This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json) Hash identifier: OGWZHHBNIkIri1PdzuFvzhONIph72A8exVU0iTyNhpY= Subject key identifier: 25:F3:BE:94:11:0F:CD:92:B2:07:90:6C:96:CB:13:04:3E:61:58:93 Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6 Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6 Certificate serial: 019B3BA20113CC4A5B65B0427672E14D51EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft Manifest number: 1372 Signing time: Sat 20 Dec 2025 12:00:31 +0000 Manifest this update: Sat 20 Dec 2025 12:00:31 +0000 Manifest next update: Sun 21 Dec 2025 12:00:31 +0000 Files and hashes: 1: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (hash: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=) 2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: DCw/wsYa2YuqFnUB10lsDB56RKZaVPY2IAMhFDgCeLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:01:13:cc:4a:5b:65:b0:42:76:72:e1:4d:51:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6 Validity Not Before: Dec 20 12:00:31 2025 GMT Not After : Dec 21 12:00:31 2025 GMT Subject: CN=25f3be94110fcd92b207906c96cb13043e615893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:66:1d:8c:da:c2:c5:83:65:db:cd:fb:8b: ca:02:2a:fd:dc:40:0f:c0:25:29:6c:c2:29:cd:66: 78:9c:ce:f4:2c:61:5c:61:2a:7e:06:93:ce:0d:d4: a2:96:64:81:43:9d:bd:97:a7:40:e8:c0:4d:d7:8b: 15:2c:ec:2a:f0:fd:74:15:af:7a:78:b6:9c:4a:dc: 24:6e:89:44:01:5f:0c:97:b2:63:bf:ba:ff:54:04: 3b:06:cf:a9:4f:d1:2c:0f:0c:25:bf:d2:93:37:ff: a0:a3:00:44:39:95:34:c3:e0:44:c4:84:09:33:da: f3:3d:cc:d6:41:8f:4a:8a:82:e4:6c:5d:9f:06:1d: ac:26:d1:2b:94:a5:39:97:6d:16:2d:a5:d8:d1:1b: b1:02:f2:ce:ea:c8:b2:e9:cb:37:35:7b:11:9f:b1: b5:e2:e6:78:6e:a9:05:0a:44:e9:94:d5:c0:49:5a: 24:fc:8b:5d:7e:ba:be:68:fd:23:81:f0:cf:4c:30: 10:4e:47:9b:7a:75:53:e8:89:43:05:17:74:b0:90: 0f:c8:6c:26:5b:83:8c:17:70:ce:b2:37:6b:54:03: cc:d1:89:6a:92:1a:58:01:ce:46:e8:bb:79:0c:60: 17:47:1e:10:90:fb:6e:26:51:c0:87:87:18:43:3a: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F3:BE:94:11:0F:CD:92:B2:07:90:6C:96:CB:13:04:3E:61:58:93 X509v3 Authority Key Identifier: keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:23:d9:41:8c:04:a8:44:12:18:cf:17:2b:6d:7a:9f:66:f1: 0e:de:40:b3:80:f8:e8:bb:72:49:87:58:e5:dd:84:81:53:42: ae:d3:83:96:16:f4:ba:7e:ea:b7:23:9b:38:ca:ed:70:be:12: 66:93:05:4a:7a:2f:5f:11:61:93:7f:a9:4d:0a:99:1b:28:76: f6:95:73:f0:a5:ca:34:48:ee:fe:5a:47:9f:7a:97:e7:25:11: d3:70:a7:65:c9:00:95:5f:a6:cd:41:f7:ed:41:69:3d:d9:92: 98:92:44:6f:83:49:1f:58:5d:11:95:97:96:5f:58:29:d0:d8: 2e:33:09:c5:93:90:d8:98:2a:db:c8:50:68:b7:04:39:87:0b: 89:27:92:62:ea:d0:b8:f8:41:e3:cf:3a:50:4a:ab:71:a9:a8: c9:b0:8a:d9:89:a8:41:67:58:32:1a:fd:88:39:b1:e4:c4:a8: 21:64:79:54:f3:24:9d:1e:0f:d3:4f:ac:48:b2:31:cc:65:48: e6:f6:64:d7:72:ee:b8:8f:cf:df:de:aa:dd:97:a2:4d:08:7c: 10:df:44:bb:a6:59:c6:61:3a:37:f0:55:71:bd:79:f2:69:c8: e3:48:5a:9d:61:4e:41:e9:f7:31:06:e1:db:93:65:5e:21:19: 23:a5:93:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogETzEpbZbBCdnLhTVHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmI1MjhhYmEwMThmMTQyZjQ0NDRjY2NjOTcyMzczNmNk NGU0YjYwHhcNMjUxMjIwMTIwMDMxWhcNMjUxMjIxMTIwMDMxWjAzMTEwLwYDVQQD EygyNWYzYmU5NDExMGZjZDkyYjIwNzkwNmM5NmNiMTMwNDNlNjE1ODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNdmHYzawsWDZdvN+4vKAir93EAP wCUpbMIpzWZ4nM70LGFcYSp+BpPODdSilmSBQ529l6dA6MBN14sVLOwq8P10Fa96 eLacStwkbolEAV8Ml7Jjv7r/VAQ7Bs+pT9EsDwwlv9KTN/+gowBEOZU0w+BExIQJ M9rzPczWQY9KioLkbF2fBh2sJtErlKU5l20WLaXY0RuxAvLO6siy6cs3NXsRn7G1 4uZ4bqkFCkTplNXASVok/Itdfrq+aP0jgfDPTDAQTkebenVT6IlDBRd0sJAPyGwm W4OMF3DOsjdrVAPM0YlqkhpYAc5G6Lt5DGAXRx4QkPtuJlHAh4cYQzoqkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXzvpQRD82SsgeQbJbLEwQ+YViTMB8GA1UdIwQY MBaAFCL7Uoq6AY8UL0REzMyXI3Ns1OS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQt NmFlOTBiMjQ3NTkyLzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQtNmFlOTBiMjQ3NTky LzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyPZQYwE qEQSGM8XK216n2bxDt5As4D46LtySYdY5d2EgVNCrtODlhb0un7qtyObOMrtcL4S ZpMFSnovXxFhk3+pTQqZGyh29pVz8KXKNEju/lpHn3qX5yUR03CnZckAlV+mzUH3 7UFpPdmSmJJEb4NJH1hdEZWXll9YKdDYLjMJxZOQ2Jgq28hQaLcEOYcLiSeSYurQ uPhB4886UEqrcamoybCK2YmoQWdYMhr9iDmx5MSoIWR5VPMknR4P00+sSLIxzGVI 5vZk13LuuI/P396q3ZeiTQh8EN9Eu6ZZxmE6N/BVcb158mnI40hanWFOQen3MQbh 25NlXiEZI6WTwA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:55:01 2025 by rpki-client