This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json) Hash identifier: P3BMAgr+TdxfBc1WGKCNFfb4IefFwUBgtcKfhQppgqE= Subject key identifier: 1E:39:4A:CA:E4:0C:73:1E:50:08:B3:37:93:D5:B2:1C:A4:F5:84:49 Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Certificate serial: 019B3D5A31EA362293F368988B2FC6D8ADC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft Manifest number: 060D Signing time: Sat 20 Dec 2025 20:01:19 +0000 Manifest this update: Sat 20 Dec 2025 20:01:19 +0000 Manifest next update: Sun 21 Dec 2025 20:01:19 +0000 Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=) 2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=) 3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: 3LCOipkghKnJiC2aWk6Q/prt7Rin5RwIy+6LMf9kIEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:31:ea:36:22:93:f3:68:98:8b:2f:c6:d8:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Validity Not Before: Dec 20 20:01:19 2025 GMT Not After : Dec 21 20:01:19 2025 GMT Subject: CN=1e394acae40c731e5008b33793d5b21ca4f58449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:5d:e5:55:8f:af:67:28:c1:e6:b2:cc:8a: 81:74:c9:7b:b0:63:47:92:f3:dd:a1:7d:fa:f6:fc: ee:92:ff:e6:c5:d8:d4:25:1d:1d:8c:26:1a:6f:06: 5c:2b:db:de:ff:49:09:66:6e:f6:56:72:f5:1f:b2: 29:b0:2d:13:04:1b:5c:c8:83:bb:9b:fd:d1:ea:77: 53:a3:ab:f7:2c:e5:a1:19:40:58:19:b3:35:6e:b6: d9:de:29:ee:f6:f9:67:cc:06:b0:b7:18:6e:b5:8f: 8e:a6:3e:e2:f6:d1:7d:39:c8:3a:ad:fb:7a:e0:cf: f0:fb:13:7e:c3:95:93:d5:45:b3:61:38:82:8d:b5: e6:29:d0:18:52:88:64:5e:c9:b7:ba:04:e9:c0:8f: 34:bb:b2:96:f2:57:5f:70:fc:4d:a4:95:8b:a8:3e: 9f:15:8f:f1:d5:21:21:d6:1a:8d:bc:4a:50:3c:99: ff:cf:ae:a7:86:95:99:f9:ea:41:63:e8:d5:42:8f: 13:43:76:73:07:53:66:b5:1a:eb:70:46:79:fe:fd: 04:4c:ce:ec:42:36:34:1f:c8:47:1c:13:88:b4:df: de:d5:fb:5b:2d:40:f6:6a:d6:42:f5:b7:76:9b:b9: 3d:b5:ed:4c:60:19:0f:98:cf:cb:58:0f:e5:6f:0c: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:39:4A:CA:E4:0C:73:1E:50:08:B3:37:93:D5:B2:1C:A4:F5:84:49 X509v3 Authority Key Identifier: keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:35:97:13:4d:42:f1:ff:7f:7e:0c:93:7d:0d:45:3a:f4:ac: f5:6c:fd:49:c1:e3:a2:8a:ec:79:dd:5c:b0:fb:65:ff:2e:b9: 61:95:47:1b:80:20:26:50:45:1e:2b:d1:b2:c5:42:0d:d7:ee: 6b:46:6e:41:86:27:1a:d7:ed:39:7b:a7:68:fc:b7:f1:f9:49: 3b:c4:6a:b1:9d:52:03:92:a2:20:23:45:02:ed:a0:ff:65:2c: ce:2a:1a:13:b7:5b:18:47:ad:bc:69:b9:73:0c:a9:97:65:22: 04:4e:a6:ea:21:ad:45:53:bf:6f:a0:8d:f8:7f:a4:f5:1e:ef: 18:d4:82:fb:61:06:03:eb:de:9c:81:6b:50:34:db:34:30:8d: 9d:36:f7:e3:a9:ae:db:21:16:1e:1d:a2:cc:16:9b:17:ef:87: 47:65:88:86:b1:50:36:f0:55:a2:57:51:c2:e0:d6:08:3e:ca: a7:64:11:0d:68:47:53:d7:bc:3d:a2:42:c2:10:a7:30:37:a3: 0e:f8:59:2e:b0:90:48:21:d0:f8:c6:7e:a4:fc:29:be:ca:bb: b3:e9:ca:f2:b4:b3:cd:9c:d2:8f:b6:d8:91:10:79:94:01:50: 94:5a:29:a6:53:4b:e3:5b:fe:df:8c:a9:9b:60:df:71:17:cd: 7d:2d:52:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjHqNiKT82iYiy/G2K3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4 NzE0NTMwHhcNMjUxMjIwMjAwMTE5WhcNMjUxMjIxMjAwMTE5WjAzMTEwLwYDVQQD EygxZTM5NGFjYWU0MGM3MzFlNTAwOGIzMzc5M2Q1YjIxY2E0ZjU4NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsypd5VWPr2coweayzIqBdMl7sGNH kvPdoX369vzukv/mxdjUJR0djCYabwZcK9ve/0kJZm72VnL1H7IpsC0TBBtcyIO7 m/3R6ndTo6v3LOWhGUBYGbM1brbZ3inu9vlnzAawtxhutY+Opj7i9tF9Ocg6rft6 4M/w+xN+w5WT1UWzYTiCjbXmKdAYUohkXsm3ugTpwI80u7KW8ldfcPxNpJWLqD6f FY/x1SEh1hqNvEpQPJn/z66nhpWZ+epBY+jVQo8TQ3ZzB1NmtRrrcEZ5/v0ETM7s QjY0H8hHHBOItN/e1ftbLUD2atZC9bd2m7k9te1MYBkPmM/LWA/lbwwyRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB45SsrkDHMeUAizN5PVshyk9YRJMB8GA1UdIwQY MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzWXE01C 8f9/fgyTfQ1FOvSs9Wz9ScHjoorsed1csPtl/y65YZVHG4AgJlBFHivRssVCDdfu a0ZuQYYnGtftOXunaPy38flJO8RqsZ1SA5KiICNFAu2g/2UszioaE7dbGEetvGm5 cwypl2UiBE6m6iGtRVO/b6CN+H+k9R7vGNSC+2EGA+venIFrUDTbNDCNnTb346mu 2yEWHh2izBabF++HR2WIhrFQNvBVoldRwuDWCD7Kp2QRDWhHU9e8PaJCwhCnMDej DvhZLrCQSCHQ+MZ+pPwpvsq7s+nK8rSzzZzSj7bYkRB5lAFQlFopplNL41v+34yp m2DfcRfNfS1Sww== -----END CERTIFICATE-----Generated at Sun Dec 21 00:28:49 2025 by rpki-client