This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json) Hash identifier: WVfmB5uuPQBCrJAX994WROfJPKXxboDAAGAdKFbh5RY= Subject key identifier: 3B:FA:EB:EB:F8:CC:3F:C7:0E:74:73:18:52:BE:F4:7B:28:52:F6:6A Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Certificate serial: 019B37214974C42B654FF638E0CB1CF2A75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 15:01:26 +0000 Manifest this update: Fri 19 Dec 2025 15:01:26 +0000 Manifest next update: Sat 20 Dec 2025 15:01:26 +0000 Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=) 2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=) 3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: d0duTxC00kUh2GNnEp0BeYOFoGE6uXU892m1UHpO9/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:49:74:c4:2b:65:4f:f6:38:e0:cb:1c:f2:a7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Validity Not Before: Dec 19 15:01:26 2025 GMT Not After : Dec 20 15:01:26 2025 GMT Subject: CN=3bfaebebf8cc3fc70e74731852bef47b2852f66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:d0:20:97:31:ea:63:36:d9:fa:7f:17:cf: 5d:5a:e8:11:d8:f8:48:54:35:6c:35:6f:a4:04:73: 35:4d:d5:98:98:27:f9:47:c6:80:d3:2d:0f:23:92: c5:f0:0c:06:a3:13:e8:67:04:f0:ad:f4:b0:0c:cb: 0c:d6:08:e5:24:aa:d2:08:68:e2:55:a2:40:19:40: 64:83:0c:b3:cc:c7:21:91:83:b9:6d:f7:af:13:a9: eb:12:80:99:b7:d8:01:c7:2d:38:7c:95:86:a4:9f: e9:da:a9:e9:a2:59:56:d5:2b:0a:ad:7c:37:92:3a: f0:12:ac:2b:21:77:7d:47:f6:b6:32:fa:fe:c2:27: 86:49:00:14:ac:29:05:87:43:71:ae:90:fc:97:69: 6b:e4:b0:ad:3d:a1:17:69:2e:7a:ed:54:7d:a2:d5: d2:03:76:84:b1:69:3d:3b:d5:f1:a9:f8:5f:4a:b8: 5e:61:ba:76:9e:ed:81:1e:88:44:e7:93:21:0f:53: a7:2e:33:16:13:4b:63:56:b8:68:5b:7a:9b:1c:db: 9e:f2:5d:3b:e6:6b:67:50:59:0c:81:80:06:4b:9d: 53:98:89:89:cd:c3:99:73:bf:80:db:18:4a:84:b8: fd:ea:8f:c6:58:4f:70:a4:7b:03:01:63:5e:3a:db: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FA:EB:EB:F8:CC:3F:C7:0E:74:73:18:52:BE:F4:7B:28:52:F6:6A X509v3 Authority Key Identifier: keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:20:2c:a1:5f:1f:c6:f0:b2:99:73:a7:8a:98:3d:85:b6:00: a2:ff:1a:ad:aa:05:73:c3:55:7a:37:43:a9:f0:c5:ed:54:70: 5b:7e:28:6f:c2:0c:5d:4b:46:0a:af:a1:04:d4:7e:05:1e:ff: 77:66:d7:bd:78:dd:d4:2d:55:c1:2b:49:59:e4:f6:0c:ce:b5: 40:50:94:d4:e6:7a:22:3c:71:43:71:b7:13:76:55:ee:f1:88: f2:48:b0:69:f6:58:2f:26:7a:db:43:d6:a5:e1:5c:90:5f:5d: 4c:40:bd:80:55:68:2f:a0:53:ac:3a:ef:c0:e9:89:a6:e9:3c: ac:4e:9a:4f:3a:59:00:4c:b1:12:30:78:aa:bc:a9:45:6a:0e: f0:15:78:ae:02:4b:0f:db:9c:83:8e:71:01:a6:02:19:e1:c3: cb:82:af:92:9f:36:67:3d:ed:f6:73:ea:04:9d:9d:36:85:5a: 8f:35:8a:40:7f:b7:65:da:98:69:11:0e:29:aa:fc:7c:3c:e5: c0:f7:92:da:87:34:d8:db:ea:e4:fc:33:e3:57:d0:53:2a:f8: a4:b5:54:69:f9:e1:f0:bf:a6:dc:02:e9:9d:4f:ca:ce:bb:4b: da:b6:43:c2:71:d1:34:57:64:e9:0c:8d:6a:68:33:28:52:e6: 19:03:cb:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IUl0xCtlT/Y44Msc8qddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl YjMwOTkwHhcNMjUxMjE5MTUwMTI2WhcNMjUxMjIwMTUwMTI2WjAzMTEwLwYDVQQD EygzYmZhZWJlYmY4Y2MzZmM3MGU3NDczMTg1MmJlZjQ3YjI4NTJmNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXbQIJcx6mM22fp/F89dWugR2PhI VDVsNW+kBHM1TdWYmCf5R8aA0y0PI5LF8AwGoxPoZwTwrfSwDMsM1gjlJKrSCGji VaJAGUBkgwyzzMchkYO5bfevE6nrEoCZt9gBxy04fJWGpJ/p2qnpollW1SsKrXw3 kjrwEqwrIXd9R/a2Mvr+wieGSQAUrCkFh0NxrpD8l2lr5LCtPaEXaS567VR9otXS A3aEsWk9O9XxqfhfSrheYbp2nu2BHohE55MhD1OnLjMWE0tjVrhoW3qbHNue8l07 5mtnUFkMgYAGS51TmImJzcOZc7+A2xhKhLj96o/GWE9wpHsDAWNeOtuYnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDv66+v4zD/HDnRzGFK+9HsoUvZqMB8GA1UdIwQY MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSAsoV8f xvCymXOnipg9hbYAov8araoFc8NVejdDqfDF7VRwW34ob8IMXUtGCq+hBNR+BR7/ d2bXvXjd1C1VwStJWeT2DM61QFCU1OZ6IjxxQ3G3E3ZV7vGI8kiwafZYLyZ620PW peFckF9dTEC9gFVoL6BTrDrvwOmJpuk8rE6aTzpZAEyxEjB4qrypRWoO8BV4rgJL D9ucg45xAaYCGeHDy4Kvkp82Zz3t9nPqBJ2dNoVajzWKQH+3ZdqYaREOKar8fDzl wPeS2oc02Nvq5Pwz41fQUyr4pLVUafnh8L+m3ALpnU/KzrtL2rZDwnHRNFdk6QyN amgzKFLmGQPL4Q== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:02 2025 by rpki-client