This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json) Hash identifier: 3y4fQoRgbvkImSxVkGp6xe2bxYOq/Jn6U0SDbBi04yI= Subject key identifier: 86:2F:40:0F:D8:31:9C:F9:87:67:2C:26:5A:68:54:51:86:0E:AF:00 Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9 Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9 Certificate serial: 019B33441F1DB19C9BCA63C72A0FB533F051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft Manifest number: 06EF Signing time: Thu 18 Dec 2025 21:01:00 +0000 Manifest this update: Thu 18 Dec 2025 21:01:00 +0000 Manifest next update: Fri 19 Dec 2025 21:01:00 +0000 Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: WAVJvS0iSD4XFmnTMs1xhqf9rLnCT2TiX6jHAJYRY8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:1f:1d:b1:9c:9b:ca:63:c7:2a:0f:b5:33:f0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9 Validity Not Before: Dec 18 21:01:00 2025 GMT Not After : Dec 19 21:01:00 2025 GMT Subject: CN=862f400fd8319cf987672c265a685451860eaf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:93:1e:48:d9:3d:d2:4b:6d:a0:17:cd:ff: cb:3b:bf:3d:a6:61:6e:97:c5:01:e8:cf:7a:39:97: b5:95:84:6d:7d:f7:6e:b0:f5:13:55:d2:aa:b4:56: 65:57:f5:e1:23:c5:bc:f5:f3:75:11:b8:fd:3a:5c: c3:4a:b2:eb:84:34:63:85:07:64:cf:ef:43:9c:3c: dd:f4:c8:9e:c9:cd:e3:21:3b:e8:92:09:73:5d:cf: 71:d2:03:72:05:cd:6c:e4:53:81:67:5f:70:c7:55: d7:d0:4f:6e:12:7c:ad:d0:1c:ca:31:e3:53:e1:e7: 1e:77:52:9e:28:07:ae:3a:95:e9:be:9e:60:b0:75: 44:90:c3:9a:0b:29:b2:7f:a5:6d:00:e9:ae:2f:87: 2a:a3:97:01:ae:e5:6c:aa:cd:be:92:ee:6f:ca:67: a0:00:23:7f:73:4c:57:89:cc:f8:e9:17:45:9a:7a: 85:02:b1:b5:05:10:43:ac:f9:47:5e:e0:84:0f:17: a9:cd:69:fd:45:e1:36:46:95:79:89:38:30:61:d1: 30:32:79:99:8c:12:50:59:0c:0e:96:50:95:04:43: 27:48:5f:af:c7:8e:11:a8:32:19:9e:e1:29:94:18: 07:88:2c:2d:87:5d:3a:a5:4e:06:9f:e7:fb:7e:85: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2F:40:0F:D8:31:9C:F9:87:67:2C:26:5A:68:54:51:86:0E:AF:00 X509v3 Authority Key Identifier: keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:64:a2:4f:1c:6b:ae:38:92:25:2b:ef:40:93:af:8f:1c: 6b:86:e0:2a:1d:96:7a:14:72:1a:49:b4:4b:04:0b:16:46:00: ec:e5:f8:7f:b5:18:65:1a:a7:ea:b7:43:f2:14:57:80:36:d6: e0:92:44:85:1a:90:19:8f:74:2d:f8:69:9a:ac:e3:a7:24:92: 25:91:3a:2b:96:95:66:24:0f:19:ff:69:72:93:c4:77:ca:bb: 4e:57:92:52:c9:51:15:d6:e3:02:1d:98:64:df:17:25:08:5a: 19:2a:98:c1:23:3c:65:06:23:60:d8:e8:05:8c:6a:28:46:d8: 0c:04:70:b4:11:bd:a4:25:4f:e1:5e:59:d2:22:b7:5b:30:74: b1:42:a3:04:78:bb:23:c8:6b:2d:42:00:42:d1:45:a8:fa:4f: 44:89:7e:fc:df:6a:26:44:c0:2f:f1:60:13:6b:d3:e8:a7:3b: 65:56:48:7d:c7:9e:3f:e4:7f:07:8c:0f:73:04:1a:d3:86:0f: b9:98:37:58:40:ed:55:0d:04:64:40:3e:0a:1e:47:c0:2e:25: b7:33:5b:ff:80:9c:65:7d:99:92:8e:4b:4a:35:e7:9c:4b:5b: 36:dc:5e:a0:0c:ff:ca:f8:ed:66:08:85:db:1a:a3:aa:bd:a7: be:d4:05:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRB8dsZybymPHKg+1M/BRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNWZiYzdiZWU0NjcxNmY2MzZjYjdkOTUzYjYzZWJlMzRi N2VlZTkwHhcNMjUxMjE4MjEwMTAwWhcNMjUxMjE5MjEwMTAwWjAzMTEwLwYDVQQD Eyg4NjJmNDAwZmQ4MzE5Y2Y5ODc2NzJjMjY1YTY4NTQ1MTg2MGVhZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz6THkjZPdJLbaAXzf/LO789pmFu l8UB6M96OZe1lYRtffdusPUTVdKqtFZlV/XhI8W89fN1Ebj9OlzDSrLrhDRjhQdk z+9DnDzd9Mieyc3jITvokglzXc9x0gNyBc1s5FOBZ19wx1XX0E9uEnyt0BzKMeNT 4eced1KeKAeuOpXpvp5gsHVEkMOaCymyf6VtAOmuL4cqo5cBruVsqs2+ku5vymeg ACN/c0xXicz46RdFmnqFArG1BRBDrPlHXuCEDxepzWn9ReE2RpV5iTgwYdEwMnmZ jBJQWQwOllCVBEMnSF+vx44RqDIZnuEplBgHiCwth106pU4Gn+f7foUGPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYvQA/YMZz5h2csJlpoVFGGDq8AMB8GA1UdIwQY MBaAFCFfvHvuRnFvY2y32VO2Pr40t+7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVYtOGUtNUdjVzlqYkxmWlU3WS12alMzN3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGRiY2MtMjJlMy00Y2RhLTkxMGEt NmY0NDIxYjlkNTI1LzEvSVYtOGUtNUdjVzlqYkxmWlU3WS12alMzN3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lZGRiY2MtMjJlMy00Y2RhLTkxMGEtNmY0NDIxYjlkNTI1 LzEvSVYtOGUtNUdjVzlqYkxmWlU3WS12alMzN3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF85kok8c a644kiUr70CTr48ca4bgKh2WehRyGkm0SwQLFkYA7OX4f7UYZRqn6rdD8hRXgDbW 4JJEhRqQGY90LfhpmqzjpySSJZE6K5aVZiQPGf9pcpPEd8q7TleSUslRFdbjAh2Y ZN8XJQhaGSqYwSM8ZQYjYNjoBYxqKEbYDARwtBG9pCVP4V5Z0iK3WzB0sUKjBHi7 I8hrLUIAQtFFqPpPRIl+/N9qJkTAL/FgE2vT6Kc7ZVZIfceeP+R/B4wPcwQa04YP uZg3WEDtVQ0EZEA+Ch5HwC4ltzNb/4CcZX2Zko5LSjXnnEtbNtxeoAz/yvjtZgiF 2xqjqr2nvtQFxg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:56 2025 by rpki-client