This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json) Hash identifier: GGDoHSSYDd05eq3dcm7L4H8vctOWw4LzOFKBbHloc8E= Subject key identifier: F0:09:03:A9:75:2E:28:05:B9:4F:07:B5:28:CB:BC:C0:B4:D2:C3:4D Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e Certificate serial: 019B3C46F379360637A9BC4F5D11AD549B8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 15:00:41 +0000 Manifest this update: Sat 20 Dec 2025 15:00:41 +0000 Manifest next update: Sun 21 Dec 2025 15:00:41 +0000 Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=) 2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: 16mL8B7DBz/kyEercHKtkx/AiNzP9E6HAmupTq+0nZQ=) 3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=) 4: MDLnzRvtVaDNauKZ3YaGSLWMKyM.roa (hash: MMQjB7y3IaNNZ21WEqRPVuCFVd1+Iw0iUNXJdEC5KBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:f3:79:36:06:37:a9:bc:4f:5d:11:ad:54:9b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e Validity Not Before: Dec 20 15:00:41 2025 GMT Not After : Dec 21 15:00:41 2025 GMT Subject: CN=f00903a9752e2805b94f07b528cbbcc0b4d2c34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:d4:4f:68:1b:d7:57:b2:b9:45:83:27:43: d9:51:f0:b9:7e:d0:1e:0f:bf:38:83:98:38:4d:9e: 2e:de:81:76:e7:2e:ed:bf:e0:d6:da:3f:4a:b5:4a: 8a:0d:c9:58:0b:35:be:c7:a3:1e:50:c3:00:cd:e0: f2:8c:27:98:bc:e1:43:c6:fe:18:24:34:4c:ba:7d: b7:8b:e2:94:ce:2b:f2:77:4a:43:3d:2c:32:17:97: a4:3b:1f:c6:e6:6e:fa:07:f6:c1:ed:fc:5b:76:c1: ad:ef:42:ce:c7:60:d5:da:91:16:ae:8b:bc:5d:ca: 86:f3:89:e9:00:fd:02:1f:80:33:82:1c:03:8c:e1: 74:2f:4e:b9:5b:90:19:8c:cb:e8:e2:12:f6:f2:89: 8f:aa:48:a7:d7:88:a5:d4:15:07:33:58:26:e7:ef: 0d:9b:a7:70:0f:f1:34:d4:73:b3:e7:30:03:41:d6: db:39:dd:92:74:49:06:81:bb:1f:a6:13:48:e7:cc: 55:5b:80:0a:c2:89:8b:e7:75:cc:1e:2a:3f:b2:7c: 00:c5:d2:a6:dc:bc:72:85:9a:ef:e7:9c:90:4d:74: 0d:52:07:25:63:d4:eb:bb:98:63:e4:67:48:54:c8: f5:ee:da:36:b6:b3:11:db:ca:1c:07:ef:dd:4a:bc: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:09:03:A9:75:2E:28:05:B9:4F:07:B5:28:CB:BC:C0:B4:D2:C3:4D X509v3 Authority Key Identifier: keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:64:12:3b:b0:e9:4c:e8:79:f2:dd:c3:2f:eb:62:52:1b:d2: fa:98:09:0c:b9:74:19:d9:4f:bb:35:9c:ef:df:04:6e:84:9c: d5:b1:71:ec:e7:c8:2b:f9:1f:f4:f2:54:b5:c5:58:89:3d:a3: 80:50:81:85:0e:a5:2d:10:b8:69:dc:50:cf:0a:52:f1:f2:12: cd:df:d5:2c:99:b8:0d:a9:2f:c9:6c:a1:ed:aa:a9:d2:04:24: e1:f8:4b:09:e0:fd:a1:32:cf:15:ab:6b:a9:17:f1:a7:2b:8d: 74:69:80:4b:8a:05:ab:ed:33:96:dd:7a:ad:33:71:18:46:4f: b2:a7:e5:bf:11:5e:63:03:de:d3:67:40:05:d9:e2:58:d4:3c: 0f:ee:86:d4:2c:dc:55:8b:80:22:7b:26:bf:ee:81:87:fb:ed: 4e:58:2e:68:ec:0d:b4:36:72:f7:1b:f4:ba:28:de:e0:aa:5f: 4a:86:ea:40:b9:80:0a:07:aa:ce:ed:c5:16:33:af:f1:7a:06: 3b:7f:88:b3:ba:79:0b:29:f1:89:6a:b0:e5:bb:6e:b8:4c:8c: b7:a8:91:18:89:d3:1a:ab:9b:dd:41:bf:27:39:aa:e1:f6:a2: 9f:9b:6b:c7:dc:80:4a:7f:5e:02:e8:fe:0c:16:32:a7:95:74: 24:61:1d:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RvN5NgY3qbxPXRGtVJuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZjEwZTM0NDIxYmFmZjE3NGQ2MDY3OGYzMmZhNWUzNWNk Zjk1N2UwHhcNMjUxMjIwMTUwMDQxWhcNMjUxMjIxMTUwMDQxWjAzMTEwLwYDVQQD EyhmMDA5MDNhOTc1MmUyODA1Yjk0ZjA3YjUyOGNiYmNjMGI0ZDJjMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuizUT2gb11eyuUWDJ0PZUfC5ftAe D784g5g4TZ4u3oF25y7tv+DW2j9KtUqKDclYCzW+x6MeUMMAzeDyjCeYvOFDxv4Y JDRMun23i+KUzivyd0pDPSwyF5ekOx/G5m76B/bB7fxbdsGt70LOx2DV2pEWrou8 XcqG84npAP0CH4AzghwDjOF0L065W5AZjMvo4hL28omPqkin14il1BUHM1gm5+8N m6dwD/E01HOz5zADQdbbOd2SdEkGgbsfphNI58xVW4AKwomL53XMHio/snwAxdKm 3LxyhZrv55yQTXQNUgclY9Tru5hj5GdIVMj17to2trMR28ocB+/dSrwSUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAJA6l1LigFuU8HtSjLvMC00sNNMB8GA1UdIwQY MBaAFCHxDjRCG6/xdNYGePMvpeNc35V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTct OWE5ZWQxZWYyZThkLzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTctOWE5ZWQxZWYyZThk LzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmQSO7Dp TOh58t3DL+tiUhvS+pgJDLl0GdlPuzWc798EboSc1bFx7OfIK/kf9PJUtcVYiT2j gFCBhQ6lLRC4adxQzwpS8fISzd/VLJm4DakvyWyh7aqp0gQk4fhLCeD9oTLPFatr qRfxpyuNdGmAS4oFq+0zlt16rTNxGEZPsqflvxFeYwPe02dABdniWNQ8D+6G1Czc VYuAInsmv+6Bh/vtTlguaOwNtDZy9xv0uije4KpfSobqQLmACgeqzu3FFjOv8XoG O3+Is7p5CynxiWqw5btuuEyMt6iRGInTGqub3UG/Jzmq4fain5trx9yASn9eAuj+ DBYyp5V0JGEdzQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:32:15 2025 by rpki-client