This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json) Hash identifier: XVt0NiXrW9PeU+Lxwe1mBJLRMjiGWmaSvFVwvXKDVBA= Subject key identifier: A1:E6:97:96:A3:9C:2F:49:43:E6:62:1C:91:3B:08:7D:41:AB:CD:E7 Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Certificate serial: 019B3B6BE61E6BA6D45F45F0C5F0B933B19F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft Manifest number: 060C Signing time: Sat 20 Dec 2025 11:01:25 +0000 Manifest this update: Sat 20 Dec 2025 11:01:25 +0000 Manifest next update: Sun 21 Dec 2025 11:01:25 +0000 Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=) 2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=) 3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: ep0EOk7GURuSngW5BgSvyg6VcEh3GqXwua0bzkKekZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e6:1e:6b:a6:d4:5f:45:f0:c5:f0:b9:33:b1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Validity Not Before: Dec 20 11:01:25 2025 GMT Not After : Dec 21 11:01:25 2025 GMT Subject: CN=a1e69796a39c2f4943e6621c913b087d41abcde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ae:61:38:08:b1:34:d5:1e:f0:73:b1:f8:17: 1b:10:9c:0d:19:0d:db:f3:47:f3:d2:dc:d6:97:19: 31:a6:14:78:61:b4:56:f8:d3:8d:fc:86:c5:84:13: a4:5f:ff:73:7c:16:7a:58:fd:f2:98:d6:08:94:74: 0e:9e:a0:a6:32:8a:02:6c:d2:14:c1:6e:8f:21:63: 2e:16:b4:f3:43:45:8d:6d:83:f4:41:c2:99:5c:bb: 18:c4:56:aa:35:ab:45:f2:de:a0:2a:29:bc:0c:fb: 7e:36:e3:3e:21:93:37:89:64:fe:96:dd:51:06:99: 83:93:f1:79:0b:cb:ab:69:74:7c:00:b6:64:e4:e4: ef:c9:7a:2d:cf:fc:b7:54:a5:7b:11:dd:17:6f:fa: 93:89:66:d0:90:68:87:de:f9:d0:88:2f:c9:da:f5: 37:70:61:69:db:9d:be:1b:09:f5:db:b2:a5:2c:27: d4:29:68:37:db:45:e0:b1:6c:46:f9:fe:79:aa:95: 9d:e6:22:88:39:70:e1:c1:88:4c:d0:32:ef:8f:8b: 06:3c:48:ca:8d:bc:de:0e:a7:dd:7e:c2:f2:67:d7: c4:0d:2e:37:b7:8e:e5:a7:43:96:97:97:3d:28:21: ad:e1:b6:bd:d7:cf:e4:29:fb:41:74:36:ed:cf:0d: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:97:96:A3:9C:2F:49:43:E6:62:1C:91:3B:08:7D:41:AB:CD:E7 X509v3 Authority Key Identifier: keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e4:6d:f5:4e:a5:ce:9e:96:f2:af:c6:87:16:41:e4:95:6a: 84:c7:50:ed:a3:a8:e3:97:b8:1d:1d:c0:9c:48:c3:ba:9b:c4: 7a:ee:52:ce:1e:e0:f3:a7:82:dd:33:43:a3:63:a5:e6:df:c2: b0:74:e6:9d:ea:0b:b6:14:fb:34:3c:76:fa:7e:07:61:6d:93: c6:ee:f9:d3:ed:f7:ef:96:4c:01:e4:06:83:f6:0c:69:51:01: 38:89:12:57:af:30:27:9e:ed:a5:65:02:14:31:15:a1:84:71: 80:fc:ff:19:22:af:f2:2d:c3:95:db:75:f1:b7:7b:e5:30:9a: b1:2d:c1:7d:84:f8:0c:0b:dc:1c:12:5b:da:73:28:38:a9:30: 65:eb:70:94:7b:aa:ce:fa:d1:65:11:73:e7:18:21:ad:bc:20: 02:29:f7:6d:98:cb:ea:cb:d6:6b:41:43:0e:b6:f8:14:bc:bd: ec:98:b8:83:4e:c4:20:d8:ec:69:7c:0f:c1:1f:08:82:c8:cd: 8d:5b:2c:1f:5e:c3:6a:a9:03:f7:19:6f:a9:9d:88:75:a3:65: 9a:b4:1d:c6:ae:aa:78:f3:e8:5c:ca:94:7a:d4:7b:c0:99:08: 96:3f:f9:25:74:f1:9a:cc:79:33:a3:d2:cb:98:9f:79:b8:38: ce:c9:82:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+Yea6bUX0XwxfC5M7GfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4 NzE0NTMwHhcNMjUxMjIwMTEwMTI1WhcNMjUxMjIxMTEwMTI1WjAzMTEwLwYDVQQD EyhhMWU2OTc5NmEzOWMyZjQ5NDNlNjYyMWM5MTNiMDg3ZDQxYWJjZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9K5hOAixNNUe8HOx+BcbEJwNGQ3b 80fz0tzWlxkxphR4YbRW+NON/IbFhBOkX/9zfBZ6WP3ymNYIlHQOnqCmMooCbNIU wW6PIWMuFrTzQ0WNbYP0QcKZXLsYxFaqNatF8t6gKim8DPt+NuM+IZM3iWT+lt1R BpmDk/F5C8uraXR8ALZk5OTvyXotz/y3VKV7Ed0Xb/qTiWbQkGiH3vnQiC/J2vU3 cGFp252+Gwn127KlLCfUKWg320XgsWxG+f55qpWd5iKIOXDhwYhM0DLvj4sGPEjK jbzeDqfdfsLyZ9fEDS43t47lp0OWl5c9KCGt4ba918/kKftBdDbtzw3zHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHml5ajnC9JQ+ZiHJE7CH1Bq83nMB8GA1UdIwQY MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuRt9U6l zp6W8q/GhxZB5JVqhMdQ7aOo45e4HR3AnEjDupvEeu5Szh7g86eC3TNDo2Ol5t/C sHTmneoLthT7NDx2+n4HYW2Txu750+3375ZMAeQGg/YMaVEBOIkSV68wJ57tpWUC FDEVoYRxgPz/GSKv8i3Dldt18bd75TCasS3BfYT4DAvcHBJb2nMoOKkwZetwlHuq zvrRZRFz5xghrbwgAin3bZjL6svWa0FDDrb4FLy97Ji4g07EINjsaXwPwR8IgsjN jVssH17DaqkD9xlvqZ2IdaNlmrQdxq6qePPoXMqUetR7wJkIlj/5JXTxmsx5M6PS y5ifebg4zsmCsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:50 2025 by rpki-client