This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json) Hash identifier: pvWge7TAqTEqeP8Td3N6qQU8SYJk5Cnpnf0RbIP3Pf0= Subject key identifier: 79:7B:CE:A2:DF:46:E6:2C:A6:3A:64:92:02:B7:EF:2D:5B:A1:14:9A Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Certificate serial: 019B22509A15694469E63A96079151FB97C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 14:01:06 +0000 Manifest this update: Mon 15 Dec 2025 14:01:06 +0000 Manifest next update: Tue 16 Dec 2025 14:01:06 +0000 Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=) 2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: bQEa5yb8dwBdPrdd2hEXpuXtoZx6z9tnXC+rXxg7E7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:9a:15:69:44:69:e6:3a:96:07:91:51:fb:97:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90 Validity Not Before: Dec 15 14:01:06 2025 GMT Not After : Dec 16 14:01:06 2025 GMT Subject: CN=797bcea2df46e62ca63a649202b7ef2d5ba1149a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:fc:81:e1:c7:d9:c1:4d:b7:b9:26:26:17: c5:c0:77:68:5a:3a:3f:b8:6c:37:c1:3c:90:7c:b2: ac:d8:22:1a:d2:a6:d8:39:c6:bc:e8:8b:be:2e:15: b7:55:45:a6:31:c8:67:19:a7:65:1b:bb:44:d4:e1: ee:e1:75:58:49:0a:d4:65:b3:13:ed:c1:df:89:53: 34:7a:02:1c:6b:eb:46:89:ad:1a:20:c9:db:9c:62: 0e:ad:00:a5:61:72:23:70:32:6a:e1:50:bb:01:1c: 66:72:88:9d:29:98:a1:f3:7d:20:cb:35:6b:17:58: 4b:47:1b:c4:d9:e3:b0:ec:86:9c:c1:a7:61:74:52: 58:1b:17:b0:09:8f:fd:9f:d9:73:25:f8:65:2d:54: 70:47:da:ba:07:76:43:8b:ee:45:64:12:10:8a:2c: f0:c2:42:d5:97:42:88:41:e5:dd:eb:2e:b6:39:2f: 89:c6:86:64:54:c7:55:78:3f:8d:ee:a2:28:08:94: 02:e6:57:89:52:99:1b:62:81:32:05:8b:48:ac:1d: e8:ec:f6:7d:f7:6c:69:d9:00:56:74:fe:8d:68:a5: 31:e6:33:a0:b9:04:71:23:e0:07:9d:ae:34:af:56: 11:52:62:fe:55:40:d6:d5:25:9f:a3:9c:3a:fa:34: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:CE:A2:DF:46:E6:2C:A6:3A:64:92:02:B7:EF:2D:5B:A1:14:9A X509v3 Authority Key Identifier: keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c5:bf:ef:7a:b1:3f:70:40:6c:51:4e:98:98:cf:a1:cf:dd: b2:d7:ca:83:72:45:92:12:f2:70:72:28:bc:f6:63:c2:40:d4: db:e8:3d:78:d4:5d:53:73:97:c8:59:75:27:45:79:9b:2b:2e: ec:35:21:29:e6:89:a0:a6:7d:40:77:79:8c:ee:fc:be:d1:4e: cf:c5:09:28:c8:4b:4a:8d:72:0b:c2:8d:47:58:87:80:88:b6: 26:c6:de:9a:a7:b8:29:fd:17:ac:4d:39:17:da:27:82:34:3e: 44:79:97:1c:75:fc:2a:44:bc:64:76:46:61:dc:da:18:37:5f: ef:1c:05:f2:ad:81:bd:62:d7:b0:2b:09:16:c4:96:5f:d3:a6: c5:2f:0f:be:24:91:1c:3e:61:20:6f:bf:eb:d8:fc:ae:bd:3a: 92:a5:c9:54:d0:2c:3a:a5:c5:97:83:f5:be:ff:e9:88:07:22: e6:ac:03:5d:bd:70:58:0a:18:63:d3:0b:0b:85:6e:5c:1d:da: 21:0a:28:f7:37:de:4a:55:a3:41:13:57:c4:5b:ce:f4:98:71: f7:77:d7:8c:c4:31:17:6d:ea:1c:7d:c2:14:e4:80:87:33:3c: 80:d8:a4:20:7d:2d:76:21:f5:61:22:fd:58:ac:7b:41:28:a1: ab:8c:b0:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUJoVaURp5jqWB5FR+5fJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh NDBlOTAwHhcNMjUxMjE1MTQwMTA2WhcNMjUxMjE2MTQwMTA2WjAzMTEwLwYDVQQD Eyg3OTdiY2VhMmRmNDZlNjJjYTYzYTY0OTIwMmI3ZWYyZDViYTExNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrH8geHH2cFNt7kmJhfFwHdoWjo/ uGw3wTyQfLKs2CIa0qbYOca86Iu+LhW3VUWmMchnGadlG7tE1OHu4XVYSQrUZbMT 7cHfiVM0egIca+tGia0aIMnbnGIOrQClYXIjcDJq4VC7ARxmcoidKZih830gyzVr F1hLRxvE2eOw7IacwadhdFJYGxewCY/9n9lzJfhlLVRwR9q6B3ZDi+5FZBIQiizw wkLVl0KIQeXd6y62OS+JxoZkVMdVeD+N7qIoCJQC5leJUpkbYoEyBYtIrB3o7PZ9 92xp2QBWdP6NaKUx5jOguQRxI+AHna40r1YRUmL+VUDW1SWfo5w6+jQYCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl7zqLfRuYspjpkkgK37y1boRSaMB8GA1UdIwQY MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3 LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncW/73qx P3BAbFFOmJjPoc/dstfKg3JFkhLycHIovPZjwkDU2+g9eNRdU3OXyFl1J0V5mysu 7DUhKeaJoKZ9QHd5jO78vtFOz8UJKMhLSo1yC8KNR1iHgIi2Jsbemqe4Kf0XrE05 F9ongjQ+RHmXHHX8KkS8ZHZGYdzaGDdf7xwF8q2BvWLXsCsJFsSWX9OmxS8PviSR HD5hIG+/69j8rr06kqXJVNAsOqXFl4P1vv/piAci5qwDXb1wWAoYY9MLC4VuXB3a IQoo9zfeSlWjQRNXxFvO9Jhx93fXjMQxF23qHH3CFOSAhzM8gNikIH0tdiH1YSL9 WKx7QSihq4ywdg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:37 2025 by rpki-client