This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json) Hash identifier: SZAmRXBv34KTzGALafVnYLFWbeP0Sb3aC/DOm4PCjH0= Subject key identifier: 9F:01:D6:B8:8A:BF:BD:95:21:65:5F:4E:60:96:11:8F:DB:B3:C4:20 Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Certificate serial: 019B514E800D2A0EF31300D61A73FF456D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft Manifest number: 1370 Signing time: Wed 24 Dec 2025 17:00:57 +0000 Manifest this update: Wed 24 Dec 2025 17:00:57 +0000 Manifest next update: Thu 25 Dec 2025 17:00:57 +0000 Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=) 2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=) 3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: WVHeou5jmMDU5fgVQVFJZtwLxtd/SAHVnI66HPYkTxQ=) 4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:80:0d:2a:0e:f3:13:00:d6:1a:73:ff:45:6d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Validity Not Before: Dec 24 17:00:57 2025 GMT Not After : Dec 25 17:00:57 2025 GMT Subject: CN=9f01d6b88abfbd9521655f4e6096118fdbb3c420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:0a:f5:2c:90:5f:de:83:47:69:82:6a:36: 91:2b:92:57:70:c3:12:ee:26:66:e2:5e:ae:6d:22: 81:6f:44:09:4d:5c:39:a0:b8:f0:2e:f7:02:07:cd: 45:b0:b2:fa:e1:50:40:b3:30:f4:92:bd:fe:e6:cd: 38:90:34:ff:81:9f:2c:a2:d1:f4:b4:d2:88:b1:15: bb:6b:2b:f2:26:5d:06:64:a5:de:1c:ec:9e:9b:6c: 79:89:2b:79:74:f8:13:fc:a1:90:f7:1f:8d:c4:1c: 37:97:87:d0:c0:b9:8a:9c:8f:df:9a:85:ab:be:32: 51:e8:78:48:ce:56:ab:b5:f1:e7:71:38:4e:37:90: 40:cb:ab:99:41:5d:02:1b:18:ca:ac:c5:1e:da:ac: 85:27:f9:9d:71:bf:1a:8e:ee:60:56:3e:7b:5b:50: 2c:86:cb:b8:be:76:6a:fd:26:d2:77:aa:ad:13:93: f5:1d:cc:c8:cc:39:9e:70:e6:ed:ba:6c:3e:57:b6: 9e:65:86:e4:4e:0b:a6:5d:98:ff:26:65:1d:f4:2f: a2:63:05:67:86:e1:80:59:da:92:44:db:eb:6f:6d: 5d:60:5a:43:20:09:e1:9a:4c:dc:e3:be:e2:c2:af: d0:47:98:20:72:11:ec:3b:c9:b2:ce:3a:47:90:1c: 53:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:01:D6:B8:8A:BF:BD:95:21:65:5F:4E:60:96:11:8F:DB:B3:C4:20 X509v3 Authority Key Identifier: keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5f:9b:8d:5d:fb:a6:a6:44:2c:50:3d:30:bc:55:90:b8:df: 91:4c:e0:05:0f:fa:4e:7e:be:b8:31:aa:f5:8e:39:fe:64:ec: 10:a7:b2:b5:8f:0f:50:5c:82:86:61:cb:44:a5:c5:93:e0:67: 4c:6f:a2:e7:20:6a:dd:83:b8:be:0a:58:67:e0:79:2b:bd:e2: 56:ea:49:4e:7f:22:23:03:f7:b9:fd:ba:8c:15:c2:39:40:3c: c2:d2:d5:7c:99:53:52:58:d5:17:12:c3:0d:7c:69:00:28:a6: 3b:22:07:3b:8e:79:9e:52:d5:62:ec:ed:9b:f9:83:fb:7e:75: f5:1a:8e:dc:6d:f5:db:c1:e0:d9:24:96:06:2c:54:0c:b2:10: 18:f1:bc:97:bd:05:42:2b:b0:29:42:84:a2:ce:bb:52:a0:7b: 97:e4:39:8a:11:22:5f:56:39:ac:3c:45:b6:e8:5b:12:d4:93: 77:25:fb:b9:7a:dd:eb:60:5b:58:71:8c:a9:50:da:0d:61:66: 8b:c7:e3:74:d4:96:88:8d:03:47:12:c0:8f:a6:fb:ca:5d:c1: 1b:dd:c1:49:fd:d2:5b:9a:7d:3d:7c:2a:c4:21:78:2d:63:17: 37:ee:1d:ac:2b:6d:f1:a3:ce:24:48:03:c1:40:bd:46:ae:f8: da:f9:a4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRToANKg7zEwDWGnP/RW18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh NTM3ZjkwHhcNMjUxMjI0MTcwMDU3WhcNMjUxMjI1MTcwMDU3WjAzMTEwLwYDVQQD Eyg5ZjAxZDZiODhhYmZiZDk1MjE2NTVmNGU2MDk2MTE4ZmRiYjNjNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRQK9SyQX96DR2mCajaRK5JXcMMS 7iZm4l6ubSKBb0QJTVw5oLjwLvcCB81FsLL64VBAszD0kr3+5s04kDT/gZ8sotH0 tNKIsRW7ayvyJl0GZKXeHOyem2x5iSt5dPgT/KGQ9x+NxBw3l4fQwLmKnI/fmoWr vjJR6HhIzlartfHncThON5BAy6uZQV0CGxjKrMUe2qyFJ/mdcb8aju5gVj57W1As hsu4vnZq/SbSd6qtE5P1HczIzDmecObtumw+V7aeZYbkTgumXZj/JmUd9C+iYwVn huGAWdqSRNvrb21dYFpDIAnhmkzc477iwq/QR5ggchHsO8myzjpHkBxTFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8B1riKv72VIWVfTmCWEY/bs8QgMB8GA1UdIwQY MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt MTYzMjQ3ZWIwZTA3LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3 LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV+bjV37 pqZELFA9MLxVkLjfkUzgBQ/6Tn6+uDGq9Y45/mTsEKeytY8PUFyChmHLRKXFk+Bn TG+i5yBq3YO4vgpYZ+B5K73iVupJTn8iIwP3uf26jBXCOUA8wtLVfJlTUljVFxLD DXxpACimOyIHO455nlLVYuztm/mD+3519RqO3G3128Hg2SSWBixUDLIQGPG8l70F QiuwKUKEos67UqB7l+Q5ihEiX1Y5rDxFtuhbEtSTdyX7uXrd62BbWHGMqVDaDWFm i8fjdNSWiI0DRxLAj6b7yl3BG93BSf3SW5p9PXwqxCF4LWMXN+4drCtt8aPOJEgD wUC9Rq742vmkkQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:46:53 2025 by rpki-client