This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json) Hash identifier: CPnlAl6IzwvWbtp94417sauymO3ySilfHX50GbjKri8= Subject key identifier: 58:86:AD:6F:F8:51:B6:6F:AF:67:38:D6:1E:D9:FF:0A:23:B4:D7:28 Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0 Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0 Certificate serial: 019B59E399725B7A54F0D02A5A245C6834AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:00:46 +0000 Manifest this update: Fri 26 Dec 2025 09:00:46 +0000 Manifest next update: Sat 27 Dec 2025 09:00:46 +0000 Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=) 2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: mbQPKVRcOGm2ivy94MWmI/8gwvm9u5XV4hxFzbPlk8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:99:72:5b:7a:54:f0:d0:2a:5a:24:5c:68:34:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0 Validity Not Before: Dec 26 09:00:46 2025 GMT Not After : Dec 27 09:00:46 2025 GMT Subject: CN=5886ad6ff851b66faf6738d61ed9ff0a23b4d728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:a6:e4:73:d3:6a:0c:5c:11:14:14:51:53: 4a:84:5f:ad:6d:57:a4:2a:35:16:72:e5:a7:c0:53: a8:ee:2a:c8:59:b2:e3:2b:19:d9:1b:ef:a3:8a:a7: 75:4f:e8:ca:4c:96:23:ea:8f:ee:c2:82:d2:ed:dc: da:a4:d0:95:fb:69:ae:f9:bb:76:53:b3:f3:bf:69: c6:d2:a7:17:3a:63:95:09:49:43:a2:04:ad:8a:f7: 1b:58:de:b3:e0:ec:0f:46:62:b9:52:a7:53:25:e0: 28:60:a0:67:70:66:56:0f:24:e4:56:19:74:30:1a: 1c:c6:d4:8f:ca:f8:bf:e0:11:71:08:0f:c8:64:a0: 0e:ed:1e:e0:8f:28:ce:87:30:2b:f7:86:8a:de:4e: 3d:a9:91:a7:0c:05:f2:5b:29:d4:e4:e2:ce:b8:2f: 1d:75:71:3d:29:d8:49:15:a0:ed:ba:79:c0:b5:a7: 2b:7d:b9:25:f7:57:f3:94:8d:d9:e3:46:4b:59:48: a7:e0:78:fd:c5:05:96:bc:ce:e9:ff:e3:55:3d:50: a2:42:5e:40:76:98:36:c6:cc:1a:63:20:14:0c:a0: d2:f5:4d:c8:7c:24:d2:0f:99:96:4d:d6:ef:b3:f3: 74:ea:58:8d:a6:6e:d6:8b:99:b5:d5:e2:96:ac:7a: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:86:AD:6F:F8:51:B6:6F:AF:67:38:D6:1E:D9:FF:0A:23:B4:D7:28 X509v3 Authority Key Identifier: keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:68:6d:80:92:05:f8:7c:24:d1:b3:5c:be:94:46:7b:77:f8: b0:a0:ce:6c:52:d1:bd:ef:3f:a4:e4:c7:93:7c:35:dd:43:f0: 0e:58:ac:9c:c1:dd:b6:ab:75:3f:ac:91:c3:25:8e:80:f6:97: 0b:c5:06:ad:3f:42:b4:c3:82:59:d1:45:94:b5:5a:fa:39:a4: df:16:16:8e:1f:c2:04:77:49:5d:19:f1:f6:2e:29:2e:57:15: 9b:fc:e1:39:1b:b6:8c:f3:b9:f8:04:9b:70:7c:51:4a:5b:39: 73:7f:bc:8c:66:9d:87:36:a0:4e:1c:68:08:f6:4e:98:69:c8: e2:da:92:04:72:2b:8f:9b:e3:81:1e:88:33:30:55:1d:a2:cd: a5:85:73:75:01:be:d2:08:9c:32:66:ca:b1:d7:53:34:50:3b: 1c:21:bf:51:a5:75:9e:e6:c6:37:cb:e2:ff:33:f9:00:a2:96: 27:de:cc:38:ef:94:14:0e:a5:2a:42:36:bd:79:66:e4:04:38: 88:9e:5d:07:1f:0d:33:8a:51:a7:56:da:8f:ca:f4:4f:ba:3e: 2d:57:e7:67:db:60:e3:ce:e6:a8:a8:66:78:92:10:96:5c:32: 76:bd:01:62:e2:8d:64:96:17:1f:2a:fa:70:49:e5:80:a5:ee: e0:f3:77:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45lyW3pU8NAqWiRcaDSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2 NTAyZjAwHhcNMjUxMjI2MDkwMDQ2WhcNMjUxMjI3MDkwMDQ2WjAzMTEwLwYDVQQD Eyg1ODg2YWQ2ZmY4NTFiNjZmYWY2NzM4ZDYxZWQ5ZmYwYTIzYjRkNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvem5HPTagxcERQUUVNKhF+tbVek KjUWcuWnwFOo7irIWbLjKxnZG++jiqd1T+jKTJYj6o/uwoLS7dzapNCV+2mu+bt2 U7Pzv2nG0qcXOmOVCUlDogStivcbWN6z4OwPRmK5UqdTJeAoYKBncGZWDyTkVhl0 MBocxtSPyvi/4BFxCA/IZKAO7R7gjyjOhzAr94aK3k49qZGnDAXyWynU5OLOuC8d dXE9KdhJFaDtunnAtacrfbkl91fzlI3Z40ZLWUin4Hj9xQWWvM7p/+NVPVCiQl5A dpg2xswaYyAUDKDS9U3IfCTSD5mWTdbvs/N06liNpm7Wi5m11eKWrHp/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiGrW/4UbZvr2c41h7Z/wojtNcoMB8GA1UdIwQY MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGhtgJIF +Hwk0bNcvpRGe3f4sKDObFLRve8/pOTHk3w13UPwDlisnMHdtqt1P6yRwyWOgPaX C8UGrT9CtMOCWdFFlLVa+jmk3xYWjh/CBHdJXRnx9i4pLlcVm/zhORu2jPO5+ASb cHxRSls5c3+8jGadhzagThxoCPZOmGnI4tqSBHIrj5vjgR6IMzBVHaLNpYVzdQG+ 0gicMmbKsddTNFA7HCG/UaV1nubGN8vi/zP5AKKWJ97MOO+UFA6lKkI2vXlm5AQ4 iJ5dBx8NM4pRp1baj8r0T7o+LVfnZ9tg487mqKhmeJIQllwydr0BYuKNZJYXHyr6 cEnlgKXu4PN3YQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:13 2025 by rpki-client