This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json) Hash identifier: rlTH2zQpb8Dvm1/DSAoe2xb9pUHlVUcfiW9LzFj7/cc= Subject key identifier: EF:BA:CB:2A:36:7F:3F:CB:C6:8A:93:F6:CC:46:BF:2F:DE:2C:11:77 Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2 Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2 Certificate serial: 019B4B4CE8881DB58282DF516C8422DA3A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft Manifest number: 1590 Signing time: Tue 23 Dec 2025 13:01:30 +0000 Manifest this update: Tue 23 Dec 2025 13:01:30 +0000 Manifest next update: Wed 24 Dec 2025 13:01:30 +0000 Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=) 2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: hmRkDNDOqj5sDrQxDLFWSzMiNR9OD6WgFV2sTKintRY=) 3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:e8:88:1d:b5:82:82:df:51:6c:84:22:da:3a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2 Validity Not Before: Dec 23 13:01:30 2025 GMT Not After : Dec 24 13:01:30 2025 GMT Subject: CN=efbacb2a367f3fcbc68a93f6cc46bf2fde2c1177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:48:8c:60:ae:07:91:ff:49:bd:97:61:08: 1d:f3:e2:17:8c:3a:e2:a7:83:99:42:7d:28:23:76: 94:5c:e9:ef:de:79:89:0a:78:97:0a:0e:e7:38:b8: 74:c3:2b:03:9e:15:ad:e1:21:cc:3f:e9:4d:53:29: 71:56:da:b4:d3:f6:6a:40:f8:8b:79:69:c6:be:46: b0:85:b6:81:47:23:d8:db:55:8a:50:46:1b:d0:1f: 3f:5d:c2:5d:03:43:dd:83:74:26:1d:6a:0c:c1:6a: 8b:0d:a1:40:b7:71:73:85:3b:9b:59:dc:34:91:5d: d8:99:d7:dc:8a:69:38:76:b8:a3:af:40:b3:82:4e: c5:02:bd:70:e2:ae:e5:05:97:c5:90:91:ad:e6:1f: 97:7f:7f:87:38:5c:4d:52:02:cb:4b:af:6e:d5:b0: f2:0e:98:15:bd:82:69:53:76:3a:6a:12:10:2e:d7: 23:2b:c1:e3:42:67:df:7e:d4:51:51:bf:03:fe:df: 03:ca:df:b9:fc:56:89:4d:04:e4:4f:75:35:38:06: 23:f4:76:32:c4:b0:14:b9:b4:9c:18:12:cc:42:b8: 90:9d:54:f2:0a:7d:4b:fb:62:f6:fb:7c:33:14:23: 79:60:85:af:2f:03:1f:64:3d:e5:66:e2:d6:9e:98: cf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BA:CB:2A:36:7F:3F:CB:C6:8A:93:F6:CC:46:BF:2F:DE:2C:11:77 X509v3 Authority Key Identifier: keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fc:13:aa:b6:b3:a0:ac:18:78:eb:d8:9c:4b:dd:17:ef:4c: 4a:87:25:7b:da:74:00:c3:2e:ca:29:bb:75:fa:f3:75:fe:79: 9b:fa:2b:47:b4:d4:d0:c6:7f:7c:55:e2:aa:eb:23:96:cf:ad: 42:ff:8c:41:ec:c5:2b:d5:9f:9e:20:fc:68:ce:3d:35:32:bf: 79:45:2b:16:7f:4a:a6:89:ba:91:39:87:bd:f5:9b:30:f3:bb: 11:40:31:44:00:3b:00:79:c5:7d:f0:81:5a:ef:a1:56:7a:c3: e3:44:11:c2:e7:48:7a:fb:ba:fb:b1:6c:5e:ad:5f:84:25:63: af:ad:b3:b1:90:01:f9:01:85:30:df:e2:eb:ef:a3:13:26:ac: 36:e3:89:23:c2:58:81:53:21:51:a8:65:6a:6e:0f:5f:16:f1: 1c:85:8e:e4:1f:e3:07:e0:5c:73:17:aa:58:d2:0b:d5:83:50: b7:55:31:c7:a8:84:37:f9:88:2f:8b:4b:11:7f:3b:ac:74:d8: c6:85:50:4a:f9:a8:6e:e6:1a:c6:4d:6b:3e:6e:2a:ff:d6:e5: 31:99:50:78:7b:8a:cb:2e:08:b3:22:11:21:03:6d:a4:f3:7c: 19:02:a4:f7:de:68:fe:ea:49:62:a6:0d:e8:3f:ef:8a:01:72: 3d:22:fc:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTOiIHbWCgt9RbIQi2jo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx Y2IwZTIwHhcNMjUxMjIzMTMwMTMwWhcNMjUxMjI0MTMwMTMwWjAzMTEwLwYDVQQD EyhlZmJhY2IyYTM2N2YzZmNiYzY4YTkzZjZjYzQ2YmYyZmRlMmMxMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppNIjGCuB5H/Sb2XYQgd8+IXjDri p4OZQn0oI3aUXOnv3nmJCniXCg7nOLh0wysDnhWt4SHMP+lNUylxVtq00/ZqQPiL eWnGvkawhbaBRyPY21WKUEYb0B8/XcJdA0Pdg3QmHWoMwWqLDaFAt3FzhTubWdw0 kV3Ymdfcimk4drijr0Czgk7FAr1w4q7lBZfFkJGt5h+Xf3+HOFxNUgLLS69u1bDy DpgVvYJpU3Y6ahIQLtcjK8HjQmffftRRUb8D/t8Dyt+5/FaJTQTkT3U1OAYj9HYy xLAUubScGBLMQriQnVTyCn1L+2L2+3wzFCN5YIWvLwMfZD3lZuLWnpjPdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+6yyo2fz/LxoqT9sxGvy/eLBF3MB8GA1UdIwQY MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut NzYwM2U1ZGQ1NzA3LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3 LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPwTqraz oKwYeOvYnEvdF+9MSocle9p0AMMuyim7dfrzdf55m/orR7TU0MZ/fFXiqusjls+t Qv+MQezFK9WfniD8aM49NTK/eUUrFn9Kpom6kTmHvfWbMPO7EUAxRAA7AHnFffCB Wu+hVnrD40QRwudIevu6+7FsXq1fhCVjr62zsZAB+QGFMN/i6++jEyasNuOJI8JY gVMhUahlam4PXxbxHIWO5B/jB+BccxeqWNIL1YNQt1Uxx6iEN/mIL4tLEX87rHTY xoVQSvmobuYaxk1rPm4q/9blMZlQeHuKyy4IsyIRIQNtpPN8GQKk995o/upJYqYN 6D/vigFyPSL8Jw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:41:57 2025 by rpki-client