This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json) Hash identifier: i/SbycwnSc+2QnJQimEq9qVwXJH/X7/WNAYETI9p5HM= Subject key identifier: 35:11:30:51:93:70:07:D3:FB:F4:71:06:E1:BD:3D:F0:05:89:8D:57 Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2 Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2 Certificate serial: 019AF5E658209C8687754AF35F827C80EF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft Manifest number: 0721 Signing time: Sat 06 Dec 2025 23:01:44 +0000 Manifest this update: Sat 06 Dec 2025 23:01:44 +0000 Manifest next update: Sun 07 Dec 2025 23:01:44 +0000 Files and hashes: 1: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: HeTiIw2TkDcb4grPTjACMqXsKv9O7m2WLNVR7g9r2HU=) 2: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (hash: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:58:20:9c:86:87:75:4a:f3:5f:82:7c:80:ef:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2 Validity Not Before: Dec 6 23:01:44 2025 GMT Not After : Dec 7 23:01:44 2025 GMT Subject: CN=35113051937007d3fbf47106e1bd3df005898d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:fe:60:9a:47:d2:a1:94:02:f5:aa:b3:ce: ab:c6:65:64:24:f6:2e:f1:07:4a:84:3a:fe:d9:3e: 81:fc:01:34:fb:92:36:59:c9:35:bd:83:f3:8a:87: 50:b0:10:97:be:2c:4c:58:6f:ec:ff:f5:24:6b:78: b2:7b:3b:48:e9:f8:61:f3:c2:14:84:15:5d:98:88: f4:f2:bb:8f:4a:23:49:1d:db:1a:93:6c:42:6a:00: 73:bf:e8:25:0b:96:1d:8e:1b:bd:30:3c:86:0f:99: 11:c4:58:02:81:d6:2c:a8:95:77:07:33:ba:41:aa: f1:f4:a5:7d:74:ef:5b:3e:64:df:4c:aa:e9:db:1c: 56:66:f6:15:19:e5:98:d4:06:f8:5e:26:b1:bd:37: df:02:fb:67:ae:4a:56:cc:64:b4:13:85:dc:f9:34: 10:49:f3:b6:ff:ae:77:63:9f:ff:17:9e:07:ea:29: 36:9e:b0:41:ae:a8:47:97:2f:e0:b6:c0:60:5c:8f: 9c:ad:5b:00:80:d4:eb:86:f4:b8:3c:d4:39:4a:2a: d0:8a:88:f6:db:11:17:23:20:cc:77:42:ef:cc:38: 52:90:f1:4b:cf:ac:72:e0:4c:21:17:00:36:23:ae: 81:9a:38:f1:ef:f9:6c:d8:02:d6:ab:6b:13:df:64: aa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:30:51:93:70:07:D3:FB:F4:71:06:E1:BD:3D:F0:05:89:8D:57 X509v3 Authority Key Identifier: keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bc:3f:82:c4:2f:9b:62:3d:43:a3:7e:27:9b:6f:c9:c6:af: dd:77:2e:9f:f6:a3:c8:9b:c5:4c:44:4e:c6:9d:3a:1d:b2:d6: 25:1c:1f:45:09:a0:80:79:ff:4e:c1:8f:79:ef:dc:ce:66:fd: 66:be:db:a6:9e:0d:4a:e2:df:4a:c3:9b:7e:58:03:0e:9d:28: 46:3b:c2:f5:d1:cb:b5:cb:a0:6e:18:3c:53:39:ae:15:b6:ad: dd:5f:e2:f0:b4:69:29:d6:c7:59:bf:19:5f:b4:05:69:62:60: cc:e1:72:13:d3:b7:07:e1:29:3a:74:66:53:a0:16:ff:d0:77: fd:7e:f3:06:24:75:10:07:a0:66:7d:60:87:c4:0a:bb:e8:ca: eb:de:26:d5:3a:d0:a5:28:ca:e0:6c:0b:35:70:ab:db:7c:29: 53:9f:f5:2f:af:89:dc:b6:0b:02:4b:43:d8:64:f5:df:22:e6: 57:47:a4:ba:bc:6a:e5:32:92:d1:68:40:e0:d9:7d:56:6e:8b: 87:bb:a9:46:5b:1c:74:99:12:8f:5a:1b:e3:14:2c:5c:60:eb: 15:0f:2b:dc:dd:1b:d6:e6:41:70:6d:fa:31:a4:8b:15:af:45: 09:1d:e6:23:ca:a4:74:56:95:6f:fb:ec:5b:0e:11:bb:bd:33: 14:b0:12:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15lggnIaHdUrzX4J8gO+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNWM1MmVmOTdlM2Q1NTc5OGVmZTgzNDc0ZDIwMzAwODJi OWIzYTIwHhcNMjUxMjA2MjMwMTQ0WhcNMjUxMjA3MjMwMTQ0WjAzMTEwLwYDVQQD EygzNTExMzA1MTkzNzAwN2QzZmJmNDcxMDZlMWJkM2RmMDA1ODk4ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4b+YJpH0qGUAvWqs86rxmVkJPYu 8QdKhDr+2T6B/AE0+5I2Wck1vYPziodQsBCXvixMWG/s//Uka3iyeztI6fhh88IU hBVdmIj08ruPSiNJHdsak2xCagBzv+glC5Ydjhu9MDyGD5kRxFgCgdYsqJV3BzO6 Qarx9KV9dO9bPmTfTKrp2xxWZvYVGeWY1Ab4XiaxvTffAvtnrkpWzGS0E4Xc+TQQ SfO2/653Y5//F54H6ik2nrBBrqhHly/gtsBgXI+crVsAgNTrhvS4PNQ5SirQioj2 2xEXIyDMd0LvzDhSkPFLz6xy4EwhFwA2I66Bmjjx7/ls2ALWq2sT32Sq1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDURMFGTcAfT+/RxBuG9PfAFiY1XMB8GA1UdIwQY MBaAFCFcUu+X49VXmO/oNHTSAwCCubOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTct N2FlZWUzYWQ3NDM2LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTctN2FlZWUzYWQ3NDM2 LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbw/gsQv m2I9Q6N+J5tvycav3Xcun/ajyJvFTEROxp06HbLWJRwfRQmggHn/TsGPee/czmb9 Zr7bpp4NSuLfSsObflgDDp0oRjvC9dHLtcugbhg8UzmuFbat3V/i8LRpKdbHWb8Z X7QFaWJgzOFyE9O3B+EpOnRmU6AW/9B3/X7zBiR1EAegZn1gh8QKu+jK694m1TrQ pSjK4GwLNXCr23wpU5/1L6+J3LYLAktD2GT13yLmV0ekurxq5TKS0WhA4Nl9Vm6L h7upRlscdJkSj1ob4xQsXGDrFQ8r3N0b1uZBcG36MaSLFa9FCR3mI8qkdFaVb/vs Ww4Ru70zFLASLg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:08 2025 by rpki-client