This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json) Hash identifier: 8C47E+Zt2f01F4IfzOKdtS1PAkZELPdc4tnZN3qqW8k= Subject key identifier: 41:42:32:F0:CE:38:11:2F:8E:42:BB:3B:69:C0:D5:ED:83:B2:02:7C Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Certificate serial: 019B0F00C0AF9DC85733E076FEEA87F95231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft Manifest number: 05F5 Signing time: Thu 11 Dec 2025 20:01:06 +0000 Manifest this update: Thu 11 Dec 2025 20:01:06 +0000 Manifest next update: Fri 12 Dec 2025 20:01:06 +0000 Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=) 2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=) 3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: JRjTi9kv7QvJtn/khg27QVgxG2N8hPA5rntM8TarAdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c0:af:9d:c8:57:33:e0:76:fe:ea:87:f9:52:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453 Validity Not Before: Dec 11 20:01:06 2025 GMT Not After : Dec 12 20:01:06 2025 GMT Subject: CN=414232f0ce38112f8e42bb3b69c0d5ed83b2027c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b5:c3:95:4e:b0:59:f0:95:fb:4a:ed:30:6b: 97:6d:98:22:fd:30:99:d8:81:79:b0:6c:c4:cd:f9: 8a:87:b1:e9:31:e8:dc:34:18:9c:c7:cc:ca:8f:5e: b6:70:a1:7d:c8:f2:76:6c:19:bc:70:05:75:05:8d: 10:27:45:80:f5:9b:dc:92:65:8b:5d:32:47:20:d9: f8:a9:82:88:e3:4a:80:f0:31:20:0a:59:56:51:11: d5:b7:53:dc:a9:29:50:6f:d4:0f:aa:10:9c:ea:85: bf:cb:33:bd:de:8c:10:c8:fe:d8:dd:d8:4b:96:ae: 94:01:13:4e:f4:24:fd:2c:4d:72:d4:b6:e0:c8:4c: cf:f0:88:45:04:e9:f7:b9:39:0c:30:7d:1f:cd:25: a5:71:51:00:00:40:3c:01:00:d4:68:30:53:ec:d6: d8:ef:76:a0:78:e3:06:76:dc:d8:cb:9d:cb:95:9d: 40:0d:17:83:6f:06:82:9e:b2:2f:9d:9b:d9:dc:6c: ae:e8:d6:01:05:5a:7c:57:b1:f7:be:34:07:26:00: c9:6c:78:ef:4d:07:a6:8f:d0:ae:da:07:6f:5c:39: 70:14:21:49:2e:ed:7c:9b:9e:a2:42:99:6a:23:3d: 5a:81:51:1b:89:a7:eb:60:cd:78:95:ff:c6:c1:ba: 6e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:32:F0:CE:38:11:2F:8E:42:BB:3B:69:C0:D5:ED:83:B2:02:7C X509v3 Authority Key Identifier: keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f0:70:29:c0:7b:aa:6e:9d:77:89:e1:4b:67:c4:42:f0:db: 79:17:c8:64:af:1e:ed:51:b8:ba:63:ee:a0:0d:91:1c:63:27: 78:a0:5b:53:9a:3e:29:2f:c9:70:52:4f:57:8d:75:75:84:39: 70:12:7c:50:99:a4:c3:82:cc:70:e7:7e:6c:af:71:68:af:c9: 60:af:30:03:ad:4c:54:cf:46:f5:87:40:1e:15:9f:f5:a2:f5: 53:c1:da:e3:23:2f:1c:c5:58:d9:65:9e:75:d7:7c:43:0d:98: a2:0a:c3:31:2a:07:36:7c:e5:46:ef:bf:6d:fc:78:1e:ed:4a: 27:c8:73:75:21:16:8f:09:0f:f9:27:0f:1d:3e:ab:37:7a:5b: 53:34:a3:a3:50:84:d8:de:12:d6:0c:97:7a:da:9c:70:57:4c: bb:ad:ee:f7:cd:f5:87:83:91:b0:0f:d3:bc:9f:81:0b:0d:ba: c6:3d:00:2e:f0:35:78:55:bc:d7:1c:46:61:87:12:74:d0:fb: 98:4b:4c:80:a4:f4:35:4b:5d:38:cf:ac:ee:9c:9f:d8:c4:aa: 14:c4:f0:17:b3:7c:f2:06:99:0d:5c:50:4b:0c:e4:78:6f:35: c3:35:49:d1:aa:19:af:63:5f:05:e4:de:81:73:c2:d8:f3:78: 0a:5f:ad:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMCvnchXM+B2/uqH+VIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4 NzE0NTMwHhcNMjUxMjExMjAwMTA2WhcNMjUxMjEyMjAwMTA2WjAzMTEwLwYDVQQD Eyg0MTQyMzJmMGNlMzgxMTJmOGU0MmJiM2I2OWMwZDVlZDgzYjIwMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87XDlU6wWfCV+0rtMGuXbZgi/TCZ 2IF5sGzEzfmKh7HpMejcNBicx8zKj162cKF9yPJ2bBm8cAV1BY0QJ0WA9ZvckmWL XTJHINn4qYKI40qA8DEgCllWURHVt1PcqSlQb9QPqhCc6oW/yzO93owQyP7Y3dhL lq6UARNO9CT9LE1y1LbgyEzP8IhFBOn3uTkMMH0fzSWlcVEAAEA8AQDUaDBT7NbY 73ageOMGdtzYy53LlZ1ADReDbwaCnrIvnZvZ3Gyu6NYBBVp8V7H3vjQHJgDJbHjv TQemj9Cu2gdvXDlwFCFJLu18m56iQplqIz1agVEbiafrYM14lf/GwbpuUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFCMvDOOBEvjkK7O2nA1e2DsgJ8MB8GA1UdIwQY MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfBwKcB7 qm6dd4nhS2fEQvDbeRfIZK8e7VG4umPuoA2RHGMneKBbU5o+KS/JcFJPV411dYQ5 cBJ8UJmkw4LMcOd+bK9xaK/JYK8wA61MVM9G9YdAHhWf9aL1U8Ha4yMvHMVY2WWe ddd8Qw2YogrDMSoHNnzlRu+/bfx4Hu1KJ8hzdSEWjwkP+ScPHT6rN3pbUzSjo1CE 2N4S1gyXetqccFdMu63u9831h4ORsA/TvJ+BCw26xj0ALvA1eFW81xxGYYcSdND7 mEtMgKT0NUtdOM+s7pyf2MSqFMTwF7N88gaZDVxQSwzkeG81wzVJ0aoZr2NfBeTe gXPC2PN4Cl+tPQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:45:30 2025 by rpki-client