This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json) Hash identifier: IwWQwyH8tf3kYIdJQ5sAauOdii3PeglJFdzNVeb7HVo= Subject key identifier: 8A:EA:1E:37:30:1B:26:B9:40:EF:BC:F2:29:7F:0C:FC:81:6A:10:45 Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6 Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6 Certificate serial: 019B0F37E01466B3FC9FC27815FE9949C45D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft Manifest number: 135B Signing time: Thu 11 Dec 2025 21:01:18 +0000 Manifest this update: Thu 11 Dec 2025 21:01:18 +0000 Manifest next update: Fri 12 Dec 2025 21:01:18 +0000 Files and hashes: 1: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (hash: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=) 2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: ArPTD/uTmNDUA0Pu+29UQ0uO9v70mRkmRBr0oetnhqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:e0:14:66:b3:fc:9f:c2:78:15:fe:99:49:c4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6 Validity Not Before: Dec 11 21:01:18 2025 GMT Not After : Dec 12 21:01:18 2025 GMT Subject: CN=8aea1e37301b26b940efbcf2297f0cfc816a1045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:61:97:73:b6:bb:79:ca:1c:be:90:ec:3a: 80:f6:c5:f0:dc:06:32:b4:77:61:fb:52:36:31:59: 79:69:7b:0f:80:e1:b8:bc:1b:20:a5:f5:c8:5b:7a: 0a:df:be:03:02:02:d1:7c:31:6c:21:02:3f:fe:8d: d0:2f:9e:72:1d:a3:24:e6:c4:59:79:ff:ba:c4:25: 94:e6:3c:82:6a:15:ff:1b:66:95:95:61:00:5e:83: 3a:5c:7d:4d:0b:42:89:ea:af:4e:ae:ea:d5:e4:cd: 9e:ef:57:4e:8c:f0:e3:47:e0:8c:3c:1c:4c:80:82: 7e:7d:e7:b8:26:a9:25:60:55:30:d7:1d:96:18:db: a0:28:25:66:7a:73:7e:86:98:cf:04:29:30:5b:29: 54:c2:d1:4b:2f:be:6a:5f:2c:6d:bd:32:05:45:6e: 19:69:c7:fd:df:d1:b2:31:3f:14:75:b1:94:47:1d: e4:83:0f:80:93:22:75:fb:85:99:1c:12:4c:8c:f9: 87:00:5a:34:7e:72:fe:37:11:ab:ac:1c:c9:f9:14: 68:98:96:40:7c:96:52:a8:8e:85:f8:c2:bc:2d:9c: ae:e5:b9:e8:2f:41:19:47:ce:7c:6f:ac:eb:83:42: d9:c5:64:45:76:1e:a4:99:db:75:66:35:d2:33:44: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EA:1E:37:30:1B:26:B9:40:EF:BC:F2:29:7F:0C:FC:81:6A:10:45 X509v3 Authority Key Identifier: keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:a5:8a:06:b1:ec:e2:bd:6d:45:86:99:61:fb:18:2c:0c:39: 72:0c:ed:9b:95:f2:6b:bf:31:cd:fd:6b:30:c4:6f:81:c1:91: 3f:53:2e:31:27:7a:a0:ff:59:45:d2:64:e5:c1:a0:c2:93:e0: d1:52:8f:01:89:13:9c:43:3d:b8:e1:12:93:64:4d:f7:dd:58: b6:b0:a9:ff:cf:36:b4:6e:44:f2:ba:a3:ae:b0:2d:31:d2:4f: b0:df:e9:40:fd:5c:19:2b:1c:c5:e3:94:13:ee:32:bb:b0:d2: 77:b9:a3:f5:f1:85:d3:bc:aa:7b:43:ee:7c:08:2a:c7:c6:95: 9d:03:a8:fe:ff:0c:71:44:3a:15:8a:07:41:2d:8d:74:05:ea: 24:4e:86:cd:76:11:f1:07:f4:80:bf:e9:9e:86:a3:a7:0a:e4: db:95:93:2b:17:83:fa:67:6b:d4:72:5d:c0:c7:3b:4d:12:47: 5c:cb:c4:e3:39:b5:d8:3f:c4:18:0c:62:b0:87:29:28:04:3d: b1:fc:33:8b:5b:a1:b5:a2:19:d9:b0:39:6c:ab:d6:6e:32:84: c4:b8:e7:ea:e6:5f:c3:87:dc:3a:76:17:76:d7:c1:5b:dc:83: d8:51:9e:50:c7:22:42:58:19:2f:ea:4b:6a:f4:fd:eb:39:5e: 80:f0:27:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN+AUZrP8n8J4Ff6ZScRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmI1MjhhYmEwMThmMTQyZjQ0NDRjY2NjOTcyMzczNmNk NGU0YjYwHhcNMjUxMjExMjEwMTE4WhcNMjUxMjEyMjEwMTE4WjAzMTEwLwYDVQQD Eyg4YWVhMWUzNzMwMWIyNmI5NDBlZmJjZjIyOTdmMGNmYzgxNmExMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j1hl3O2u3nKHL6Q7DqA9sXw3AYy tHdh+1I2MVl5aXsPgOG4vBsgpfXIW3oK374DAgLRfDFsIQI//o3QL55yHaMk5sRZ ef+6xCWU5jyCahX/G2aVlWEAXoM6XH1NC0KJ6q9OrurV5M2e71dOjPDjR+CMPBxM gIJ+fee4JqklYFUw1x2WGNugKCVmenN+hpjPBCkwWylUwtFLL75qXyxtvTIFRW4Z acf939GyMT8UdbGURx3kgw+AkyJ1+4WZHBJMjPmHAFo0fnL+NxGrrBzJ+RRomJZA fJZSqI6F+MK8LZyu5bnoL0EZR858b6zrg0LZxWRFdh6kmdt1ZjXSM0S8TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrqHjcwGya5QO+88il/DPyBahBFMB8GA1UdIwQY MBaAFCL7Uoq6AY8UL0REzMyXI3Ns1OS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQt NmFlOTBiMjQ3NTkyLzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQtNmFlOTBiMjQ3NTky LzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyaWKBrHs 4r1tRYaZYfsYLAw5cgztm5Xya78xzf1rMMRvgcGRP1MuMSd6oP9ZRdJk5cGgwpPg 0VKPAYkTnEM9uOESk2RN991YtrCp/882tG5E8rqjrrAtMdJPsN/pQP1cGSscxeOU E+4yu7DSd7mj9fGF07yqe0PufAgqx8aVnQOo/v8McUQ6FYoHQS2NdAXqJE6GzXYR 8Qf0gL/pnoajpwrk25WTKxeD+mdr1HJdwMc7TRJHXMvE4zm12D/EGAxisIcpKAQ9 sfwzi1uhtaIZ2bA5bKvWbjKExLjn6uZfw4fcOnYXdtfBW9yD2FGeUMciQlgZL+pL avT96zlegPAnAA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:56:48 2025 by rpki-client