This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: 1KkMMLHKHQjDLnMCp1y7Gn2NIGxRl94VEIEJTb4Klxk= Subject key identifier: 68:36:A9:3F:95:3A:0F:65:22:B1:AF:55:20:5F:9C:18:E4:20:5B:38 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B4927615BD15AA051980963EDC2B40D35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 17B4 Signing time: Tue 23 Dec 2025 03:01:16 +0000 Manifest this update: Tue 23 Dec 2025 03:01:16 +0000 Manifest next update: Wed 24 Dec 2025 03:01:16 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: Gysv8AWet3Ez9+euw21b3oQFXcUMD7asDgy23EuY7bg=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:61:5b:d1:5a:a0:51:98:09:63:ed:c2:b4:0d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Dec 23 03:01:16 2025 GMT Not After : Dec 24 03:01:16 2025 GMT Subject: CN=6836a93f953a0f6522b1af55205f9c18e4205b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:a4:5c:ee:b8:ea:17:3a:e7:c2:0a:70:75: 9a:70:72:76:ae:bc:56:76:df:4b:a8:52:3e:24:b2: 5c:01:ca:ad:9c:f6:2f:31:dd:e9:36:85:65:ec:79: 4e:5d:fc:6a:65:e9:89:25:31:31:30:2b:3b:02:92: 96:77:47:35:ab:fe:39:89:81:f9:71:3b:72:6a:71: 38:35:5d:e1:64:c8:f4:f7:82:b2:3e:14:f1:42:f0: 1e:3b:d4:dc:30:45:52:11:ed:9e:a6:74:46:64:1b: 5f:8d:0b:b3:9f:7a:98:f9:b5:ae:7c:d8:c6:ce:da: 4f:d7:70:d4:3e:c4:f1:02:ce:13:d3:49:ee:1c:6b: f7:69:1d:f2:af:19:73:63:cc:e6:ef:1e:d5:b5:d3: a9:35:f1:43:26:72:40:18:2f:b2:92:a8:64:6c:32: 46:6e:0b:4c:c9:1e:f8:80:f2:7a:74:93:6a:f7:57: 47:0b:d8:6f:32:00:bc:05:cd:17:e9:74:c2:58:f5: c9:af:ad:a6:05:91:eb:46:4b:09:68:90:34:4b:82: 23:d9:04:eb:15:97:72:63:0c:6b:c7:ee:79:be:08: e1:49:cc:02:0e:f9:99:31:12:bc:ff:a9:a3:a9:e8: c1:7c:91:9e:e1:b2:cd:3c:70:ee:80:ab:87:58:bd: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:36:A9:3F:95:3A:0F:65:22:B1:AF:55:20:5F:9C:18:E4:20:5B:38 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:6a:09:d5:43:57:4a:50:50:4e:32:51:e2:34:be:92:51:33: c8:fd:02:f7:c3:83:38:6b:1e:e5:86:26:60:fc:dc:4d:cf:57: 59:6b:59:86:9f:b5:d3:8e:19:09:9f:2f:f7:a1:e4:f5:cd:57: bb:96:fa:2f:be:9c:43:dc:26:f5:3d:90:f9:6d:f6:ac:81:b9: 48:e8:47:81:a4:0e:0d:63:de:32:20:aa:6f:27:5c:fa:2d:c1: 09:ad:62:5a:61:7b:0f:c9:e8:eb:25:1f:b4:15:4d:18:4a:a5: 28:83:42:2f:9f:e6:db:fe:eb:38:8b:42:5a:fc:50:9c:f2:6c: b1:92:12:29:66:3e:f9:54:d7:19:a2:53:e1:26:af:b4:77:28: 11:d7:2c:dc:f2:c1:1f:11:2b:e4:6c:c0:64:9c:6e:61:4c:03: 85:ac:49:8d:f5:2a:9b:23:5a:44:69:4a:6f:54:56:02:88:8c: 27:5b:38:e2:42:51:73:b1:ed:82:5f:03:14:57:20:e7:88:c7: e0:72:75:78:6b:37:43:f7:6f:c8:74:60:31:c2:fa:e5:1d:23: 40:1d:32:3c:32:9c:54:b3:8a:85:5a:3a:35:c0:48:04:65:4e: b7:ed:92:f6:7b:a5:7c:12:88:ed:8a:dc:8c:77:2f:dd:1d:c3: 6b:9f:a9:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ2Fb0VqgUZgJY+3CtA01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUxMjIzMDMwMTE2WhcNMjUxMjI0MDMwMTE2WjAzMTEwLwYDVQQD Eyg2ODM2YTkzZjk1M2EwZjY1MjJiMWFmNTUyMDVmOWMxOGU0MjA1YjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoOkXO646hc658IKcHWacHJ2rrxW dt9LqFI+JLJcAcqtnPYvMd3pNoVl7HlOXfxqZemJJTExMCs7ApKWd0c1q/45iYH5 cTtyanE4NV3hZMj094KyPhTxQvAeO9TcMEVSEe2epnRGZBtfjQuzn3qY+bWufNjG ztpP13DUPsTxAs4T00nuHGv3aR3yrxlzY8zm7x7VtdOpNfFDJnJAGC+ykqhkbDJG bgtMyR74gPJ6dJNq91dHC9hvMgC8Bc0X6XTCWPXJr62mBZHrRksJaJA0S4Ij2QTr FZdyYwxrx+55vgjhScwCDvmZMRK8/6mjqejBfJGe4bLNPHDugKuHWL0HbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg2qT+VOg9lIrGvVSBfnBjkIFs4MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGoJ1UNX SlBQTjJR4jS+klEzyP0C98ODOGse5YYmYPzcTc9XWWtZhp+1044ZCZ8v96Hk9c1X u5b6L76cQ9wm9T2Q+W32rIG5SOhHgaQODWPeMiCqbydc+i3BCa1iWmF7D8no6yUf tBVNGEqlKINCL5/m2/7rOItCWvxQnPJssZISKWY++VTXGaJT4SavtHcoEdcs3PLB HxEr5GzAZJxuYUwDhaxJjfUqmyNaRGlKb1RWAoiMJ1s44kJRc7Htgl8DFFcg54jH 4HJ1eGs3Q/dvyHRgMcL65R0jQB0yPDKcVLOKhVo6NcBIBGVOt+2S9nulfBKI7Yrc jHcv3R3Da5+pyg== -----END CERTIFICATE-----Generated at Tue Dec 23 05:30:19 2025 by rpki-client