This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json) Hash identifier: /MwfXB3tgoSH2U5bE7tc32jIsAcLE1i3wlVNEVwr+Es= Subject key identifier: 44:B5:BC:0B:7B:60:B7:AE:11:C8:F6:82:78:CE:66:03:F6:09:CF:4D Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88 Certificate serial: 019B375816B0EB17EFD87DC72B5855D0709D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft Manifest number: 178F Signing time: Fri 19 Dec 2025 16:01:18 +0000 Manifest this update: Fri 19 Dec 2025 16:01:18 +0000 Manifest next update: Sat 20 Dec 2025 16:01:18 +0000 Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=) 2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=) 3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: afWyHK+0GtH2s0iLn3jcTw5WgV0P0gnwe6aTPt2BZ8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:16:b0:eb:17:ef:d8:7d:c7:2b:58:55:d0:70:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88 Validity Not Before: Dec 19 16:01:18 2025 GMT Not After : Dec 20 16:01:18 2025 GMT Subject: CN=44b5bc0b7b60b7ae11c8f68278ce6603f609cf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:83:d8:d6:60:1c:eb:ce:ce:d1:7f:34:68: d9:99:7c:6a:ba:a3:46:c8:9c:24:c4:21:9d:2c:6a: 07:ad:12:69:e2:6a:60:e2:95:06:2a:b0:ac:a0:07: bd:38:f7:43:cb:fe:04:9d:5e:87:71:cc:0a:4e:95: f7:32:fe:ac:39:42:e1:1c:9e:ef:68:0b:93:af:dc: f3:df:00:b7:36:ca:4a:d3:cc:b7:6c:7f:17:0f:a1: a8:90:06:d6:3c:40:4d:4b:59:d6:f0:f4:63:41:9d: 37:1c:87:0c:4c:7a:ef:db:4a:b7:a9:1d:00:55:51: 4f:f4:1b:be:29:ad:89:89:c4:fa:9a:58:e0:6c:da: 99:cc:b4:3e:48:ec:9a:09:b5:bd:1b:32:a0:8a:32: d5:f1:84:9f:77:6f:6d:d8:10:ff:72:bb:68:a8:ef: e6:bc:e1:46:71:27:e8:18:c4:29:3d:a7:75:bc:22: 41:dc:79:3d:60:90:4a:2c:07:48:6f:1b:bc:73:ca: 75:ea:ac:09:36:60:37:f7:3a:11:46:03:a2:1e:3e: 13:6d:5e:1e:d8:15:d8:ce:80:b4:b7:a3:45:69:8f: 52:73:87:51:40:20:09:3e:d0:50:2c:c5:88:e8:0c: ab:a3:09:ba:24:76:1d:2f:67:42:54:8b:c7:44:10: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B5:BC:0B:7B:60:B7:AE:11:C8:F6:82:78:CE:66:03:F6:09:CF:4D X509v3 Authority Key Identifier: keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fc:9a:a8:66:30:a7:cf:56:23:89:ff:0e:aa:f3:dc:dd:ee: c7:4f:82:18:bd:0c:8f:12:44:2e:6a:f5:a2:37:9e:29:02:5d: 42:18:4e:2e:cc:63:07:f7:ac:ae:bf:e6:ae:85:a6:7c:9c:b9: a9:91:32:0b:3d:3b:b1:52:5d:7a:fb:0a:57:00:a9:bd:55:95: c3:9f:d4:8d:47:3a:53:b0:ad:17:92:9c:a9:bf:d5:cf:6c:19: ec:52:f7:7e:ee:e7:8b:e0:88:cb:16:16:cf:4e:1f:e6:51:03: 72:68:3f:a7:23:3d:1b:bd:0a:b2:33:e6:d5:9a:14:0f:1e:15: 40:ed:57:34:85:ad:43:c1:10:d2:9d:d1:ff:34:47:10:5a:42: 83:f2:f7:a4:b0:f4:91:a1:db:33:14:7a:ea:50:2d:c0:55:f2: 2c:80:26:c6:02:21:b7:18:4c:e3:e5:86:ee:7b:50:27:31:b2: 99:ee:a0:b9:78:58:6d:6e:b4:27:28:8d:f5:ee:22:d5:e3:3c: 6e:b2:27:bb:6f:00:d8:09:5a:6c:eb:d3:1b:83:24:5d:87:2c: 82:36:79:74:bc:7e:86:4a:28:18:4b:3e:61:60:be:05:6f:fd: a3:dd:d7:01:83:75:81:57:d2:e9:2e:96:6f:03:4e:3f:ac:13: fa:6a:77:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WBaw6xfv2H3HK1hV0HCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj NzRhODgwHhcNMjUxMjE5MTYwMTE4WhcNMjUxMjIwMTYwMTE4WjAzMTEwLwYDVQQD Eyg0NGI1YmMwYjdiNjBiN2FlMTFjOGY2ODI3OGNlNjYwM2Y2MDljZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwGD2NZgHOvOztF/NGjZmXxquqNG yJwkxCGdLGoHrRJp4mpg4pUGKrCsoAe9OPdDy/4EnV6HccwKTpX3Mv6sOULhHJ7v aAuTr9zz3wC3NspK08y3bH8XD6GokAbWPEBNS1nW8PRjQZ03HIcMTHrv20q3qR0A VVFP9Bu+Ka2JicT6mljgbNqZzLQ+SOyaCbW9GzKgijLV8YSfd29t2BD/crtoqO/m vOFGcSfoGMQpPad1vCJB3Hk9YJBKLAdIbxu8c8p16qwJNmA39zoRRgOiHj4TbV4e 2BXYzoC0t6NFaY9Sc4dRQCAJPtBQLMWI6Ayrowm6JHYdL2dCVIvHRBDRiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES1vAt7YLeuEcj2gnjOZgP2Cc9NMB8GA1UdIwQY MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt NDZhMGRmNzc0ZmUxLzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvyaqGYw p89WI4n/Dqrz3N3ux0+CGL0MjxJELmr1ojeeKQJdQhhOLsxjB/esrr/mroWmfJy5 qZEyCz07sVJdevsKVwCpvVWVw5/UjUc6U7CtF5Kcqb/Vz2wZ7FL3fu7ni+CIyxYW z04f5lEDcmg/pyM9G70KsjPm1ZoUDx4VQO1XNIWtQ8EQ0p3R/zRHEFpCg/L3pLD0 kaHbMxR66lAtwFXyLIAmxgIhtxhM4+WG7ntQJzGyme6guXhYbW60JyiN9e4i1eM8 brInu28A2AlabOvTG4MkXYcsgjZ5dLx+hkooGEs+YWC+BW/9o93XAYN1gVfS6S6W bwNOP6wT+mp3lQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:38:00 2025 by rpki-client