This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json) Hash identifier: C07lprQv5nDUDK/ucwSLdSBtrvtZn1A8628jKf2M9Pc= Subject key identifier: BE:FE:03:17:97:8B:CE:E8:CC:67:D7:A5:1A:C9:0A:8E:E8:9D:C2:7B Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131 Certificate serial: 019B3C10843982897D1CA6BC3C60B7C608CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft Manifest number: 0A4B Signing time: Sat 20 Dec 2025 14:01:13 +0000 Manifest this update: Sat 20 Dec 2025 14:01:13 +0000 Manifest next update: Sun 21 Dec 2025 14:01:13 +0000 Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: 4IDzFOf75ZuGMgzF5PsTGvKaGFlhmpdCKH36SqrSrR4=) 2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:84:39:82:89:7d:1c:a6:bc:3c:60:b7:c6:08:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131 Validity Not Before: Dec 20 14:01:13 2025 GMT Not After : Dec 21 14:01:13 2025 GMT Subject: CN=befe0317978bcee8cc67d7a51ac90a8ee89dc27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:13:d6:af:f2:fe:19:5c:26:aa:96:b9:93:c1: d5:89:e2:da:78:20:94:ad:3d:70:76:95:37:f9:3c: 6f:b1:ab:93:cf:2d:79:b0:5a:c5:4a:cd:0f:6e:83: fa:b2:5e:3d:5b:90:3e:15:9b:e0:30:6d:83:e5:1d: d2:08:59:38:62:a7:35:d9:47:44:f6:16:b7:4c:0b: 3d:0d:1d:f6:32:7a:48:41:31:e6:ab:99:c6:b8:be: 00:45:9a:a1:5a:1e:d4:b9:0d:37:0c:fa:e8:77:63: e4:9a:18:b9:b9:d2:f5:6c:a6:75:b6:a5:a4:1a:a4: 5b:e5:66:08:35:47:d9:ab:94:0c:ab:c1:f5:a0:02: d9:2e:02:71:02:b0:68:d0:ca:48:77:85:fb:4e:22: c2:0e:3e:e2:6a:88:fb:4b:e5:07:37:42:5f:68:ee: 42:d6:ff:19:e4:de:cf:6a:10:02:47:29:71:93:d2: ab:c6:d3:78:19:41:98:a6:f9:03:f4:e1:0e:6b:e5: 95:e2:2b:96:fd:e7:2c:e1:b5:c2:e5:16:50:90:b0: 75:ed:66:16:64:6c:9a:03:24:ba:65:bc:58:b7:09: ba:3f:8e:95:78:23:1c:0b:14:3c:34:f1:4d:c0:8f: 89:81:59:94:31:a8:04:de:e4:da:d7:34:f0:38:5c: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FE:03:17:97:8B:CE:E8:CC:67:D7:A5:1A:C9:0A:8E:E8:9D:C2:7B X509v3 Authority Key Identifier: keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:db:74:ab:4d:15:e5:4c:fd:19:ab:77:ce:00:93:94:0c:16: a3:fa:ad:7f:47:c5:ab:65:8c:c8:a7:be:e6:50:60:75:66:7c: 66:aa:a1:d9:62:4a:b8:c0:5c:8b:60:c9:9f:c5:22:d3:1d:1f: e9:aa:38:6e:19:9c:58:8c:0b:f0:df:a4:e5:70:d7:8b:dd:49: 68:45:fb:06:2c:ae:a3:02:fe:ac:b2:ef:06:6a:4e:ab:2f:1e: a7:44:29:f1:d2:f7:45:ac:d6:3a:c8:c8:02:02:c0:a7:4d:65: 06:f1:92:be:e3:2f:66:45:7d:96:78:98:d9:1f:bb:d0:b6:40: 6b:d9:14:e7:3c:a2:99:c1:29:76:5a:0d:f4:0e:7e:26:5e:d5: 1d:51:b5:e6:bd:47:4b:4d:ed:57:26:28:6a:84:b8:78:b0:ba: f7:87:ac:58:bc:10:c8:30:4c:22:cd:8a:66:d7:d4:cb:e2:58: 70:23:9f:99:69:b8:78:46:42:60:b7:86:02:da:1a:37:6b:27: ac:c0:eb:4e:a0:ee:be:dd:d8:79:cb:bb:29:e2:68:7b:b9:b9: 7a:0c:7f:13:e7:85:2b:8c:94:53:ae:4b:ab:d8:52:53:a0:1c: 7f:0b:62:cd:b9:d7:11:58:d2:8a:13:57:db:e4:f7:a5:2b:97: 33:03:04:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIQ5gol9HKa8PGC3xgjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMTYyYmJmMDI0NmNkYTIyODBhMjkzNDMyYWU2ZjBiZDY4 MjYxMzEwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD EyhiZWZlMDMxNzk3OGJjZWU4Y2M2N2Q3YTUxYWM5MGE4ZWU4OWRjMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hPWr/L+GVwmqpa5k8HVieLaeCCU rT1wdpU3+TxvsauTzy15sFrFSs0PboP6sl49W5A+FZvgMG2D5R3SCFk4Yqc12UdE 9ha3TAs9DR32MnpIQTHmq5nGuL4ARZqhWh7UuQ03DProd2Pkmhi5udL1bKZ1tqWk GqRb5WYINUfZq5QMq8H1oALZLgJxArBo0MpId4X7TiLCDj7iaoj7S+UHN0JfaO5C 1v8Z5N7PahACRylxk9KrxtN4GUGYpvkD9OEOa+WV4iuW/ecs4bXC5RZQkLB17WYW ZGyaAyS6ZbxYtwm6P46VeCMcCxQ8NPFNwI+JgVmUMagE3uTa1zTwOFwCQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7+AxeXi87ozGfXpRrJCo7oncJ7MB8GA1UdIwQY MBaAFCMWK78CRs2iKAopNDKubwvWgmExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAt ODVjMzA1ZjlmZTZmLzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAtODVjMzA1ZjlmZTZm LzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9t0q00V 5Uz9Gat3zgCTlAwWo/qtf0fFq2WMyKe+5lBgdWZ8Zqqh2WJKuMBci2DJn8Ui0x0f 6ao4bhmcWIwL8N+k5XDXi91JaEX7BiyuowL+rLLvBmpOqy8ep0Qp8dL3RazWOsjI AgLAp01lBvGSvuMvZkV9lniY2R+70LZAa9kU5zyimcEpdloN9A5+Jl7VHVG15r1H S03tVyYoaoS4eLC694esWLwQyDBMIs2KZtfUy+JYcCOfmWm4eEZCYLeGAtoaN2sn rMDrTqDuvt3Yecu7KeJoe7m5egx/E+eFK4yUU65Lq9hSU6AcfwtizbnXEVjSihNX 2+T3pSuXMwMEag== -----END CERTIFICATE-----Generated at Sat Dec 20 18:43:32 2025 by rpki-client