This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json) Hash identifier: ReTBv9EZ+tEv1weZXhAMJ86BSohxedita8G09iOwhaU= Subject key identifier: E1:34:8B:FB:7B:DB:B7:E7:FD:B4:F0:7B:D3:E2:18:34:FF:03:2A:0B Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Certificate serial: 019BFC1C397C26C8D9C38F2E9DBE185BEDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft Manifest number: 148E Signing time: Mon 26 Jan 2026 21:01:06 +0000 Manifest this update: Mon 26 Jan 2026 21:01:06 +0000 Manifest next update: Tue 27 Jan 2026 21:01:06 +0000 Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: FMqXYsGLBaBq3QL+eTXCPPWQVLMGF/9YeC2V4lFtjac=) 2: LImjrbhHeMS0SUwTfOwECe9lV9U.roa (hash: wbFO9smdaTd3aArmdgq4cu6zQEi7JikJkE330MQeczQ=) 3: ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa (hash: SPK6XAVcaGH+5RqsIE0QaSygq3eYsl45cvObsmbsyyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:39:7c:26:c8:d9:c3:8f:2e:9d:be:18:5b:ed:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Validity Not Before: Jan 26 21:01:06 2026 GMT Not After : Jan 27 21:01:06 2026 GMT Subject: CN=e1348bfb7bdbb7e7fdb4f07bd3e21834ff032a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:12:e5:23:a3:97:42:65:74:a2:06:ea:18: 4c:f0:0d:e3:45:d2:76:3d:d8:cb:9b:74:5c:ed:8b: 3b:b7:b8:05:fd:80:db:bb:4b:85:40:e2:f2:3e:07: 01:5e:d8:2a:e3:f2:d2:52:ad:84:3e:1c:dc:5f:b4: c8:bd:3c:01:c1:ee:19:e9:b0:ff:d1:4a:45:51:1e: a6:c4:8f:52:08:89:78:3b:e7:ba:d7:5f:3c:05:ae: ca:70:c7:1e:03:4d:44:4a:71:5b:d0:ec:1e:89:39: fc:53:ee:b6:15:59:74:5e:1a:87:70:71:3d:dc:c1: a9:5a:89:43:f3:2b:a2:86:da:9e:82:57:b9:de:9c: 5d:7c:92:6a:24:1f:14:e7:72:69:60:4d:eb:3a:c7: 82:9d:4e:a5:63:69:e5:c0:37:47:36:52:2d:fa:bb: 23:10:8c:61:a8:5e:1b:7b:2b:64:e2:1b:4c:05:76: 8b:a4:92:c2:a7:f4:3d:61:32:4e:5c:44:07:8e:11: b8:b4:78:56:80:04:ef:89:4f:0e:b2:5e:80:ad:df: 91:be:a7:92:18:f5:d8:c5:25:8c:f4:ef:ff:16:f5: 23:e4:08:eb:ab:97:f8:b8:16:af:9a:c5:4f:17:b0: 69:51:d1:9a:f1:88:8a:06:31:58:a6:14:10:4d:b7: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:34:8B:FB:7B:DB:B7:E7:FD:B4:F0:7B:D3:E2:18:34:FF:03:2A:0B X509v3 Authority Key Identifier: keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:07:91:83:dc:1c:c1:c7:6f:d5:04:e5:7a:ea:24:57:12:06: b4:e0:8a:3e:fa:61:4d:b5:5a:23:ae:05:23:77:f6:a6:6f:38: a5:df:26:5d:be:d9:29:03:f7:95:56:cb:37:bd:64:de:ad:20: b2:75:e9:18:a1:12:c4:ae:5a:99:6b:1a:09:b4:d7:de:6e:d0: 19:71:bf:00:9d:4a:6b:33:03:35:8a:4e:b7:2c:88:1d:f3:2c: d9:04:02:72:84:42:da:d6:7b:4f:e9:00:be:d8:f6:92:3c:c0: 64:b8:37:87:ed:30:9c:a3:b3:21:ad:e2:3c:27:89:76:4b:47: 17:83:68:a1:83:ed:29:02:33:79:80:73:15:0a:1e:55:d4:9b: d1:c3:e0:66:eb:d0:5f:57:74:fa:5f:da:7a:f4:07:85:79:ce: 8b:21:8f:4a:3f:c7:46:b6:6e:d6:d9:bf:f0:84:43:2b:45:f8: 0c:76:85:88:25:c2:30:e0:c1:a1:00:34:17:8c:fc:37:26:b5: 6d:ea:c3:3f:1d:47:da:a2:c9:d8:a0:ae:74:67:16:23:05:32: 62:80:3c:f6:5d:56:47:1f:89:69:10:1c:c3:23:85:16:c5:8f: 6a:c7:04:1a:b8:50:45:c5:4a:bf:4d:5c:65:b6:78:5e:98:19: a1:97:a5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HDl8JsjZw48unb4YW+20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj ZTBhNzkwHhcNMjYwMTI2MjEwMTA2WhcNMjYwMTI3MjEwMTA2WjAzMTEwLwYDVQQD EyhlMTM0OGJmYjdiZGJiN2U3ZmRiNGYwN2JkM2UyMTgzNGZmMDMyYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE8S5SOjl0JldKIG6hhM8A3jRdJ2 PdjLm3Rc7Ys7t7gF/YDbu0uFQOLyPgcBXtgq4/LSUq2EPhzcX7TIvTwBwe4Z6bD/ 0UpFUR6mxI9SCIl4O+e61188Ba7KcMceA01ESnFb0OweiTn8U+62FVl0XhqHcHE9 3MGpWolD8yuihtqegle53pxdfJJqJB8U53JpYE3rOseCnU6lY2nlwDdHNlIt+rsj EIxhqF4beytk4htMBXaLpJLCp/Q9YTJOXEQHjhG4tHhWgATviU8Osl6Ard+RvqeS GPXYxSWM9O//FvUj5Ajrq5f4uBavmsVPF7BpUdGa8YiKBjFYphQQTbe6/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE0i/t727fn/bTwe9PiGDT/AyoLMB8GA1UdIwQY MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt NmYxZmVjZTg3Yzg5LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5 LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZweRg9wc wcdv1QTleuokVxIGtOCKPvphTbVaI64FI3f2pm84pd8mXb7ZKQP3lVbLN71k3q0g snXpGKESxK5amWsaCbTX3m7QGXG/AJ1KazMDNYpOtyyIHfMs2QQCcoRC2tZ7T+kA vtj2kjzAZLg3h+0wnKOzIa3iPCeJdktHF4NooYPtKQIzeYBzFQoeVdSb0cPgZuvQ X1d0+l/aevQHhXnOiyGPSj/HRrZu1tm/8IRDK0X4DHaFiCXCMODBoQA0F4z8Nya1 berDPx1H2qLJ2KCudGcWIwUyYoA89l1WRx+JaRAcwyOFFsWPascEGrhQRcVKv01c ZbZ4XpgZoZelsg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:49 2026 by rpki-client