This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft File: IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json) Hash identifier: cdaKbGarTadKm7wVKT0J4OUiO7kLC/vYXsq0MDeX36E= Subject key identifier: 77:D8:79:A6:29:51:7F:D6:72:4F:04:26:F9:B5:51:4C:48:D5:57:36 Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01 Certificate issuer: /CN=22f553fef5c1859d952300ad3efb511e58afda01 Certificate serial: 019AF1D1AAF608B5DEB26F899E364E0CDD3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: KUSMMFpc3B58Ro+mh0frGcCbqpGWkUOZ3D5uY5/w4d4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:aa:f6:08:b5:de:b2:6f:89:9e:36:4e:0c:dd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=77d879a629517fd6724f0426f9b5514c48d55736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:ee:8f:29:8e:70:46:04:1b:18:11:97:22: 35:ed:d9:7f:78:81:79:3a:bb:94:5c:6e:fc:51:7a: 86:ff:60:45:dd:4a:4d:32:c3:ec:19:cd:83:36:b0: 31:18:e9:2a:e6:34:e8:95:91:f5:81:ee:94:e8:2e: 5c:b5:ac:c7:11:44:68:4e:a6:02:e6:cc:ef:d0:e1: 5c:a0:90:0b:37:38:5d:51:c0:1a:60:41:7a:04:7c: 6f:02:a5:fd:47:be:f7:1f:10:6e:64:27:bb:22:d7: 62:fd:13:ac:c4:20:1b:f1:0d:19:16:35:84:04:c7: 4d:1e:8e:29:fb:81:00:ce:90:4b:f7:7e:c4:c3:59: 3e:f2:4e:71:27:5f:ec:5f:eb:9b:f5:f0:26:27:6a: 97:66:b5:31:f0:a8:2f:a9:16:a7:dd:d3:1f:15:02: b4:2b:37:92:50:32:86:10:b8:a7:54:c9:07:22:a1: 7e:fd:5a:db:10:28:2f:ef:7e:eb:12:39:c5:4a:02: 96:67:b3:ab:b4:12:07:1c:b3:a0:99:ee:8b:97:d8: 0f:f3:60:84:d1:82:e9:6a:a9:eb:86:15:29:4c:dd: 01:83:da:4c:40:59:23:e8:cc:74:37:c4:ed:70:bf: 90:e0:e5:30:a1:49:cc:2f:9c:60:f9:d9:b7:49:82: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:79:A6:29:51:7F:D6:72:4F:04:26:F9:B5:51:4C:48:D5:57:36 X509v3 Authority Key Identifier: keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9d:55:eb:77:4d:19:18:3d:9d:0b:6c:95:00:de:ef:df:ab: a7:6a:4b:bc:8b:23:d3:7a:9b:84:1d:ce:c4:e6:c4:16:ec:5d: cd:e3:ad:56:1f:87:66:5e:d2:85:7e:72:8e:db:61:6e:08:ba: 1f:fa:5b:c5:4b:5d:e4:9e:9c:1b:88:2d:0c:e7:10:a1:03:f9: f0:87:d8:9e:ca:fa:95:d6:97:2f:65:26:23:5d:57:65:83:72: ac:ad:26:0b:86:73:50:f4:8c:3f:84:42:10:a4:71:46:5d:b1: e4:8c:25:dc:8a:53:0a:e4:56:9b:1e:86:58:57:8c:14:d3:34: 03:72:59:b8:fc:c4:92:05:d7:99:c0:24:a8:55:25:39:66:76: 5f:c0:6b:ce:35:ad:5e:53:5a:a9:65:5a:b4:76:1b:4a:3c:9b: 2b:a5:1b:1b:42:9e:21:89:28:1a:1f:de:ce:d9:2d:7a:a5:b6: 77:64:13:ae:49:b0:5e:00:0d:23:a6:f7:9d:41:59:64:ae:e6: 69:88:b3:c9:3f:44:66:65:10:22:ec:21:49:a3:81:aa:cf:df: 83:51:48:95:0f:dc:54:fd:2f:e5:e4:07:d2:a0:4f:4a:1b:0d: ba:52:6b:45:26:87:99:5d:c3:dd:f4:ad:3a:a1:74:4e:a1:ff: a5:b0:7f:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ar2CLXesm+JnjZODN07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjU1M2ZlZjVjMTg1OWQ5NTIzMDBhZDNlZmI1MTFlNThh ZmRhMDEwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD Eyg3N2Q4NzlhNjI5NTE3ZmQ2NzI0ZjA0MjZmOWI1NTE0YzQ4ZDU1NzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk3ujymOcEYEGxgRlyI17dl/eIF5 OruUXG78UXqG/2BF3UpNMsPsGc2DNrAxGOkq5jTolZH1ge6U6C5ctazHEURoTqYC 5szv0OFcoJALNzhdUcAaYEF6BHxvAqX9R773HxBuZCe7Itdi/ROsxCAb8Q0ZFjWE BMdNHo4p+4EAzpBL937Ew1k+8k5xJ1/sX+ub9fAmJ2qXZrUx8KgvqRan3dMfFQK0 KzeSUDKGELinVMkHIqF+/VrbECgv737rEjnFSgKWZ7OrtBIHHLOgme6Ll9gP82CE 0YLpaqnrhhUpTN0Bg9pMQFkj6Mx0N8TtcL+Q4OUwoUnML5xg+dm3SYKntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfYeaYpUX/Wck8EJvm1UUxI1Vc2MB8GA1UdIwQY MBaAFCL1U/71wYWdlSMArT77UR5Yr9oBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTAyYmEtZDg0My00YmZkLTk4OWQt NjZkOWU4NjFiNDc4LzEvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jNTAyYmEtZDg0My00YmZkLTk4OWQtNjZkOWU4NjFiNDc4 LzEvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp1V63dN GRg9nQtslQDe79+rp2pLvIsj03qbhB3OxObEFuxdzeOtVh+HZl7ShX5yjtthbgi6 H/pbxUtd5J6cG4gtDOcQoQP58IfYnsr6ldaXL2UmI11XZYNyrK0mC4ZzUPSMP4RC EKRxRl2x5Iwl3IpTCuRWmx6GWFeMFNM0A3JZuPzEkgXXmcAkqFUlOWZ2X8BrzjWt XlNaqWVatHYbSjybK6UbG0KeIYkoGh/eztkteqW2d2QTrkmwXgANI6b3nUFZZK7m aYizyT9EZmUQIuwhSaOBqs/fg1FIlQ/cVP0v5eQH0qBPShsNulJrRSaHmV3D3fSt OqF0TqH/pbB/jA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:01 2025 by rpki-client