This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json) Hash identifier: SjypAVtny4xmA6QeBCzLDZuucsHQc1OpoGfJxID4/Do= Subject key identifier: 67:63:62:54:2D:B3:68:93:2D:D2:F7:2B:C5:89:B1:0D:E1:84:61:28 Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb Certificate serial: 019AF1D18A50711CB47A51B7C10A5FEC73E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft Manifest number: 1037 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=) 2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: Umu4L751E/BMDzl1I5yrkwFE5o4AmYF9LSgeCtZjmmo=) 3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=) 4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8a:50:71:1c:b4:7a:51:b7:c1:0a:5f:ec:73:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215a409d27b9a69346324004694da11beae02dbb Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=676362542db368932dd2f72bc589b10de1846128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:3b:82:40:b2:66:e0:3c:52:7d:92:aa:0a: ad:5e:ba:ed:ef:ba:05:70:3d:81:1b:9f:89:e0:64: 76:2a:0f:c6:15:f8:d4:4a:8e:10:ad:a8:aa:7d:5f: 77:4e:a3:7b:39:96:f9:3e:3d:20:ab:af:17:a8:ec: 97:72:ed:92:d8:71:c1:b9:33:d3:73:6d:e5:d6:7b: 88:82:aa:19:ef:62:5f:01:58:8c:cd:49:0f:e0:8f: 8c:6c:64:a7:82:9d:8f:59:90:06:ff:44:86:01:40: 70:d5:46:2f:0b:9d:83:b8:46:51:70:82:39:45:66: 88:b7:b5:a3:8a:e9:37:de:cf:95:8d:17:93:9e:bc: d9:cc:79:3b:3c:0e:d0:f3:d9:b7:b1:db:e2:c0:c3: a7:63:68:60:c0:ec:5c:a8:0a:47:e2:75:3e:f3:0a: 22:77:db:3f:5d:83:51:7a:25:f1:38:46:21:8c:04: 54:e9:16:48:d1:a6:e1:07:ba:ee:33:c0:74:36:3a: 9a:8f:8b:f1:38:4d:1f:3a:20:b1:e3:12:4f:91:0e: 0c:07:2c:c7:69:5c:22:05:2f:71:b6:4c:77:47:61: bf:13:87:b5:78:40:1a:c4:fe:b7:78:92:68:68:bf: 03:ef:16:5c:26:b1:fa:5e:65:c0:5d:e1:c4:f8:82: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:63:62:54:2D:B3:68:93:2D:D2:F7:2B:C5:89:B1:0D:E1:84:61:28 X509v3 Authority Key Identifier: keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f5:c2:a6:16:0e:f6:b5:f9:75:1e:f3:b9:01:b7:e6:96:04: d7:d1:85:3a:05:9b:5e:51:76:d9:e5:69:16:c0:13:c4:e8:60: 5f:f6:bb:00:8f:ba:4e:99:1a:19:ca:bd:83:ff:10:64:1f:44: 37:66:a5:fe:93:f6:a5:94:dc:de:0e:fe:ac:08:b4:55:d4:bf: 02:cc:04:91:b4:63:73:95:94:7c:64:ba:63:c2:f8:ba:12:13: 48:26:43:1f:20:4a:ed:55:e1:93:4b:ee:29:06:6f:3d:12:4b: 65:b2:2c:20:28:26:00:5e:63:68:81:ce:05:e2:cf:e7:7d:23: 33:f2:99:dc:69:04:cd:12:e0:c4:31:0f:bb:3d:8a:3a:31:4e: a7:5c:3d:bf:35:f6:e0:3b:3a:be:0c:41:49:a5:d0:33:46:dc: 2f:a7:60:81:bc:65:a5:e9:34:33:5a:35:ac:5f:85:c7:c8:55: 4f:9f:84:a1:22:b6:1e:54:8a:60:94:f7:3a:46:68:54:46:42: 10:5d:3c:a5:64:03:3e:53:7a:da:4c:09:08:ff:50:b0:0b:ed: 72:7f:a2:96:33:be:7e:fc:0a:9c:f7:6e:f3:1e:6a:a2:21:92: fb:33:a9:f1:0e:dc:ef:31:a8:f1:06:2b:4e:57:44:f6:c7:b0: 17:45:e5:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YpQcRy0elG3wQpf7HPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl MDJkYmIwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD Eyg2NzYzNjI1NDJkYjM2ODkzMmRkMmY3MmJjNTg5YjEwZGUxODQ2MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7M7gkCyZuA8Un2SqgqtXrrt77oF cD2BG5+J4GR2Kg/GFfjUSo4QraiqfV93TqN7OZb5Pj0gq68XqOyXcu2S2HHBuTPT c23l1nuIgqoZ72JfAViMzUkP4I+MbGSngp2PWZAG/0SGAUBw1UYvC52DuEZRcII5 RWaIt7Wjiuk33s+VjReTnrzZzHk7PA7Q89m3sdviwMOnY2hgwOxcqApH4nU+8woi d9s/XYNReiXxOEYhjARU6RZI0abhB7ruM8B0Njqaj4vxOE0fOiCx4xJPkQ4MByzH aVwiBS9xtkx3R2G/E4e1eEAaxP63eJJoaL8D7xZcJrH6XmXAXeHE+IKa/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdjYlQts2iTLdL3K8WJsQ3hhGEoMB8GA1UdIwQY MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut OThkMmZlZTBmODdhLzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPXCphYO 9rX5dR7zuQG35pYE19GFOgWbXlF22eVpFsATxOhgX/a7AI+6TpkaGcq9g/8QZB9E N2al/pP2pZTc3g7+rAi0VdS/AswEkbRjc5WUfGS6Y8L4uhITSCZDHyBK7VXhk0vu KQZvPRJLZbIsICgmAF5jaIHOBeLP530jM/KZ3GkEzRLgxDEPuz2KOjFOp1w9vzX2 4Ds6vgxBSaXQM0bcL6dggbxlpek0M1o1rF+Fx8hVT5+EoSK2HlSKYJT3OkZoVEZC EF08pWQDPlN62kwJCP9QsAvtcn+iljO+fvwKnPdu8x5qoiGS+zOp8Q7c7zGo8QYr TldE9sewF0XlBw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:24 2025 by rpki-client