This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json) Hash identifier: l6WOWBTqhq5Z6fFgI32COxc3jHndh3v8Q2wGhKRnblk= Subject key identifier: 98:9A:FF:93:42:4D:B5:77:8C:68:F2:8E:82:BB:DA:6F:67:0F:8A:EF Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Certificate serial: 019AF49C610D2D89BB0632810FE4A92D38DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft Manifest number: 1340 Signing time: Sat 06 Dec 2025 17:01:20 +0000 Manifest this update: Sat 06 Dec 2025 17:01:20 +0000 Manifest next update: Sun 07 Dec 2025 17:01:20 +0000 Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=) 2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=) 3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: NGGKiZlLc5cFTliZKTYvKhP+VHFqKg9Kll0DlvMj8Dk=) 4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:61:0d:2d:89:bb:06:32:81:0f:e4:a9:2d:38:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Validity Not Before: Dec 6 17:01:20 2025 GMT Not After : Dec 7 17:01:20 2025 GMT Subject: CN=989aff93424db5778c68f28e82bbda6f670f8aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:ff:3a:b6:70:df:89:eb:2b:23:e9:7a:69: 18:0c:3a:66:b1:d8:c9:5f:27:96:d9:fb:4a:7c:eb: 94:a5:cc:bf:14:ed:87:3c:35:59:89:5b:c3:26:bd: 2b:13:88:e5:69:8f:5a:c0:db:30:69:d2:a7:1f:96: 64:e1:a5:3f:5f:56:c4:95:8a:f8:c6:0c:0d:6b:fb: 49:3d:14:9f:31:fa:30:5a:9d:dc:ab:15:77:1a:f4: 43:90:be:64:b8:37:4a:df:bc:6c:89:e2:b1:c2:f1: d9:f9:b6:79:7e:3c:0a:e9:08:60:6f:5b:37:68:63: e6:e7:fd:c9:d9:9f:c2:38:c3:7c:72:c8:ed:a4:69: 98:af:8f:04:e6:4e:75:02:18:73:b4:16:de:32:88: 1d:3d:ab:79:f2:5c:da:6b:c0:91:61:66:d8:60:e2: 7b:78:b3:81:99:34:4a:bb:1f:7e:8e:82:8b:71:9d: 84:ea:99:db:66:a9:d3:ed:e8:23:44:30:90:66:81: 7f:d4:2d:ee:45:0a:65:95:c3:e5:7c:cc:d3:ec:d1: e3:02:36:76:b2:3d:05:b6:ec:d5:23:2f:24:36:11: a3:e6:47:40:b5:a7:eb:0d:d5:33:33:4f:6c:7a:0a: 32:01:86:45:e0:89:08:20:ce:27:c7:e9:89:2d:12: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9A:FF:93:42:4D:B5:77:8C:68:F2:8E:82:BB:DA:6F:67:0F:8A:EF X509v3 Authority Key Identifier: keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:07:1a:fd:3c:2a:85:e7:12:ea:67:31:e8:bf:63:b9:7b:7d: 53:71:04:8d:ef:fc:f1:55:88:68:69:f9:06:7f:c5:30:f6:5c: ec:90:1f:9c:01:77:7d:5f:a7:78:ce:15:21:d0:61:eb:b8:d0: 19:3c:7d:04:cb:f3:27:9f:e5:51:2f:7f:e6:2e:7b:2b:ea:17: 15:39:3c:c4:70:34:67:9e:29:e8:0f:6f:a7:ce:ba:20:5c:a4: 18:04:ec:df:33:ad:48:44:b4:12:f1:2d:5b:fa:5b:71:d8:ea: 3c:1a:89:87:75:d1:2d:59:e6:6d:a9:21:6d:c2:64:49:4e:69: f2:95:85:09:a7:aa:ee:25:66:0b:0f:37:00:5d:2d:77:fb:36: 8a:d3:f8:32:6e:f5:8d:42:d1:3c:81:36:a3:66:0f:25:e3:d0: 84:26:e1:10:71:20:12:47:20:17:eb:ef:ab:d7:88:5a:40:13: d5:a7:90:54:7f:8a:9f:60:04:ee:21:42:b8:d2:00:92:aa:96: 27:66:51:08:26:e9:91:d8:d4:7b:64:33:56:4c:28:03:2a:15: 78:f1:e8:51:fc:77:ae:7e:23:61:be:99:2c:db:01:c5:a8:ec: f1:3a:ce:3f:38:89:75:90:8e:07:d7:af:a4:97:6d:35:8e:42: eb:09:47:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGENLYm7BjKBD+SpLTjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh NTM3ZjkwHhcNMjUxMjA2MTcwMTIwWhcNMjUxMjA3MTcwMTIwWjAzMTEwLwYDVQQD Eyg5ODlhZmY5MzQyNGRiNTc3OGM2OGYyOGU4MmJiZGE2ZjY3MGY4YWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCz/OrZw34nrKyPpemkYDDpmsdjJ XyeW2ftKfOuUpcy/FO2HPDVZiVvDJr0rE4jlaY9awNswadKnH5Zk4aU/X1bElYr4 xgwNa/tJPRSfMfowWp3cqxV3GvRDkL5kuDdK37xsieKxwvHZ+bZ5fjwK6Qhgb1s3 aGPm5/3J2Z/COMN8csjtpGmYr48E5k51AhhztBbeMogdPat58lzaa8CRYWbYYOJ7 eLOBmTRKux9+joKLcZ2E6pnbZqnT7egjRDCQZoF/1C3uRQpllcPlfMzT7NHjAjZ2 sj0FtuzVIy8kNhGj5kdAtafrDdUzM09segoyAYZF4IkIIM4nx+mJLRLi2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJia/5NCTbV3jGjyjoK72m9nD4rvMB8GA1UdIwQY MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt MTYzMjQ3ZWIwZTA3LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3 LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAca/Twq hecS6mcx6L9juXt9U3EEje/88VWIaGn5Bn/FMPZc7JAfnAF3fV+neM4VIdBh67jQ GTx9BMvzJ5/lUS9/5i57K+oXFTk8xHA0Z54p6A9vp866IFykGATs3zOtSES0EvEt W/pbcdjqPBqJh3XRLVnmbakhbcJkSU5p8pWFCaeq7iVmCw83AF0td/s2itP4Mm71 jULRPIE2o2YPJePQhCbhEHEgEkcgF+vvq9eIWkAT1aeQVH+Kn2AE7iFCuNIAkqqW J2ZRCCbpkdjUe2QzVkwoAyoVePHoUfx3rn4jYb6ZLNsBxajs8TrOPziJdZCOB9ev pJdtNY5C6wlHLA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:45 2025 by rpki-client