This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json) Hash identifier: Xm3hTpvxoHPabLGWpt9y8uIC/mpB8YKjMatOLoxPkLg= Subject key identifier: C9:29:95:18:13:E2:EA:B7:38:DA:1E:0F:EA:59:EE:D5:58:97:DD:CB Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Certificate serial: 019B3A911AD5029498B5FD3DE4063232A319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 07:02:26 +0000 Manifest this update: Sat 20 Dec 2025 07:02:26 +0000 Manifest next update: Sun 21 Dec 2025 07:02:26 +0000 Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=) 2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: epRYzC/rBdELXE8p5WKUIodoiT7XJls8kA0TYfUIzlk=) 3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:1a:d5:02:94:98:b5:fd:3d:e4:06:32:32:a3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Validity Not Before: Dec 20 07:02:26 2025 GMT Not After : Dec 21 07:02:26 2025 GMT Subject: CN=c929951813e2eab738da1e0fea59eed55897ddcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:b8:61:93:e8:f8:93:a3:b9:62:6d:da:0e: 5f:12:d5:3b:73:c3:54:c0:dc:7a:d7:de:52:7b:7d: e7:ec:02:0a:74:a6:b6:76:d7:d8:ae:2e:2b:f8:d4: f7:67:4b:13:95:b8:c1:e7:16:01:0a:7a:4f:9c:43: 25:70:82:2a:7e:38:93:40:b7:77:ed:eb:e0:46:ca: 77:ef:c7:3d:35:22:31:8e:1f:0e:0a:d0:ba:2d:1f: 78:9f:1b:a6:57:b0:70:48:fc:83:92:7d:7f:14:17: df:c6:04:e8:72:c2:76:35:7e:55:62:1c:d2:d3:d6: f3:f1:f0:94:52:ae:72:35:9e:bb:1b:c1:01:6e:bc: dc:60:bc:e3:7a:0f:78:8a:2b:40:05:56:8a:0f:1d: 17:15:aa:e7:0c:e8:b8:84:f6:81:1a:d7:7e:d2:08: 2b:59:c2:28:73:e1:68:17:a5:fc:e2:68:5d:d3:88: c4:1b:8a:68:a4:35:98:8a:f5:10:3a:19:42:97:9c: b7:25:3a:da:fe:45:17:02:29:69:72:cb:99:aa:b3: ef:30:e4:a7:dd:f5:c2:02:9c:f4:05:a0:bc:cf:33: a5:6b:d5:b9:01:a1:5c:9f:be:6c:92:ab:86:68:2a: 0a:c0:81:13:d0:96:22:13:95:37:2f:4b:20:c1:b2: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:29:95:18:13:E2:EA:B7:38:DA:1E:0F:EA:59:EE:D5:58:97:DD:CB X509v3 Authority Key Identifier: keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:83:17:e7:c3:a3:07:99:76:ab:67:27:01:b5:19:a5:7c:ef: 23:1a:3d:8a:ef:57:5f:3b:21:2c:70:04:24:dc:63:a4:b7:d6: 94:4f:80:d9:3b:f1:24:86:05:70:c4:ac:25:b8:dc:6a:1b:19: 3d:de:55:8f:3d:59:1d:20:f0:55:6c:36:9f:fc:bd:7c:63:cc: 1d:a5:f6:db:7d:08:37:01:0e:1b:b5:47:2a:24:4f:93:75:1f: 08:e3:8f:58:d0:0a:1d:88:6f:74:93:b6:77:ea:b2:4a:a3:70: e4:8f:6e:72:df:e9:94:22:c7:3c:98:4c:f6:2e:c6:41:4a:c5: e3:e0:b6:cc:f5:c6:48:71:a3:92:04:49:0d:8c:b2:9a:e5:73: 7d:d6:51:16:95:e8:0c:ef:cd:91:1d:8a:c1:4c:b3:52:f6:f1: bd:d7:4e:e9:ee:25:05:10:19:32:81:71:19:6d:98:ab:13:64: eb:b5:ab:cf:30:20:97:e1:12:b3:e0:c5:78:dd:2f:19:69:07: bf:7f:d1:d3:b2:75:31:87:62:16:9b:e2:fc:74:6f:5e:16:9d: d6:e5:20:5f:a7:92:0b:48:3c:a8:ba:af:4d:9a:ce:73:5c:cc: 55:ce:c1:b1:80:64:64:38:5c:bd:fc:86:04:01:28:07:42:38: 1a:38:3c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kRrVApSYtf095AYyMqMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5 YzE4ZDUwHhcNMjUxMjIwMDcwMjI2WhcNMjUxMjIxMDcwMjI2WjAzMTEwLwYDVQQD EyhjOTI5OTUxODEzZTJlYWI3MzhkYTFlMGZlYTU5ZWVkNTU4OTdkZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI64YZPo+JOjuWJt2g5fEtU7c8NU wNx6195Se33n7AIKdKa2dtfYri4r+NT3Z0sTlbjB5xYBCnpPnEMlcIIqfjiTQLd3 7evgRsp378c9NSIxjh8OCtC6LR94nxumV7BwSPyDkn1/FBffxgTocsJ2NX5VYhzS 09bz8fCUUq5yNZ67G8EBbrzcYLzjeg94iitABVaKDx0XFarnDOi4hPaBGtd+0ggr WcIoc+FoF6X84mhd04jEG4popDWYivUQOhlCl5y3JTra/kUXAilpcsuZqrPvMOSn 3fXCApz0BaC8zzOla9W5AaFcn75skquGaCoKwIET0JYiE5U3L0sgwbJ8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkplRgT4uq3ONoeD+pZ7tVYl93LMB8GA1UdIwQY MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt MzM0MTU5NjdjMjEzLzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4MX58Oj B5l2q2cnAbUZpXzvIxo9iu9XXzshLHAEJNxjpLfWlE+A2TvxJIYFcMSsJbjcahsZ Pd5Vjz1ZHSDwVWw2n/y9fGPMHaX2230INwEOG7VHKiRPk3UfCOOPWNAKHYhvdJO2 d+qySqNw5I9uct/plCLHPJhM9i7GQUrF4+C2zPXGSHGjkgRJDYyymuVzfdZRFpXo DO/NkR2KwUyzUvbxvddO6e4lBRAZMoFxGW2YqxNk67WrzzAgl+ESs+DFeN0vGWkH v3/R07J1MYdiFpvi/HRvXhad1uUgX6eSC0g8qLqvTZrOc1zMVc7BsYBkZDhcvfyG BAEoB0I4Gjg8Ww== -----END CERTIFICATE-----Generated at Sat Dec 20 10:03:57 2025 by rpki-client