This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json) Hash identifier: tD4arxs9Ggh3oyYypx5HIv+vbDqq6rIsFwlWyD27UCE= Subject key identifier: DA:D8:F3:E0:8F:49:1E:8C:03:00:4C:DD:EA:8F:6D:C1:8D:D0:11:80 Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93 Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693 Certificate serial: 019B665639798BF15197C30149478EAC71D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft Manifest number: 14AC Signing time: Sun 28 Dec 2025 19:01:25 +0000 Manifest this update: Sun 28 Dec 2025 19:01:25 +0000 Manifest next update: Mon 29 Dec 2025 19:01:25 +0000 Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=) 2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: 0blRa1XlVsrFcJaELO9bBDkWrhugJFm/dKNAOAkQLvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:39:79:8b:f1:51:97:c3:01:49:47:8e:ac:71:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21506035b32cc33af0589c55be849775e92c4693 Validity Not Before: Dec 28 19:01:25 2025 GMT Not After : Dec 29 19:01:25 2025 GMT Subject: CN=dad8f3e08f491e8c03004cddea8f6dc18dd01180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:e9:3b:5a:ad:46:30:78:f1:7e:95:00:13: 0e:e1:bb:71:7f:f1:de:a4:33:57:82:7e:72:cb:c2: 21:54:b1:08:ad:d6:98:4b:b3:74:7d:79:6e:d4:23: c8:43:18:72:c2:ce:d1:12:d5:a5:61:b1:a9:be:05: 2b:9f:ac:86:d6:59:91:86:5f:66:dd:32:e3:79:18: 66:43:f3:a1:86:57:5d:79:7b:3b:02:44:11:c5:5f: f2:2d:d9:5a:96:05:c3:3a:e7:ae:de:2b:d0:84:c5: a6:e8:77:97:24:4e:4b:dd:fc:0f:a6:45:62:32:b5: e1:6a:10:be:35:40:6e:95:44:11:f3:67:f5:eb:d3: 4c:66:b5:f1:b3:18:67:b1:98:30:44:cc:ab:75:64: cb:89:ac:d7:2d:e3:20:d3:4c:b6:dd:be:61:2b:78: 23:81:b8:32:62:2b:7c:71:1d:c1:eb:90:67:a4:1f: 53:83:81:66:bf:d8:44:aa:87:6b:71:e5:91:60:ef: 13:3c:08:f8:1f:02:8c:60:c6:05:f0:b1:8e:75:e1: 65:f9:7d:87:e8:82:6d:aa:b3:75:11:9f:e3:7c:48: 03:3e:c4:a2:73:ef:7a:d0:e0:2e:27:35:9f:99:6f: a9:48:38:61:bd:d9:32:a8:fa:49:c5:3f:45:c6:2f: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D8:F3:E0:8F:49:1E:8C:03:00:4C:DD:EA:8F:6D:C1:8D:D0:11:80 X509v3 Authority Key Identifier: keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8f:3d:de:2d:78:d4:7d:5d:3c:38:82:a0:89:d4:a7:e1:b8: 69:35:23:b2:f3:e3:39:52:8d:a7:d6:d8:fd:66:43:3e:7b:6d: 4d:99:f1:fe:be:68:e1:e5:d5:67:1a:b8:1b:b8:0b:b1:e8:c3: a0:f4:85:32:3c:1e:db:c7:43:8c:f3:b2:36:67:80:19:b4:b7: 6b:88:d0:8f:9e:89:7d:56:ac:f4:45:5e:b0:1b:48:b2:d6:af: 75:77:22:e1:99:4d:05:ea:1f:d2:1b:0b:cb:65:6c:cb:04:6b: 1e:f3:7b:ab:e6:fc:ce:70:a5:d9:a5:bd:df:de:fe:56:7a:df: 1e:53:6e:9d:8b:11:46:75:74:53:9f:08:98:c7:40:77:ed:fe: 55:35:72:3a:ed:a5:01:27:08:0a:e2:90:f4:68:98:7b:2c:c5: 0e:2a:1c:5b:76:e6:3a:5d:03:af:bc:95:40:1e:f5:0b:3f:06: 97:a8:e7:29:f2:fe:24:ef:e5:53:74:4c:74:1a:62:81:e2:7a: c5:51:3a:77:3e:52:d9:cc:a9:d9:a4:b9:f6:5a:5a:dc:29:bf: 26:1d:6c:82:97:d5:36:5e:a8:9d:cc:2b:a4:4f:fc:dc:e1:13: 25:c3:ed:e3:7a:ea:8f:47:d5:3f:4f:89:da:d8:83:c1:25:67: 3f:9d:70:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVjl5i/FRl8MBSUeOrHHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTA2MDM1YjMyY2MzM2FmMDU4OWM1NWJlODQ5Nzc1ZTky YzQ2OTMwHhcNMjUxMjI4MTkwMTI1WhcNMjUxMjI5MTkwMTI1WjAzMTEwLwYDVQQD EyhkYWQ4ZjNlMDhmNDkxZThjMDMwMDRjZGRlYThmNmRjMThkZDAxMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYzpO1qtRjB48X6VABMO4btxf/He pDNXgn5yy8IhVLEIrdaYS7N0fXlu1CPIQxhyws7REtWlYbGpvgUrn6yG1lmRhl9m 3TLjeRhmQ/OhhlddeXs7AkQRxV/yLdlalgXDOueu3ivQhMWm6HeXJE5L3fwPpkVi MrXhahC+NUBulUQR82f169NMZrXxsxhnsZgwRMyrdWTLiazXLeMg00y23b5hK3gj gbgyYit8cR3B65BnpB9Tg4Fmv9hEqodrceWRYO8TPAj4HwKMYMYF8LGOdeFl+X2H 6IJtqrN1EZ/jfEgDPsSic+960OAuJzWfmW+pSDhhvdkyqPpJxT9Fxi/tgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrY8+CPSR6MAwBM3eqPbcGN0BGAMB8GA1UdIwQY MBaAFCFQYDWzLMM68FicVb6El3XpLEaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUt MGM3YTg3MTk2YzM1LzEvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUtMGM3YTg3MTk2YzM1 LzEvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFo893i14 1H1dPDiCoInUp+G4aTUjsvPjOVKNp9bY/WZDPnttTZnx/r5o4eXVZxq4G7gLsejD oPSFMjwe28dDjPOyNmeAGbS3a4jQj56JfVas9EVesBtIstavdXci4ZlNBeof0hsL y2VsywRrHvN7q+b8znCl2aW9397+VnrfHlNunYsRRnV0U58ImMdAd+3+VTVyOu2l AScICuKQ9GiYeyzFDiocW3bmOl0Dr7yVQB71Cz8Gl6jnKfL+JO/lU3RMdBpigeJ6 xVE6dz5S2cyp2aS59lpa3Cm/Jh1sgpfVNl6oncwrpE/83OETJcPt43rqj0fVP0+J 2tiDwSVnP51wvA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:57 2025 by rpki-client