This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json) Hash identifier: 6hpS/RFStzB0eVO3KhSfrAi/YVOKVzgNer+upjWH9v8= Subject key identifier: 8E:7D:AC:A8:73:93:90:72:6D:37:E2:8E:66:E2:50:BB:25:7D:1A:C5 Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e Certificate serial: 019B5BD1CB17CEF0CF12C50647340D6FAB1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft Manifest number: 1259 Signing time: Fri 26 Dec 2025 18:00:34 +0000 Manifest this update: Fri 26 Dec 2025 18:00:34 +0000 Manifest next update: Sat 27 Dec 2025 18:00:34 +0000 Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: cL76Z51Y1RNuWRJpJnZxU+vaLmeHfdUhFx1gLvUpYk8=) 2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:cb:17:ce:f0:cf:12:c5:06:47:34:0d:6f:ab:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e Validity Not Before: Dec 26 18:00:34 2025 GMT Not After : Dec 27 18:00:34 2025 GMT Subject: CN=8e7daca8739390726d37e28e66e250bb257d1ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:ed:c0:f0:06:13:45:77:0a:9a:90:1f:9d: 00:1b:23:b6:fc:f4:f4:57:3f:22:78:80:7f:53:5e: 13:0a:9f:b4:73:3f:a8:94:29:50:2e:09:8d:9a:8e: 1b:2d:2d:d4:29:b7:0b:f7:36:85:66:09:51:62:a1: 21:1c:e6:94:2f:f3:ed:9a:31:ca:be:27:70:bf:c5: 53:6e:f4:a1:5c:a4:49:ca:f4:fe:ea:bf:0a:c9:94: 04:36:92:6b:5e:c2:16:6f:eb:eb:c5:a3:47:8a:8d: 97:d6:8b:5e:a3:05:11:75:20:ba:8b:f7:ac:5c:47: 07:c6:ce:dc:b8:47:d9:77:fe:23:bf:7f:ad:a9:34: b1:9a:1a:ac:db:29:fc:ea:14:24:72:4e:93:ba:b0: d6:60:24:5a:a9:27:f9:be:0c:11:aa:f0:37:2a:19: d5:36:25:77:51:61:a2:fe:15:04:39:9e:59:05:b4: 18:55:dc:42:f0:e7:67:bd:a2:06:a6:e8:28:dd:33: 33:c8:75:54:ea:6d:86:ed:9c:63:74:34:f0:70:4d: ff:80:6a:b1:20:1b:d5:b9:0c:12:3f:71:38:24:fa: 42:e9:b8:d9:a9:77:5d:7c:f8:51:8c:e3:7d:42:6e: ae:ff:ae:ba:36:dc:db:a7:0f:e7:b3:d2:92:fc:18: 5e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7D:AC:A8:73:93:90:72:6D:37:E2:8E:66:E2:50:BB:25:7D:1A:C5 X509v3 Authority Key Identifier: keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ce:39:eb:19:45:f7:66:e3:b4:c6:94:a1:84:89:e6:4b:68: 94:cc:8d:89:ee:96:9d:59:f0:fc:75:75:c2:bc:b1:17:bf:52: 74:c3:25:be:fb:e8:1c:ac:db:0e:fd:5a:c2:96:95:18:77:4e: 5c:2f:cc:0c:a1:7d:b0:41:01:43:ac:a6:89:8b:04:94:9d:6c: 29:1d:d7:76:dd:f9:3f:4f:94:b1:bf:b1:2a:7c:f3:db:b1:ea: 2a:d4:1e:bf:63:36:23:a2:51:76:99:bc:9e:fe:88:b6:00:aa: 23:92:ba:af:be:c6:c0:1d:af:9a:11:2b:6a:e9:92:87:29:cd: 6e:66:f0:51:a1:af:41:ba:f3:be:bd:99:45:fe:c0:2f:0a:a0: 8f:42:4b:16:84:d5:b7:59:ac:b7:85:0a:84:29:eb:2a:e8:aa: 34:8e:d3:82:e4:8f:c5:4f:32:19:55:16:1a:d5:cb:06:fd:dc: d2:09:c0:b8:87:66:6f:95:0e:c4:53:88:86:8f:a6:4b:08:9a: 91:37:1b:a7:64:ce:e8:35:1c:be:17:85:94:75:49:0e:09:85: 88:9e:75:1e:50:c5:49:37:ff:6c:ce:68:54:a9:86:ff:24:d4: 69:47:e2:3c:09:62:28:7a:38:d4:25:af:41:fa:8e:79:12:a1: 29:15:f7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0csXzvDPEsUGRzQNb6scMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTE4MWI4Mjc3Njk3OGFkMmRiYjY5NTI4ZGNlOWIyMDk4 ZWIwN2UwHhcNMjUxMjI2MTgwMDM0WhcNMjUxMjI3MTgwMDM0WjAzMTEwLwYDVQQD Eyg4ZTdkYWNhODczOTM5MDcyNmQzN2UyOGU2NmUyNTBiYjI1N2QxYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5LtwPAGE0V3CpqQH50AGyO2/PT0 Vz8ieIB/U14TCp+0cz+olClQLgmNmo4bLS3UKbcL9zaFZglRYqEhHOaUL/PtmjHK vidwv8VTbvShXKRJyvT+6r8KyZQENpJrXsIWb+vrxaNHio2X1oteowURdSC6i/es XEcHxs7cuEfZd/4jv3+tqTSxmhqs2yn86hQkck6TurDWYCRaqSf5vgwRqvA3KhnV NiV3UWGi/hUEOZ5ZBbQYVdxC8OdnvaIGpugo3TMzyHVU6m2G7ZxjdDTwcE3/gGqx IBvVuQwSP3E4JPpC6bjZqXddfPhRjON9Qm6u/666Ntzbpw/ns9KS/Bhe9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI59rKhzk5BybTfijmbiULslfRrFMB8GA1UdIwQY MBaAFCFRgbgndpeK0tu2lSjc6bIJjrB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUt NDkwMzFjNzcwNDg3LzEvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUtNDkwMzFjNzcwNDg3 LzEvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAec456xlF 92bjtMaUoYSJ5ktolMyNie6WnVnw/HV1wryxF79SdMMlvvvoHKzbDv1awpaVGHdO XC/MDKF9sEEBQ6ymiYsElJ1sKR3Xdt35P0+Usb+xKnzz27HqKtQev2M2I6JRdpm8 nv6ItgCqI5K6r77GwB2vmhEraumShynNbmbwUaGvQbrzvr2ZRf7ALwqgj0JLFoTV t1mst4UKhCnrKuiqNI7TguSPxU8yGVUWGtXLBv3c0gnAuIdmb5UOxFOIho+mSwia kTcbp2TO6DUcvheFlHVJDgmFiJ51HlDFSTf/bM5oVKmG/yTUaUfiPAliKHo41CWv QfqOeRKhKRX3qQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:41 2025 by rpki-client