This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: 6ID6tAR/5xVTSK2Di4z62uVJEQyui4MtK652qs6YKW0= Subject key identifier: CD:03:5B:3C:62:46:5C:66:BD:F3:5E:9D:62:58:07:1E:A5:34:B1:8E Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B3BA210E5E20DA96A71DE2F74A5C91421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 17AD Signing time: Sat 20 Dec 2025 12:00:35 +0000 Manifest this update: Sat 20 Dec 2025 12:00:35 +0000 Manifest next update: Sun 21 Dec 2025 12:00:35 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: 88G3quQw+VoX7Hpmo8IoF/izVqh0qOq7OCZ02LZuuCc=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:10:e5:e2:0d:a9:6a:71:de:2f:74:a5:c9:14:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Dec 20 12:00:35 2025 GMT Not After : Dec 21 12:00:35 2025 GMT Subject: CN=cd035b3c62465c66bdf35e9d6258071ea534b18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:36:35:b0:cf:83:78:4b:95:cd:5d:f3:ac: d6:dc:e6:85:fb:70:d4:8c:db:dc:df:87:e2:de:a8: 23:67:78:8c:55:fa:cc:61:74:a8:d6:93:eb:22:d4: 2f:32:0a:26:3d:9a:0a:ca:1e:b7:cc:47:d5:7f:81: 63:a0:2c:b4:f1:b9:d4:6d:99:fe:c8:35:81:3d:1e: 98:ac:b9:a0:21:b2:0c:b1:2b:f1:69:4f:9d:9b:05: 1f:ef:d4:90:2e:52:76:56:d1:f7:b7:1c:37:26:ce: 86:20:f7:33:5f:33:2b:db:a8:7f:bd:90:07:d1:b7: c0:fa:47:33:1d:20:66:ef:a7:58:e3:01:7f:56:46: db:98:92:6f:85:08:ec:bc:4e:1c:ef:bb:63:e4:62: e0:21:bd:e2:95:ef:8c:5f:30:da:61:1b:fe:61:e2: 9e:b5:69:04:aa:55:47:c0:23:15:be:af:5d:e1:f0: f0:d2:9f:01:98:74:07:59:01:a9:06:6b:12:dd:94: 24:07:e5:67:62:55:f5:66:8d:36:95:31:37:c7:5e: 69:a9:6c:cf:9a:85:1b:e7:15:d3:90:b2:b8:cf:97: a3:a3:a9:a5:ad:07:e4:ac:06:f1:3c:15:fc:e1:4e: 20:cb:cd:b1:1f:60:d9:e2:8a:23:c8:c4:d6:19:e0: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:03:5B:3C:62:46:5C:66:BD:F3:5E:9D:62:58:07:1E:A5:34:B1:8E X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:31:59:c3:b9:7e:5f:81:83:85:98:b2:d1:83:49:1a:c9:93: b8:5a:01:b3:67:ac:4f:fd:df:f1:33:e3:8f:2a:12:cc:9c:13: 05:62:82:03:50:b1:a9:64:7b:d9:e0:db:2d:32:92:b3:f6:37: 07:cc:9a:20:fc:9c:90:1d:5a:a9:2d:96:82:35:52:63:1d:2e: 24:53:02:f6:12:25:30:61:d7:19:9c:61:53:f4:9d:1c:0d:bd: b5:59:d5:34:39:cd:21:b5:cc:fc:7a:8e:84:c6:73:13:b0:83: c7:a5:b3:28:5e:b3:73:78:d7:0a:80:00:d0:3d:2b:2b:42:0e: 84:99:75:d0:ea:c8:33:57:00:66:c4:29:f5:d8:cf:b0:b3:66: b1:70:6a:71:b8:f0:2c:76:f2:a1:73:ab:9b:00:2c:42:4a:d4: 86:2b:16:9c:9f:9c:1e:1f:c2:b1:38:7d:61:86:b5:e5:84:d9: a8:8d:c9:93:2b:d8:ad:48:a2:4a:88:7b:bb:5d:50:94:84:17: ad:a7:09:33:66:f0:0e:20:10:d8:03:5f:b8:21:3f:ec:de:e6: e7:d5:61:1e:a0:ef:77:ea:f0:ca:34:1f:aa:29:5f:dd:92:75: ea:80:5b:b6:0a:8a:7b:5a:87:cb:ad:af:8b:4f:52:6d:a0:b1: 0b:22:c7:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohDl4g2panHeL3SlyRQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUxMjIwMTIwMDM1WhcNMjUxMjIxMTIwMDM1WjAzMTEwLwYDVQQD EyhjZDAzNWIzYzYyNDY1YzY2YmRmMzVlOWQ2MjU4MDcxZWE1MzRiMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6w2NbDPg3hLlc1d86zW3OaF+3DU jNvc34fi3qgjZ3iMVfrMYXSo1pPrItQvMgomPZoKyh63zEfVf4FjoCy08bnUbZn+ yDWBPR6YrLmgIbIMsSvxaU+dmwUf79SQLlJ2VtH3txw3Js6GIPczXzMr26h/vZAH 0bfA+kczHSBm76dY4wF/VkbbmJJvhQjsvE4c77tj5GLgIb3ile+MXzDaYRv+YeKe tWkEqlVHwCMVvq9d4fDw0p8BmHQHWQGpBmsS3ZQkB+VnYlX1Zo02lTE3x15pqWzP moUb5xXTkLK4z5ejo6mlrQfkrAbxPBX84U4gy82xH2DZ4oojyMTWGeB11wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0DWzxiRlxmvfNenWJYBx6lNLGOMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjFZw7l+ X4GDhZiy0YNJGsmTuFoBs2esT/3f8TPjjyoSzJwTBWKCA1CxqWR72eDbLTKSs/Y3 B8yaIPyckB1aqS2WgjVSYx0uJFMC9hIlMGHXGZxhU/SdHA29tVnVNDnNIbXM/HqO hMZzE7CDx6WzKF6zc3jXCoAA0D0rK0IOhJl10OrIM1cAZsQp9djPsLNmsXBqcbjw LHbyoXOrmwAsQkrUhisWnJ+cHh/CsTh9YYa15YTZqI3JkyvYrUiiSoh7u11QlIQX racJM2bwDiAQ2ANfuCE/7N7m59VhHqDvd+rwyjQfqilf3ZJ16oBbtgqKe1qHy62v i09SbaCxCyLHQA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:37 2025 by rpki-client