This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json) Hash identifier: S5OiPbMhHEQFacj5kKSHlx13Dzind8wWcFRHDFcT+Cc= Subject key identifier: E3:6B:84:35:DC:35:33:7D:ED:D9:9A:41:59:58:18:E9:E4:D2:01:68 Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2 Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2 Certificate serial: 019B469482BFF6F6807D0FA2B355786EB45C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 15:01:36 +0000 Manifest this update: Mon 22 Dec 2025 15:01:36 +0000 Manifest next update: Tue 23 Dec 2025 15:01:36 +0000 Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=) 2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: nzeZ0ihfeFxSFBInBJfwQpwMpu7seHcDNo5m66c9qmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:82:bf:f6:f6:80:7d:0f:a2:b3:55:78:6e:b4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2 Validity Not Before: Dec 22 15:01:36 2025 GMT Not After : Dec 23 15:01:36 2025 GMT Subject: CN=e36b8435dc35337dedd99a41595818e9e4d20168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:a4:2b:73:09:50:34:b6:bc:f4:9e:66:6d: f6:2c:dd:05:2b:f3:1f:f2:92:86:32:75:dd:79:fc: a9:e1:b4:05:29:56:1e:4f:1d:ac:e0:3c:44:39:01: 39:ae:29:26:25:d1:3e:68:9e:c4:70:a0:73:bc:79: c7:a2:a9:e3:bb:91:4d:60:79:5c:f1:f1:e2:8d:68: 87:b0:35:06:a4:71:8f:b6:0c:6a:b6:72:27:97:9b: 47:e0:2f:25:ed:93:df:e8:4c:4f:df:35:d9:c7:df: 2a:39:e2:13:12:ed:61:8d:8f:12:00:47:15:d9:f4: 43:88:c3:fd:cb:4d:19:78:40:78:0e:74:47:b1:29: 8f:9a:af:e1:4f:8b:af:f4:c3:2e:0d:56:b5:9a:df: d6:32:10:31:46:78:c6:48:8e:2b:2d:34:82:65:88: ed:6e:74:e5:95:24:8d:7e:63:d0:35:ba:df:09:8c: 76:d3:e8:44:13:e5:df:8b:d7:30:67:26:6c:d3:ff: 5b:b6:e3:4c:8d:a1:76:1e:46:92:a3:94:77:a8:44: 12:a0:ee:0b:23:ca:3d:cf:e8:5a:34:89:d8:8e:b9: 5e:7e:43:b6:4b:76:a4:3d:d8:b4:99:ba:5d:61:23: cd:f2:69:1e:be:4d:87:fd:9f:f7:cd:04:43:4b:a9: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6B:84:35:DC:35:33:7D:ED:D9:9A:41:59:58:18:E9:E4:D2:01:68 X509v3 Authority Key Identifier: keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:64:1a:8d:a2:62:66:a0:4a:7f:38:b7:c3:3b:45:e1:94:42: a6:98:13:a4:bb:08:b6:c6:cf:54:6b:b6:b8:96:5a:79:17:45: 0f:8b:66:c0:ca:e6:0a:f3:3f:c7:c8:77:2f:72:c3:9d:ae:1b: 12:04:6b:db:82:00:0f:12:15:78:1d:f0:ae:33:8f:27:e7:48: 2c:d7:78:f8:0d:e0:52:9a:b9:10:d8:cc:a3:4c:7f:ef:ce:67: cf:32:bb:73:1f:6b:89:51:0f:72:08:bc:e9:08:34:73:d5:ae: 9f:3c:58:9a:7d:92:73:60:f8:95:bb:aa:56:98:01:34:ff:3c: 7d:05:e6:ff:ac:f8:ab:a4:01:85:4c:09:9e:ae:25:c9:10:7c: be:05:73:11:61:b5:3c:d8:a6:59:f5:f3:d0:cd:4e:15:2e:67: a5:b7:d4:6e:f8:4a:a1:d1:c8:1c:7f:42:cf:37:d9:6b:c5:54: fc:36:d2:8a:32:22:2a:13:41:89:c2:93:da:4d:b6:ba:13:8c: f0:26:4e:b7:6e:b9:f4:1d:6b:6b:23:f2:93:50:95:fb:c3:1e: 09:16:18:1c:2e:de:3a:3d:a7:94:b7:62:ba:0d:2b:89:36:ac: 01:41:12:7f:ed:89:34:d9:1c:bd:45:c6:5a:c6:3c:3b:17:af: c6:69:6c:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlIK/9vaAfQ+is1V4brRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMWRiNjQ0ZWEwZTI3NDlkZDZlZDAyMmFlY2QxMjE5NGJj Yjk2ZjIwHhcNMjUxMjIyMTUwMTM2WhcNMjUxMjIzMTUwMTM2WjAzMTEwLwYDVQQD EyhlMzZiODQzNWRjMzUzMzdkZWRkOTlhNDE1OTU4MThlOWU0ZDIwMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cqkK3MJUDS2vPSeZm32LN0FK/Mf 8pKGMnXdefyp4bQFKVYeTx2s4DxEOQE5rikmJdE+aJ7EcKBzvHnHoqnju5FNYHlc 8fHijWiHsDUGpHGPtgxqtnInl5tH4C8l7ZPf6ExP3zXZx98qOeITEu1hjY8SAEcV 2fRDiMP9y00ZeEB4DnRHsSmPmq/hT4uv9MMuDVa1mt/WMhAxRnjGSI4rLTSCZYjt bnTllSSNfmPQNbrfCYx20+hEE+Xfi9cwZyZs0/9btuNMjaF2HkaSo5R3qEQSoO4L I8o9z+haNInYjrlefkO2S3akPdi0mbpdYSPN8mkevk2H/Z/3zQRDS6kjPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONrhDXcNTN97dmaQVlYGOnk0gFoMB8GA1UdIwQY MBaAFIsdtkTqDidJ3W7QIq7NEhlLy5byMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMt NTQzNzc2ZjdjOTJlLzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMtNTQzNzc2ZjdjOTJl LzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWQajaJi ZqBKfzi3wztF4ZRCppgTpLsItsbPVGu2uJZaeRdFD4tmwMrmCvM/x8h3L3LDna4b EgRr24IADxIVeB3wrjOPJ+dILNd4+A3gUpq5ENjMo0x/785nzzK7cx9riVEPcgi8 6Qg0c9WunzxYmn2Sc2D4lbuqVpgBNP88fQXm/6z4q6QBhUwJnq4lyRB8vgVzEWG1 PNimWfXz0M1OFS5npbfUbvhKodHIHH9CzzfZa8VU/DbSijIiKhNBicKT2k22uhOM 8CZOt2659B1rayPyk1CV+8MeCRYYHC7eOj2nlLdiug0riTasAUESf+2JNNkcvUXG WsY8Oxevxmls1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 17:19:40 2025 by rpki-client