This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json) Hash identifier: plCedH5pZDQUI0ai7MoMOAN2C//rkMFjQFC3JG9ZZcE= Subject key identifier: 4A:B1:81:A2:95:22:B9:47:B9:4F:6F:9A:D2:4A:3B:F9:4D:57:94:F8 Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Certificate serial: 019AF19B805E7F752324A7F294437B05FB67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=) 2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=) 3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: amb9f7cVBLC6dgw5gWrb+QSduMEyDmTuCcO1sn7WXCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:80:5e:7f:75:23:24:a7:f2:94:43:7b:05:fb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=4ab181a29522b947b94f6f9ad24a3bf94d5794f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:7b:23:37:1f:19:e2:d3:cd:37:29:cb:4a:53: 4e:14:56:f5:05:f7:c9:45:99:44:a4:03:e8:94:3a: 97:10:91:f7:cd:fc:0a:2d:d1:b2:8e:01:ed:17:9d: a2:41:21:1b:5e:2d:e3:21:5c:c4:97:32:99:a0:35: e5:b2:8e:e3:f6:1b:7d:0d:c9:b4:f4:be:b7:9c:a1: a5:d6:21:d2:63:47:88:dc:ea:c1:b8:be:ca:5b:c8: 88:75:d5:45:cc:31:28:f6:55:58:52:77:2d:67:53: 97:00:96:6c:98:ee:fa:a0:b9:2e:60:25:ef:ca:10: ac:ad:55:e4:4a:3b:d5:be:48:67:3c:8c:0a:83:e0: ce:73:44:43:48:41:e6:b0:06:39:ce:10:77:93:98: c6:4b:39:93:7d:da:ef:4d:ee:e3:77:29:5f:25:11: 7c:f0:ea:6f:6b:2d:f3:7c:6c:f9:33:44:5b:50:64: 6f:a1:96:99:a3:83:65:24:ad:3b:39:62:62:c8:95: 07:c2:2e:38:95:8c:b5:d6:16:2b:dd:4b:a8:2c:22: b6:0e:de:e8:e5:47:54:a6:89:a6:46:13:79:8e:a3: 86:27:76:b8:b2:00:a8:bb:36:a5:11:95:eb:4f:99: 44:3f:ce:2a:00:d1:d8:27:92:db:ef:45:95:3b:8a: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:81:A2:95:22:B9:47:B9:4F:6F:9A:D2:4A:3B:F9:4D:57:94:F8 X509v3 Authority Key Identifier: keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:34:ee:8f:77:a3:f2:41:38:0a:e4:b3:1c:be:59:e4:bb:6f: f4:49:ee:c2:47:92:cf:fd:d6:7c:18:23:43:10:4a:dc:3c:d4: 46:4e:47:18:1d:5b:f8:3d:7e:15:c1:e6:14:f7:bf:47:19:4e: 56:1c:f5:d5:c3:98:c8:2c:cf:24:e2:d7:91:7e:8f:e9:51:61: 4c:58:4c:68:7d:50:f7:0e:9a:c4:c8:98:40:d6:61:31:bb:94: 82:51:e9:92:76:18:df:8c:fe:58:d4:09:39:58:a0:3f:2c:4b: e9:02:1d:df:c6:6b:31:c5:8d:61:9c:b9:b1:0e:27:06:1b:9f: 1a:fd:3e:6f:c0:68:70:8e:55:47:8c:f7:d5:e0:6d:1b:a5:a6: 51:fe:be:2a:ea:e4:2b:2c:ba:82:2f:20:27:de:18:93:95:d7: fc:33:bc:71:7f:6c:42:f5:44:b0:b9:1a:9f:a7:87:62:51:84: 38:4b:18:3b:03:06:8d:47:d9:22:38:5a:ea:fd:3d:83:fd:88: 5b:88:81:60:25:50:b4:fe:f6:14:a7:f6:cc:ed:1f:72:a5:e7: e3:7a:a5:06:88:0f:41:22:d1:19:03:80:3b:c4:5d:61:3c:bd: 5a:da:12:12:7e:81:ce:66:5f:1b:a8:b2:f4:a7:07:20:1c:3c: 29:52:47:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4Bef3UjJKfylEN7BftnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl YjMwOTkwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD Eyg0YWIxODFhMjk1MjJiOTQ3Yjk0ZjZmOWFkMjRhM2JmOTRkNTc5NGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+3sjNx8Z4tPNNynLSlNOFFb1BffJ RZlEpAPolDqXEJH3zfwKLdGyjgHtF52iQSEbXi3jIVzElzKZoDXlso7j9ht9Dcm0 9L63nKGl1iHSY0eI3OrBuL7KW8iIddVFzDEo9lVYUnctZ1OXAJZsmO76oLkuYCXv yhCsrVXkSjvVvkhnPIwKg+DOc0RDSEHmsAY5zhB3k5jGSzmTfdrvTe7jdylfJRF8 8Opvay3zfGz5M0RbUGRvoZaZo4NlJK07OWJiyJUHwi44lYy11hYr3UuoLCK2Dt7o 5UdUpommRhN5jqOGJ3a4sgCouzalEZXrT5lEP84qANHYJ5Lb70WVO4rckwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqxgaKVIrlHuU9vmtJKO/lNV5T4MB8GA1UdIwQY MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDTuj3ej 8kE4CuSzHL5Z5Ltv9EnuwkeSz/3WfBgjQxBK3DzURk5HGB1b+D1+FcHmFPe/RxlO Vhz11cOYyCzPJOLXkX6P6VFhTFhMaH1Q9w6axMiYQNZhMbuUglHpknYY34z+WNQJ OVigPyxL6QId38ZrMcWNYZy5sQ4nBhufGv0+b8BocI5VR4z31eBtG6WmUf6+Kurk Kyy6gi8gJ94Yk5XX/DO8cX9sQvVEsLkan6eHYlGEOEsYOwMGjUfZIjha6v09g/2I W4iBYCVQtP72FKf2zO0fcqXn43qlBogPQSLRGQOAO8RdYTy9WtoSEn6BzmZfG6iy 9KcHIBw8KVJHdw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:52 2025 by rpki-client