This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json) Hash identifier: +f9Y9DPLUkMDSL1Q8da3ta1hFmO0qRqoKwhjHP7crc4= Subject key identifier: F7:D6:61:60:62:11:89:F2:F3:F4:AF:C0:BC:B5:4E:8F:13:C8:AC:49 Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37 Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337 Certificate serial: 019AF50B641179839D21D26FA499150E9967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft Manifest number: 1521 Signing time: Sat 06 Dec 2025 19:02:35 +0000 Manifest this update: Sat 06 Dec 2025 19:02:35 +0000 Manifest next update: Sun 07 Dec 2025 19:02:35 +0000 Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=) 2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: Pf8H3tXOse+jMIx87RWB2kdBwMbPMQ+y+FfgJGQkmsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:64:11:79:83:9d:21:d2:6f:a4:99:15:0e:99:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afbc64d593fc073c693143566310295de0a8337 Validity Not Before: Dec 6 19:02:35 2025 GMT Not After : Dec 7 19:02:35 2025 GMT Subject: CN=f7d66160621189f2f3f4afc0bcb54e8f13c8ac49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:f0:b2:9e:c6:19:b3:9c:51:1d:5e:12:5e: 7c:e4:db:da:a7:04:c8:ed:df:46:ee:d4:47:9d:74: c4:de:9f:ba:73:d5:5c:5e:60:a5:7f:35:48:3e:b7: 74:07:70:37:ab:74:17:7a:de:b7:43:93:ff:1a:6e: 39:6f:fc:b2:5a:bb:26:05:f1:c5:a9:eb:56:de:52: 76:d0:24:6a:bd:92:9f:c4:06:07:30:f5:8c:64:31: 9a:ad:f9:60:39:fd:bc:d3:da:ca:34:69:4e:8d:6b: a5:60:66:76:4f:5e:f9:0c:4f:6c:02:5f:99:e6:47: 3b:19:83:80:78:1a:1f:87:a3:bb:a4:bc:55:82:7b: d7:7f:c0:61:81:dc:14:c0:ec:ff:87:0d:dd:2f:1b: d5:d2:c2:e3:ee:51:02:2a:2d:23:76:66:58:17:5b: 66:55:c8:63:0a:6a:b9:fd:04:69:48:2e:9b:5b:81: 23:14:df:29:19:29:88:a2:c5:ef:c6:ce:c9:90:2b: 53:1e:5f:ad:9d:9e:25:b9:42:b7:61:29:b9:cf:97: 47:cc:91:75:bb:b4:c9:50:20:77:fe:0e:29:b6:68: df:44:f6:80:bc:39:2c:28:44:01:45:cf:7f:14:f7: 11:16:5a:b3:b4:0f:be:d8:06:7c:e8:69:a6:b6:48: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D6:61:60:62:11:89:F2:F3:F4:AF:C0:BC:B5:4E:8F:13:C8:AC:49 X509v3 Authority Key Identifier: keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:b7:6c:30:28:92:37:8e:3b:0a:eb:f4:e4:34:02:5f:b5: 21:5e:de:2e:88:42:08:2e:d1:74:59:0f:3e:8d:59:c2:f7:f1: be:0b:b0:1b:bf:92:cb:f3:9a:22:e8:73:96:f6:71:77:11:17: e9:85:4c:e2:c7:99:cc:60:31:64:2d:43:2a:b6:10:8d:e8:bc: 56:c5:b0:41:48:c0:0c:b1:b5:79:8a:35:6f:a8:ed:43:64:98: 95:a9:cc:78:35:84:39:05:31:ad:00:3b:a1:76:e3:3a:9b:48: 5e:b2:d3:3e:78:a5:ea:68:16:5d:49:78:94:8f:67:2a:bb:bf: f8:2b:b5:8a:94:a9:67:55:87:af:e3:44:16:fa:69:ef:05:b9: 4c:c5:a4:cb:b2:39:29:9c:08:7e:8b:dd:bf:b3:d5:a7:ef:c8: 12:f5:5d:74:bf:2e:b8:56:21:ce:a1:f1:30:95:94:42:3d:18: 68:4a:c9:44:4e:5b:8a:3b:cf:58:6e:f4:00:4c:25:7a:0d:41: 37:45:68:58:ff:d8:e2:4b:81:aa:cf:20:dc:4f:6f:b8:7b:19: 6f:42:ff:ab:a5:a8:9f:86:09:da:a3:d1:15:0b:c1:b2:a2:60: 9e:9d:46:aa:26:b3:6b:0f:0e:25:15:86:f6:4f:1e:fb:37:03: 3e:a1:b5:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2QReYOdIdJvpJkVDplnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmJjNjRkNTkzZmMwNzNjNjkzMTQzNTY2MzEwMjk1ZGUw YTgzMzcwHhcNMjUxMjA2MTkwMjM1WhcNMjUxMjA3MTkwMjM1WjAzMTEwLwYDVQQD EyhmN2Q2NjE2MDYyMTE4OWYyZjNmNGFmYzBiY2I1NGU4ZjEzYzhhYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVDwsp7GGbOcUR1eEl585NvapwTI 7d9G7tRHnXTE3p+6c9VcXmClfzVIPrd0B3A3q3QXet63Q5P/Gm45b/yyWrsmBfHF qetW3lJ20CRqvZKfxAYHMPWMZDGarflgOf2809rKNGlOjWulYGZ2T175DE9sAl+Z 5kc7GYOAeBofh6O7pLxVgnvXf8BhgdwUwOz/hw3dLxvV0sLj7lECKi0jdmZYF1tm VchjCmq5/QRpSC6bW4EjFN8pGSmIosXvxs7JkCtTHl+tnZ4luUK3YSm5z5dHzJF1 u7TJUCB3/g4ptmjfRPaAvDksKEQBRc9/FPcRFlqztA++2AZ86GmmtkiJPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfWYWBiEYny8/SvwLy1To8TyKxJMB8GA1UdIwQY MBaAFIr7xk1ZP8BzxpMUNWYxApXeCoM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQt MTA5N2RhOWRkZjI3LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQtMTA5N2RhOWRkZjI3 LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBq3bDAo kjeOOwrr9OQ0Al+1IV7eLohCCC7RdFkPPo1ZwvfxvguwG7+Sy/OaIuhzlvZxdxEX 6YVM4seZzGAxZC1DKrYQjei8VsWwQUjADLG1eYo1b6jtQ2SYlanMeDWEOQUxrQA7 oXbjOptIXrLTPnil6mgWXUl4lI9nKru/+Cu1ipSpZ1WHr+NEFvpp7wW5TMWky7I5 KZwIfovdv7PVp+/IEvVddL8uuFYhzqHxMJWUQj0YaErJRE5bijvPWG70AEwleg1B N0VoWP/Y4kuBqs8g3E9vuHsZb0L/q6Won4YJ2qPRFQvBsqJgnp1Gqiazaw8OJRWG 9k8e+zcDPqG1oA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:54 2025 by rpki-client