This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json) Hash identifier: Ht0KHe3LdxVvLxY/FgkRc5c1cJBV6oBnwb1RuV4B5jI= Subject key identifier: F4:92:6B:19:FC:CA:53:04:9D:CD:52:DC:26:E9:C0:36:C5:50:D1:72 Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Certificate serial: 019B1081D22405EB2075B7E52C1A93779991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 03:01:41 +0000 Manifest this update: Fri 12 Dec 2025 03:01:41 +0000 Manifest next update: Sat 13 Dec 2025 03:01:41 +0000 Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=) 2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=) 3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: AF7l/t50n1aa7En+lyPMhg1cjOQYMe1b4O3B57vtZtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:d2:24:05:eb:20:75:b7:e5:2c:1a:93:77:99:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Validity Not Before: Dec 12 03:01:41 2025 GMT Not After : Dec 13 03:01:41 2025 GMT Subject: CN=f4926b19fcca53049dcd52dc26e9c036c550d172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:aa:b1:13:3a:49:ef:57:14:3c:70:e2:04: 07:2a:23:39:bf:7a:04:e3:f4:70:cd:d1:25:95:96: d9:d0:6e:d8:64:4f:51:b2:f1:00:22:e6:dd:a8:7d: 0b:d0:f1:79:60:6e:ff:f5:09:20:a7:88:c2:4d:c3: e7:9d:ff:52:1e:f3:24:d9:10:13:db:a3:11:14:74: eb:66:2d:f1:29:8d:fb:bd:42:64:5d:15:58:27:68: cc:25:00:de:a2:26:4d:98:e2:99:76:e9:2c:b1:b5: bc:3a:28:9d:2b:9d:a8:93:d5:d2:4d:a2:f0:0b:6b: 92:55:58:01:75:c7:8a:b8:21:d9:18:73:44:43:b8: 7b:93:e9:60:be:10:df:f0:e1:3c:c2:47:e5:86:87: 26:19:c1:be:0e:3d:b1:6a:b7:6e:58:8b:52:8f:33: 9c:e9:40:23:b0:a4:b3:88:49:1a:36:a0:7f:75:d2: 5f:f0:c2:8e:88:fe:b7:ab:52:d5:99:42:87:03:5a: df:32:a8:9f:55:ff:40:ae:5c:4b:1c:44:89:44:70: 38:9f:9d:2d:f6:b2:f6:d1:0e:b3:6e:b3:40:52:2e: 06:6c:2c:e8:8f:9e:b4:db:0e:cc:4f:05:6e:67:14: d6:06:1b:27:af:38:02:57:9a:d1:72:68:75:6d:3a: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:92:6B:19:FC:CA:53:04:9D:CD:52:DC:26:E9:C0:36:C5:50:D1:72 X509v3 Authority Key Identifier: keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:58:bb:48:ed:01:7e:bd:3c:00:47:50:1a:2d:7d:62:95:b6: 46:5d:f4:0a:34:b0:c6:17:35:71:98:84:2f:a3:38:03:1a:f2: fa:a9:40:84:ce:9b:b0:14:11:f2:c1:fb:3f:df:c2:4f:2f:6e: ff:ea:d3:ce:0f:03:fa:1e:45:86:22:fb:fc:cc:10:66:9d:21: 40:af:c1:72:ae:04:c9:3c:97:a4:4c:25:39:33:2e:41:64:76: f4:0c:b3:0a:af:45:c3:a0:11:d3:f3:14:30:42:84:9b:15:3b: 94:06:22:a6:78:2c:df:24:19:31:91:74:5c:d4:8b:22:5d:79: 86:d8:6f:86:7a:cd:0a:59:51:22:14:6d:1c:2b:0a:78:38:06: a8:6e:11:e7:fa:94:7b:a9:aa:e5:ff:63:13:1e:bb:40:d7:e6: 5b:e1:82:f5:7b:b3:5b:d4:68:5f:55:63:48:ba:2e:7c:ca:38: a4:98:a9:30:92:98:b4:09:f0:0e:8c:6c:5c:9f:73:43:91:84: 2f:45:24:06:66:8c:93:ce:b0:18:5a:86:13:97:36:0f:d0:41: 8f:d2:48:55:b4:5f:1a:d0:4a:e0:c4:68:fa:10:c8:60:7d:58: ff:7a:f6:8c:d2:2b:5f:05:c7:8a:7d:fd:7c:3f:4e:9f:fa:00: ea:75:c2:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgdIkBesgdbflLBqTd5mRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl YjMwOTkwHhcNMjUxMjEyMDMwMTQxWhcNMjUxMjEzMDMwMTQxWjAzMTEwLwYDVQQD EyhmNDkyNmIxOWZjY2E1MzA0OWRjZDUyZGMyNmU5YzAzNmM1NTBkMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreqqsRM6Se9XFDxw4gQHKiM5v3oE 4/RwzdEllZbZ0G7YZE9RsvEAIubdqH0L0PF5YG7/9Qkgp4jCTcPnnf9SHvMk2RAT 26MRFHTrZi3xKY37vUJkXRVYJ2jMJQDeoiZNmOKZdukssbW8OiidK52ok9XSTaLw C2uSVVgBdceKuCHZGHNEQ7h7k+lgvhDf8OE8wkflhocmGcG+Dj2xarduWItSjzOc 6UAjsKSziEkaNqB/ddJf8MKOiP63q1LVmUKHA1rfMqifVf9ArlxLHESJRHA4n50t 9rL20Q6zbrNAUi4GbCzoj5602w7MTwVuZxTWBhsnrzgCV5rRcmh1bToVuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSSaxn8ylMEnc1S3CbpwDbFUNFyMB8GA1UdIwQY MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1i7SO0B fr08AEdQGi19YpW2Rl30CjSwxhc1cZiEL6M4Axry+qlAhM6bsBQR8sH7P9/CTy9u /+rTzg8D+h5FhiL7/MwQZp0hQK/Bcq4EyTyXpEwlOTMuQWR29AyzCq9Fw6AR0/MU MEKEmxU7lAYipngs3yQZMZF0XNSLIl15hthvhnrNCllRIhRtHCsKeDgGqG4R5/qU e6mq5f9jEx67QNfmW+GC9XuzW9RoX1VjSLoufMo4pJipMJKYtAnwDoxsXJ9zQ5GE L0UkBmaMk86wGFqGE5c2D9BBj9JIVbRfGtBK4MRo+hDIYH1Y/3r2jNIrXwXHin39 fD9On/oA6nXC1Q== -----END CERTIFICATE-----Generated at Fri Dec 12 12:21:45 2025 by rpki-client