This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json) Hash identifier: xcfKfM2HJBlWGMOWc5Bg1Yc93KHCqG5016Y4/35qMNM= Subject key identifier: 45:B8:DE:95:92:0D:8C:5D:DA:14:1E:99:3E:4F:95:C3:9E:C4:59:92 Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88 Certificate serial: 019B3569B16FBC65575F499215FEA10CCCC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 07:01:17 +0000 Manifest this update: Fri 19 Dec 2025 07:01:17 +0000 Manifest next update: Sat 20 Dec 2025 07:01:17 +0000 Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=) 2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=) 3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: X+3pzB2r4/NykargM07Q5NTYbmyW7nmdUFSkwMaKwEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:b1:6f:bc:65:57:5f:49:92:15:fe:a1:0c:cc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88 Validity Not Before: Dec 19 07:01:17 2025 GMT Not After : Dec 20 07:01:17 2025 GMT Subject: CN=45b8de95920d8c5dda141e993e4f95c39ec45992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:40:27:65:68:8f:fd:7e:a5:bd:35:05:3a: e1:32:d5:dc:55:5e:37:65:15:72:37:50:3b:e4:be: 64:ff:65:fc:09:b6:7b:fe:06:4c:72:3b:2d:94:f4: f5:27:c2:3f:71:29:67:91:d5:7a:5e:62:fc:fa:f3: 7a:f9:d2:d9:a6:d0:7e:ab:23:d1:9a:99:58:73:82: b5:9e:a8:d8:6f:21:9e:ea:e8:02:dd:bd:e5:bc:51: 7d:85:50:70:05:af:d7:10:ca:14:8b:64:dc:b6:46: b4:c3:44:9f:6a:e2:ce:e1:b2:4b:32:e4:6c:3a:e2: ad:c2:50:b9:a1:40:20:5d:b9:33:d2:cf:49:ca:75: bb:c0:e1:ff:7b:6e:45:3b:2a:4a:d3:6d:da:bf:09: 3a:c6:dd:67:1d:3f:8a:3c:ca:24:03:41:05:56:8d: 52:7c:67:46:98:2f:8a:fa:75:d7:ff:e0:88:6a:75: 26:d5:d8:a3:fb:d8:55:e5:4c:d0:d2:25:4b:21:8f: 34:f8:fd:11:d2:58:0b:b7:76:98:31:80:6a:b9:af: d0:a3:32:5e:b3:21:94:cc:59:4c:62:6e:a3:0f:6b: 75:c9:21:4f:1f:64:a3:c1:c3:d4:f3:1c:03:1a:7d: 33:52:fb:26:8c:21:8f:9c:cd:04:4c:ca:50:35:0f: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B8:DE:95:92:0D:8C:5D:DA:14:1E:99:3E:4F:95:C3:9E:C4:59:92 X509v3 Authority Key Identifier: keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d9:ff:b5:af:60:f8:f1:57:5d:c3:a2:97:1b:c3:ec:c0:c0: da:0a:42:38:0f:6f:84:23:98:3a:c4:f3:70:94:32:11:c3:93: 5e:b9:74:41:42:30:7b:4a:51:b6:c3:13:74:a6:02:b8:6e:31: 9d:83:b6:98:d7:e8:92:80:8c:5f:93:fb:4e:b1:d2:36:7b:f8: 4c:8d:69:12:bf:93:ab:8c:94:cc:9d:b7:c8:1f:01:40:d7:d6: 89:db:ac:a6:e1:b2:fe:63:46:c7:38:0e:e9:4a:46:78:1d:4a: 61:c2:51:c2:65:c6:66:6a:15:67:8d:03:a4:05:ea:cc:c1:b4: 18:54:3f:7e:7f:06:22:59:cf:a2:34:27:32:d2:3d:f2:30:3d: aa:3a:d6:7b:95:6a:5c:a0:aa:aa:85:31:f7:25:07:92:75:2c: 8f:e3:bb:b3:a5:94:4c:b3:38:17:67:94:50:da:22:f0:4d:ef: cc:14:b9:0c:3d:31:0a:32:f1:7b:50:96:d0:2c:71:52:12:0e: 10:e1:b3:11:c2:a7:59:68:2f:2b:a7:56:64:7d:da:d8:f8:7b: bb:13:1b:8e:af:ee:2c:7f:01:99:2c:3c:8e:3f:04:38:09:e8: 45:45:4b:ca:63:32:00:45:97:c9:33:5d:8b:eb:67:45:76:e1: 31:ca:8e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1abFvvGVXX0mSFf6hDMzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj NzRhODgwHhcNMjUxMjE5MDcwMTE3WhcNMjUxMjIwMDcwMTE3WjAzMTEwLwYDVQQD Eyg0NWI4ZGU5NTkyMGQ4YzVkZGExNDFlOTkzZTRmOTVjMzllYzQ1OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwlAJ2Voj/1+pb01BTrhMtXcVV43 ZRVyN1A75L5k/2X8CbZ7/gZMcjstlPT1J8I/cSlnkdV6XmL8+vN6+dLZptB+qyPR mplYc4K1nqjYbyGe6ugC3b3lvFF9hVBwBa/XEMoUi2Tctka0w0SfauLO4bJLMuRs OuKtwlC5oUAgXbkz0s9JynW7wOH/e25FOypK023avwk6xt1nHT+KPMokA0EFVo1S fGdGmC+K+nXX/+CIanUm1dij+9hV5UzQ0iVLIY80+P0R0lgLt3aYMYBqua/QozJe syGUzFlMYm6jD2t1ySFPH2SjwcPU8xwDGn0zUvsmjCGPnM0ETMpQNQ9VxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW43pWSDYxd2hQemT5PlcOexFmSMB8GA1UdIwQY MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt NDZhMGRmNzc0ZmUxLzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdn/ta9g +PFXXcOilxvD7MDA2gpCOA9vhCOYOsTzcJQyEcOTXrl0QUIwe0pRtsMTdKYCuG4x nYO2mNfokoCMX5P7TrHSNnv4TI1pEr+Tq4yUzJ23yB8BQNfWiduspuGy/mNGxzgO 6UpGeB1KYcJRwmXGZmoVZ40DpAXqzMG0GFQ/fn8GIlnPojQnMtI98jA9qjrWe5Vq XKCqqoUx9yUHknUsj+O7s6WUTLM4F2eUUNoi8E3vzBS5DD0xCjLxe1CW0CxxUhIO EOGzEcKnWWgvK6dWZH3a2Ph7uxMbjq/uLH8BmSw8jj8EOAnoRUVLymMyAEWXyTNd i+tnRXbhMcqO8g== -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:29 2025 by rpki-client