This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json) Hash identifier: dZZnTf/VahI7UBKkeD3kztRZTj/Rsa7fL1GedCLE1/0= Subject key identifier: 6C:F5:D0:C0:A8:6A:FA:DB:90:61:1F:D6:2B:7D:A7:7F:95:DC:EC:F6 Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e Certificate serial: 019B4BBA35C6FD53CC1481A04B76D8EB204B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft Manifest number: 1795 Signing time: Tue 23 Dec 2025 15:00:52 +0000 Manifest this update: Tue 23 Dec 2025 15:00:52 +0000 Manifest next update: Wed 24 Dec 2025 15:00:52 +0000 Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=) 2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: 7Yw+bcdvjv4OSFpMI5g77MezutUboB0NasClwyL3CAo=) 3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=) 4: MDLnzRvtVaDNauKZ3YaGSLWMKyM.roa (hash: MMQjB7y3IaNNZ21WEqRPVuCFVd1+Iw0iUNXJdEC5KBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:ba:35:c6:fd:53:cc:14:81:a0:4b:76:d8:eb:20:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e Validity Not Before: Dec 23 15:00:52 2025 GMT Not After : Dec 24 15:00:52 2025 GMT Subject: CN=6cf5d0c0a86afadb90611fd62b7da77f95dcecf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:cb:f7:2b:3d:08:5a:43:9b:f0:74:56:42: e6:ba:8d:0b:ca:3b:e2:c3:e7:65:a9:22:7a:af:dd: 20:7e:23:99:24:ba:69:1c:11:98:cc:fa:92:9d:f9: d2:51:99:7d:8e:ee:52:41:ca:fd:73:38:c0:8b:ae: 7e:ca:65:f1:0f:42:83:b0:bc:71:7c:d3:8a:78:47: 1e:40:d6:90:55:51:70:12:cb:2d:c1:36:0b:8c:78: 7c:23:86:1a:9d:5d:2a:3e:8f:a1:94:09:1b:11:1e: 4b:d1:d7:6a:41:a6:ee:33:84:dc:a4:d9:df:ea:f7: 6d:e8:33:a5:5a:be:19:93:d1:6e:62:2e:c4:8b:ec: bf:fc:ae:7d:33:a2:4a:fa:e5:11:b2:0b:be:63:01: 62:b3:3c:e9:58:5c:8d:1a:40:ed:8e:8b:c9:39:74: ae:43:b8:e0:ea:ac:af:f3:9c:a3:5e:ab:5a:2f:3d: 9b:e4:88:a7:94:79:4e:f0:cf:fc:d3:c2:fe:7a:aa: 90:bf:98:41:f0:6a:25:11:ad:09:30:d6:50:01:d0: 6f:4e:4d:44:e9:be:c3:3e:e8:12:e3:73:5a:e9:b3: 8b:1b:fc:98:83:b9:f4:c7:e6:6b:f7:de:20:87:24: 95:ec:ee:6b:e5:88:5d:e7:f4:ca:1e:d6:d5:f9:15: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F5:D0:C0:A8:6A:FA:DB:90:61:1F:D6:2B:7D:A7:7F:95:DC:EC:F6 X509v3 Authority Key Identifier: keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:eb:1c:07:26:b3:10:92:d8:3a:32:a8:5b:3f:35:16:61:95: 14:bd:30:7c:3a:09:2e:e5:33:97:77:2a:cd:07:70:71:d9:01: e1:36:90:e9:38:be:bf:f3:49:a7:9e:18:69:98:a9:91:da:ea: 45:9f:50:e5:83:84:6d:93:40:ee:56:fc:6e:51:df:91:26:4d: 2f:38:68:c1:22:d4:1e:c0:9d:19:14:e3:a7:09:35:bd:f2:75: 37:86:c0:39:64:07:d6:67:0c:e1:ec:fc:88:83:7f:31:ae:2a: 49:e2:aa:f6:ef:7d:f2:ed:b8:60:6c:ac:85:db:ab:32:c0:60: 46:08:51:5a:6f:31:0f:0e:f4:1f:5a:27:13:f4:59:05:73:37: 9e:09:2a:91:db:02:69:e1:2d:58:37:d2:bd:ee:03:90:44:27: 53:20:e2:a4:c1:b3:e2:ba:ab:88:f4:a6:a1:e7:98:88:84:71: 7d:8d:95:43:f8:18:ee:c6:6e:3e:c5:df:6e:dd:79:6b:40:f1: 8b:57:f5:4f:66:b8:18:f2:4d:84:46:39:aa:c8:bb:f4:16:36: f8:05:6e:2d:79:9b:f8:b6:3f:d1:bc:e0:64:78:55:a1:98:9c: 1a:49:2d:6f:18:9d:7f:c3:65:74:69:42:01:15:ef:c7:67:37: 3c:41:a7:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLujXG/VPMFIGgS3bY6yBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZjEwZTM0NDIxYmFmZjE3NGQ2MDY3OGYzMmZhNWUzNWNk Zjk1N2UwHhcNMjUxMjIzMTUwMDUyWhcNMjUxMjI0MTUwMDUyWjAzMTEwLwYDVQQD Eyg2Y2Y1ZDBjMGE4NmFmYWRiOTA2MTFmZDYyYjdkYTc3Zjk1ZGNlY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNPL9ys9CFpDm/B0VkLmuo0Lyjvi w+dlqSJ6r90gfiOZJLppHBGYzPqSnfnSUZl9ju5SQcr9czjAi65+ymXxD0KDsLxx fNOKeEceQNaQVVFwEsstwTYLjHh8I4YanV0qPo+hlAkbER5L0ddqQabuM4TcpNnf 6vdt6DOlWr4Zk9FuYi7Ei+y//K59M6JK+uURsgu+YwFiszzpWFyNGkDtjovJOXSu Q7jg6qyv85yjXqtaLz2b5IinlHlO8M/808L+eqqQv5hB8GolEa0JMNZQAdBvTk1E 6b7DPugS43Na6bOLG/yYg7n0x+Zr994ghySV7O5r5Yhd5/TKHtbV+RUUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz10MCoavrbkGEf1it9p3+V3Oz2MB8GA1UdIwQY MBaAFCHxDjRCG6/xdNYGePMvpeNc35V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTct OWE5ZWQxZWYyZThkLzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTctOWE5ZWQxZWYyZThk LzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduscByaz EJLYOjKoWz81FmGVFL0wfDoJLuUzl3cqzQdwcdkB4TaQ6Ti+v/NJp54YaZipkdrq RZ9Q5YOEbZNA7lb8blHfkSZNLzhowSLUHsCdGRTjpwk1vfJ1N4bAOWQH1mcM4ez8 iIN/Ma4qSeKq9u998u24YGyshdurMsBgRghRWm8xDw70H1onE/RZBXM3ngkqkdsC aeEtWDfSve4DkEQnUyDipMGz4rqriPSmoeeYiIRxfY2VQ/gY7sZuPsXfbt15a0Dx i1f1T2a4GPJNhEY5qsi79BY2+AVuLXmb+LY/0bzgZHhVoZicGkktbxidf8NldGlC ARXvx2c3PEGn0w== -----END CERTIFICATE-----Generated at Tue Dec 23 16:55:11 2025 by rpki-client