This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json) Hash identifier: oJfrhYVRFIBPmSEJEFCZW+rur9W1yy5S7B+W/p7mXa0= Subject key identifier: 54:68:1E:B0:1D:A5:75:7E:8B:2A:09:5A:D3:54:94:11:0B:5E:DD:3C Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Certificate serial: 019B10EF54B4AFF5A139531B28F4424B2214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 05:01:18 +0000 Manifest this update: Fri 12 Dec 2025 05:01:18 +0000 Manifest next update: Sat 13 Dec 2025 05:01:18 +0000 Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=) 2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: 3iQyDIAkUgW9kY9GyRJeVHXBnpDdu4pYJ1K2lYOTA+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:54:b4:af:f5:a1:39:53:1b:28:f4:42:4b:22:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Validity Not Before: Dec 12 05:01:18 2025 GMT Not After : Dec 13 05:01:18 2025 GMT Subject: CN=54681eb01da5757e8b2a095ad35494110b5edd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:55:e3:1e:a5:f6:a7:82:d2:56:40:34:63: 55:0b:81:9c:74:a2:fe:28:59:31:bf:ff:e2:2d:b1: 65:f3:21:11:e7:73:ec:14:95:88:90:2e:e5:09:15: 77:3e:81:41:51:7b:68:c0:b9:15:37:78:57:78:d5: 56:18:dc:21:9c:ba:1c:bf:b7:a6:e8:1a:ea:25:0d: 5d:7e:16:b9:5d:64:89:61:e3:18:ba:5c:a2:0a:cf: 48:09:09:41:ab:c3:58:7d:9b:0e:a5:bd:0c:85:27: 82:60:06:62:03:cd:f4:6c:f5:40:98:65:22:f9:12: a9:f4:b2:f8:8e:88:28:e2:58:47:04:03:14:0d:d1: 17:fa:d1:7b:8d:a8:ed:81:b4:9f:28:4b:b3:a0:d3: 78:15:48:ca:78:4c:c3:59:e8:3d:4e:14:71:20:63: e7:79:5f:75:16:ab:ac:3f:58:04:df:2a:a6:10:1e: d5:2d:d5:c9:ae:ce:31:4f:12:f7:5a:ad:87:f1:56: 48:f6:43:ea:ef:26:16:84:3b:f4:0a:87:47:5b:14: 89:b8:51:15:0f:ea:7e:f2:98:ba:a0:20:45:b4:a2: 80:d2:c8:fc:6e:04:eb:41:bd:e2:c5:5d:e9:c4:fe: 81:84:5a:47:8b:aa:a1:77:73:e4:50:b4:4c:b4:dd: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:68:1E:B0:1D:A5:75:7E:8B:2A:09:5A:D3:54:94:11:0B:5E:DD:3C X509v3 Authority Key Identifier: keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:db:b4:9d:73:b5:45:9c:d8:93:a1:90:d6:54:82:53:92:f9: 76:2d:06:09:1a:9c:89:a2:e3:b7:d7:88:e8:d4:45:1f:54:db: e4:6e:43:74:32:e4:5b:11:b6:fc:f9:4a:57:1b:e8:fe:04:87: f0:92:6b:ce:7e:16:28:bf:b3:18:87:a7:01:70:f3:47:27:3a: e8:d1:a4:63:ee:b8:f5:c8:b6:33:9e:f6:95:22:1d:ad:3c:21: 18:b4:7e:b2:aa:ed:b0:b6:a6:f1:a8:73:2d:22:8b:2a:cc:f0: 79:9f:0e:de:34:9b:33:b8:9f:79:c6:a4:c9:e0:f4:93:24:74: 46:3c:17:2d:0e:f7:6d:d2:c8:70:8c:35:27:a0:e5:e8:ba:1b: 27:62:c6:51:c1:dc:45:8b:c3:2e:68:ec:81:0c:c3:ee:58:d8: 54:b8:d2:9b:3e:14:22:f1:07:f6:2a:84:ec:75:7a:73:ff:0d: 88:68:3d:ef:bb:b8:a3:45:f2:77:e8:6c:9e:26:72:d4:16:6e: b4:0e:00:76:f4:bd:9b:90:ff:83:92:7c:a6:32:2c:43:30:f6: 68:6a:5a:d4:86:6a:8d:df:48:ea:dc:90:0c:5c:c7:01:d0:fc: 7c:3b:39:86:fb:b2:e9:91:8b:d5:c1:e5:51:74:fd:dd:16:f2: ba:c7:cc:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ71S0r/WhOVMbKPRCSyIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh NDBlOTAwHhcNMjUxMjEyMDUwMTE4WhcNMjUxMjEzMDUwMTE4WjAzMTEwLwYDVQQD Eyg1NDY4MWViMDFkYTU3NTdlOGIyYTA5NWFkMzU0OTQxMTBiNWVkZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT5V4x6l9qeC0lZANGNVC4GcdKL+ KFkxv//iLbFl8yER53PsFJWIkC7lCRV3PoFBUXtowLkVN3hXeNVWGNwhnLocv7em 6BrqJQ1dfha5XWSJYeMYulyiCs9ICQlBq8NYfZsOpb0MhSeCYAZiA830bPVAmGUi +RKp9LL4jogo4lhHBAMUDdEX+tF7jajtgbSfKEuzoNN4FUjKeEzDWeg9ThRxIGPn eV91FqusP1gE3yqmEB7VLdXJrs4xTxL3Wq2H8VZI9kPq7yYWhDv0CodHWxSJuFEV D+p+8pi6oCBFtKKA0sj8bgTrQb3ixV3pxP6BhFpHi6qhd3PkULRMtN05rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRoHrAdpXV+iyoJWtNUlBELXt08MB8GA1UdIwQY MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3 LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzdu0nXO1 RZzYk6GQ1lSCU5L5di0GCRqciaLjt9eI6NRFH1Tb5G5DdDLkWxG2/PlKVxvo/gSH 8JJrzn4WKL+zGIenAXDzRyc66NGkY+649ci2M572lSIdrTwhGLR+sqrtsLam8ahz LSKLKszweZ8O3jSbM7ifecakyeD0kyR0RjwXLQ73bdLIcIw1J6Dl6LobJ2LGUcHc RYvDLmjsgQzD7ljYVLjSmz4UIvEH9iqE7HV6c/8NiGg977u4o0Xyd+hsniZy1BZu tA4AdvS9m5D/g5J8pjIsQzD2aGpa1IZqjd9I6tyQDFzHAdD8fDs5hvuy6ZGL1cHl UXT93RbyusfMLw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:04:05 2025 by rpki-client