This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json) Hash identifier: qrFHsOuuSgEgCAPSw1a9E4kPZrFC2O/XzfPc+HuhQfY= Subject key identifier: 88:70:9E:73:63:FB:3D:A3:A4:0B:55:E9:42:4C:8C:47:2E:D7:A7:88 Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Certificate serial: 019AF3F75167D456BE21EE11878C15BF0081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=) 2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: njatOecRjPajpIWD6F3fqO/xXlmai0jvP/N28M+RoEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:51:67:d4:56:be:21:ee:11:87:8c:15:bf:00:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=88709e7363fb3da3a40b55e9424c8c472ed7a788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:9f:94:ba:07:92:5a:2c:e7:60:f6:6a:66: 6f:78:67:e9:b4:9e:ee:f5:28:fd:5b:fa:fa:ed:74: 29:01:dc:86:1e:20:55:25:fb:68:85:4c:5b:5d:b0: 91:d3:fb:d7:2e:9d:d6:7f:a5:f8:c3:c7:46:0e:0d: f8:fc:13:62:a8:97:8c:d0:3f:64:73:1c:ef:f3:16: 98:c8:d4:cb:0c:0c:0c:a1:d5:af:1b:99:3b:6c:cf: 58:e0:af:5a:73:74:91:07:9a:28:80:c9:20:83:41: 7d:82:50:72:04:65:9d:74:4f:6c:29:e1:f2:8e:45: 85:44:0c:7d:90:38:e4:9d:74:0f:af:79:cf:27:1f: 42:9a:8b:2b:bf:98:a4:d0:a4:bc:6a:3d:aa:3f:e0: f3:a6:8f:34:2d:0d:b2:ba:3c:ff:ea:73:51:0b:35: 5b:42:2e:a7:d0:98:d0:13:49:bf:a0:8a:c3:38:92: 13:df:8f:7c:56:33:f5:cf:65:5c:d3:27:bb:5f:45: 48:9a:9e:62:aa:25:b9:fc:37:60:22:54:a6:6a:6e: ee:e3:92:28:e9:e9:a5:d5:45:ae:df:93:e2:dd:bb: 1b:eb:c3:67:0e:65:58:63:2b:b9:68:9e:ed:a4:ce: a5:d8:a6:79:87:6a:f1:f7:f8:3a:59:a1:ad:ce:bf: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:70:9E:73:63:FB:3D:A3:A4:0B:55:E9:42:4C:8C:47:2E:D7:A7:88 X509v3 Authority Key Identifier: keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:47:49:0f:c6:e6:c9:2b:cd:03:b4:58:7d:90:c7:8a:4b:21: a9:e6:90:de:51:c5:03:a7:e0:b3:c8:17:e4:b9:bc:8d:e5:10: 03:6e:f4:6d:9b:ca:4f:1f:7d:87:e8:28:e5:63:fa:3c:95:c4: c9:ad:25:fe:6d:68:6f:8d:ad:c1:cc:04:98:b2:36:12:b8:84: 11:de:8c:30:c8:6a:d9:af:cd:3e:a9:91:b4:e3:71:65:d2:8f: d4:e2:f3:86:d3:a4:3b:9d:84:9a:fb:dd:59:6b:70:c1:7d:72: 37:25:f4:4c:88:ba:a2:7d:bd:81:f6:e9:cf:d4:25:22:1d:ec: 9c:52:e3:9f:53:51:d8:d3:86:b1:a4:5b:81:9c:26:8d:65:61: 9d:7b:f6:16:a4:18:91:f5:f7:32:d7:93:56:af:76:4d:02:6e: c8:c0:62:35:54:67:2a:88:12:07:ca:d3:a3:f5:d7:73:d2:57: 19:65:bf:05:1e:ad:69:23:1c:4d:c7:39:b6:46:95:d0:ac:33: 92:d8:19:00:b2:3a:64:68:7b:87:84:4c:36:af:a1:40:99:bd: a8:20:20:2d:a0:66:9b:ad:d6:13:72:88:52:d3:ad:b2:bb:cb: a1:c0:9d:9c:4b:c0:38:9f:e9:b6:02:1d:a5:9e:ad:21:1d:01: dd:d9:01:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91Fn1Fa+Ie4Rh4wVvwCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh NDBlOTAwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD Eyg4ODcwOWU3MzYzZmIzZGEzYTQwYjU1ZTk0MjRjOGM0NzJlZDdhNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprqflLoHklos52D2amZveGfptJ7u 9Sj9W/r67XQpAdyGHiBVJftohUxbXbCR0/vXLp3Wf6X4w8dGDg34/BNiqJeM0D9k cxzv8xaYyNTLDAwModWvG5k7bM9Y4K9ac3SRB5oogMkgg0F9glByBGWddE9sKeHy jkWFRAx9kDjknXQPr3nPJx9Cmosrv5ik0KS8aj2qP+Dzpo80LQ2yujz/6nNRCzVb Qi6n0JjQE0m/oIrDOJIT3498VjP1z2Vc0ye7X0VImp5iqiW5/DdgIlSmam7u45Io 6eml1UWu35Pi3bsb68NnDmVYYyu5aJ7tpM6l2KZ5h2rx9/g6WaGtzr+qMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhwnnNj+z2jpAtV6UJMjEcu16eIMB8GA1UdIwQY MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3 LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekdJD8bm ySvNA7RYfZDHikshqeaQ3lHFA6fgs8gX5Lm8jeUQA270bZvKTx99h+go5WP6PJXE ya0l/m1ob42twcwEmLI2EriEEd6MMMhq2a/NPqmRtONxZdKP1OLzhtOkO52Emvvd WWtwwX1yNyX0TIi6on29gfbpz9QlIh3snFLjn1NR2NOGsaRbgZwmjWVhnXv2FqQY kfX3MteTVq92TQJuyMBiNVRnKogSB8rTo/XXc9JXGWW/BR6taSMcTcc5tkaV0Kwz ktgZALI6ZGh7h4RMNq+hQJm9qCAgLaBmm63WE3KIUtOtsrvLocCdnEvAOJ/ptgId pZ6tIR0B3dkBwA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:35 2025 by rpki-client