This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft File: IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json) Hash identifier: t/Lj0/FDZnBIM3Zunt1OWwUHL9vCAAkvlRAOJJCArF0= Subject key identifier: AE:79:69:BC:0C:66:8B:AD:A4:A7:C1:51:75:2E:46:D1:E8:AC:A5:15 Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65 Certificate issuer: /CN=20105484f187f2087d120cad971d682db3159965 Certificate serial: 019B3F7F0844C6BD19B71D6596E23DD81FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft Manifest number: 032C Signing time: Sun 21 Dec 2025 06:00:48 +0000 Manifest this update: Sun 21 Dec 2025 06:00:48 +0000 Manifest next update: Mon 22 Dec 2025 06:00:48 +0000 Files and hashes: 1: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: MMLxdITAvkHSb5zPdWRxL7dWztkCStKj6Y1085pWErw=) 2: Rh0IEx7nLGjWZjM91m5L9ROERFI.roa (hash: ueZbxYCJshLwHxcAfnLZtqfa1hKKEGpxZF9hNshflTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:08:44:c6:bd:19:b7:1d:65:96:e2:3d:d8:1f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20105484f187f2087d120cad971d682db3159965 Validity Not Before: Dec 21 06:00:48 2025 GMT Not After : Dec 22 06:00:48 2025 GMT Subject: CN=ae7969bc0c668bada4a7c151752e46d1e8aca515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:be:98:f4:92:c5:9a:80:7a:f0:5e:bd:71: ee:8b:b9:ca:e3:65:93:4c:a1:c2:25:93:eb:27:68: 4f:53:b6:bb:cb:9a:87:5a:07:48:13:9b:09:8d:36: fd:a0:72:ed:a9:2c:8f:00:a2:69:a9:8d:a3:f1:08: 62:28:e1:b8:27:f8:2f:2a:9a:3d:01:92:9b:74:60: a7:17:0c:38:42:73:53:12:a3:d9:49:8b:2c:be:55: de:50:f8:8f:40:67:d3:35:d3:d3:15:d6:36:9d:2c: 9d:b3:d5:b8:cd:a9:9c:01:11:ef:ea:52:eb:2f:bb: f0:11:a2:ed:f1:a8:96:6d:b4:61:92:a1:d7:8f:dc: e9:3c:c5:84:55:b6:34:43:4f:91:f0:60:80:01:fa: e1:7c:f5:6f:2c:6c:f6:2e:b7:f7:fa:4a:ad:0d:bb: a5:29:87:9c:a9:8a:35:d6:49:66:49:b5:50:62:39: 88:f6:5d:44:de:4f:6e:3b:4a:0e:0e:78:29:4c:f6: 8d:f8:02:20:0c:e2:4c:8c:02:2e:41:ca:a9:53:d1: b6:db:87:7b:8a:37:09:df:a3:30:33:63:24:cf:f4: ed:51:c9:7e:dd:dc:74:fa:0e:f2:97:3c:a3:73:04: 18:a2:01:97:c5:92:bc:17:dc:68:05:51:30:6b:ab: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:69:BC:0C:66:8B:AD:A4:A7:C1:51:75:2E:46:D1:E8:AC:A5:15 X509v3 Authority Key Identifier: keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fd:fc:80:4a:2f:4b:fd:75:6f:98:b0:43:a4:94:f4:bb:53: 59:e8:07:0b:57:a2:f7:71:64:e3:fb:88:b4:b0:c3:d5:fc:c1: a4:67:c4:fd:91:7b:f3:08:eb:b2:86:3f:d1:fd:81:d5:7e:04: 75:f7:74:10:a9:99:c6:19:e2:2c:c2:41:9f:fb:1a:02:8d:4b: 7d:56:7c:72:06:32:a2:49:88:5b:7c:7c:f1:69:2d:fa:d9:6c: 00:93:30:2d:ab:5b:d8:83:8d:4d:c8:74:60:12:46:79:35:2d: 46:ca:d7:37:30:d8:c7:d0:c0:51:f5:13:08:1a:cf:20:52:d7: 57:72:6e:ef:4e:70:d2:02:12:8a:5a:29:0a:49:85:73:56:71: 2c:ea:06:c4:85:79:3e:dc:ff:03:65:2e:57:19:b8:53:67:4d: 61:c5:f9:35:d2:43:b2:ad:a4:9b:49:c2:0c:69:d2:35:4f:35: 3b:2c:d5:d4:57:52:1d:49:e6:06:89:e4:3c:ac:8e:6f:a6:7f: af:3e:5a:b6:dc:cb:65:27:b0:3a:0b:44:ff:fd:18:73:ec:d9: a5:15:8c:71:a8:f9:49:eb:0d:be:97:fe:e9:34:9d:3e:12:dd: 70:4a:70:93:cf:88:10:61:15:df:cb:8a:ad:28:a0:ab:66:d4: 97:32:ec:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fwhExr0Ztx1lluI92B/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMTA1NDg0ZjE4N2YyMDg3ZDEyMGNhZDk3MWQ2ODJkYjMx NTk5NjUwHhcNMjUxMjIxMDYwMDQ4WhcNMjUxMjIyMDYwMDQ4WjAzMTEwLwYDVQQD EyhhZTc5NjliYzBjNjY4YmFkYTRhN2MxNTE3NTJlNDZkMWU4YWNhNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1i+mPSSxZqAevBevXHui7nK42WT TKHCJZPrJ2hPU7a7y5qHWgdIE5sJjTb9oHLtqSyPAKJpqY2j8QhiKOG4J/gvKpo9 AZKbdGCnFww4QnNTEqPZSYssvlXeUPiPQGfTNdPTFdY2nSyds9W4zamcARHv6lLr L7vwEaLt8aiWbbRhkqHXj9zpPMWEVbY0Q0+R8GCAAfrhfPVvLGz2Lrf3+kqtDbul KYecqYo11klmSbVQYjmI9l1E3k9uO0oODngpTPaN+AIgDOJMjAIuQcqpU9G224d7 ijcJ36MwM2Mkz/TtUcl+3dx0+g7ylzyjcwQYogGXxZK8F9xoBVEwa6v1sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK55abwMZoutpKfBUXUuRtHorKUVMB8GA1UdIwQY MBaAFCAQVITxh/IIfRIMrZcdaC2zFZllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZWY2ZDAtZjQ4OC00ZDI1LTg2YjUt MjZhZWY4ODJmOTRmLzEvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZWY2ZDAtZjQ4OC00ZDI1LTg2YjUtMjZhZWY4ODJmOTRm LzEvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqP38gEov S/11b5iwQ6SU9LtTWegHC1ei93Fk4/uItLDD1fzBpGfE/ZF78wjrsoY/0f2B1X4E dfd0EKmZxhniLMJBn/saAo1LfVZ8cgYyokmIW3x88Wkt+tlsAJMwLatb2IONTch0 YBJGeTUtRsrXNzDYx9DAUfUTCBrPIFLXV3Ju705w0gISilopCkmFc1ZxLOoGxIV5 Ptz/A2UuVxm4U2dNYcX5NdJDsq2km0nCDGnSNU81OyzV1FdSHUnmBonkPKyOb6Z/ rz5attzLZSewOgtE//0Yc+zZpRWMcaj5SesNvpf+6TSdPhLdcEpwk8+IEGEV38uK rSigq2bUlzLsDA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:21 2025 by rpki-client