This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json) Hash identifier: ta3u2HgRho19XYmiNOJlNZIilzk43avPkiZzlsybq6E= Subject key identifier: 41:10:C6:74:4B:27:6F:62:39:A4:38:55:FD:BE:90:05:37:0D:40:3F Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Certificate serial: 019B281B5F44FF358CEE3DEA36E6C82004B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft Manifest number: 0DF9 Signing time: Tue 16 Dec 2025 17:00:41 +0000 Manifest this update: Tue 16 Dec 2025 17:00:41 +0000 Manifest next update: Wed 17 Dec 2025 17:00:41 +0000 Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: Z7aRtiFThzkKLnjlESWd2ebBvVnAqipxdCZ6CHJo0Z0=) 2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:5f:44:ff:35:8c:ee:3d:ea:36:e6:c8:20:04:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Validity Not Before: Dec 16 17:00:41 2025 GMT Not After : Dec 17 17:00:41 2025 GMT Subject: CN=4110c6744b276f6239a43855fdbe9005370d403f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:94:5f:7b:8a:f8:9f:72:cf:bb:d9:40:5a: cf:bd:6d:df:5c:b3:8b:b1:cc:51:3b:7c:33:a7:a7: 64:08:78:fa:a2:7b:ca:e0:ca:8c:ce:d9:d8:03:7e: 91:57:fe:86:b7:82:59:30:bf:ba:e2:99:4a:bd:85: 7c:31:9a:30:d5:50:42:bf:c8:0d:ca:08:ca:40:3c: 91:99:2c:9f:e5:03:ba:36:01:b6:ad:a5:a8:da:71: 69:a7:d6:ea:9c:a5:8a:9d:46:bb:10:ea:89:de:60: 29:4b:08:ee:73:db:49:e9:da:90:93:f2:49:ae:ed: c0:c7:9c:8e:0f:b8:fc:4c:77:cb:5b:9e:8d:44:c8: fb:f7:67:d4:8a:68:34:c9:63:3f:20:03:a1:60:a1: eb:7b:a0:a8:59:49:b0:74:72:76:82:4b:60:66:55: f9:3d:00:8a:80:42:55:44:47:bd:6a:61:8c:34:a2: d8:9d:7e:08:88:4a:d4:4b:13:af:6d:54:b9:94:d5: 1c:3c:1e:28:40:0b:80:bf:69:2e:76:2f:51:ec:de: 18:4e:e5:00:14:b2:83:e1:89:ce:0f:b0:93:0e:48: e8:65:8a:cc:f4:77:bd:ac:7d:b5:50:28:3e:29:46: e9:68:26:4d:8d:33:13:86:43:6a:ce:69:f1:90:61: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:10:C6:74:4B:27:6F:62:39:A4:38:55:FD:BE:90:05:37:0D:40:3F X509v3 Authority Key Identifier: keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:21:05:09:7a:90:da:ad:74:ee:98:42:fb:d4:07:ea:d7:ab: 68:07:95:94:59:79:79:57:d1:7a:38:85:6e:3f:40:50:56:ad: e4:8c:c8:5d:1a:1c:66:83:c5:60:84:26:a0:ab:aa:af:19:70: cf:5b:76:a0:1c:d4:11:10:85:6f:33:1c:2f:70:ac:97:b9:0e: 34:04:51:f4:52:03:04:9a:9f:54:59:7e:1e:4c:47:7b:b3:fe: 92:ed:8c:40:0c:35:0b:5e:60:cb:01:05:03:b4:8f:f2:cd:de: be:c3:b2:b0:fe:0a:fc:99:37:ff:91:7e:51:28:b8:98:6e:dd: bc:14:07:e9:45:cd:1e:eb:54:b9:3d:c1:c4:38:d2:7f:77:c3: a9:7f:95:5c:b6:21:03:8c:c3:db:57:68:d9:0d:2b:fd:58:57: 6e:ea:8f:7a:e1:87:cd:be:56:7d:6b:90:49:fb:85:b0:55:21: 58:77:64:28:51:9c:78:2e:09:27:5a:ef:fa:85:da:88:37:52: 45:8d:b8:18:9f:ae:8c:49:dd:51:e6:a6:4f:38:6c:ad:e8:69: dc:bd:ad:63:ad:17:de:de:25:20:0c:e5:a6:30:8d:68:0f:62: f1:24:ed:a6:f7:30:7e:c6:a4:d1:19:19:fd:c0:23:6f:7f:fc: 0a:43:b0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG19E/zWM7j3qNubIIASyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy Y2Q4MDIwHhcNMjUxMjE2MTcwMDQxWhcNMjUxMjE3MTcwMDQxWjAzMTEwLwYDVQQD Eyg0MTEwYzY3NDRiMjc2ZjYyMzlhNDM4NTVmZGJlOTAwNTM3MGQ0MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd2UX3uK+J9yz7vZQFrPvW3fXLOL scxRO3wzp6dkCHj6onvK4MqMztnYA36RV/6Gt4JZML+64plKvYV8MZow1VBCv8gN ygjKQDyRmSyf5QO6NgG2raWo2nFpp9bqnKWKnUa7EOqJ3mApSwjuc9tJ6dqQk/JJ ru3Ax5yOD7j8THfLW56NRMj792fUimg0yWM/IAOhYKHre6CoWUmwdHJ2gktgZlX5 PQCKgEJVREe9amGMNKLYnX4IiErUSxOvbVS5lNUcPB4oQAuAv2kudi9R7N4YTuUA FLKD4YnOD7CTDkjoZYrM9He9rH21UCg+KUbpaCZNjTMThkNqzmnxkGEZ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEQxnRLJ29iOaQ4Vf2+kAU3DUA/MB8GA1UdIwQY MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1 LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiEFCXqQ 2q107phC+9QH6teraAeVlFl5eVfRejiFbj9AUFat5IzIXRocZoPFYIQmoKuqrxlw z1t2oBzUERCFbzMcL3Csl7kONARR9FIDBJqfVFl+HkxHe7P+ku2MQAw1C15gywEF A7SP8s3evsOysP4K/Jk3/5F+USi4mG7dvBQH6UXNHutUuT3BxDjSf3fDqX+VXLYh A4zD21do2Q0r/VhXbuqPeuGHzb5WfWuQSfuFsFUhWHdkKFGceC4JJ1rv+oXaiDdS RY24GJ+ujEndUeamTzhsrehp3L2tY60X3t4lIAzlpjCNaA9i8STtpvcwfsak0RkZ /cAjb3/8CkOwzg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:20:46 2025 by rpki-client