This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json) Hash identifier: q1bf9omKk5Lj5eMSCiqjL5g8L5NaQRNIGIhRyOSnZ9U= Subject key identifier: E6:FA:F9:A2:4D:27:CB:E6:4B:37:15:36:60:BF:20:9B:E4:F2:02:26 Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Certificate serial: 019B3DFEF24BCA71A522D04F5F3DB55F963E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft Manifest number: 1366 Signing time: Sat 20 Dec 2025 23:01:16 +0000 Manifest this update: Sat 20 Dec 2025 23:01:16 +0000 Manifest next update: Sun 21 Dec 2025 23:01:16 +0000 Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=) 2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=) 3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: ezO3p2rdDFb107TWZd3auZc1xZw5A71tcO0Dtp2bM5I=) 4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:f2:4b:ca:71:a5:22:d0:4f:5f:3d:b5:5f:96:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Validity Not Before: Dec 20 23:01:16 2025 GMT Not After : Dec 21 23:01:16 2025 GMT Subject: CN=e6faf9a24d27cbe64b37153660bf209be4f20226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e6:da:d1:19:1e:50:9f:80:f4:ba:73:4e:33: 70:ec:f6:68:a1:4f:38:65:4c:a8:93:da:0b:c3:4b: 32:8c:26:85:a9:43:73:70:7a:43:f3:5d:00:0a:47: f3:0c:fe:fe:42:6f:d3:02:c2:30:f6:b9:1d:03:02: 82:f6:c5:6e:e6:a2:17:00:0a:42:8c:8d:8b:82:df: cd:6b:be:dc:aa:51:d4:0c:2f:9a:12:5b:5d:d3:9e: 8c:19:38:9b:e4:c3:fa:01:b9:45:66:84:9f:1d:39: f8:90:8e:b1:60:2e:19:32:ce:50:fc:81:9e:31:71: 19:96:18:fd:aa:f4:78:2a:66:53:a4:bd:82:32:1e: e7:6c:1c:ce:3e:b3:53:a5:a2:b7:c1:4c:14:20:00: 31:be:58:74:2b:45:77:f2:47:84:bb:a0:0e:fe:d7: 77:9c:f2:91:20:c9:94:0d:d1:28:8f:c3:43:a1:79: 80:62:8f:43:ef:db:f9:a9:1b:cb:a4:43:bd:c4:8d: f9:c0:7a:18:9c:fc:31:d6:51:6f:37:2f:5e:98:0f: d7:c8:9f:f8:de:c8:17:d8:16:3f:e1:3e:eb:ec:32: 50:e6:44:1f:22:0b:61:bc:08:17:84:c3:1b:3e:37: 14:42:10:6b:f6:2b:22:4b:bd:29:d8:40:26:89:28: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FA:F9:A2:4D:27:CB:E6:4B:37:15:36:60:BF:20:9B:E4:F2:02:26 X509v3 Authority Key Identifier: keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:41:53:27:80:11:0e:8f:91:d4:16:62:4c:9c:9d:d3:16:5f: 13:ce:34:fc:87:3b:33:b7:20:be:db:68:1f:55:26:23:d0:30: 10:86:bf:35:b1:a6:d6:c3:e8:77:5f:26:e2:3c:56:7b:81:e4: 77:90:15:d5:db:83:ca:76:fb:f7:b6:55:7d:46:8b:00:9c:95: 6a:9c:c0:92:29:71:f2:50:db:3d:e5:4f:8c:b1:a5:f7:d2:e8: fd:8a:d6:0a:d7:3d:55:6c:e2:09:40:58:dd:97:8e:6b:40:52: 0d:4e:0d:0f:97:ef:be:a8:46:ae:af:22:35:cc:ac:1d:c4:98: 8f:ec:3c:d3:f1:dc:2a:45:9b:7c:e7:03:08:69:8c:fc:8b:35: 9b:76:ad:5d:1c:e5:29:ee:3a:89:c2:5e:e3:64:78:77:69:ed: 3b:14:ec:90:c0:0e:d1:82:ee:f5:88:22:9e:38:32:84:52:27: 03:87:3d:3c:5f:b7:95:84:88:47:63:c1:f5:23:d9:07:a8:69: 81:8e:99:64:96:4b:24:28:31:f7:34:b0:09:bb:e7:5d:50:3b: 03:00:d9:3d:d3:26:57:53:64:56:e1:67:75:c6:4a:16:df:a7: a4:aa:1e:8f:db:31:1d:f2:69:4c:bf:41:40:0a:87:dd:b0:d9: 73:ce:d9:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/vJLynGlItBPXz21X5Y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh NTM3ZjkwHhcNMjUxMjIwMjMwMTE2WhcNMjUxMjIxMjMwMTE2WjAzMTEwLwYDVQQD EyhlNmZhZjlhMjRkMjdjYmU2NGIzNzE1MzY2MGJmMjA5YmU0ZjIwMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieba0RkeUJ+A9LpzTjNw7PZooU84 ZUyok9oLw0syjCaFqUNzcHpD810ACkfzDP7+Qm/TAsIw9rkdAwKC9sVu5qIXAApC jI2Lgt/Na77cqlHUDC+aEltd056MGTib5MP6AblFZoSfHTn4kI6xYC4ZMs5Q/IGe MXEZlhj9qvR4KmZTpL2CMh7nbBzOPrNTpaK3wUwUIAAxvlh0K0V38keEu6AO/td3 nPKRIMmUDdEoj8NDoXmAYo9D79v5qRvLpEO9xI35wHoYnPwx1lFvNy9emA/XyJ/4 3sgX2BY/4T7r7DJQ5kQfIgthvAgXhMMbPjcUQhBr9isiS70p2EAmiSgyqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb6+aJNJ8vmSzcVNmC/IJvk8gImMB8GA1UdIwQY MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt MTYzMjQ3ZWIwZTA3LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3 LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkFTJ4AR Do+R1BZiTJyd0xZfE840/Ic7M7cgvttoH1UmI9AwEIa/NbGm1sPod18m4jxWe4Hk d5AV1duDynb797ZVfUaLAJyVapzAkilx8lDbPeVPjLGl99Lo/YrWCtc9VWziCUBY 3ZeOa0BSDU4ND5fvvqhGrq8iNcysHcSYj+w80/HcKkWbfOcDCGmM/Is1m3atXRzl Ke46icJe42R4d2ntOxTskMAO0YLu9YginjgyhFInA4c9PF+3lYSIR2PB9SPZB6hp gY6ZZJZLJCgx9zSwCbvnXVA7AwDZPdMmV1NkVuFndcZKFt+npKoej9sxHfJpTL9B QAqH3bDZc87ZQg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:41:33 2025 by rpki-client