This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json) Hash identifier: Y53WT7IGLxgtRl3lZocBTpafn3xxn9J6rSKv2RpyKT0= Subject key identifier: 34:51:80:A0:92:4A:0F:51:DF:32:FA:01:35:CD:0D:3B:39:33:6B:A2 Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Certificate serial: 019BFA2D9A87EB4D81154546FE6AA95CF88E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft Manifest number: 148D Signing time: Mon 26 Jan 2026 12:00:51 +0000 Manifest this update: Mon 26 Jan 2026 12:00:51 +0000 Manifest next update: Tue 27 Jan 2026 12:00:51 +0000 Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: wbevuNPkzA0EO4/ZU1jQBW2od3g7HvfJ1d8MkhDy5hY=) 2: LImjrbhHeMS0SUwTfOwECe9lV9U.roa (hash: wbFO9smdaTd3aArmdgq4cu6zQEi7JikJkE330MQeczQ=) 3: ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa (hash: SPK6XAVcaGH+5RqsIE0QaSygq3eYsl45cvObsmbsyyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:9a:87:eb:4d:81:15:45:46:fe:6a:a9:5c:f8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Validity Not Before: Jan 26 12:00:51 2026 GMT Not After : Jan 27 12:00:51 2026 GMT Subject: CN=345180a0924a0f51df32fa0135cd0d3b39336ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:8d:54:f5:93:e0:66:12:3c:2e:df:c9:95: 32:8a:5b:f3:85:76:c7:dc:eb:6a:33:be:06:c8:9e: 50:21:b4:0f:4b:af:8a:dd:84:2f:31:37:06:37:72: cf:7c:b9:fe:20:fa:50:6a:de:91:d6:85:7f:29:da: 57:48:ea:f6:8b:ce:dd:d3:a4:62:13:d0:42:9a:96: 7c:67:59:d1:5f:7f:9f:a5:42:fd:c3:af:25:5e:f0: 33:be:96:52:82:67:da:54:15:9f:aa:33:64:20:13: 65:41:f0:98:d3:81:0b:42:a7:4b:58:91:f9:3f:5c: 65:ed:b4:71:cf:6f:7b:f3:71:f1:8a:69:05:32:58: 1c:df:c7:a2:7c:0a:14:45:36:db:50:94:3a:57:71: 5b:a3:2f:d3:2b:0b:cb:a7:b5:2d:35:f0:f3:60:74: 21:1f:9a:55:da:da:4b:2c:98:0f:cc:51:22:b7:26: af:89:ea:0b:c3:51:32:0d:e3:68:b8:3d:7f:c0:03: fe:da:46:e6:ec:b8:e6:57:30:3e:7b:93:2f:54:a2: 15:dc:b7:f8:dc:9c:ca:bb:01:db:38:9a:a5:21:a3: bb:76:c0:02:0c:22:64:d7:10:59:a1:22:f6:e8:17: e2:b4:4c:88:43:2e:e8:d9:a1:1a:95:3b:f2:38:65: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:51:80:A0:92:4A:0F:51:DF:32:FA:01:35:CD:0D:3B:39:33:6B:A2 X509v3 Authority Key Identifier: keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f8:07:5d:fa:90:ed:d6:a0:f7:5e:13:c3:96:27:ad:bc:e0: 44:52:99:07:26:d1:0a:63:c8:33:c0:98:3f:7a:89:a4:5a:99: fe:cf:64:7e:b1:eb:1c:e2:bb:9d:39:f0:20:16:9a:9c:11:52: 7c:63:b9:ab:18:e1:1a:1e:bc:28:50:14:f2:26:bd:c9:94:68: f2:49:88:4f:70:0f:c4:2f:d7:1e:5e:03:5a:01:59:78:fa:ad: ae:a0:6e:a9:40:f1:52:20:08:a7:17:93:e7:86:65:61:2e:28: 78:9c:ba:de:8a:d7:0c:a9:86:9c:19:7f:c0:e7:c0:bf:c6:98: 59:5b:b7:1f:5e:ae:04:9e:44:ad:77:eb:e6:50:24:23:23:8e: 55:a6:af:12:e2:df:0a:6c:a8:b0:04:a4:5f:a8:93:53:fb:a1: c7:f4:92:d9:6b:26:27:b9:a8:20:d8:5d:48:69:05:65:d8:58: bb:c7:a4:fa:a2:f0:12:43:e8:a9:f5:1a:ac:7f:ee:94:49:7d: 3d:e8:70:12:d1:d1:d7:b0:bb:fb:09:dd:44:8a:4f:06:ac:9c: c7:81:9c:4b:8c:e7:18:e2:4c:32:7c:7b:87:95:68:77:d9:2e: c4:f3:24:d8:58:fc:11:1c:15:ed:3c:b2:70:f4:f0:df:46:52: 53:a6:56:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZqH602BFUVG/mqpXPiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj ZTBhNzkwHhcNMjYwMTI2MTIwMDUxWhcNMjYwMTI3MTIwMDUxWjAzMTEwLwYDVQQD EygzNDUxODBhMDkyNGEwZjUxZGYzMmZhMDEzNWNkMGQzYjM5MzM2YmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryCNVPWT4GYSPC7fyZUyilvzhXbH 3OtqM74GyJ5QIbQPS6+K3YQvMTcGN3LPfLn+IPpQat6R1oV/KdpXSOr2i87d06Ri E9BCmpZ8Z1nRX3+fpUL9w68lXvAzvpZSgmfaVBWfqjNkIBNlQfCY04ELQqdLWJH5 P1xl7bRxz29783HximkFMlgc38eifAoURTbbUJQ6V3Fboy/TKwvLp7UtNfDzYHQh H5pV2tpLLJgPzFEityavieoLw1EyDeNouD1/wAP+2kbm7LjmVzA+e5MvVKIV3Lf4 3JzKuwHbOJqlIaO7dsACDCJk1xBZoSL26BfitEyIQy7o2aEalTvyOGU7RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRRgKCSSg9R3zL6ATXNDTs5M2uiMB8GA1UdIwQY MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt NmYxZmVjZTg3Yzg5LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5 LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvgHXfqQ 7dag914Tw5YnrbzgRFKZBybRCmPIM8CYP3qJpFqZ/s9kfrHrHOK7nTnwIBaanBFS fGO5qxjhGh68KFAU8ia9yZRo8kmIT3APxC/XHl4DWgFZePqtrqBuqUDxUiAIpxeT 54ZlYS4oeJy63orXDKmGnBl/wOfAv8aYWVu3H16uBJ5ErXfr5lAkIyOOVaavEuLf CmyosASkX6iTU/uhx/SS2WsmJ7moINhdSGkFZdhYu8ek+qLwEkPoqfUarH/ulEl9 PehwEtHR17C7+wndRIpPBqycx4GcS4znGOJMMnx7h5Vod9kuxPMk2Fj8ERwV7Tyy cPTw30ZSU6ZWwA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:26 2026 by rpki-client