This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json) Hash identifier: bIZN/6I74rPHg4DPNZZoWpLhXexg/DLi45UkTbGAeBA= Subject key identifier: 90:9E:E3:FB:E7:55:63:B4:F5:C9:C0:4D:AA:9E:43:28:96:89:7E:93 Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Certificate serial: 019B3C7ED0A5EDDC6923DAD0D623EDB06397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft Manifest number: 104E Signing time: Sat 20 Dec 2025 16:01:42 +0000 Manifest this update: Sat 20 Dec 2025 16:01:42 +0000 Manifest next update: Sun 21 Dec 2025 16:01:42 +0000 Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=) 2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: /uWWHwoeGc4y0IL+L1O+/crKdaTN3l9w/XjasNmDOKs=) 3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=) 4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:d0:a5:ed:dc:69:23:da:d0:d6:23:ed:b0:63:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Validity Not Before: Dec 20 16:01:42 2025 GMT Not After : Dec 21 16:01:42 2025 GMT Subject: CN=909ee3fbe75563b4f5c9c04daa9e432896897e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:4a:ab:7d:9b:bc:9c:88:68:12:43:fd:32: 62:f9:2b:2a:ed:f5:c1:84:10:97:86:24:e2:3c:4f: c4:6c:8b:6d:23:62:e4:f1:29:6f:fa:89:5a:19:2c: 34:d2:78:7f:b0:ae:46:f5:bb:03:66:df:6c:6e:55: 24:23:49:ae:c4:ab:64:ab:93:65:c7:1e:02:6c:e1: 6b:11:2d:ac:bc:a5:46:4d:64:d6:7e:37:8d:8d:e3: d1:30:22:83:81:83:c8:af:31:b2:fb:28:85:68:2f: f8:42:30:82:2a:16:7d:1e:f4:1f:76:a9:f1:73:d7: b0:2c:09:0d:f3:03:6b:8c:53:46:8a:2e:85:8a:79: 7c:90:ba:8f:0a:7b:98:c0:fc:39:9b:e7:cc:f8:64: 99:ba:32:c7:39:82:af:73:62:eb:ab:df:f8:a8:9c: 25:07:a2:e4:83:28:7f:ea:e9:9e:6e:bd:8d:e6:e0: 40:8e:0e:93:e3:79:ef:8f:69:a8:64:17:80:4f:4c: 15:67:32:04:49:6b:ce:03:d7:ec:c5:6c:05:a8:ce: c5:b5:33:e2:0a:e0:63:6f:1f:59:be:3b:bc:19:91: d6:59:d8:04:de:82:e5:69:26:cf:54:4e:26:fc:5f: 89:b5:af:17:fc:ec:44:60:c4:39:89:ee:62:8e:d4: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9E:E3:FB:E7:55:63:B4:F5:C9:C0:4D:AA:9E:43:28:96:89:7E:93 X509v3 Authority Key Identifier: keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:5f:92:ac:07:4d:ba:a7:d3:c9:d6:dc:6a:58:16:aa:8a: 3b:a2:3e:f8:44:f1:96:f2:46:f7:88:58:3b:e2:4f:fe:e4:13: b4:05:5c:e1:ed:96:23:d2:e5:73:53:83:07:12:2b:0b:9f:5d: 69:b1:8e:d7:0a:f6:90:86:92:7a:50:1a:11:cb:ed:6c:95:cd: bf:03:56:de:00:5e:9b:2b:e2:25:56:54:8c:b3:bd:f6:b0:9f: aa:37:f5:6b:f4:85:6a:77:f5:47:fd:2e:c8:89:ba:d0:c2:9e: bd:be:b0:5f:a6:ce:db:39:69:d6:60:7d:e2:54:3f:ea:d9:87: 97:4a:a8:27:36:e5:d6:07:37:84:a6:7b:b7:19:fe:46:87:28: bb:39:08:f2:5e:41:fa:45:4c:16:e1:8e:b0:d2:60:72:cb:e6: ad:6d:1e:35:bf:33:c6:ce:43:c6:43:c6:ce:60:93:78:0d:a6: 6b:e6:18:a5:13:20:e0:f6:0f:ee:20:47:fa:5c:aa:72:24:7a: 99:43:6d:f7:63:19:ed:6b:23:29:e9:d6:be:28:f9:27:b5:e8: 69:93:bd:ac:06:fa:3d:3f:56:d6:02:2d:f2:62:55:bf:cb:cd: a5:87:d4:b0:43:21:9b:7e:f2:df:8c:76:9f:e8:63:a5:dd:9c: 32:c7:0e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ftCl7dxpI9rQ1iPtsGOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4 ZTI0YTYwHhcNMjUxMjIwMTYwMTQyWhcNMjUxMjIxMTYwMTQyWjAzMTEwLwYDVQQD Eyg5MDllZTNmYmU3NTU2M2I0ZjVjOWMwNGRhYTllNDMyODk2ODk3ZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+VKq32bvJyIaBJD/TJi+Ssq7fXB hBCXhiTiPE/EbIttI2Lk8Slv+olaGSw00nh/sK5G9bsDZt9sblUkI0muxKtkq5Nl xx4CbOFrES2svKVGTWTWfjeNjePRMCKDgYPIrzGy+yiFaC/4QjCCKhZ9HvQfdqnx c9ewLAkN8wNrjFNGii6Finl8kLqPCnuYwPw5m+fM+GSZujLHOYKvc2Lrq9/4qJwl B6Lkgyh/6umebr2N5uBAjg6T43nvj2moZBeAT0wVZzIESWvOA9fsxWwFqM7FtTPi CuBjbx9Zvju8GZHWWdgE3oLlaSbPVE4m/F+Jta8X/OxEYMQ5ie5ijtSpCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCe4/vnVWO09cnATaqeQyiWiX6TMB8GA1UdIwQY MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt N2EwYjE0NWNmNjJiLzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyRfkqwH Tbqn08nW3GpYFqqKO6I++ETxlvJG94hYO+JP/uQTtAVc4e2WI9Llc1ODBxIrC59d abGO1wr2kIaSelAaEcvtbJXNvwNW3gBemyviJVZUjLO99rCfqjf1a/SFanf1R/0u yIm60MKevb6wX6bO2zlp1mB94lQ/6tmHl0qoJzbl1gc3hKZ7txn+RocouzkI8l5B +kVMFuGOsNJgcsvmrW0eNb8zxs5DxkPGzmCTeA2ma+YYpRMg4PYP7iBH+lyqciR6 mUNt92MZ7WsjKenWvij5J7XoaZO9rAb6PT9W1gIt8mJVv8vNpYfUsEMhm37y34x2 n+hjpd2cMscOuQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:40 2025 by rpki-client