This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json) Hash identifier: 3OLXcc+gU4ygsdXl3G71XBFMlfCjvB+AaI9D7Xsepjs= Subject key identifier: 8B:EF:52:CA:7D:27:1F:58:B6:5D:8B:51:C3:9C:8B:F7:EE:69:B9:50 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B0E5BF7015590F3409DE4201B11130CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft Manifest number: 177F Signing time: Thu 11 Dec 2025 17:01:06 +0000 Manifest this update: Thu 11 Dec 2025 17:01:06 +0000 Manifest next update: Fri 12 Dec 2025 17:01:06 +0000 Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=) 2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=) 3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=) 4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=) 5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=) 6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: yysRWclWw3Xz6y96PGhjhHL5xQ/EENjOsMHlBuLgIvw=) 7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=) 8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=) 9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=) 10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=) 11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=) 12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=) 13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=) 14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=) 15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=) 16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=) 17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=) 18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=) 19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=) 20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:f7:01:55:90:f3:40:9d:e4:20:1b:11:13:0c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Dec 11 17:01:06 2025 GMT Not After : Dec 12 17:01:06 2025 GMT Subject: CN=8bef52ca7d271f58b65d8b51c39c8bf7ee69b950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:4e:d9:c7:d8:ee:cb:16:56:06:b2:3e:41: e1:7b:2d:37:77:45:72:48:83:57:5a:b5:e5:a6:95: 46:a8:c6:3c:ca:ee:5c:0a:93:d5:ef:65:49:f7:78: 00:21:e5:de:af:f2:83:eb:5f:6d:b1:b1:8a:4a:6b: 9b:cd:96:d9:c2:45:ac:a4:03:db:26:2a:08:0d:64: bb:5f:30:53:26:85:33:0e:f4:3d:fb:eb:ed:7b:ad: 67:64:af:f9:54:7b:d2:89:e1:bc:0d:f5:d4:36:61: e8:e5:ec:29:8c:b5:6d:2b:eb:79:5c:e3:ae:d1:18: 58:c3:9c:58:91:fd:d9:68:e6:f3:e1:51:17:fb:a5: 47:40:64:88:f7:06:40:54:a9:4f:11:fe:79:db:04: a5:b5:c7:17:b2:9a:b6:20:8f:72:c8:b0:55:91:aa: de:6a:33:3d:e8:8b:44:8a:91:a0:06:c5:fa:df:d9: e5:a3:12:84:fd:1d:86:24:e4:e8:23:8f:0b:7c:06: d6:8f:ad:f8:79:8d:6c:da:4a:e5:eb:58:3b:48:77: 41:ac:cd:12:8c:60:2e:f8:9c:47:f6:ee:0b:dc:ba: 95:b7:fb:ae:2c:a0:64:d9:19:7d:2c:00:7e:dc:78: 2a:ff:1f:34:45:04:cb:50:93:a9:ac:d3:c9:bf:07: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EF:52:CA:7D:27:1F:58:B6:5D:8B:51:C3:9C:8B:F7:EE:69:B9:50 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e6:53:be:c5:d7:52:3e:9a:d6:d9:6a:a1:6a:3f:ea:77:fe: 54:08:9d:4d:12:e4:52:8b:94:05:2d:0b:b4:59:e5:99:9f:d1: e3:b3:18:5c:e2:cc:b0:4a:67:61:10:f4:32:39:2c:77:e2:f5: 23:15:1e:51:67:81:71:67:30:ba:24:82:06:b2:10:d2:06:64: ae:6a:42:97:bc:9f:54:c4:a9:8e:1c:a8:66:75:e4:42:4f:bf: 48:3a:9a:b8:db:33:4d:4c:4c:06:33:22:90:d4:fd:6e:d6:94: 41:d4:6b:0a:b9:69:9d:74:90:37:e6:83:14:cc:ef:18:cc:22: d9:f2:45:96:0c:66:a7:89:ad:ec:79:80:a2:ca:ce:dd:37:c4: 8d:8b:75:d1:f2:b8:fa:60:44:9d:98:b6:5f:99:e1:0c:30:60: 2e:9a:19:b4:05:13:3f:18:2c:38:9f:02:de:b4:7c:34:0c:46: ae:b5:14:ca:ce:65:d8:22:33:6a:11:d5:fa:5c:82:a3:22:35: 42:54:7b:3f:69:82:76:94:01:1d:ad:cf:0b:d7:c1:4b:9c:12: 48:aa:1d:e6:6d:36:a9:57:35:7b:ae:1b:49:02:f9:9e:ff:c8: ce:88:82:18:83:c5:9b:04:75:d5:92:5a:d2:a6:2c:16:b7:af: d5:a4:7a:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW/cBVZDzQJ3kIBsREwzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjUxMjExMTcwMTA2WhcNMjUxMjEyMTcwMTA2WjAzMTEwLwYDVQQD Eyg4YmVmNTJjYTdkMjcxZjU4YjY1ZDhiNTFjMzljOGJmN2VlNjliOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/lO2cfY7ssWVgayPkHhey03d0Vy SINXWrXlppVGqMY8yu5cCpPV72VJ93gAIeXer/KD619tsbGKSmubzZbZwkWspAPb JioIDWS7XzBTJoUzDvQ9++vte61nZK/5VHvSieG8DfXUNmHo5ewpjLVtK+t5XOOu 0RhYw5xYkf3ZaObz4VEX+6VHQGSI9wZAVKlPEf552wSltccXspq2II9yyLBVkare ajM96ItEipGgBsX639nloxKE/R2GJOToI48LfAbWj634eY1s2krl61g7SHdBrM0S jGAu+JxH9u4L3LqVt/uuLKBk2Rl9LAB+3Hgq/x80RQTLUJOprNPJvwddaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvvUsp9Jx9Ytl2LUcOci/fuablQMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuZTvsXX Uj6a1tlqoWo/6nf+VAidTRLkUouUBS0LtFnlmZ/R47MYXOLMsEpnYRD0Mjksd+L1 IxUeUWeBcWcwuiSCBrIQ0gZkrmpCl7yfVMSpjhyoZnXkQk+/SDqauNszTUxMBjMi kNT9btaUQdRrCrlpnXSQN+aDFMzvGMwi2fJFlgxmp4mt7HmAosrO3TfEjYt10fK4 +mBEnZi2X5nhDDBgLpoZtAUTPxgsOJ8C3rR8NAxGrrUUys5l2CIzahHV+lyCoyI1 QlR7P2mCdpQBHa3PC9fBS5wSSKod5m02qVc1e64bSQL5nv/IzoiCGIPFmwR11ZJa 0qYsFrev1aR6Cw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:47 2025 by rpki-client