This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft File: IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft (raw, json) Hash identifier: mwVgUGt3ecRiXYetiEsEowo+pv/wMLjD68cuXK8tVaE= Subject key identifier: FD:2D:C7:85:5C:C1:8D:97:8A:4C:20:F3:AA:85:AA:F8:C6:6A:43:81 Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9 Certificate issuer: /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9 Certificate serial: 019B2C668536F1E7374229F720B96097C6BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft Manifest number: 0A7A Signing time: Wed 17 Dec 2025 13:01:14 +0000 Manifest this update: Wed 17 Dec 2025 13:01:14 +0000 Manifest next update: Thu 18 Dec 2025 13:01:14 +0000 Files and hashes: 1: IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl (hash: S6sAF5NdRBPE+24arG1I+dqFtGaK62MkuZp6/W7ynzQ=) 2: NfqHOhcJXcqSfQpuNgytLU6Q0gw.roa (hash: fdvl8Vjh1i6SnoxQG77IPFWNq1tbBXhWcHGwbwfOV50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:85:36:f1:e7:37:42:29:f7:20:b9:60:97:c6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9 Validity Not Before: Dec 17 13:01:14 2025 GMT Not After : Dec 18 13:01:14 2025 GMT Subject: CN=fd2dc7855cc18d978a4c20f3aa85aaf8c66a4381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:d0:9c:b5:0e:97:ea:ce:a0:88:1f:72:bc: bc:83:a8:fb:44:15:46:c7:d6:bb:45:c8:8d:e8:e8: 87:43:63:e6:86:ab:42:c6:8c:8b:55:ef:44:f0:e9: 72:32:8f:2d:cc:24:aa:8f:80:a7:2b:55:72:16:3a: 03:fb:f4:6a:91:e0:0e:59:94:5d:9a:74:08:80:35: 50:a4:d1:0f:57:2c:86:ed:2a:34:8a:76:a6:6f:af: f2:1b:61:b7:a1:b0:3f:02:6c:33:09:f6:50:fc:84: d5:6f:c6:3d:f9:e2:1a:55:b1:eb:1e:ad:d5:52:a7: a6:fe:3a:bb:06:ad:23:e9:47:cf:8a:d5:17:df:94: 4a:c5:46:55:86:d5:aa:47:e7:55:52:24:99:71:9e: 1b:c8:7a:e2:71:fa:cc:a8:a5:d4:96:7e:0e:1e:a8: 61:93:b1:20:15:40:d8:57:f4:10:14:9e:f6:7d:14: 5d:92:f8:a1:67:4d:81:d0:fa:eb:6f:fa:ba:6b:2e: df:77:ac:c8:ab:d1:03:85:c0:89:09:9f:7b:c7:b0: 47:63:c1:5c:c6:6c:27:ef:8f:ab:78:15:64:c0:94: 5d:a8:63:84:58:29:db:97:ee:3c:c0:4f:a5:8b:7f: f4:57:e5:4f:8c:c5:27:51:b9:12:d6:e2:2d:7e:31: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2D:C7:85:5C:C1:8D:97:8A:4C:20:F3:AA:85:AA:F8:C6:6A:43:81 X509v3 Authority Key Identifier: keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:04:74:de:36:be:7b:64:fa:31:e2:d0:44:30:57:aa:b5:01: 0d:5b:ea:2d:0f:e3:84:53:4e:52:ac:7f:a4:7b:13:c0:ec:1f: cf:87:3a:33:50:9d:62:b9:c5:1f:79:91:44:ce:e7:1e:36:c6: 3a:75:e6:89:1e:e4:b6:f1:b5:80:ef:0c:96:8f:fd:ec:8c:be: 24:09:8b:2a:e9:78:e6:f1:4b:0c:a6:8c:ae:34:5e:df:c2:36: 21:7d:e2:92:01:d1:dd:38:b8:2a:6f:f1:4e:4d:4a:24:ab:4d: a3:ac:64:5a:a1:3b:44:b4:63:10:e2:94:0e:8e:ab:88:ef:f3: e5:d3:46:1b:2f:5e:90:6f:cf:ef:2d:e4:43:76:85:e5:af:52: 85:39:75:a3:96:ad:b1:65:2a:50:24:e5:8e:ed:e6:e7:d7:85: e8:15:80:23:4c:ee:f6:8d:01:c4:dc:1b:20:b7:10:8b:bb:ca: b2:dc:86:4b:a6:48:da:03:01:6d:de:44:4d:b8:e7:74:4b:83: c5:0b:60:1b:d6:26:60:b8:80:e2:db:fc:ee:5b:0c:f8:50:13: 60:9a:c5:af:66:b3:0b:cb:9e:c9:e5:22:c5:d5:3d:94:0c:5a: 6e:38:f9:1a:4c:4b:2b:08:11:65:f0:25:fe:e6:e7:6f:f1:f2: ab:07:67:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZoU28ec3Qin3ILlgl8a/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTMwZTlkMDllMmZmOGMzODQxMzYxNTU4OWE1ZjIwNmU3 ZjNlYTkwHhcNMjUxMjE3MTMwMTE0WhcNMjUxMjE4MTMwMTE0WjAzMTEwLwYDVQQD EyhmZDJkYzc4NTVjYzE4ZDk3OGE0YzIwZjNhYTg1YWFmOGM2NmE0MzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2bQnLUOl+rOoIgfcry8g6j7RBVG x9a7RciN6OiHQ2PmhqtCxoyLVe9E8OlyMo8tzCSqj4CnK1VyFjoD+/RqkeAOWZRd mnQIgDVQpNEPVyyG7So0inamb6/yG2G3obA/AmwzCfZQ/ITVb8Y9+eIaVbHrHq3V Uqem/jq7Bq0j6UfPitUX35RKxUZVhtWqR+dVUiSZcZ4byHricfrMqKXUln4OHqhh k7EgFUDYV/QQFJ72fRRdkvihZ02B0Prrb/q6ay7fd6zIq9EDhcCJCZ97x7BHY8Fc xmwn74+reBVkwJRdqGOEWCnbl+48wE+li3/0V+VPjMUnUbkS1uItfjECjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0tx4VcwY2Xikwg86qFqvjGakOBMB8GA1UdIwQY MBaAFCFTDp0J4v+MOEE2FViaXyBufz6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mMmRhZDMtYTZlNi00Yjc3LTgzNDIt NjI0ZjRjMTQxZjJjLzEvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mMmRhZDMtYTZlNi00Yjc3LTgzNDItNjI0ZjRjMTQxZjJj LzEvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQR03ja+ e2T6MeLQRDBXqrUBDVvqLQ/jhFNOUqx/pHsTwOwfz4c6M1CdYrnFH3mRRM7nHjbG OnXmiR7ktvG1gO8Mlo/97Iy+JAmLKul45vFLDKaMrjRe38I2IX3ikgHR3Ti4Km/x Tk1KJKtNo6xkWqE7RLRjEOKUDo6riO/z5dNGGy9ekG/P7y3kQ3aF5a9ShTl1o5at sWUqUCTlju3m59eF6BWAI0zu9o0BxNwbILcQi7vKstyGS6ZI2gMBbd5ETbjndEuD xQtgG9YmYLiA4tv87lsM+FATYJrFr2azC8ueyeUixdU9lAxabjj5GkxLKwgRZfAl /ubnb/HyqwdnzQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:37 2025 by rpki-client