This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json) Hash identifier: diO6WJja+Op4kKhH9EbUJmBgNAFXoBKFk8pjZYkNL/E= Subject key identifier: 32:7A:A0:69:16:EF:1C:BE:07:39:86:EC:EC:6E:C4:8D:A2:7D:58:60 Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79 Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79 Certificate serial: 019AF12D0557751D809EE761D7AA420FA240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft Manifest number: 05BF Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: NWM5gOo2Nm+xxAWhCxP4+4e5bbxj8YbqgK41dh4j2CI=) 2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:05:57:75:1d:80:9e:e7:61:d7:aa:42:0f:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79 Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=327aa06916ef1cbe073986ecec6ec48da27d5860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:72:52:d3:10:c4:24:69:50:96:3f:50:48: 78:3a:63:46:8c:70:09:b9:74:af:bb:14:3a:a5:c0: 6d:12:5b:60:cf:ac:58:83:2c:f3:8f:5c:f2:f5:a4: 55:ad:1f:31:38:78:55:45:27:04:ae:72:16:6e:d7: 7d:9f:6e:7b:0e:92:8e:33:f8:6c:c2:a6:51:74:63: 55:f3:de:fb:87:f2:15:a3:8d:68:5b:eb:8c:4f:00: c9:e9:9c:09:67:5c:17:2c:7a:a4:d5:bb:36:26:8b: 87:ab:5f:94:ec:4a:a7:75:49:82:67:00:68:c6:09: d3:01:c1:ee:08:b1:08:e0:b7:50:e8:3e:9d:3c:26: bd:f1:7f:cf:ab:a7:60:d5:b9:ec:2d:1a:93:c7:31: 57:6e:15:57:1b:e4:a1:6e:44:1c:b5:26:28:3b:06: 6d:7b:55:3d:5a:7b:4e:01:a6:27:91:c2:43:95:1b: 07:6c:8a:86:12:b4:70:52:fa:88:4c:31:c5:fe:80: 2a:b6:5a:c6:a1:36:c5:e2:f2:c6:e6:53:13:b8:06: 55:cd:57:65:99:8c:cb:84:de:c4:2f:f1:8f:39:b5: 20:70:43:bc:74:d5:09:51:02:d6:3d:54:a3:29:af: 7b:8f:ce:05:25:7b:f7:25:ba:6d:f7:01:7b:37:d0: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7A:A0:69:16:EF:1C:BE:07:39:86:EC:EC:6E:C4:8D:A2:7D:58:60 X509v3 Authority Key Identifier: keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:98:07:42:ef:1c:97:0f:e6:ba:de:e6:af:e0:e3:2a:a7:a3: e5:13:51:ce:39:76:aa:83:8d:a9:18:76:e9:3d:04:76:7d:f5: af:8f:28:ba:08:8b:a9:dc:07:bf:c4:6a:15:e6:8f:12:c3:55: 0a:c8:19:db:58:57:c9:0f:7e:2f:53:55:f0:ee:d0:2c:e2:9e: 8f:ce:85:35:8d:b8:9e:02:58:9f:ff:f9:ff:57:11:0b:7d:4f: 1d:29:58:b9:e1:ea:95:60:40:8f:67:74:4b:e3:24:6d:4b:b2: 19:5a:0c:d0:d1:af:ca:92:3b:cf:e1:08:9e:2a:e4:87:aa:bb: 36:d4:d1:3a:ef:27:54:4a:c6:ab:48:94:02:c4:2b:06:f7:3f: 95:56:ac:cc:d0:c2:de:54:40:1a:2f:80:c0:f4:e0:01:86:26: ea:db:7a:b4:9e:09:52:11:65:39:62:db:f9:24:a7:39:6c:68: 35:a6:1a:56:bc:01:19:55:0a:c4:a1:6c:95:ec:a0:e8:99:11: f9:85:81:75:e3:45:5a:57:1c:c1:1f:fc:b3:48:72:e9:ef:7b: 8c:35:0c:a9:65:ad:92:5c:88:cb:b5:a6:98:67:05:3e:09:c8: 86:46:ef:ce:df:b6:f3:59:d1:e8:12:9f:c5:41:e5:7f:56:46: b6:5b:1b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQVXdR2Anudh16pCD6JAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmE3ZTBiMzRhNDc2MjIyY2IxZjViYzBjMDVlYzEzYmJi MTRhNzkwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EygzMjdhYTA2OTE2ZWYxY2JlMDczOTg2ZWNlYzZlYzQ4ZGEyN2Q1ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M5yUtMQxCRpUJY/UEh4OmNGjHAJ uXSvuxQ6pcBtEltgz6xYgyzzj1zy9aRVrR8xOHhVRScErnIWbtd9n257DpKOM/hs wqZRdGNV8977h/IVo41oW+uMTwDJ6ZwJZ1wXLHqk1bs2JouHq1+U7EqndUmCZwBo xgnTAcHuCLEI4LdQ6D6dPCa98X/Pq6dg1bnsLRqTxzFXbhVXG+ShbkQctSYoOwZt e1U9WntOAaYnkcJDlRsHbIqGErRwUvqITDHF/oAqtlrGoTbF4vLG5lMTuAZVzVdl mYzLhN7EL/GPObUgcEO8dNUJUQLWPVSjKa97j84FJXv3Jbpt9wF7N9AL3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ6oGkW7xy+BzmG7OxuxI2ifVhgMB8GA1UdIwQY MBaAFIr6fgs0pHYiLLH1vAwF7BO7sUp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzct NmJhN2E5NDdhN2Y3LzEvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzctNmJhN2E5NDdhN2Y3 LzEvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJgHQu8c lw/mut7mr+DjKqej5RNRzjl2qoONqRh26T0Edn31r48ougiLqdwHv8RqFeaPEsNV CsgZ21hXyQ9+L1NV8O7QLOKej86FNY24ngJYn//5/1cRC31PHSlYueHqlWBAj2d0 S+MkbUuyGVoM0NGvypI7z+EInirkh6q7NtTROu8nVErGq0iUAsQrBvc/lVaszNDC 3lRAGi+AwPTgAYYm6tt6tJ4JUhFlOWLb+SSnOWxoNaYaVrwBGVUKxKFsleyg6JkR +YWBdeNFWlccwR/8s0hy6e97jDUMqWWtklyIy7WmmGcFPgnIhkbvzt+281nR6BKf xUHlf1ZGtlsbZA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:07 2025 by rpki-client