This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json) Hash identifier: J8WRJ1iFJ04WjfUljQMu/ySwIHtlbPKBGSOcpayP3v0= Subject key identifier: AD:1A:D8:24:BE:90:94:B2:37:DF:22:3C:B6:B0:EC:F8:77:D3:5B:69 Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c Certificate serial: 019AF50B46EC7669735B9A9153E8245131C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft Manifest number: 04F4 Signing time: Sat 06 Dec 2025 19:02:28 +0000 Manifest this update: Sat 06 Dec 2025 19:02:28 +0000 Manifest next update: Sun 07 Dec 2025 19:02:28 +0000 Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=) 2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: JFML8+SJYHR5L7wG/pGh1sCMMQ639hc29B/jqE7hPkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:46:ec:76:69:73:5b:9a:91:53:e8:24:51:31:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c Validity Not Before: Dec 6 19:02:28 2025 GMT Not After : Dec 7 19:02:28 2025 GMT Subject: CN=ad1ad824be9094b237df223cb6b0ecf877d35b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6f:dd:4e:8c:55:45:4a:94:64:d4:8d:76:04: 0e:ae:53:c9:73:9c:a7:fb:7d:1a:38:08:91:cd:9b: a8:dc:65:ed:16:28:b8:9c:7f:a4:cc:3e:a3:09:09: 86:3f:8a:a2:fe:57:69:6f:d5:20:61:56:41:32:ae: 99:ec:4d:e8:52:71:52:ac:f4:04:0e:89:76:ba:4c: 97:9d:93:1a:01:3e:5c:3d:b5:19:2d:ca:5f:07:0c: 65:59:38:3b:41:0e:e7:46:f4:d4:8c:9f:c9:a2:81: 0e:b9:6a:d5:8c:89:04:9b:37:45:0b:11:ba:74:59: 03:a4:64:41:6d:8f:09:e9:cd:9a:49:ba:8a:13:c2: 69:be:bf:35:24:2d:a3:aa:03:5f:d8:e2:ea:82:dc: e9:2e:75:b0:d7:37:7d:75:96:18:60:2c:2f:24:9e: 08:d2:a0:09:29:2e:c8:1b:57:ed:f3:45:7c:c0:ed: 44:b1:fe:b9:9a:e5:dc:75:e5:7b:f8:f9:47:a4:55: e3:83:44:08:c9:b5:84:b9:86:a5:40:17:6c:ea:2f: e7:5e:09:b0:ec:59:07:a9:09:4f:90:03:90:fc:23: 21:2a:31:de:e5:2f:a4:f7:d6:13:8b:a4:98:48:24: 6f:97:fa:c9:b8:98:a4:e7:4c:cd:bd:af:79:fa:15: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1A:D8:24:BE:90:94:B2:37:DF:22:3C:B6:B0:EC:F8:77:D3:5B:69 X509v3 Authority Key Identifier: keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f9:45:15:09:81:c7:0a:15:d0:8b:ad:e3:c2:0b:a9:9a:a4: 59:9a:84:d3:1f:88:3f:df:ed:3d:a1:c6:3e:35:ec:64:25:f0: 5d:99:5c:35:f1:4e:b0:2d:4f:3d:ca:fd:c7:a6:ad:fd:a0:5b: 95:56:b8:ec:14:47:2a:64:fc:f0:9d:78:b5:b4:e7:76:e3:ac: 6e:ec:bd:9d:20:1e:1d:2f:bd:f7:62:4f:5b:62:c9:85:f0:de: 24:46:89:dd:c4:db:07:a7:95:f3:4b:ef:1b:6c:ca:31:a7:09: 26:b5:0c:7b:33:0c:0e:6c:b7:c4:20:e0:85:21:f0:24:4a:a8: 82:5e:48:01:83:36:91:d4:2d:3a:da:bf:71:8f:a0:d0:ba:c9: b6:f9:43:99:e6:fb:3a:02:a4:77:8e:8b:41:45:4b:59:c2:49: 79:d6:d5:86:a3:a8:f8:2d:f5:7b:93:66:5f:2c:b9:11:97:03: e1:0c:08:de:7d:57:a3:d0:1e:45:b8:0d:4b:1f:d6:e4:27:1b: 3d:0f:43:52:64:08:49:38:a8:1a:47:4a:a0:98:e1:cd:54:7a: 0f:07:62:1f:8a:74:cf:48:30:e9:46:f6:c3:6b:61:8d:ce:3d: be:f3:3c:14:e4:e9:f2:7b:42:c2:03:52:53:d3:a9:49:33:34: b6:d9:55:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0bsdmlzW5qRU+gkUTHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm YTlkNmMwHhcNMjUxMjA2MTkwMjI4WhcNMjUxMjA3MTkwMjI4WjAzMTEwLwYDVQQD EyhhZDFhZDgyNGJlOTA5NGIyMzdkZjIyM2NiNmIwZWNmODc3ZDM1YjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G/dToxVRUqUZNSNdgQOrlPJc5yn +30aOAiRzZuo3GXtFii4nH+kzD6jCQmGP4qi/ldpb9UgYVZBMq6Z7E3oUnFSrPQE Dol2ukyXnZMaAT5cPbUZLcpfBwxlWTg7QQ7nRvTUjJ/JooEOuWrVjIkEmzdFCxG6 dFkDpGRBbY8J6c2aSbqKE8Jpvr81JC2jqgNf2OLqgtzpLnWw1zd9dZYYYCwvJJ4I 0qAJKS7IG1ft80V8wO1Esf65muXcdeV7+PlHpFXjg0QIybWEuYalQBds6i/nXgmw 7FkHqQlPkAOQ/CMhKjHe5S+k99YTi6SYSCRvl/rJuJik50zNva95+hWcNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0a2CS+kJSyN98iPLaw7Ph301tpMB8GA1UdIwQY MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5 LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPlFFQmB xwoV0Iut48ILqZqkWZqE0x+IP9/tPaHGPjXsZCXwXZlcNfFOsC1PPcr9x6at/aBb lVa47BRHKmT88J14tbTnduOsbuy9nSAeHS+992JPW2LJhfDeJEaJ3cTbB6eV80vv G2zKMacJJrUMezMMDmy3xCDghSHwJEqogl5IAYM2kdQtOtq/cY+g0LrJtvlDmeb7 OgKkd46LQUVLWcJJedbVhqOo+C31e5NmXyy5EZcD4QwI3n1Xo9AeRbgNSx/W5Ccb PQ9DUmQISTioGkdKoJjhzVR6DwdiH4p0z0gw6Ub2w2thjc49vvM8FOTp8ntCwgNS U9OpSTM0ttlVRA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:00 2025 by rpki-client