This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json) Hash identifier: VMZk/7IaIVxuDS5oDmalMLI7x0RLmv2fOIf++quZeLM= Subject key identifier: C4:35:9A:53:6E:68:9C:D6:99:DB:4C:EA:51:51:73:1B:C9:77:18:52 Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37 Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337 Certificate serial: 019B1F87C48AA2B3C111DDE7F1296AA6AD21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft Manifest number: 1537 Signing time: Mon 15 Dec 2025 01:02:29 +0000 Manifest this update: Mon 15 Dec 2025 01:02:29 +0000 Manifest next update: Tue 16 Dec 2025 01:02:29 +0000 Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=) 2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: kDdSTh5r3P2SEBm3AkKhfysYlJwgNj2yIiUzaWPqlUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:c4:8a:a2:b3:c1:11:dd:e7:f1:29:6a:a6:ad:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afbc64d593fc073c693143566310295de0a8337 Validity Not Before: Dec 15 01:02:29 2025 GMT Not After : Dec 16 01:02:29 2025 GMT Subject: CN=c4359a536e689cd699db4cea5151731bc9771852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:83:75:66:67:85:42:de:86:77:39:99:3d: 3e:1c:b1:c5:c4:2e:b8:55:f7:fd:7a:8c:21:0c:7e: 99:95:1e:7d:7c:3c:73:39:9c:46:78:30:83:3e:a8: d9:3f:3a:60:d1:f9:b0:3e:4c:1a:51:9e:0c:1a:42: d4:8f:aa:91:c8:3b:1e:53:1a:75:d4:d4:be:3d:b8: 4e:7c:62:c9:74:9d:0d:8f:1b:53:ce:4f:bd:ad:ec: 21:93:a3:89:74:4f:95:49:d8:c5:82:16:d6:47:65: 22:c6:e6:b0:7f:f6:2e:23:ea:73:49:70:be:ed:20: de:66:81:17:55:60:f9:83:f8:65:9c:f3:c9:11:81: 83:86:39:48:ae:08:ff:98:e2:ce:43:94:ec:9e:82: b6:d4:ac:31:2d:bd:32:1a:d8:d5:ee:60:17:4b:23: 5c:6b:c4:0d:da:e7:27:18:6c:d4:22:ba:47:2d:59: 3d:0b:eb:34:92:88:fc:29:44:b9:77:a2:17:5a:4a: 6b:7b:e2:70:0e:e0:97:29:18:2e:e2:66:b4:58:6b: 76:8e:eb:96:47:c7:e9:82:8e:b3:ba:88:00:36:19: 47:31:2d:e3:fb:49:12:8e:0e:84:37:dd:17:1f:61: f3:60:61:62:b3:50:92:a0:1d:1d:e0:87:e1:5c:b1: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:35:9A:53:6E:68:9C:D6:99:DB:4C:EA:51:51:73:1B:C9:77:18:52 X509v3 Authority Key Identifier: keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:01:23:1b:45:ad:a8:6d:2c:c2:e9:e4:d3:68:b2:5a:28:33: 92:55:68:9f:70:c6:25:af:d8:28:09:82:3e:d2:fd:82:52:92: 13:f2:29:f2:9c:f8:c4:56:23:4e:2e:5b:f1:e7:fe:ec:36:8d: 4f:93:98:8f:0f:16:ef:12:44:e1:53:13:ad:0e:86:6a:39:37: a6:45:f3:80:e8:42:62:b5:f0:fd:2f:67:3c:ec:1b:38:f4:25: 39:9a:69:a5:c2:e7:06:ac:e9:5c:2e:90:b7:a5:40:ea:0b:7c: ac:ab:41:2b:8a:42:b6:76:1b:ab:42:b5:fd:d4:8a:0f:2b:dd: 4b:7c:6b:9a:97:94:ef:44:d4:50:d4:02:7d:15:a8:fc:a0:88: 6a:49:5f:3b:2a:9c:dd:46:a1:91:17:44:ff:79:a3:ba:fc:2c: d8:61:1b:48:84:7e:88:50:c0:68:ea:07:32:64:24:00:36:a2: 4f:3a:9c:b1:3f:5c:2e:ef:45:cf:40:ff:85:e3:5d:31:04:29: 9f:17:dc:f1:c3:16:06:4e:a8:28:fc:24:2b:5d:a7:e0:fd:69: 5e:1c:ec:d2:37:64:6e:b3:01:96:fe:35:3a:29:a7:35:d1:7d: 07:19:0d:26:b8:63:c3:f1:b0:fb:40:8c:83:2b:85:38:94:fd: 45:27:78:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh8SKorPBEd3n8Slqpq0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmJjNjRkNTkzZmMwNzNjNjkzMTQzNTY2MzEwMjk1ZGUw YTgzMzcwHhcNMjUxMjE1MDEwMjI5WhcNMjUxMjE2MDEwMjI5WjAzMTEwLwYDVQQD EyhjNDM1OWE1MzZlNjg5Y2Q2OTlkYjRjZWE1MTUxNzMxYmM5NzcxODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ6DdWZnhULehnc5mT0+HLHFxC64 Vff9eowhDH6ZlR59fDxzOZxGeDCDPqjZPzpg0fmwPkwaUZ4MGkLUj6qRyDseUxp1 1NS+PbhOfGLJdJ0NjxtTzk+9rewhk6OJdE+VSdjFghbWR2Uixuawf/YuI+pzSXC+ 7SDeZoEXVWD5g/hlnPPJEYGDhjlIrgj/mOLOQ5TsnoK21KwxLb0yGtjV7mAXSyNc a8QN2ucnGGzUIrpHLVk9C+s0koj8KUS5d6IXWkpre+JwDuCXKRgu4ma0WGt2juuW R8fpgo6zuogANhlHMS3j+0kSjg6EN90XH2HzYGFis1CSoB0d4IfhXLE0qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQ1mlNuaJzWmdtM6lFRcxvJdxhSMB8GA1UdIwQY MBaAFIr7xk1ZP8BzxpMUNWYxApXeCoM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQt MTA5N2RhOWRkZjI3LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQtMTA5N2RhOWRkZjI3 LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAEjG0Wt qG0swunk02iyWigzklVon3DGJa/YKAmCPtL9glKSE/Ip8pz4xFYjTi5b8ef+7DaN T5OYjw8W7xJE4VMTrQ6Gajk3pkXzgOhCYrXw/S9nPOwbOPQlOZpppcLnBqzpXC6Q t6VA6gt8rKtBK4pCtnYbq0K1/dSKDyvdS3xrmpeU70TUUNQCfRWo/KCIaklfOyqc 3UahkRdE/3mjuvws2GEbSIR+iFDAaOoHMmQkADaiTzqcsT9cLu9Fz0D/heNdMQQp nxfc8cMWBk6oKPwkK12n4P1pXhzs0jdkbrMBlv41OimnNdF9BxkNJrhjw/Gw+0CM gyuFOJT9RSd4KA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:00 2025 by rpki-client