This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json) Hash identifier: CmNfZww41Ir0YDib4z4TLN3xUFtaEaheVmEQCtOG4C0= Subject key identifier: 45:5E:95:43:32:A1:A7:55:60:54:21:91:95:9A:8B:9E:B7:1C:D8:59 Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Certificate serial: 019B6D3414CA178C2592F13EC3E035151923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 03:01:28 +0000 Manifest this update: Tue 30 Dec 2025 03:01:28 +0000 Manifest next update: Wed 31 Dec 2025 03:01:28 +0000 Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=) 2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=) 3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: 3HJylYSLyu1OSlEcrlruTxMNvF2Oo4A6ACkOC+t9xLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:34:14:ca:17:8c:25:92:f1:3e:c3:e0:35:15:19:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Validity Not Before: Dec 30 03:01:28 2025 GMT Not After : Dec 31 03:01:28 2025 GMT Subject: CN=455e954332a1a75560542191959a8b9eb71cd859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:bb:95:89:52:b9:e1:0e:10:b9:2b:43:a3: 7a:50:a2:02:fb:e3:ba:7d:4b:9e:1e:c2:8b:1e:14: 8b:11:ae:b8:fb:2e:5c:e8:57:a3:06:1d:1e:c5:ff: d7:95:33:c3:8a:a3:73:47:50:91:6d:20:a6:9c:fb: 6e:05:30:66:14:ad:93:37:1d:47:5e:4e:91:f6:20: 50:bc:cf:5a:c9:f0:2f:4b:74:ef:88:55:04:d2:a4: 9f:03:e4:3a:e2:58:e0:72:17:00:3b:1e:7f:0f:90: 4f:ff:22:9d:c6:02:6a:c5:16:8e:f2:e8:dc:e7:c8: 23:16:3a:82:e1:8b:be:21:f9:70:f7:65:a5:21:04: 00:c7:2c:8d:27:a9:44:d3:c6:36:d3:79:59:41:ad: cd:81:80:bf:77:ce:22:c9:b2:72:f5:7e:07:cc:ad: 95:18:f7:e4:4d:32:23:ab:de:e9:51:ce:44:b6:cc: e3:93:e7:b1:27:a4:a3:b7:fe:e3:07:49:55:58:86: 57:82:c6:58:d6:2c:94:e5:d6:af:33:ee:fe:2b:04: 03:ab:a4:c2:b2:a7:53:18:6b:ec:56:90:b8:15:9e: 54:94:33:db:34:75:09:46:10:65:11:73:e8:00:6a: 60:6a:27:49:6f:17:f5:23:f1:26:fe:d0:b0:83:b6: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:95:43:32:A1:A7:55:60:54:21:91:95:9A:8B:9E:B7:1C:D8:59 X509v3 Authority Key Identifier: keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:df:4b:a8:df:fc:48:ad:47:2d:92:36:10:3b:58:41:88:f5: 1f:a7:e8:d5:a1:14:34:1e:0d:24:6d:af:6e:43:b3:34:b7:c5: 44:f2:81:ef:0e:4d:98:a4:7e:86:d6:1f:2e:96:18:89:59:f9: ca:0c:d5:29:00:76:a0:66:f9:10:49:a6:c6:c6:82:31:23:5e: 62:08:68:c8:32:25:fa:1f:82:08:a7:f0:0b:c0:de:10:21:ca: bd:47:75:fc:dd:4c:27:eb:a7:48:15:8e:a3:24:66:5d:cf:de: 15:16:e5:08:88:4c:5f:71:e9:c0:36:50:6c:04:f5:33:a2:e7: b2:8c:b3:dc:74:01:7a:57:ff:1a:cd:eb:e9:b7:6f:db:f8:1a: ac:cf:44:e6:50:40:0a:a4:b4:42:42:d5:36:4e:e5:49:ac:84: 27:3d:7d:39:bd:49:dc:7b:7d:c9:59:92:3c:85:e8:62:60:cd: a8:4c:0e:67:09:df:dc:0c:bf:9d:fe:ad:0a:3b:30:f9:48:8c: 1f:cf:44:ca:7e:19:db:92:8e:ec:e7:e1:cd:83:d3:fd:b3:10: 43:3c:e9:67:d5:37:06:d7:a2:33:02:47:3f:7c:d0:42:1c:67: 8a:c4:83:5b:6f:62:67:f2:ac:0a:20:14:0e:41:0c:7c:93:3d: 1e:6d:16:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttNBTKF4wlkvE+w+A1FRkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl YjMwOTkwHhcNMjUxMjMwMDMwMTI4WhcNMjUxMjMxMDMwMTI4WjAzMTEwLwYDVQQD Eyg0NTVlOTU0MzMyYTFhNzU1NjA1NDIxOTE5NTlhOGI5ZWI3MWNkODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZa7lYlSueEOELkrQ6N6UKIC++O6 fUueHsKLHhSLEa64+y5c6FejBh0exf/XlTPDiqNzR1CRbSCmnPtuBTBmFK2TNx1H Xk6R9iBQvM9ayfAvS3TviFUE0qSfA+Q64ljgchcAOx5/D5BP/yKdxgJqxRaO8ujc 58gjFjqC4Yu+Iflw92WlIQQAxyyNJ6lE08Y203lZQa3NgYC/d84iybJy9X4HzK2V GPfkTTIjq97pUc5Etszjk+exJ6Sjt/7jB0lVWIZXgsZY1iyU5davM+7+KwQDq6TC sqdTGGvsVpC4FZ5UlDPbNHUJRhBlEXPoAGpgaidJbxf1I/Em/tCwg7ZmxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVelUMyoadVYFQhkZWai563HNhZMB8GA1UdIwQY MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFd9LqN/8 SK1HLZI2EDtYQYj1H6fo1aEUNB4NJG2vbkOzNLfFRPKB7w5NmKR+htYfLpYYiVn5 ygzVKQB2oGb5EEmmxsaCMSNeYghoyDIl+h+CCKfwC8DeECHKvUd1/N1MJ+unSBWO oyRmXc/eFRblCIhMX3HpwDZQbAT1M6Lnsoyz3HQBelf/Gs3r6bdv2/garM9E5lBA CqS0QkLVNk7lSayEJz19Ob1J3Ht9yVmSPIXoYmDNqEwOZwnf3Ay/nf6tCjsw+UiM H89Eyn4Z25KO7OfhzYPT/bMQQzzpZ9U3BteiMwJHP3zQQhxnisSDW29iZ/KsCiAU DkEMfJM9Hm0WeA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:57:06 2025 by rpki-client