This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json) Hash identifier: C0xzkQn7kv/se+RDGhE7aTeB2Qd9NEb2ohb5eEe6YdA= Subject key identifier: 78:0A:36:97:ED:A8:6C:5F:FF:05:92:6C:49:9C:DD:B7:49:89:FE:0B Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Certificate serial: 019B69C4BF32A424C626E0D5A2D6807D5026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft Manifest number: 0624 Signing time: Mon 29 Dec 2025 11:01:00 +0000 Manifest this update: Mon 29 Dec 2025 11:01:00 +0000 Manifest next update: Tue 30 Dec 2025 11:01:00 +0000 Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=) 2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=) 3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: gaas/YyRGk0APR/lmIKyVcSgeARR4ebOiF0WE9Ow6sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:bf:32:a4:24:c6:26:e0:d5:a2:d6:80:7d:50:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Validity Not Before: Dec 29 11:01:00 2025 GMT Not After : Dec 30 11:01:00 2025 GMT Subject: CN=780a3697eda86c5fff05926c499cddb74989fe0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:89:9f:16:13:ae:8c:cd:a7:5f:4e:cc:34: 01:7e:c1:bf:df:38:d6:f9:88:42:57:1f:33:1f:fe: 04:41:10:4b:98:8f:1f:d0:aa:eb:d8:98:15:6c:e0: 71:9c:4f:e9:77:11:19:1e:f6:48:be:dc:e7:d3:07: 45:57:83:f7:57:dc:ca:c0:7b:0a:5f:a3:6e:33:ef: b1:e8:62:98:d5:6b:05:95:3a:95:bb:33:ff:4f:6e: ce:16:d6:b6:0a:53:6c:6a:1d:8c:18:c3:f2:af:a5: 17:6b:7d:2b:be:02:98:1f:6d:11:9d:36:f4:b4:33: 24:52:03:6d:09:cd:61:d4:55:aa:22:88:85:6c:d0: a2:6b:49:2f:90:8a:c6:a0:79:24:e7:d5:29:a4:93: f3:a8:7f:85:22:79:d0:17:cf:54:f8:8a:3b:81:8d: 09:a5:88:e3:7e:86:76:f0:84:57:45:d9:81:eb:e6: fa:9d:10:61:3d:12:7a:3a:39:e5:db:55:a1:6f:1c: e4:1c:1f:5c:c6:2a:f0:75:c0:d9:09:5c:86:5d:5c: 31:78:8d:82:c8:2b:20:eb:6e:01:d6:82:7e:e7:21: a6:f9:4e:3b:43:a7:49:9d:7f:fd:5d:d9:4d:fa:82: 43:2f:db:44:f3:66:dd:d7:5a:0c:79:d3:bc:93:80: a2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0A:36:97:ED:A8:6C:5F:FF:05:92:6C:49:9C:DD:B7:49:89:FE:0B X509v3 Authority Key Identifier: keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fe:fa:3e:d9:48:6e:37:04:97:e7:c8:d5:ef:87:10:86:df: 32:77:f4:f0:59:4a:03:12:2b:96:b8:d1:b7:13:c2:12:9e:db: 67:58:2a:49:b2:5d:77:c5:27:08:9c:df:06:a7:03:39:a0:da: 13:33:95:b4:df:e4:bc:a2:f6:42:ca:ec:07:15:dc:3f:34:d0: e5:fe:4b:60:3f:da:a9:99:cd:9a:84:81:5a:ea:29:9d:58:c2: 52:d4:f1:15:b4:08:c8:ed:d7:06:30:4d:5f:29:35:c7:70:95: 17:de:72:ea:06:e0:7f:d7:4d:8b:6e:eb:18:ad:0f:78:94:f5: d0:b4:47:ad:11:5e:70:34:a1:ca:dc:b4:e1:04:68:4d:7c:b9: e8:ce:10:57:de:d3:4b:2e:24:9f:e7:70:44:b3:08:e2:5e:6d: 3d:b1:32:7f:32:90:5f:ca:66:e8:75:e2:68:aa:4d:ff:31:d7: 5c:15:c6:a4:d3:60:0d:37:4c:5e:57:33:b9:e1:d3:4e:5e:1c: 50:48:f6:52:53:74:66:18:b1:4f:90:a8:5b:43:98:5b:33:ac: 15:9c:cd:b9:5b:85:0d:82:0e:3e:20:aa:38:bd:a5:a9:92:12: 73:f3:4c:e4:b2:c1:6e:5c:bf:2f:b3:e1:20:75:f2:94:29:3a: 1b:ab:96:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxL8ypCTGJuDVotaAfVAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4 NzE0NTMwHhcNMjUxMjI5MTEwMTAwWhcNMjUxMjMwMTEwMTAwWjAzMTEwLwYDVQQD Eyg3ODBhMzY5N2VkYTg2YzVmZmYwNTkyNmM0OTljZGRiNzQ5ODlmZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVyJnxYTrozNp19OzDQBfsG/3zjW +YhCVx8zH/4EQRBLmI8f0Krr2JgVbOBxnE/pdxEZHvZIvtzn0wdFV4P3V9zKwHsK X6NuM++x6GKY1WsFlTqVuzP/T27OFta2ClNsah2MGMPyr6UXa30rvgKYH20RnTb0 tDMkUgNtCc1h1FWqIoiFbNCia0kvkIrGoHkk59UppJPzqH+FInnQF89U+Io7gY0J pYjjfoZ28IRXRdmB6+b6nRBhPRJ6Ojnl21WhbxzkHB9cxirwdcDZCVyGXVwxeI2C yCsg624B1oJ+5yGm+U47Q6dJnX/9XdlN+oJDL9tE82bd11oMedO8k4CinwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgKNpftqGxf/wWSbEmc3bdJif4LMB8GA1UdIwQY MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/76PtlI bjcEl+fI1e+HEIbfMnf08FlKAxIrlrjRtxPCEp7bZ1gqSbJdd8UnCJzfBqcDOaDa EzOVtN/kvKL2QsrsBxXcPzTQ5f5LYD/aqZnNmoSBWuopnVjCUtTxFbQIyO3XBjBN Xyk1x3CVF95y6gbgf9dNi27rGK0PeJT10LRHrRFecDShyty04QRoTXy56M4QV97T Sy4kn+dwRLMI4l5tPbEyfzKQX8pm6HXiaKpN/zHXXBXGpNNgDTdMXlczueHTTl4c UEj2UlN0ZhixT5CoW0OYWzOsFZzNuVuFDYIOPiCqOL2lqZISc/NM5LLBbly/L7Ph IHXylCk6G6uWRg== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:37 2025 by rpki-client