This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json) Hash identifier: isNo98jNfV8UlG/oY0Tod9c46eW7fpH0Z8kTrtGmZFs= Subject key identifier: 74:E7:DE:3B:35:50:21:50:97:2E:0A:81:65:B5:7C:34:BA:3F:0B:67 Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94 Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294 Certificate serial: 019B405C2139251CA76D3572910F92B153A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft Manifest number: 1175 Signing time: Sun 21 Dec 2025 10:02:18 +0000 Manifest this update: Sun 21 Dec 2025 10:02:18 +0000 Manifest next update: Mon 22 Dec 2025 10:02:18 +0000 Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: tIm33fP5QcDa8kcONiIVJwty1RFVFw8m3aLTewr/fF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:21:39:25:1c:a7:6d:35:72:91:0f:92:b1:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294 Validity Not Before: Dec 21 10:02:18 2025 GMT Not After : Dec 22 10:02:18 2025 GMT Subject: CN=74e7de3b35502150972e0a8165b57c34ba3f0b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:0b:65:97:25:97:4d:f8:93:1a:ac:4f:df: 69:7b:33:df:28:f0:07:a5:45:de:7d:10:87:4f:3d: f1:80:09:cc:28:35:47:cf:f9:ef:eb:79:28:36:b4: a1:6a:81:76:9f:15:1c:e7:48:04:1f:a0:29:bb:3b: f0:51:1c:b5:33:9b:c0:68:3f:69:20:09:04:91:df: 70:93:54:b5:0f:84:da:8b:6f:8f:02:ca:80:16:7a: 61:d7:71:ba:b5:11:5f:48:e5:00:b9:9f:84:ea:79: 59:1e:30:7b:02:b6:a9:f9:d1:af:f5:0b:b0:12:58: 21:61:6e:8f:16:1b:de:f6:51:5d:d0:73:18:ad:d4: 49:3c:4e:c7:fd:91:2e:00:df:5d:58:37:3d:40:a7: 49:8d:b1:9f:fc:61:5a:10:0c:d0:aa:7b:c1:3d:9a: 36:11:c5:4c:f3:97:f3:b7:d3:5d:c7:12:48:f7:f1: c4:f8:d4:ed:98:b1:b5:79:ff:98:a1:89:d8:6b:38: ff:27:13:10:a1:a5:47:05:0a:06:32:28:5e:94:f8: 55:10:7c:23:e3:0b:77:a6:e5:19:0f:52:6b:ed:d0: 4a:73:ec:15:6e:7c:80:81:f0:33:b3:d9:8b:80:cb: 4c:df:60:2a:63:ac:a3:1c:70:46:ea:b9:4e:3b:fc: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E7:DE:3B:35:50:21:50:97:2E:0A:81:65:B5:7C:34:BA:3F:0B:67 X509v3 Authority Key Identifier: keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:76:64:e1:03:6d:55:3f:72:ca:f7:30:17:ec:6f:78:b6:cf: 78:88:c0:6b:4c:7d:33:e8:ec:6e:b0:92:e5:52:8a:68:d7:38: 19:87:95:ad:08:a4:8c:df:93:79:2e:2f:ce:b3:e7:07:76:14: d9:a5:1a:89:cc:01:48:db:ab:ff:42:c6:9e:ef:e8:cf:f0:bc: 1b:b6:9e:04:2f:29:a6:57:da:8d:ff:bd:d9:49:b8:83:c0:eb: 43:a4:ee:2a:13:69:b1:ae:c0:24:64:83:f5:34:60:a4:13:de: c3:98:15:db:d0:91:17:43:ce:0f:c6:23:e1:f7:aa:1a:87:66: b8:f8:b1:5d:d4:0c:dc:a0:f5:7b:bd:fb:65:cf:3f:32:59:77: fc:31:ff:ee:47:c7:6b:79:af:e7:6d:0c:b0:16:bb:b4:cf:ae: 1b:11:4a:2a:a4:e0:dc:86:43:8d:7c:e4:7c:cd:94:33:ce:4c: 49:b5:83:4b:5c:72:6e:a2:1c:dd:e0:7b:eb:13:d3:2c:f8:e0: 65:d7:8e:2e:3c:f0:32:52:5b:14:90:3a:a7:f7:ef:48:ab:ad: 01:82:ec:a6:e7:bc:71:81:f8:9f:55:4b:67:b6:06:d1:fe:e1: b6:2e:f4:2a:80:96:27:33:f3:4f:47:7e:29:48:50:a2:0e:3f: 70:9d:55:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXCE5JRynbTVykQ+SsVOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YmFmNWFmZjFkN2FhYWE1MmVmZTE0OGUwZTIzNDAzMTFk N2MyOTQwHhcNMjUxMjIxMTAwMjE4WhcNMjUxMjIyMTAwMjE4WjAzMTEwLwYDVQQD Eyg3NGU3ZGUzYjM1NTAyMTUwOTcyZTBhODE2NWI1N2MzNGJhM2YwYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHkLZZcll034kxqsT99pezPfKPAH pUXefRCHTz3xgAnMKDVHz/nv63koNrShaoF2nxUc50gEH6ApuzvwURy1M5vAaD9p IAkEkd9wk1S1D4Tai2+PAsqAFnph13G6tRFfSOUAuZ+E6nlZHjB7Arap+dGv9Quw ElghYW6PFhve9lFd0HMYrdRJPE7H/ZEuAN9dWDc9QKdJjbGf/GFaEAzQqnvBPZo2 EcVM85fzt9NdxxJI9/HE+NTtmLG1ef+YoYnYazj/JxMQoaVHBQoGMihelPhVEHwj 4wt3puUZD1Jr7dBKc+wVbnyAgfAzs9mLgMtM32AqY6yjHHBG6rlOO/wlYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTn3js1UCFQly4KgWW1fDS6PwtnMB8GA1UdIwQY MBaAFIm69a/x16qqUu/hSODiNAMR18KUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMt NDlhN2NmMTUzZWIwLzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMtNDlhN2NmMTUzZWIw LzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3Zk4QNt VT9yyvcwF+xveLbPeIjAa0x9M+jsbrCS5VKKaNc4GYeVrQikjN+TeS4vzrPnB3YU 2aUaicwBSNur/0LGnu/oz/C8G7aeBC8pplfajf+92Um4g8DrQ6TuKhNpsa7AJGSD 9TRgpBPew5gV29CRF0POD8Yj4feqGodmuPixXdQM3KD1e737Zc8/Mll3/DH/7kfH a3mv520MsBa7tM+uGxFKKqTg3IZDjXzkfM2UM85MSbWDS1xybqIc3eB76xPTLPjg ZdeOLjzwMlJbFJA6p/fvSKutAYLspue8cYH4n1VLZ7YG0f7hti70KoCWJzPzT0d+ KUhQog4/cJ1VRg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:18:53 2025 by rpki-client