This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json) Hash identifier: Q26yivx8DJHxtDG2ghZuS+zhDd/EpeFD+Pi/MU3fNpI= Subject key identifier: 06:78:B0:F0:A1:50:71:34:E0:7D:84:32:B9:A6:12:F3:98:9B:72:1F Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Certificate serial: 019B766F5C8AA6002280FC04CE6726430E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft Manifest number: 17AB Signing time: Wed 31 Dec 2025 22:02:48 +0000 Manifest this update: Wed 31 Dec 2025 22:02:48 +0000 Manifest next update: Thu 01 Jan 2026 22:02:48 +0000 Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=) 2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: KO5UsTMa4APeyWI05XU4qJlpYAFqgvDCmMqSaztNUEY=) 3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6f:5c:8a:a6:00:22:80:fc:04:ce:67:26:43:0e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Validity Not Before: Dec 31 22:02:48 2025 GMT Not After : Jan 1 22:02:48 2026 GMT Subject: CN=0678b0f0a1507134e07d8432b9a612f3989b721f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:58:0c:21:45:b8:9e:a3:fc:01:8b:22:61: 42:2c:c6:13:ab:5e:b6:39:58:e8:cd:05:0a:12:fb: 77:43:1a:04:ea:0f:20:fe:fe:79:8b:c9:69:f6:c4: b9:c9:89:ab:2a:67:d2:ea:0e:50:11:d0:54:36:3b: 77:81:08:1e:09:62:76:0a:f7:b5:db:ab:c4:60:98: b5:61:37:a2:8a:a3:cb:e2:22:48:8a:50:98:06:3e: e7:a0:b1:ac:32:0e:62:8c:8d:f4:8a:7b:4e:69:13: d1:14:31:1e:13:57:08:3c:e1:cf:9e:1d:bf:e4:a6: 7f:26:72:6b:3a:d0:b1:39:49:9f:97:ee:05:37:11: d5:06:f6:87:6e:ad:6a:46:66:3e:59:6d:62:25:bb: c7:14:49:1d:01:6a:be:6c:03:ca:96:cb:b4:cb:08: fe:7c:2f:e1:67:39:e1:1b:b5:51:ba:8a:18:78:13: 0a:cb:b1:0f:64:f6:80:3c:a3:76:92:ef:98:4c:4d: a6:a5:09:cf:29:1f:88:67:22:2e:f2:c7:be:71:a3: 27:f5:91:6e:65:f5:a0:2f:21:1f:40:a5:5e:cf:25: 53:74:30:8e:e2:87:5e:5f:ad:a5:96:47:c7:3a:89: f7:34:3d:e0:1f:0e:45:25:36:f6:13:43:4d:61:b3: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:78:B0:F0:A1:50:71:34:E0:7D:84:32:B9:A6:12:F3:98:9B:72:1F X509v3 Authority Key Identifier: keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a8:21:7c:43:82:35:20:10:c9:b1:ac:e9:53:e3:31:bf:78: 6d:b3:68:f5:26:12:29:bd:37:48:3e:10:ee:c1:3a:c5:9f:1c: d9:d9:f1:da:b1:91:06:e6:39:ea:24:f1:f1:eb:f3:66:06:4b: b2:4d:98:6b:16:74:8f:a7:63:27:76:dc:27:bd:2f:a5:8f:c4: e1:b2:80:ff:11:b1:0f:70:f4:7a:b2:70:e3:97:74:81:ce:18: 79:57:33:98:5d:08:9f:70:36:2a:ff:14:34:a3:37:34:62:5a: c1:68:ee:14:2d:75:2d:7b:20:0b:41:bf:54:37:c3:15:67:e1: d5:00:3f:c6:f4:66:bd:f0:97:aa:0f:13:01:a7:43:ab:87:14: 59:b9:33:dc:27:99:f8:16:dc:78:5c:f4:70:91:cd:71:54:0d: 09:90:d8:21:96:b3:53:cc:45:f8:ab:bc:2c:2a:4b:23:99:8d: b5:11:08:31:27:4b:8a:a6:b3:ce:8c:7d:04:99:d9:4a:70:a9: d8:96:6e:c0:db:e4:51:55:c0:cb:24:55:c7:12:07:75:35:1b: 57:b0:ee:f8:d3:8a:bc:a5:b2:79:04:74:e5:f0:0f:60:e6:71: e3:94:74:dd:19:8a:0c:39:ae:98:ce:7d:3b:ff:b4:2a:ff:c0: ff:98:08:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2b1yKpgAigPwEzmcmQw4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5 YzE4ZDUwHhcNMjUxMjMxMjIwMjQ4WhcNMjYwMTAxMjIwMjQ4WjAzMTEwLwYDVQQD EygwNjc4YjBmMGExNTA3MTM0ZTA3ZDg0MzJiOWE2MTJmMzk4OWI3MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19ZYDCFFuJ6j/AGLImFCLMYTq162 OVjozQUKEvt3QxoE6g8g/v55i8lp9sS5yYmrKmfS6g5QEdBUNjt3gQgeCWJ2Cve1 26vEYJi1YTeiiqPL4iJIilCYBj7noLGsMg5ijI30intOaRPRFDEeE1cIPOHPnh2/ 5KZ/JnJrOtCxOUmfl+4FNxHVBvaHbq1qRmY+WW1iJbvHFEkdAWq+bAPKlsu0ywj+ fC/hZznhG7VRuooYeBMKy7EPZPaAPKN2ku+YTE2mpQnPKR+IZyIu8se+caMn9ZFu ZfWgLyEfQKVezyVTdDCO4odeX62llkfHOon3ND3gHw5FJTb2E0NNYbPi5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ4sPChUHE04H2EMrmmEvOYm3IfMB8GA1UdIwQY MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt MzM0MTU5NjdjMjEzLzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKghfEOC NSAQybGs6VPjMb94bbNo9SYSKb03SD4Q7sE6xZ8c2dnx2rGRBuY56iTx8evzZgZL sk2YaxZ0j6djJ3bcJ70vpY/E4bKA/xGxD3D0erJw45d0gc4YeVczmF0In3A2Kv8U NKM3NGJawWjuFC11LXsgC0G/VDfDFWfh1QA/xvRmvfCXqg8TAadDq4cUWbkz3CeZ +BbceFz0cJHNcVQNCZDYIZazU8xF+Ku8LCpLI5mNtREIMSdLiqazzox9BJnZSnCp 2JZuwNvkUVXAyyRVxxIHdTUbV7Du+NOKvKWyeQR05fAPYOZx45R03RmKDDmumM59 O/+0Kv/A/5gISQ== -----END CERTIFICATE-----Generated at Thu Jan 1 01:04:30 2026 by rpki-client