This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json) Hash identifier: OyXdA5G7oH5P+Vo3l66au4XPljXxgZdnWQeq0mkkOZA= Subject key identifier: B2:A2:68:48:E0:89:B9:2B:C2:1B:40:FC:EA:B0:15:E7:59:F7:93:50 Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Certificate serial: 019B0F00D0E99878B4EBEA3BF67B38F8667A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft Manifest number: 0DEC Signing time: Thu 11 Dec 2025 20:01:10 +0000 Manifest this update: Thu 11 Dec 2025 20:01:10 +0000 Manifest next update: Fri 12 Dec 2025 20:01:10 +0000 Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: vSl91u9Fg0KEkKqF/cmQMcU0B4GiR3Wj6l5T+PlOgMI=) 2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:d0:e9:98:78:b4:eb:ea:3b:f6:7b:38:f8:66:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Validity Not Before: Dec 11 20:01:10 2025 GMT Not After : Dec 12 20:01:10 2025 GMT Subject: CN=b2a26848e089b92bc21b40fceab015e759f79350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:b1:28:10:7a:79:7a:3b:7b:61:71:9f:a4: 6b:eb:4f:a4:1c:10:56:44:9d:cb:3f:a9:d9:5c:75: 72:5c:83:b7:2e:e2:38:dc:fb:fe:8b:7e:b0:c3:9a: 95:83:01:dc:43:1e:bc:10:89:bf:e9:98:f4:01:8f: 01:0d:fe:d6:3b:08:72:eb:14:8a:98:d8:bd:7b:1d: a1:12:69:bc:e1:87:a4:5a:c9:39:57:af:4e:bf:99: 48:f4:15:3e:2e:4c:b6:78:0e:89:15:ad:04:e7:d9: e2:d5:a5:c8:4b:52:31:bf:53:32:fa:cb:43:a7:c9: c6:7c:13:2d:40:ec:8e:dc:3d:91:72:40:f4:b5:62: d9:9f:bd:28:0b:e2:39:58:8a:d6:27:ee:fa:99:83: 45:96:8c:fe:3e:ca:73:bb:bf:cc:75:ff:33:40:db: 6a:81:f0:70:c2:32:30:bc:c4:d6:30:7a:db:4e:b6: bf:bb:30:71:84:20:9f:c2:40:fe:6b:ee:9e:6f:6a: e7:41:08:a6:cd:51:69:c5:c2:47:a2:8b:4a:c7:55: c4:21:5f:b1:45:4f:62:68:11:02:5e:fe:27:c6:1e: 4b:f7:ba:41:e8:be:98:56:17:8f:b0:c6:cd:48:de: 0e:7c:ba:81:0c:4d:08:b1:61:2f:27:92:c2:56:a2: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A2:68:48:E0:89:B9:2B:C2:1B:40:FC:EA:B0:15:E7:59:F7:93:50 X509v3 Authority Key Identifier: keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c4:7c:34:36:9d:0f:ef:b0:73:48:e6:87:f0:92:c7:5f:7c: 4d:33:e0:88:67:10:a4:99:6b:97:8b:5a:89:b2:2b:b1:9c:7b: 39:b8:e6:94:79:da:73:da:86:fd:cd:0d:21:0a:2c:9d:9d:1f: c2:64:6a:ad:fe:91:50:d7:c2:96:46:17:aa:79:5d:e5:1a:ac: f9:d2:a6:fc:4b:41:8e:f3:20:f3:37:d1:e0:9c:68:55:85:34: 39:a9:db:9f:e8:9b:b7:9e:a7:ea:55:63:a0:9b:2e:2d:58:b5: 8b:8a:1d:96:c8:5b:1e:56:02:66:80:6a:ea:dc:2b:0b:d0:f3: 54:58:d5:a5:72:0d:f6:16:b9:8d:70:81:fc:43:ac:00:0c:0d: f7:3c:9a:9e:f3:90:9e:54:76:14:d0:3c:91:5c:05:eb:7e:cc: 0c:3e:9a:75:1c:47:5f:75:8f:7a:d8:45:f9:c5:46:5f:61:e3: 21:69:d4:69:84:53:3a:f9:c5:47:19:8f:a6:ba:f2:3b:26:47: 38:13:1f:c5:d3:ff:02:55:81:6c:8e:72:d5:91:e4:e4:db:5e: bf:a4:0a:c7:8d:52:49:2f:77:c2:14:8c:c0:21:ab:fa:42:7e: 0f:d8:62:81:18:28:28:a4:11:e8:27:ca:3b:d5:dc:45:cf:12: 4e:48:4c:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPANDpmHi06+o79ns4+GZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy Y2Q4MDIwHhcNMjUxMjExMjAwMTEwWhcNMjUxMjEyMjAwMTEwWjAzMTEwLwYDVQQD EyhiMmEyNjg0OGUwODliOTJiYzIxYjQwZmNlYWIwMTVlNzU5Zjc5MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34ixKBB6eXo7e2Fxn6Rr60+kHBBW RJ3LP6nZXHVyXIO3LuI43Pv+i36ww5qVgwHcQx68EIm/6Zj0AY8BDf7WOwhy6xSK mNi9ex2hEmm84YekWsk5V69Ov5lI9BU+Lky2eA6JFa0E59ni1aXIS1Ixv1My+stD p8nGfBMtQOyO3D2RckD0tWLZn70oC+I5WIrWJ+76mYNFloz+Pspzu7/Mdf8zQNtq gfBwwjIwvMTWMHrbTra/uzBxhCCfwkD+a+6eb2rnQQimzVFpxcJHootKx1XEIV+x RU9iaBECXv4nxh5L97pB6L6YVhePsMbNSN4OfLqBDE0IsWEvJ5LCVqIPywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKiaEjgibkrwhtA/OqwFedZ95NQMB8GA1UdIwQY MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1 LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcR8NDad D++wc0jmh/CSx198TTPgiGcQpJlrl4taibIrsZx7ObjmlHnac9qG/c0NIQosnZ0f wmRqrf6RUNfClkYXqnld5Rqs+dKm/EtBjvMg8zfR4JxoVYU0Oanbn+ibt56n6lVj oJsuLVi1i4odlshbHlYCZoBq6twrC9DzVFjVpXIN9ha5jXCB/EOsAAwN9zyanvOQ nlR2FNA8kVwF637MDD6adRxHX3WPethF+cVGX2HjIWnUaYRTOvnFRxmPprryOyZH OBMfxdP/AlWBbI5y1ZHk5Ntev6QKx41SSS93whSMwCGr+kJ+D9higRgoKKQR6CfK O9XcRc8STkhMJg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:07:57 2025 by rpki-client