This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: sr2eKWk2RfWVmorRIXfujRsuO4VHqiiKKK7L88HZfaI= Subject key identifier: FE:51:AE:83:09:3C:40:3B:B3:28:01:6E:A2:05:E8:13:40:90:13:03 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B0F3767BC14802331E3A2EE94C097D37F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 1796 Signing time: Thu 11 Dec 2025 21:00:47 +0000 Manifest this update: Thu 11 Dec 2025 21:00:47 +0000 Manifest next update: Fri 12 Dec 2025 21:00:47 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: 9YihMfZyns2hZEcZjVLg/k19XyPCXQWIzmlOX4T46nc=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:67:bc:14:80:23:31:e3:a2:ee:94:c0:97:d3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Dec 11 21:00:47 2025 GMT Not After : Dec 12 21:00:47 2025 GMT Subject: CN=fe51ae83093c403bb328016ea205e81340901303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:75:73:ac:6b:34:8d:c9:1f:f9:d5:81:a1: 50:5b:17:a9:b7:06:5c:63:d6:98:af:2f:72:7c:ad: 99:e1:ae:1c:2f:25:62:6c:36:5c:d7:83:4e:34:e5: 7d:e3:f7:af:e7:f6:59:73:0f:44:fb:70:bb:5e:62: b1:bf:fd:c8:59:b1:95:df:87:5a:de:22:3a:03:07: e4:3a:29:88:14:40:94:e6:19:59:f5:83:4d:49:a6: 85:ad:1d:2a:52:52:a0:51:14:fe:32:22:bb:a1:95: 7f:45:a9:ca:51:34:f5:87:15:ad:6f:a0:c0:2f:7b: 02:67:01:b7:47:fa:3c:e6:a5:55:48:ed:77:4a:73: 4e:5e:27:9d:ab:12:83:a6:55:5b:e9:f5:75:f8:dd: 6b:f1:ff:d6:13:3c:ae:a2:86:9f:c6:c4:f5:20:0d: a3:d2:b7:38:8e:eb:02:da:53:45:1a:0c:76:1a:98: f5:e7:51:17:7f:c5:ff:da:b4:4a:1d:96:9d:28:20: d4:be:90:16:29:7d:50:bf:1e:8f:8a:99:6b:d7:5d: 5b:40:72:c8:1e:13:1e:b6:e5:87:d5:a5:2d:f8:d2: 0b:ec:7a:01:bb:4b:ab:ef:6a:05:ad:cd:dd:b3:72: d6:a4:b7:f0:a0:6c:fb:d2:01:c4:82:03:71:71:02: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:51:AE:83:09:3C:40:3B:B3:28:01:6E:A2:05:E8:13:40:90:13:03 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d3:3f:c1:ef:1d:ca:12:65:24:a7:0a:c5:7f:09:1f:67:25: e3:ce:95:f0:c7:d6:a5:c0:dd:63:86:69:9b:58:17:4e:15:f4: c7:14:64:91:18:2d:2b:88:f7:bf:f8:07:e6:55:1f:98:ef:d7: a4:2d:fb:a3:dd:9c:ad:af:2f:d6:68:bd:c3:56:4b:e9:5c:8a: 5e:e6:d1:e0:4e:5c:81:43:1f:f3:04:0f:d2:8b:ce:c9:11:1d: fc:65:db:f5:e6:45:ba:ff:97:4c:fa:fc:37:55:25:d9:7c:0f: 40:8a:9c:e7:b9:66:a7:1a:55:cd:eb:cf:b9:50:15:30:37:ea: 5a:ac:95:67:12:d1:70:73:81:25:b4:26:00:a4:e1:9e:c4:25: da:e6:b7:35:21:e9:d9:d1:47:bc:25:fb:c2:7b:58:6d:fa:d5: 69:37:79:ef:f6:be:17:77:d6:1b:37:8b:bf:cd:49:77:b5:13: a2:9e:c8:9b:43:2a:f5:be:d1:7f:a1:67:7e:22:b2:bd:a1:a3: f2:e8:12:63:3c:1b:7a:0f:aa:0d:7f:b4:ef:dc:1d:a0:e1:12: c3:4d:ff:85:11:5f:b0:7e:ed:f5:d3:0b:b7:12:f0:d6:b1:21: dc:65:fc:e5:b6:fc:af:c5:bf:46:40:f4:9a:71:a0:8b:58:69: 13:4d:a7:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2e8FIAjMeOi7pTAl9N/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUxMjExMjEwMDQ3WhcNMjUxMjEyMjEwMDQ3WjAzMTEwLwYDVQQD EyhmZTUxYWU4MzA5M2M0MDNiYjMyODAxNmVhMjA1ZTgxMzQwOTAxMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlt1c6xrNI3JH/nVgaFQWxeptwZc Y9aYry9yfK2Z4a4cLyVibDZc14NONOV94/ev5/ZZcw9E+3C7XmKxv/3IWbGV34da 3iI6AwfkOimIFECU5hlZ9YNNSaaFrR0qUlKgURT+MiK7oZV/RanKUTT1hxWtb6DA L3sCZwG3R/o85qVVSO13SnNOXiedqxKDplVb6fV1+N1r8f/WEzyuooafxsT1IA2j 0rc4jusC2lNFGgx2Gpj151EXf8X/2rRKHZadKCDUvpAWKX1Qvx6Piplr111bQHLI HhMetuWH1aUt+NIL7HoBu0ur72oFrc3ds3LWpLfwoGz70gHEggNxcQLRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5RroMJPEA7sygBbqIF6BNAkBMDMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtM/we8d yhJlJKcKxX8JH2cl486V8MfWpcDdY4Zpm1gXThX0xxRkkRgtK4j3v/gH5lUfmO/X pC37o92cra8v1mi9w1ZL6VyKXubR4E5cgUMf8wQP0ovOyREd/GXb9eZFuv+XTPr8 N1Ul2XwPQIqc57lmpxpVzevPuVAVMDfqWqyVZxLRcHOBJbQmAKThnsQl2ua3NSHp 2dFHvCX7wntYbfrVaTd57/a+F3fWGzeLv81Jd7UTop7Im0Mq9b7Rf6FnfiKyvaGj 8ugSYzwbeg+qDX+079wdoOESw03/hRFfsH7t9dMLtxLw1rEh3GX85bb8r8W/RkD0 mnGgi1hpE02nSg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:12:29 2025 by rpki-client