This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json) Hash identifier: xQuqfBiQMXu+x6T12k3jTHmwWu9GiPeLKi2z0Qz2Wek= Subject key identifier: 5A:E9:3A:A0:65:FD:38:46:D4:E0:82:09:5B:4B:16:F3:5B:11:C4:59 Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2 Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2 Certificate serial: 019B22BE52AEB45DEF8C42C2621C9BCD3B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft Manifest number: 157B Signing time: Mon 15 Dec 2025 16:00:56 +0000 Manifest this update: Mon 15 Dec 2025 16:00:56 +0000 Manifest next update: Tue 16 Dec 2025 16:00:56 +0000 Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=) 2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: FetstHw5BW1dupYTZHHOVvP5/wrG2trMPGVzJAYh9Wk=) 3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:52:ae:b4:5d:ef:8c:42:c2:62:1c:9b:cd:3b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2 Validity Not Before: Dec 15 16:00:56 2025 GMT Not After : Dec 16 16:00:56 2025 GMT Subject: CN=5ae93aa065fd3846d4e082095b4b16f35b11c459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:ac:df:7a:2f:33:31:6f:90:80:ac:07:f0: 89:92:43:f9:20:f0:15:ef:9e:a1:d0:2a:36:e4:67: f8:7f:dd:2c:07:04:88:95:a8:15:d5:fe:d3:e9:39: 47:7d:35:02:a6:69:f3:b4:f8:39:43:66:a2:90:f8: 37:e2:45:a1:63:30:e6:a7:d6:d3:9e:0b:0b:50:95: c8:5f:ce:ed:09:5e:22:c3:6d:25:07:04:27:2a:7a: 18:e0:de:4a:9f:b0:12:6c:62:6b:30:0b:0c:61:7b: c6:a8:9c:9b:28:f9:c2:11:e4:69:a3:c4:32:ad:f3: af:83:9e:35:ac:53:11:a7:69:8c:45:a5:92:bd:ae: ad:7a:e5:18:2e:16:a5:b1:9e:7b:09:b4:10:77:54: 49:8d:10:55:aa:d6:0a:b3:01:b4:fd:a9:a0:19:31: 8d:47:1e:44:86:d3:48:a2:8a:d2:23:53:22:39:eb: f0:ce:c6:db:80:8a:6d:69:18:9e:ff:9a:1a:ab:a6: f8:db:5d:8e:c8:e1:8d:d1:3f:5a:a4:91:98:4c:ef: 50:53:5e:55:0f:66:4e:eb:6e:47:3c:a2:c2:67:fb: a6:82:1f:e6:01:df:aa:be:8f:a3:83:87:7c:bf:be: fe:c0:03:3f:bc:b5:b8:d4:98:d8:e9:66:cf:11:04: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:3A:A0:65:FD:38:46:D4:E0:82:09:5B:4B:16:F3:5B:11:C4:59 X509v3 Authority Key Identifier: keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:c3:34:fe:16:93:59:e4:35:73:d1:1b:08:b6:e9:08:a9:cd: e8:51:1b:96:c8:db:fe:d3:63:22:ba:62:8b:3a:01:70:61:b4: d9:86:f8:36:8c:f8:ad:49:a6:e5:6d:0c:20:01:a9:8e:9e:a6: bc:d5:e3:f1:c2:7f:af:c2:97:e4:7f:b8:9d:30:25:17:59:c8: 6e:fe:62:c5:ad:b1:a9:45:bc:3d:b1:6a:09:73:aa:68:7f:01: 5b:bb:54:13:39:df:47:e2:b4:bc:24:5f:e0:f4:c0:dc:90:16: cb:2e:bb:7e:0a:71:71:f8:32:e5:2a:6e:f9:8f:3f:30:c2:c0: 8c:1c:17:fd:12:71:fe:ac:0c:5f:66:b2:63:93:3e:10:9d:23: ef:de:49:75:fc:39:1e:c3:a5:78:1d:3f:6a:21:cf:e1:49:cd: 36:ca:98:ce:25:1a:74:88:2f:84:29:27:e6:9d:e0:48:56:79: c3:fc:a5:1a:ab:e4:fc:93:cd:52:ee:cf:01:5f:08:df:de:3e: c6:54:4c:b2:56:24:b3:65:8b:b7:c1:b0:21:16:3d:4c:8d:e2: 42:0d:47:06:e5:3c:d5:81:30:26:d8:90:21:84:b2:4c:7c:0c: e8:d3:4b:10:e0:2f:9f:8a:f1:11:59:01:bf:bc:03:05:4e:2b: 14:82:8c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivlKutF3vjELCYhybzTsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx Y2IwZTIwHhcNMjUxMjE1MTYwMDU2WhcNMjUxMjE2MTYwMDU2WjAzMTEwLwYDVQQD Eyg1YWU5M2FhMDY1ZmQzODQ2ZDRlMDgyMDk1YjRiMTZmMzViMTFjNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3as33ovMzFvkICsB/CJkkP5IPAV 756h0Co25Gf4f90sBwSIlagV1f7T6TlHfTUCpmnztPg5Q2aikPg34kWhYzDmp9bT ngsLUJXIX87tCV4iw20lBwQnKnoY4N5Kn7ASbGJrMAsMYXvGqJybKPnCEeRpo8Qy rfOvg541rFMRp2mMRaWSva6teuUYLhalsZ57CbQQd1RJjRBVqtYKswG0/amgGTGN Rx5EhtNIoorSI1MiOevwzsbbgIptaRie/5oaq6b4212OyOGN0T9apJGYTO9QU15V D2ZO625HPKLCZ/umgh/mAd+qvo+jg4d8v77+wAM/vLW41JjY6WbPEQT5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrpOqBl/ThG1OCCCVtLFvNbEcRZMB8GA1UdIwQY MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut NzYwM2U1ZGQ1NzA3LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3 LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6MM0/haT WeQ1c9EbCLbpCKnN6FEblsjb/tNjIrpiizoBcGG02Yb4Noz4rUmm5W0MIAGpjp6m vNXj8cJ/r8KX5H+4nTAlF1nIbv5ixa2xqUW8PbFqCXOqaH8BW7tUEznfR+K0vCRf 4PTA3JAWyy67fgpxcfgy5Spu+Y8/MMLAjBwX/RJx/qwMX2ayY5M+EJ0j795Jdfw5 HsOleB0/aiHP4UnNNsqYziUadIgvhCkn5p3gSFZ5w/ylGqvk/JPNUu7PAV8I394+ xlRMslYks2WLt8GwIRY9TI3iQg1HBuU81YEwJtiQIYSyTHwM6NNLEOAvn4rxEVkB v7wDBU4rFIKMbw== -----END CERTIFICATE-----Generated at Mon Dec 15 18:52:14 2025 by rpki-client