This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json) Hash identifier: IJIY3Y77PUvsQ4+oaSd20/xU1vnnILcZKZNVJnRSsMo= Subject key identifier: D6:12:AD:16:F5:3E:F4:D9:3B:BF:62:5C:22:EB:C5:FD:D7:82:4E:92 Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Certificate serial: 019B35A034B0E41A88F4482B3FF94AC56ABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft Manifest number: 0609 Signing time: Fri 19 Dec 2025 08:00:50 +0000 Manifest this update: Fri 19 Dec 2025 08:00:50 +0000 Manifest next update: Sat 20 Dec 2025 08:00:50 +0000 Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=) 2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=) 3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: COmcOlblvCpzsMY0gjjjt6l90FeGeXFM3d+T/YUaRjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:34:b0:e4:1a:88:f4:48:2b:3f:f9:4a:c5:6a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Validity Not Before: Dec 19 08:00:50 2025 GMT Not After : Dec 20 08:00:50 2025 GMT Subject: CN=d612ad16f53ef4d93bbf625c22ebc5fdd7824e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:d2:58:da:8b:e7:b6:92:30:92:b5:c5:f4: e2:22:03:ba:d5:5a:12:ac:94:30:a0:7c:d1:70:81: 1d:19:85:18:d0:0c:51:ad:0a:fb:ab:8a:a8:fe:fd: 5c:dd:fa:42:a3:92:f9:7d:22:da:5e:6e:e8:69:f6: f7:72:1f:0a:47:0a:cd:09:06:74:09:46:82:c2:64: b9:10:99:ac:73:17:12:4b:56:a0:a0:1f:6c:7b:a0: a8:36:04:23:60:f1:b5:ae:db:b4:cf:5d:8c:29:23: 2a:c7:96:83:32:5d:87:d9:c7:9c:c9:d9:4b:a5:f7: 9e:aa:1e:c5:83:df:0c:05:3c:2c:9a:21:8a:39:05: 8c:c0:ad:83:98:54:30:a7:29:98:c7:99:db:c0:20: 1a:b6:0a:8f:0c:ab:7c:c5:c0:b9:c4:09:ac:9c:b3: f8:d8:73:63:bc:fc:9b:06:b6:e0:3f:a3:b2:f5:3d: 24:0e:d9:7f:e8:ed:54:3b:03:18:bb:d0:72:03:1a: e3:e6:cc:40:f3:10:a0:57:26:e6:78:59:c8:ff:7f: 1b:f2:41:ac:39:a5:f6:9b:78:44:17:38:0c:17:3f: 25:42:7d:84:5f:13:12:4c:71:4f:7b:71:e9:2b:1f: ed:c6:fa:1d:22:9c:88:41:da:28:8f:a6:6e:c1:21: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:AD:16:F5:3E:F4:D9:3B:BF:62:5C:22:EB:C5:FD:D7:82:4E:92 X509v3 Authority Key Identifier: keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:19:f0:31:06:48:34:fb:32:59:95:9f:a7:00:7e:45:de:6e: 01:9a:77:f8:7e:aa:4d:79:dc:26:f7:31:2e:cd:7d:9a:74:f8: 31:60:fe:34:59:35:92:e8:3e:b1:39:b1:4c:e2:5a:1d:c2:1f: d5:87:bd:88:6e:44:f1:69:99:de:b4:20:20:cd:4d:c1:9d:19: 07:85:3e:b1:ba:18:7a:b3:81:21:c1:92:10:42:f7:a4:2e:f9: bf:de:84:b9:c3:66:f9:9c:28:ee:13:70:2a:5f:2a:3c:d6:dc: e8:28:8f:b8:af:e6:1b:a3:4e:ab:8a:37:c9:b4:9d:a7:9d:6d: 7e:e9:3a:7e:0b:a7:e8:0b:90:fe:58:d7:d0:3f:d2:5e:31:a2: 4e:9e:50:35:29:63:0c:56:ab:90:5d:ff:b1:f4:7a:e5:97:ab: c9:1e:32:b5:de:b1:e1:6e:8e:15:bf:9d:86:55:a4:14:87:d5: dd:09:8f:18:cb:6d:e5:6a:cb:d7:72:57:bd:7b:5d:ac:6f:15: 1f:f8:2a:9b:91:2a:c3:41:ec:48:fb:d1:14:84:02:40:27:89: ec:99:55:3c:e3:26:58:d0:57:a2:0d:bc:28:7c:1b:d3:ae:60: f8:6b:e5:6c:24:59:60:c6:e8:84:3b:81:41:01:f9:8e:6f:14: af:57:1b:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oDSw5BqI9EgrP/lKxWq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4 NzE0NTMwHhcNMjUxMjE5MDgwMDUwWhcNMjUxMjIwMDgwMDUwWjAzMTEwLwYDVQQD EyhkNjEyYWQxNmY1M2VmNGQ5M2JiZjYyNWMyMmViYzVmZGQ3ODI0ZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs53SWNqL57aSMJK1xfTiIgO61VoS rJQwoHzRcIEdGYUY0AxRrQr7q4qo/v1c3fpCo5L5fSLaXm7oafb3ch8KRwrNCQZ0 CUaCwmS5EJmscxcSS1agoB9se6CoNgQjYPG1rtu0z12MKSMqx5aDMl2H2cecydlL pfeeqh7Fg98MBTwsmiGKOQWMwK2DmFQwpymYx5nbwCAatgqPDKt8xcC5xAmsnLP4 2HNjvPybBrbgP6Oy9T0kDtl/6O1UOwMYu9ByAxrj5sxA8xCgVybmeFnI/38b8kGs OaX2m3hEFzgMFz8lQn2EXxMSTHFPe3HpKx/txvodIpyIQdooj6ZuwSGjWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYSrRb1PvTZO79iXCLrxf3Xgk6SMB8GA1UdIwQY MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRnwMQZI NPsyWZWfpwB+Rd5uAZp3+H6qTXncJvcxLs19mnT4MWD+NFk1kug+sTmxTOJaHcIf 1Ye9iG5E8WmZ3rQgIM1NwZ0ZB4U+sboYerOBIcGSEEL3pC75v96EucNm+Zwo7hNw Kl8qPNbc6CiPuK/mG6NOq4o3ybSdp51tfuk6fgun6AuQ/ljX0D/SXjGiTp5QNSlj DFarkF3/sfR65ZeryR4ytd6x4W6OFb+dhlWkFIfV3QmPGMtt5WrL13JXvXtdrG8V H/gqm5Eqw0HsSPvRFIQCQCeJ7JlVPOMmWNBXog28KHwb065g+GvlbCRZYMbohDuB QQH5jm8Ur1cbiw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:16:30 2025 by rpki-client