This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json) Hash identifier: 3FBxYTAUb0liI4VXrB+yNzQZe3uUirU1zSae7xM/D3c= Subject key identifier: 30:BD:97:B4:80:DA:A0:47:45:0E:49:CD:2B:2F:DB:21:83:8D:2A:D4 Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Certificate serial: 019B3C7FC6800691DC972E09F3696694C27D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 16:02:45 +0000 Manifest this update: Sat 20 Dec 2025 16:02:45 +0000 Manifest next update: Sun 21 Dec 2025 16:02:45 +0000 Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=) 2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=) 3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: kFc7EMoQeSJ+OWgVwGWLR/7dsAtvk6IrBSZ9r40z5uM=) 4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:c6:80:06:91:dc:97:2e:09:f3:69:66:94:c2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Validity Not Before: Dec 20 16:02:45 2025 GMT Not After : Dec 21 16:02:45 2025 GMT Subject: CN=30bd97b480daa047450e49cd2b2fdb21838d2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:08:9a:38:dc:bd:e4:86:72:b3:73:20:34: a9:50:3a:3d:35:50:1b:4c:32:97:9b:4c:f0:2f:f2: 19:59:12:08:2a:86:83:82:da:1e:30:16:e3:87:f1: 84:5f:f9:5c:ef:75:9f:11:81:cb:31:65:a7:6d:6a: 4e:c8:34:82:34:42:9a:b1:d9:78:4a:0b:63:0f:04: 13:56:1c:b9:84:e6:b7:fe:20:78:54:87:5e:b9:50: 11:11:83:df:79:9e:ae:4c:5c:29:55:b3:5c:c5:d4: 29:c0:3a:37:05:18:e1:e2:ad:2b:13:6d:16:91:94: e2:c3:0f:0a:0f:b4:db:bd:0f:7b:9e:0b:32:8a:f3: 32:bd:dd:3b:9b:67:37:4f:6a:20:32:b0:6f:71:54: dc:08:08:32:1c:2d:af:2c:eb:a8:71:18:3b:e9:ef: 2b:b6:d5:94:92:5c:f3:4b:6a:87:de:0d:43:d3:42: df:a3:cd:03:42:1e:c6:1d:f8:a7:1f:d5:b3:da:96: e1:f7:8c:93:34:8c:31:2e:41:95:94:7e:5e:d3:27: b1:7d:25:b4:50:b4:bf:8c:48:d7:72:7b:25:1c:30: 91:2d:d4:0e:5d:2c:8a:69:ae:f6:0b:64:16:fc:e3: 3c:52:65:6b:76:9c:5c:ad:f1:ae:a2:35:0f:e0:ba: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BD:97:B4:80:DA:A0:47:45:0E:49:CD:2B:2F:DB:21:83:8D:2A:D4 X509v3 Authority Key Identifier: keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ef:32:75:7c:2f:6f:7f:36:78:6b:28:74:08:57:0d:6e:67: 41:6a:be:6b:41:c5:e5:94:a0:5c:de:d3:ba:af:b8:00:67:f0: 77:90:c7:c9:d9:ab:fa:10:0f:28:14:b6:7b:60:0f:2d:06:84: 27:a4:73:ea:f5:f0:e6:1e:4e:e5:0e:df:74:c5:2a:42:d4:25: 89:39:5f:31:4b:e1:f0:d8:c8:e7:87:eb:7d:49:48:55:5a:64: 4d:0b:00:6d:68:59:80:f2:7e:76:0a:47:72:63:33:82:3d:05: f2:0a:b6:47:d3:f8:99:c6:cb:41:a4:0a:f5:2d:1d:da:6b:cc: a8:4f:28:7e:7e:66:01:81:72:f2:44:55:f0:f1:ac:08:a9:b1: 01:85:31:6c:bf:3f:63:d6:1f:59:41:b5:de:34:f4:ea:8b:6c: 84:00:51:3e:de:85:3d:8b:0a:7b:4c:69:fb:0f:e0:46:ab:69: fd:ce:7d:09:25:34:64:90:07:e4:ea:5b:ef:cf:dd:d0:c0:de: 05:7a:93:95:d5:9f:60:8b:e4:9b:ea:91:b3:0c:b1:6b:a2:18: a7:42:90:0b:8a:d8:d6:df:ee:bb:79:17:07:5d:4d:bf:21:33: c5:a2:14:18:39:cc:55:d7:59:be:fe:a3:9a:a2:38:84:b0:e2: 40:59:d6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8aABpHcly4J82lmlMJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk NGMzZjEwHhcNMjUxMjIwMTYwMjQ1WhcNMjUxMjIxMTYwMjQ1WjAzMTEwLwYDVQQD EygzMGJkOTdiNDgwZGFhMDQ3NDUwZTQ5Y2QyYjJmZGIyMTgzOGQyYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp8ImjjcveSGcrNzIDSpUDo9NVAb TDKXm0zwL/IZWRIIKoaDgtoeMBbjh/GEX/lc73WfEYHLMWWnbWpOyDSCNEKasdl4 SgtjDwQTVhy5hOa3/iB4VIdeuVAREYPfeZ6uTFwpVbNcxdQpwDo3BRjh4q0rE20W kZTiww8KD7TbvQ97ngsyivMyvd07m2c3T2ogMrBvcVTcCAgyHC2vLOuocRg76e8r ttWUklzzS2qH3g1D00Lfo80DQh7GHfinH9Wz2pbh94yTNIwxLkGVlH5e0yexfSW0 ULS/jEjXcnslHDCRLdQOXSyKaa72C2QW/OM8UmVrdpxcrfGuojUP4Lp34wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDC9l7SA2qBHRQ5JzSsv2yGDjSrUMB8GA1UdIwQY MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt NDI1MGNlNTUxN2Q5LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5 LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+8ydXwv b382eGsodAhXDW5nQWq+a0HF5ZSgXN7Tuq+4AGfwd5DHydmr+hAPKBS2e2APLQaE J6Rz6vXw5h5O5Q7fdMUqQtQliTlfMUvh8NjI54frfUlIVVpkTQsAbWhZgPJ+dgpH cmMzgj0F8gq2R9P4mcbLQaQK9S0d2mvMqE8ofn5mAYFy8kRV8PGsCKmxAYUxbL8/ Y9YfWUG13jT06otshABRPt6FPYsKe0xp+w/gRqtp/c59CSU0ZJAH5Opb78/d0MDe BXqTldWfYIvkm+qRswyxa6IYp0KQC4rY1t/uu3kXB11NvyEzxaIUGDnMVddZvv6j mqI4hLDiQFnWRA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:16:31 2025 by rpki-client