This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json) Hash identifier: D+HCWnBzbItiqm0Gk/dDWOoJdKf3YoZFNGlRTqJBstk= Subject key identifier: 16:F2:CA:47:F1:3D:15:16:36:B2:DE:79:7B:60:77:E7:E0:F0:CA:30 Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Certificate serial: 019B5486DA1AC28FB317EF81EB4F31C43B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 08:01:22 +0000 Manifest this update: Thu 25 Dec 2025 08:01:22 +0000 Manifest next update: Fri 26 Dec 2025 08:01:22 +0000 Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=) 2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: JDpWmYPRBGYeHM5Z65VhtQyhA+E/QL8H5M2KlIVDPIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:da:1a:c2:8f:b3:17:ef:81:eb:4f:31:c4:3b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Validity Not Before: Dec 25 08:01:22 2025 GMT Not After : Dec 26 08:01:22 2025 GMT Subject: CN=16f2ca47f13d151636b2de797b6077e7e0f0ca30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:2d:e3:fc:f6:3e:c3:91:46:c9:0e:41:cf: bf:6b:47:d2:fe:9b:ba:74:44:1e:c8:8d:ab:ac:d2: 89:0e:ba:3c:b5:84:1e:76:17:af:4c:f9:14:d7:cf: 82:eb:47:46:94:06:f7:f5:21:6b:98:be:06:b9:5a: 67:7a:a8:80:39:ba:11:50:03:0b:ed:83:db:39:a3: 10:10:30:d6:70:dd:ef:91:f1:c3:2e:6c:02:47:33: 96:ae:8c:78:51:30:9e:86:a1:ed:ef:e1:e0:db:e4: ad:3d:ad:43:4b:70:97:fc:04:20:6f:7b:93:cc:8b: fe:cb:9a:1c:73:c0:d4:60:36:40:ee:18:32:95:fd: f3:f8:09:8a:9a:5c:7c:bb:3a:d3:de:6e:d9:36:a7: 44:ec:39:ef:a7:75:72:bc:e2:03:5c:88:13:33:d1: c5:ea:df:2b:d5:0d:82:ce:99:02:dd:e9:3c:ad:03: fd:39:2e:28:72:15:08:62:b1:dc:3c:b1:92:99:6f: 30:cf:d1:f1:a3:07:b4:93:f5:f4:c2:ff:a5:e4:95: e5:56:d6:7a:22:45:94:9d:16:db:ee:90:e5:a1:1c: e7:98:5e:b3:58:c7:1a:94:21:8d:6b:6f:19:bf:48: 53:41:2d:68:58:5c:30:76:3a:d5:aa:93:a0:30:7b: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F2:CA:47:F1:3D:15:16:36:B2:DE:79:7B:60:77:E7:E0:F0:CA:30 X509v3 Authority Key Identifier: keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:19:cf:ba:1c:93:a0:4b:99:3a:87:67:89:6f:15:b3:85:05: e7:d9:ab:82:d8:12:f3:86:84:88:f1:b9:e5:f7:b5:ac:68:a9: 18:93:51:a0:72:70:91:e0:61:74:f0:ee:dc:6c:6c:7d:fc:fa: b3:37:96:7e:bc:08:83:a9:1c:43:37:fb:75:81:07:db:73:47: e3:a4:62:49:99:54:0d:b1:20:b0:b3:46:fa:f2:34:64:c5:2d: f6:1c:17:a3:b6:4f:6e:c4:aa:e4:67:d8:b5:f4:a7:49:77:31: 09:5e:cb:f2:6a:bc:d9:4c:46:7d:bb:b0:3f:32:cf:aa:b8:f1: 2a:a9:dc:73:b8:f3:0c:56:62:aa:45:09:59:84:32:a7:70:99: 53:49:9b:17:cb:b2:22:ea:12:c2:b6:87:b2:25:69:9b:c6:66: 8d:8a:d7:16:59:2d:b2:ed:1e:d4:5b:bc:b2:59:10:e5:82:8f: f8:6a:12:2b:f0:f1:1d:e1:dc:cf:96:ad:a1:eb:12:c0:ed:9c: dc:a2:2b:16:3f:bc:5a:19:01:03:bc:a6:d0:8d:a5:ff:e7:cb: 8c:76:f0:be:da:70:42:27:26:7a:49:77:76:20:5c:ca:63:0c: 09:04:fd:2e:bb:84:3f:47:d2:28:3b:cc:7b:92:cb:65:28:d3: 40:2e:7d:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhtoawo+zF++B608xxDtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh NDBlOTAwHhcNMjUxMjI1MDgwMTIyWhcNMjUxMjI2MDgwMTIyWjAzMTEwLwYDVQQD EygxNmYyY2E0N2YxM2QxNTE2MzZiMmRlNzk3YjYwNzdlN2UwZjBjYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpgt4/z2PsORRskOQc+/a0fS/pu6 dEQeyI2rrNKJDro8tYQedhevTPkU18+C60dGlAb39SFrmL4GuVpneqiAOboRUAML 7YPbOaMQEDDWcN3vkfHDLmwCRzOWrox4UTCehqHt7+Hg2+StPa1DS3CX/AQgb3uT zIv+y5occ8DUYDZA7hgylf3z+AmKmlx8uzrT3m7ZNqdE7Dnvp3VyvOIDXIgTM9HF 6t8r1Q2CzpkC3ek8rQP9OS4ochUIYrHcPLGSmW8wz9Hxowe0k/X0wv+l5JXlVtZ6 IkWUnRbb7pDloRznmF6zWMcalCGNa28Zv0hTQS1oWFwwdjrVqpOgMHtYPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbyykfxPRUWNrLeeXtgd+fg8MowMB8GA1UdIwQY MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3 LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBnPuhyT oEuZOodniW8Vs4UF59mrgtgS84aEiPG55fe1rGipGJNRoHJwkeBhdPDu3Gxsffz6 szeWfrwIg6kcQzf7dYEH23NH46RiSZlUDbEgsLNG+vI0ZMUt9hwXo7ZPbsSq5GfY tfSnSXcxCV7L8mq82UxGfbuwPzLPqrjxKqncc7jzDFZiqkUJWYQyp3CZU0mbF8uy IuoSwraHsiVpm8ZmjYrXFlktsu0e1Fu8slkQ5YKP+GoSK/DxHeHcz5atoesSwO2c 3KIrFj+8WhkBA7ym0I2l/+fLjHbwvtpwQicmekl3diBcymMMCQT9LruEP0fSKDvM e5LLZSjTQC59qQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:02:17 2025 by rpki-client