This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json) Hash identifier: NamrJhCYoVvzOKznhojwMviHRVJIb5X1qTyhW1OcjSo= Subject key identifier: 41:BC:37:71:A8:09:84:99:7A:51:75:88:DB:79:08:A8:2C:BE:F3:F0 Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945 Certificate serial: 019B5AF631CD8E4EE38155E8436519DABB46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft Manifest number: 0685 Signing time: Fri 26 Dec 2025 14:00:42 +0000 Manifest this update: Fri 26 Dec 2025 14:00:42 +0000 Manifest next update: Sat 27 Dec 2025 14:00:42 +0000 Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: L1TZVwJfdAPvzPImp+Vv6WBLhIGoL9c6zV830QstkSQ=) 2: vy5zTXe1FQxKmoVnLtT-YONwy5w.roa (hash: AqKcisSO89b2UHYN+H37mx/RlCQTo8dhRQYzWSzGyh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:31:cd:8e:4e:e3:81:55:e8:43:65:19:da:bb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945 Validity Not Before: Dec 26 14:00:42 2025 GMT Not After : Dec 27 14:00:42 2025 GMT Subject: CN=41bc3771a80984997a517588db7908a82cbef3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:f8:13:30:6f:da:be:b7:6e:a2:be:a6:7f: 45:8c:5b:01:eb:a1:1c:3e:e7:d6:25:37:0b:16:18: 90:73:66:99:6f:70:75:18:2a:e0:65:95:9c:eb:14: f2:83:86:41:6e:1c:83:1e:df:0a:ad:d8:82:1c:c1: 13:02:f1:a4:df:49:b4:64:49:03:e6:58:53:4b:b0: 23:e2:c5:38:2a:2d:19:3a:24:92:76:36:8c:59:b2: 4f:14:87:8f:b2:39:2c:e7:d0:c8:28:ef:41:d8:29: 52:86:8e:79:c9:60:de:48:76:1e:fa:b6:ad:81:a8: 30:97:03:79:a9:e2:dd:77:ce:13:c6:c0:2c:1a:c7: b0:ef:55:2b:12:cd:db:ec:2b:b8:b7:0b:ee:07:60: a4:35:b9:05:04:c2:14:7d:6b:9c:6b:25:1e:4f:fd: a1:d9:57:0a:ab:92:3b:76:c7:6a:bd:67:0d:f2:58: 5a:26:6f:21:13:54:40:79:d7:e8:14:2c:87:4f:6a: f6:78:21:94:eb:96:e0:fd:81:6b:0c:03:53:b6:5f: 83:93:51:1b:01:52:08:1a:65:f4:68:1e:18:e6:95: ef:1c:19:48:d1:f6:e1:c4:2d:9c:cb:de:50:5c:86: b6:73:a8:1b:ec:ed:c1:b3:6a:dd:c4:e0:0c:97:0f: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BC:37:71:A8:09:84:99:7A:51:75:88:DB:79:08:A8:2C:BE:F3:F0 X509v3 Authority Key Identifier: keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3a:c6:da:ea:1c:23:8b:33:16:68:6b:ba:8b:43:1e:0e:8d: 65:ef:b1:8a:b1:1c:1b:8b:05:8f:01:ff:cc:32:ac:73:ec:b5: 14:f6:3f:fd:1b:0b:43:8d:60:c0:b9:17:c5:f2:f7:85:63:c0: d1:ae:74:fc:10:85:b6:d0:64:4b:f6:c3:e1:7e:0d:77:0c:c2: 37:71:e5:bd:b9:b9:82:5d:c5:c9:20:87:24:aa:5f:7b:fc:5e: 0d:39:91:dd:14:aa:81:b0:95:98:c9:5d:0b:1e:6d:b2:fa:9b: d1:c4:57:de:c5:f8:78:c9:5c:48:c6:c0:cf:c8:91:40:e1:95: 67:26:54:a1:fa:01:31:b5:7b:15:5c:11:50:2b:36:e3:21:17: fe:d9:29:18:9c:90:e5:4d:51:44:c9:3d:d2:4d:96:ac:42:ff: 20:1e:85:36:96:97:17:e3:a2:2f:70:62:50:70:91:8c:47:8d: 95:c1:ba:f8:27:6e:2f:e9:8d:a3:d5:ea:f9:8c:d4:6f:2f:c9: 64:59:ef:4f:26:6e:76:b9:3a:97:76:9f:7b:14:3f:aa:56:ca: 7a:bf:9f:21:6a:b4:a4:40:6a:3f:a9:c0:92:3f:e4:bf:37:fb: 23:49:1f:58:52:e5:e0:5d:9c:1b:a8:fc:05:4f:ae:0c:a7:49: fe:b5:ca:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9jHNjk7jgVXoQ2UZ2rtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWFiMTgwY2IzNTE3MTg2MjIxYjM5OTliMDhiODNhZjRm NjY5NDUwHhcNMjUxMjI2MTQwMDQyWhcNMjUxMjI3MTQwMDQyWjAzMTEwLwYDVQQD Eyg0MWJjMzc3MWE4MDk4NDk5N2E1MTc1ODhkYjc5MDhhODJjYmVmM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWL4EzBv2r63bqK+pn9FjFsB66Ec PufWJTcLFhiQc2aZb3B1GCrgZZWc6xTyg4ZBbhyDHt8KrdiCHMETAvGk30m0ZEkD 5lhTS7Aj4sU4Ki0ZOiSSdjaMWbJPFIePsjks59DIKO9B2ClSho55yWDeSHYe+rat gagwlwN5qeLdd84TxsAsGsew71UrEs3b7Cu4twvuB2CkNbkFBMIUfWucayUeT/2h 2VcKq5I7dsdqvWcN8lhaJm8hE1RAedfoFCyHT2r2eCGU65bg/YFrDANTtl+Dk1Eb AVIIGmX0aB4Y5pXvHBlI0fbhxC2cy95QXIa2c6gb7O3Bs2rdxOAMlw9ehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEG8N3GoCYSZelF1iNt5CKgsvvPwMB8GA1UdIwQY MBaAFIgasYDLNRcYYiGzmZsIuDr09mlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2Qt M2E2M2JmNzYzMGY1LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2QtM2E2M2JmNzYzMGY1 LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjrG2uoc I4szFmhruotDHg6NZe+xirEcG4sFjwH/zDKsc+y1FPY//RsLQ41gwLkXxfL3hWPA 0a50/BCFttBkS/bD4X4NdwzCN3Hlvbm5gl3FySCHJKpfe/xeDTmR3RSqgbCVmMld Cx5tsvqb0cRX3sX4eMlcSMbAz8iRQOGVZyZUofoBMbV7FVwRUCs24yEX/tkpGJyQ 5U1RRMk90k2WrEL/IB6FNpaXF+OiL3BiUHCRjEeNlcG6+CduL+mNo9Xq+YzUby/J ZFnvTyZudrk6l3afexQ/qlbKer+fIWq0pEBqP6nAkj/kvzf7I0kfWFLl4F2cG6j8 BU+uDKdJ/rXK/A== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:53 2025 by rpki-client