This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json) Hash identifier: KNQZF7tNUtB/G8LQf1GbtfMJI8AbP5/fOSsZ1eeGQHM= Subject key identifier: 0A:EE:C2:88:83:29:DB:E8:B3:3A:A1:2A:3D:02:13:76:DF:23:D7:FF Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Certificate serial: 019B3CEC2EBC9EB3C5893FC896F28E1D550F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:09 +0000 Manifest this update: Sat 20 Dec 2025 18:01:09 +0000 Manifest next update: Sun 21 Dec 2025 18:01:09 +0000 Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=) 2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=) 3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: IiXWpDD7nnMuFMNLWXr9ESGr1KEDPrgC54F2HFBcvNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:2e:bc:9e:b3:c5:89:3f:c8:96:f2:8e:1d:55:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Validity Not Before: Dec 20 18:01:09 2025 GMT Not After : Dec 21 18:01:09 2025 GMT Subject: CN=0aeec2888329dbe8b33aa12a3d021376df23d7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:f5:3e:63:b7:1b:31:98:a9:29:0d:9f:1d: a2:5d:2d:a6:3b:d5:03:a7:03:bd:6e:3d:3a:b5:ed: 19:58:8d:7e:11:14:2e:47:fa:49:6a:86:87:d4:ce: 05:52:dc:60:6f:54:3e:9e:27:02:ce:03:2b:1d:01: 00:d3:ae:18:b7:4f:b4:7d:17:b4:f2:e0:21:5b:4c: 4a:1a:2e:54:95:ae:69:c8:a8:5f:55:eb:63:aa:25: ba:4e:bf:67:8e:3a:8c:94:6c:c1:8c:04:4c:14:b3: 56:24:11:6a:c6:7b:db:c0:00:26:aa:af:fa:3a:ee: bc:be:ad:09:73:80:89:d1:79:9e:f5:76:88:69:fd: 74:86:5a:3a:52:57:e8:b1:0e:77:83:d4:95:e2:47: 9a:c1:e8:4a:49:54:c5:fd:ad:70:53:9a:9f:65:ed: e6:3b:36:4a:ba:89:34:55:25:2f:4d:aa:28:4f:93: 05:21:95:24:0a:85:6e:37:ae:0c:59:ba:14:56:b2: 1b:96:20:c9:00:c1:cb:e5:ab:f2:47:21:fa:ac:2a: 53:85:7e:7e:99:f3:e1:0f:4c:fb:d7:35:6a:f0:1e: fb:83:10:04:52:a1:f0:92:8a:6f:24:81:08:93:b8: 53:8e:52:9c:28:22:0c:63:9d:3a:fd:36:5e:e4:06: d4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EE:C2:88:83:29:DB:E8:B3:3A:A1:2A:3D:02:13:76:DF:23:D7:FF X509v3 Authority Key Identifier: keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:27:1d:a7:24:21:8d:c8:ca:c4:4b:86:08:89:76:ea:d4:26: 17:21:68:bd:af:31:f6:ab:bd:03:81:6e:57:c4:be:cf:87:a0: ac:5d:0d:14:5e:59:52:a3:78:44:7a:ae:ab:c1:f4:20:5b:c3: 57:8c:8d:58:39:7a:5f:d7:ef:6d:36:09:f2:d7:5b:2d:6b:2a: 81:23:53:71:c7:f7:61:5b:1d:fe:82:84:73:64:33:e1:fd:18: 34:55:5b:9b:aa:8e:a6:52:42:25:40:c5:ee:2d:3e:75:ea:f8: e0:aa:e1:76:a6:c4:05:eb:aa:09:e3:a0:db:be:25:6a:d9:e0: 34:7a:59:c9:6f:2c:ca:7b:68:62:a5:3e:e9:0d:a9:05:61:47: d0:70:fc:b2:23:56:0b:79:aa:42:12:e7:89:4d:9a:87:28:cb: 28:c1:d0:c5:ff:7a:83:3c:1d:a6:0f:17:56:c6:a5:f8:e3:a8: 47:86:88:7a:1c:32:2e:2a:54:bc:db:a8:05:3e:a5:d2:ab:75: 52:c5:8e:c7:64:05:d6:64:82:70:2c:0d:71:e1:6b:d6:b6:c5: 6a:ec:5c:94:95:1d:3d:f8:25:e2:e7:ab:39:a7:8d:57:b1:1d: 85:9b:bb:bc:be:9d:d6:5c:c9:d6:48:43:3e:33:c5:de:a9:b3: 93:99:ef:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87C68nrPFiT/IlvKOHVUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl YjMwOTkwHhcNMjUxMjIwMTgwMTA5WhcNMjUxMjIxMTgwMTA5WjAzMTEwLwYDVQQD EygwYWVlYzI4ODgzMjlkYmU4YjMzYWExMmEzZDAyMTM3NmRmMjNkN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MH1PmO3GzGYqSkNnx2iXS2mO9UD pwO9bj06te0ZWI1+ERQuR/pJaoaH1M4FUtxgb1Q+nicCzgMrHQEA064Yt0+0fRe0 8uAhW0xKGi5Ula5pyKhfVetjqiW6Tr9njjqMlGzBjARMFLNWJBFqxnvbwAAmqq/6 Ou68vq0Jc4CJ0Xme9XaIaf10hlo6UlfosQ53g9SV4keawehKSVTF/a1wU5qfZe3m OzZKuok0VSUvTaooT5MFIZUkCoVuN64MWboUVrIbliDJAMHL5avyRyH6rCpThX5+ mfPhD0z71zVq8B77gxAEUqHwkopvJIEIk7hTjlKcKCIMY506/TZe5AbUhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAruwoiDKdvoszqhKj0CE3bfI9f/MB8GA1UdIwQY MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCcdpyQh jcjKxEuGCIl26tQmFyFova8x9qu9A4FuV8S+z4egrF0NFF5ZUqN4RHquq8H0IFvD V4yNWDl6X9fvbTYJ8tdbLWsqgSNTccf3YVsd/oKEc2Qz4f0YNFVbm6qOplJCJUDF 7i0+der44KrhdqbEBeuqCeOg274latngNHpZyW8syntoYqU+6Q2pBWFH0HD8siNW C3mqQhLniU2ahyjLKMHQxf96gzwdpg8XVsal+OOoR4aIehwyLipUvNuoBT6l0qt1 UsWOx2QF1mSCcCwNceFr1rbFauxclJUdPfgl4uerOaeNV7EdhZu7vL6d1lzJ1khD PjPF3qmzk5nvTw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:24 2025 by rpki-client