This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json) Hash identifier: vtZsMK6GPRMKhRa8g2T/HPH0CGUzYj8pk651W0Jz9Gw= Subject key identifier: 39:87:AC:A7:78:CE:89:11:FA:56:22:AE:F2:39:82:E6:CD:B2:7B:52 Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a Certificate serial: 019B6C21039F1CBC4CD79F6C30ECA4C454D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft Manifest number: 03AE Signing time: Mon 29 Dec 2025 22:01:01 +0000 Manifest this update: Mon 29 Dec 2025 22:01:01 +0000 Manifest next update: Tue 30 Dec 2025 22:01:01 +0000 Files and hashes: 1: 8knzlv6GAGC9WpBTcduE5QxZjR4.roa (hash: jGULUEUzBB2GswHXzrNiOTME3YtUtoJWMhjuPyb7hfs=) 2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: KctwcZtaYMeX4qUZJSteSMK48Pj0d55l5W9O+S5VQsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:21:03:9f:1c:bc:4c:d7:9f:6c:30:ec:a4:c4:54:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a Validity Not Before: Dec 29 22:01:01 2025 GMT Not After : Dec 30 22:01:01 2025 GMT Subject: CN=3987aca778ce8911fa5622aef23982e6cdb27b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:34:e9:28:17:d3:bb:0d:69:17:96:59:df: 60:d1:4c:64:45:0c:d9:cb:9c:0d:49:f2:79:2b:1f: 70:bb:3e:15:80:64:bd:cc:7a:45:f1:f3:3a:b7:ae: a9:71:ec:5d:14:55:e4:e8:49:3a:ab:e9:56:b0:75: 5d:58:d5:e6:27:99:0e:e9:c3:6e:83:bb:ec:fd:09: 7d:b3:c3:dd:ab:87:7a:1c:62:00:82:c2:a0:c1:71: 69:9c:b1:77:92:82:5d:39:04:75:09:c2:ab:f5:0b: b7:00:2e:67:7e:f7:da:f6:f8:4c:1c:93:65:e8:ae: 0e:54:2e:c0:bd:7d:fd:6d:e8:47:18:71:2e:03:e7: 0a:a3:c6:ff:81:0a:42:3e:2b:20:0c:ab:ea:74:73: 75:db:43:ae:7c:62:2c:4a:8c:91:4f:e4:24:b2:84: c8:8a:c7:98:89:45:db:ae:93:a0:51:1d:1b:c2:d1: 2a:35:fb:8e:fa:95:cd:51:e9:93:4c:90:ef:dd:19: 88:2c:eb:1a:98:ff:89:7a:47:91:1e:e5:6d:49:7b: 1e:c0:42:df:74:d7:fc:55:ea:a8:f6:2a:a3:b0:d2: 87:c7:be:0f:99:fb:3a:bc:2c:8b:f0:17:10:8e:20: be:1b:1f:20:8b:c7:cb:a7:3f:68:f0:b4:d8:d6:4d: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:87:AC:A7:78:CE:89:11:FA:56:22:AE:F2:39:82:E6:CD:B2:7B:52 X509v3 Authority Key Identifier: keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2f:d2:a6:33:89:9c:be:f7:89:90:0d:73:8e:65:94:e0:80: c0:1b:5c:f5:b5:07:46:5c:7b:63:21:e5:df:09:9c:23:0d:6c: 9b:8f:60:f6:83:f0:34:d0:5f:22:c1:fd:c7:3c:8c:97:e6:83: 11:06:00:c7:88:eb:30:46:bb:ca:3d:4c:53:33:b5:cf:39:a1: 49:26:0b:44:09:e3:97:83:00:09:3d:ad:7e:5c:9e:2f:96:18: f8:e2:a1:53:b6:c1:ba:83:0e:58:65:d6:80:df:03:47:b2:6a: 18:d0:ec:4e:3d:2d:84:07:35:cb:2e:6f:df:1e:ec:3c:1c:92: cd:55:ff:61:6e:35:41:14:53:bd:c3:e6:4c:39:b3:23:f9:2b: b1:86:e2:92:8a:10:17:d0:bc:fc:45:8b:83:ae:65:7f:9e:90: ce:03:73:37:36:5a:b8:a1:e0:16:06:29:34:e8:03:c2:ea:79: 97:93:03:cd:de:fc:3e:3c:16:c8:11:4d:5f:fa:5f:97:d9:cc: ac:8a:ee:74:67:db:3a:08:65:60:86:f1:54:87:8b:2f:34:b4: 69:ed:50:93:90:44:37:98:24:d3:36:5b:62:f1:84:f0:d0:57: bc:57:ca:ca:73:18:32:d5:73:d5:8a:91:9a:4a:c2:e0:ff:2f: 8e:e5:9e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIQOfHLxM159sMOykxFTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTBlN2UzYzkxNzVlYjk4ZmY3ODE1ZDMwNzZmYjAyOTk2 YTczNGEwHhcNMjUxMjI5MjIwMTAxWhcNMjUxMjMwMjIwMTAxWjAzMTEwLwYDVQQD EygzOTg3YWNhNzc4Y2U4OTExZmE1NjIyYWVmMjM5ODJlNmNkYjI3YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl006SgX07sNaReWWd9g0UxkRQzZ y5wNSfJ5Kx9wuz4VgGS9zHpF8fM6t66pcexdFFXk6Ek6q+lWsHVdWNXmJ5kO6cNu g7vs/Ql9s8Pdq4d6HGIAgsKgwXFpnLF3koJdOQR1CcKr9Qu3AC5nfvfa9vhMHJNl 6K4OVC7AvX39behHGHEuA+cKo8b/gQpCPisgDKvqdHN120OufGIsSoyRT+QksoTI iseYiUXbrpOgUR0bwtEqNfuO+pXNUemTTJDv3RmILOsamP+JekeRHuVtSXsewELf dNf8Veqo9iqjsNKHx74Pmfs6vCyL8BcQjiC+Gx8gi8fLpz9o8LTY1k1YzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmHrKd4zokR+lYirvI5gubNsntSMB8GA1UdIwQY MBaAFIgQ5+PJF165j/eBXTB2+wKZanNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMt MmVlZGFjZTRhYWM5LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMtMmVlZGFjZTRhYWM5 LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS/SpjOJ nL73iZANc45llOCAwBtc9bUHRlx7YyHl3wmcIw1sm49g9oPwNNBfIsH9xzyMl+aD EQYAx4jrMEa7yj1MUzO1zzmhSSYLRAnjl4MACT2tflyeL5YY+OKhU7bBuoMOWGXW gN8DR7JqGNDsTj0thAc1yy5v3x7sPBySzVX/YW41QRRTvcPmTDmzI/krsYbikooQ F9C8/EWLg65lf56QzgNzNzZauKHgFgYpNOgDwup5l5MDzd78PjwWyBFNX/pfl9nM rIrudGfbOghlYIbxVIeLLzS0ae1Qk5BEN5gk0zZbYvGE8NBXvFfKynMYMtVz1YqR mkrC4P8vjuWeaQ== -----END CERTIFICATE-----Generated at Tue Dec 30 07:15:04 2025 by rpki-client