This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json) Hash identifier: mKldh5v1ZcywgjRHJCs924ftsFD0lfD//vdgm/29H2E= Subject key identifier: F6:D1:1B:A2:56:50:03:6D:D8:58:48:07:57:56:09:E5:90:E0:E1:7F Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e Certificate serial: 019AF5784FCE8D1E14F9ACFD2790BA3095B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft Manifest number: 1224 Signing time: Sat 06 Dec 2025 21:01:33 +0000 Manifest this update: Sat 06 Dec 2025 21:01:33 +0000 Manifest next update: Sun 07 Dec 2025 21:01:33 +0000 Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: GDfvsLbvSgt/zEcL2NfP1+9gtNBvE+ruQeajFoPH/P4=) 2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:4f:ce:8d:1e:14:f9:ac:fd:27:90:ba:30:95:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e Validity Not Before: Dec 6 21:01:33 2025 GMT Not After : Dec 7 21:01:33 2025 GMT Subject: CN=f6d11ba25650036dd8584807575609e590e0e17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:c6:65:15:f7:25:1d:89:11:6d:31:74:e9: 8e:85:c1:f7:bd:d7:91:6d:ef:cb:2d:51:87:78:37: 23:50:6e:ad:44:d2:20:54:53:50:8d:cc:bd:b9:f1: cf:34:9d:82:f0:f9:15:2a:bb:71:3b:45:82:6f:8e: cc:05:f6:5c:e9:ca:34:d9:cf:f5:05:2f:11:5b:f1: 88:08:96:38:c0:ca:4f:08:7d:71:b5:33:ce:7a:ef: 18:e0:e4:7e:dc:c9:aa:f6:dd:6c:b5:13:03:ad:6c: 79:e7:af:84:36:24:59:08:96:40:36:7f:fc:82:c0: 1b:55:35:66:4c:c7:54:ce:9f:b0:27:0b:64:6a:00: 23:8f:93:a5:2a:ac:77:14:d2:7e:cd:18:5c:97:d0: 89:73:74:21:ba:46:f9:7f:a6:fc:02:a7:73:f1:1e: ab:d3:5c:b2:17:3d:47:99:25:61:45:c5:a4:09:61: 46:76:6b:62:03:12:d0:6e:80:4c:ad:62:17:75:18: 72:4f:04:28:b3:66:a9:7d:cc:72:bc:1b:5b:84:be: b6:d6:36:9d:e5:79:21:11:8d:e1:33:bc:ef:2d:e1: b4:d4:38:b1:6a:3e:1e:2a:71:09:4f:9e:ce:04:82: b1:ce:66:d6:75:f3:31:95:00:0c:2d:e3:ee:1f:e0: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D1:1B:A2:56:50:03:6D:D8:58:48:07:57:56:09:E5:90:E0:E1:7F X509v3 Authority Key Identifier: keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:65:2c:79:1a:8c:db:23:ad:8e:96:b4:27:f2:40:95:6a:bc: 90:5a:97:75:57:fd:a7:0c:5f:5d:9a:74:10:66:30:f5:45:95: 66:49:2e:57:c5:fb:fb:a4:b5:aa:14:06:ec:87:95:b1:f3:6c: ac:b5:40:79:b4:6e:f5:52:35:8f:63:d9:e6:95:66:c4:15:70: bb:6b:04:57:8e:64:61:71:b6:09:47:61:08:dd:c0:90:99:d7: c0:0a:7c:1a:4e:6d:e2:8a:eb:ff:e7:c3:d7:d7:07:f0:c0:ac: 72:45:c5:21:69:47:d4:4d:13:b2:0b:19:25:16:f5:16:bf:fc: 2a:98:d2:ff:7f:f8:6f:9d:41:0f:29:39:fd:19:97:18:c3:b5: ca:b4:9d:84:45:c6:d2:30:72:a8:a0:7e:92:dd:81:03:35:41: 9e:a3:51:00:a1:43:20:d9:be:00:3d:c4:8e:27:42:dc:d8:25: 88:04:7d:87:6a:7b:1f:e2:02:dd:72:08:78:ea:43:f0:19:9b: 20:f3:c8:e8:11:70:a3:db:f6:4c:31:d6:a5:cb:9f:4f:1a:4b: 71:0f:29:c5:f9:ec:31:3a:0f:4d:65:d0:a2:22:91:d4:44:c3: 7c:fb:c5:04:2f:1b:49:1e:b9:9b:ba:dc:36:fa:e9:29:82:16: c3:db:a2:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eE/OjR4U+az9J5C6MJWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTE4MWI4Mjc3Njk3OGFkMmRiYjY5NTI4ZGNlOWIyMDk4 ZWIwN2UwHhcNMjUxMjA2MjEwMTMzWhcNMjUxMjA3MjEwMTMzWjAzMTEwLwYDVQQD EyhmNmQxMWJhMjU2NTAwMzZkZDg1ODQ4MDc1NzU2MDllNTkwZTBlMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosrGZRX3JR2JEW0xdOmOhcH3vdeR be/LLVGHeDcjUG6tRNIgVFNQjcy9ufHPNJ2C8PkVKrtxO0WCb47MBfZc6co02c/1 BS8RW/GICJY4wMpPCH1xtTPOeu8Y4OR+3Mmq9t1stRMDrWx556+ENiRZCJZANn/8 gsAbVTVmTMdUzp+wJwtkagAjj5OlKqx3FNJ+zRhcl9CJc3Qhukb5f6b8Aqdz8R6r 01yyFz1HmSVhRcWkCWFGdmtiAxLQboBMrWIXdRhyTwQos2apfcxyvBtbhL621jad 5XkhEY3hM7zvLeG01Dixaj4eKnEJT57OBIKxzmbWdfMxlQAMLePuH+CAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbRG6JWUANt2FhIB1dWCeWQ4OF/MB8GA1UdIwQY MBaAFCFRgbgndpeK0tu2lSjc6bIJjrB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUt NDkwMzFjNzcwNDg3LzEvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUtNDkwMzFjNzcwNDg3 LzEvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2UseRqM 2yOtjpa0J/JAlWq8kFqXdVf9pwxfXZp0EGYw9UWVZkkuV8X7+6S1qhQG7IeVsfNs rLVAebRu9VI1j2PZ5pVmxBVwu2sEV45kYXG2CUdhCN3AkJnXwAp8Gk5t4orr/+fD 19cH8MCsckXFIWlH1E0TsgsZJRb1Fr/8KpjS/3/4b51BDyk5/RmXGMO1yrSdhEXG 0jByqKB+kt2BAzVBnqNRAKFDINm+AD3EjidC3NgliAR9h2p7H+IC3XIIeOpD8Bmb IPPI6BFwo9v2TDHWpcufTxpLcQ8pxfnsMToPTWXQoiKR1ETDfPvFBC8bSR65m7rc NvrpKYIWw9uibg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:05 2025 by rpki-client