This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json) Hash identifier: NUuJJ6CVfBq3renir3HjKpyL1jnqLdJdkwq7d8fdibw= Subject key identifier: A5:F7:4B:99:AE:0D:66:6E:2B:20:B2:90:CB:59:39:5E:5B:B4:84:6F Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Certificate serial: 019B0E26CA61C53CEE4A368DF56076050087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft Manifest number: 1783 Signing time: Thu 11 Dec 2025 16:03:01 +0000 Manifest this update: Thu 11 Dec 2025 16:03:01 +0000 Manifest next update: Fri 12 Dec 2025 16:03:01 +0000 Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=) 2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=) 3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: r/TwX+9swwJ+hkL/pGagGQCxJK6bDLeRMloxKEAGJjQ=) 4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:ca:61:c5:3c:ee:4a:36:8d:f5:60:76:05:00:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Validity Not Before: Dec 11 16:03:01 2025 GMT Not After : Dec 12 16:03:01 2025 GMT Subject: CN=a5f74b99ae0d666e2b20b290cb59395e5bb4846f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:bd:ef:2d:f0:6c:77:92:c6:8c:53:b6:61: c2:d3:68:56:1e:f5:7f:c1:e1:20:d0:62:20:17:83: 9c:b2:58:38:79:2e:e4:10:77:c9:47:c9:81:a8:30: a9:df:4c:d0:b9:4a:c4:5c:28:cf:0b:27:82:b9:7f: d4:88:28:d4:83:63:37:07:71:5f:63:bb:37:58:51: 04:45:7f:e1:5a:6a:f9:f1:f2:22:c2:f4:98:c3:94: f6:0c:21:ed:4c:46:45:cc:23:07:3c:2d:cf:a6:26: dd:8b:14:15:09:6b:07:b1:fa:00:08:e2:59:08:c2: 51:b9:35:52:82:b9:11:71:20:1f:53:ea:3d:0f:39: ed:47:36:b0:fc:85:c9:92:8d:9c:68:d2:f9:74:bf: ef:b7:ad:e5:e3:16:f7:9d:10:85:3e:96:fa:1f:54: 24:36:38:c4:dc:10:c4:dc:f1:06:53:21:d6:8a:97: 8c:dd:2f:fc:5b:de:63:7e:a8:e7:fe:78:b9:d7:87: 1d:10:57:6c:6b:cf:42:5d:29:38:9f:0e:44:43:d8: 3a:d9:84:af:07:43:e0:01:19:0f:ee:51:ec:c5:8b: 54:71:ab:e6:b7:17:66:03:89:53:a2:df:49:29:03: ad:bf:51:e4:0b:66:eb:20:23:96:71:e7:03:01:13: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F7:4B:99:AE:0D:66:6E:2B:20:B2:90:CB:59:39:5E:5B:B4:84:6F X509v3 Authority Key Identifier: keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:72:07:92:1f:59:a3:f1:75:ea:dd:84:a5:2a:3b:f4:7f:c1: 50:fa:e6:2d:58:15:6b:1b:05:50:8e:e6:f6:d3:24:86:d4:d7: b7:32:b1:3e:df:2a:cf:bf:54:0c:5f:b8:32:29:b8:20:30:a9: 2d:f8:48:95:07:9b:a4:6d:31:9c:b6:05:8d:56:f0:a1:44:67: 00:38:54:92:49:d1:5d:6c:6a:f8:39:7f:6d:0e:17:fc:43:10: 89:a9:88:68:aa:27:24:b7:82:13:b4:11:d3:5b:aa:65:d4:e9: 3b:49:86:cf:3c:30:32:3e:30:17:30:b7:ec:d0:8f:96:2a:81: 29:40:37:d9:e4:cf:af:80:a4:14:a3:7e:02:94:e4:03:d2:83: de:6e:71:75:9c:25:cb:b7:54:97:e7:80:99:03:3b:cc:44:fb: ec:8a:2c:f5:a3:bc:cc:22:b9:07:6a:57:92:fb:c5:8b:d7:d1: 2e:82:35:2d:15:3f:d4:bb:3e:dc:67:e4:92:42:f2:c1:f5:ba: f0:4f:79:4c:b2:04:63:cc:dd:2a:61:d5:f3:fd:11:87:5b:40: 9c:c0:45:45:2d:0f:ec:38:e3:0d:f3:1a:d4:69:1d:f9:12:cd: 8a:34:34:ac:c9:0a:98:bb:fe:53:7f:52:be:a4:d7:be:dd:50: ba:20:86:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJsphxTzuSjaN9WB2BQCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk NGMzZjEwHhcNMjUxMjExMTYwMzAxWhcNMjUxMjEyMTYwMzAxWjAzMTEwLwYDVQQD EyhhNWY3NGI5OWFlMGQ2NjZlMmIyMGIyOTBjYjU5Mzk1ZTViYjQ4NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNS97y3wbHeSxoxTtmHC02hWHvV/ weEg0GIgF4Ocslg4eS7kEHfJR8mBqDCp30zQuUrEXCjPCyeCuX/UiCjUg2M3B3Ff Y7s3WFEERX/hWmr58fIiwvSYw5T2DCHtTEZFzCMHPC3PpibdixQVCWsHsfoACOJZ CMJRuTVSgrkRcSAfU+o9DzntRzaw/IXJko2caNL5dL/vt63l4xb3nRCFPpb6H1Qk NjjE3BDE3PEGUyHWipeM3S/8W95jfqjn/ni514cdEFdsa89CXSk4nw5EQ9g62YSv B0PgARkP7lHsxYtUcavmtxdmA4lTot9JKQOtv1HkC2brICOWcecDARO8IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKX3S5muDWZuKyCykMtZOV5btIRvMB8GA1UdIwQY MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt NDI1MGNlNTUxN2Q5LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5 LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHIHkh9Z o/F16t2EpSo79H/BUPrmLVgVaxsFUI7m9tMkhtTXtzKxPt8qz79UDF+4Mim4IDCp LfhIlQebpG0xnLYFjVbwoURnADhUkknRXWxq+Dl/bQ4X/EMQiamIaKonJLeCE7QR 01uqZdTpO0mGzzwwMj4wFzC37NCPliqBKUA32eTPr4CkFKN+ApTkA9KD3m5xdZwl y7dUl+eAmQM7zET77Ios9aO8zCK5B2pXkvvFi9fRLoI1LRU/1Ls+3GfkkkLywfW6 8E95TLIEY8zdKmHV8/0Rh1tAnMBFRS0P7DjjDfMa1Gkd+RLNijQ0rMkKmLv+U39S vqTXvt1QuiCGgQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:25:13 2025 by rpki-client