMe1Cvv7gj7NSi3lWUUUW8ffJxwq6ydWlz8GBmTY8jaqLJg+T2wyyZ5RH/2A mn9iDODExTMt17smIjgCommbH1+GOoh5w28snpaetOuiJIesrBw2Z/Z9BWXwbt9z Fn/3QEY/3psXwZGXnnusIcBjS+/baK9Pj3cSq1L4mxezzIHkrCTYTpTSMO5/q1IH NtCq1QZlxI/hYBxl2kIoUcVjXNJCdUiwaZvoIpYwzJCuji0qy4n8irP+CpsNiMwL OCzSE4Z3Cp2N2A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:55 2025 by rpki-client