This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json) Hash identifier: 9klYKN5JGZivAm6DG9fjX7qDpWHlRv2GC2AIF3pUWjA= Subject key identifier: 05:14:43:B8:E3:35:1C:F7:DF:75:80:2E:7A:2D:A9:3D:7D:93:C1:E7 Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37 Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337 Certificate serial: 019B3A915080FBF574BE5C24ACDE5162DBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft Manifest number: 1545 Signing time: Sat 20 Dec 2025 07:02:40 +0000 Manifest this update: Sat 20 Dec 2025 07:02:40 +0000 Manifest next update: Sun 21 Dec 2025 07:02:40 +0000 Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=) 2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: oYeKBce/+lwzFl/kcutQJbJCrwLAlCxZ7A7S8F3NtcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:50:80:fb:f5:74:be:5c:24:ac:de:51:62:db:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afbc64d593fc073c693143566310295de0a8337 Validity Not Before: Dec 20 07:02:40 2025 GMT Not After : Dec 21 07:02:40 2025 GMT Subject: CN=051443b8e3351cf7df75802e7a2da93d7d93c1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:64:6b:c0:c5:db:00:9d:8f:db:7f:9c:e4: b5:40:31:a8:01:07:e7:89:14:4e:03:f9:7f:22:79: 23:0a:3b:d0:31:ed:39:f4:cc:e3:c9:9f:6f:40:ad: 2b:f6:49:c6:5c:6b:16:e0:da:84:72:be:d7:6f:1f: 14:96:d4:d1:dc:74:c4:c0:8a:b9:6a:47:e0:10:06: 79:21:58:44:af:53:2e:96:f1:63:24:1f:27:9c:62: 37:98:15:90:8d:55:c9:f2:1f:57:ca:ea:1b:a1:6e: 8d:0b:f3:56:c0:97:38:2c:92:de:25:50:eb:92:bc: d8:11:2f:ee:b7:b8:a5:ff:86:9b:d3:6b:28:41:ce: f5:ee:11:59:70:94:2c:c4:a0:79:62:e9:cd:e0:88: 1e:1a:dd:93:c3:95:2c:37:fd:4c:d5:73:2e:81:07: ec:5a:8a:1b:2a:76:38:37:7f:4f:49:88:d7:f8:f5: 8d:d5:22:1d:4f:26:47:02:91:50:78:2d:3f:2a:3c: 71:f5:af:06:97:1b:24:48:ad:d8:9e:74:64:8b:8d: cc:fb:cd:b4:de:bc:f0:e8:11:3f:da:b1:6e:33:ed: 7a:59:69:91:c6:7c:f6:41:68:c2:b6:05:c0:7f:7d: a1:40:25:05:de:77:56:50:b2:35:5f:50:52:63:4c: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:43:B8:E3:35:1C:F7:DF:75:80:2E:7A:2D:A9:3D:7D:93:C1:E7 X509v3 Authority Key Identifier: keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fb:41:1b:fe:b5:83:27:28:55:e7:61:82:cc:c7:48:60:44: ed:ec:ab:fb:3c:96:fd:5f:b7:78:0e:58:14:cc:2b:13:1b:1d: 25:a3:e3:e8:9c:89:9f:32:1c:21:a0:f5:dc:8b:fb:8b:59:d5: 43:5f:10:37:5e:e7:d6:7c:99:cb:fa:cb:27:9e:5d:3e:c0:7a: 01:4d:e4:2c:e2:18:75:1b:09:1f:d2:4c:cc:98:9e:71:ec:38: 8f:c3:55:e1:a5:99:78:15:bf:ad:5e:20:85:23:34:7f:42:e6: 4e:e0:73:2f:3a:62:c5:66:74:c5:65:fe:b1:72:b1:cf:9d:42: a3:96:6b:d6:f1:54:df:65:6d:7a:20:51:33:c6:f5:2b:7f:1a: d2:c5:b8:89:69:8f:7a:f7:3c:af:28:30:e2:cd:6a:b8:e4:db: b7:5a:47:ed:9d:69:f6:0c:60:2a:9c:92:1a:77:a2:4c:a8:88: d4:57:c0:9c:35:5c:64:05:0e:3d:ec:d1:64:f2:f7:fe:2a:cc: cb:14:1c:5e:dc:14:ed:0c:03:bf:7d:66:56:51:89:78:e5:9c: d0:eb:05:89:27:36:b2:07:8c:80:99:b8:ed:da:41:dd:a3:79: 7a:55:60:0d:9d:dc:31:a0:db:a8:8d:a4:08:db:fb:a0:54:10: a0:33:0b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kVCA+/V0vlwkrN5RYtvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmJjNjRkNTkzZmMwNzNjNjkzMTQzNTY2MzEwMjk1ZGUw YTgzMzcwHhcNMjUxMjIwMDcwMjQwWhcNMjUxMjIxMDcwMjQwWjAzMTEwLwYDVQQD EygwNTE0NDNiOGUzMzUxY2Y3ZGY3NTgwMmU3YTJkYTkzZDdkOTNjMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Fka8DF2wCdj9t/nOS1QDGoAQfn iRROA/l/InkjCjvQMe059MzjyZ9vQK0r9knGXGsW4NqEcr7Xbx8UltTR3HTEwIq5 akfgEAZ5IVhEr1MulvFjJB8nnGI3mBWQjVXJ8h9XyuoboW6NC/NWwJc4LJLeJVDr krzYES/ut7il/4ab02soQc717hFZcJQsxKB5YunN4IgeGt2Tw5UsN/1M1XMugQfs WoobKnY4N39PSYjX+PWN1SIdTyZHApFQeC0/Kjxx9a8GlxskSK3YnnRki43M+820 3rzw6BE/2rFuM+16WWmRxnz2QWjCtgXAf32hQCUF3ndWULI1X1BSY0yWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUUQ7jjNRz333WALnotqT19k8HnMB8GA1UdIwQY MBaAFIr7xk1ZP8BzxpMUNWYxApXeCoM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQt MTA5N2RhOWRkZjI3LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NmJlY2UtNTAyZi00ZjBkLWI3MjQtMTA5N2RhOWRkZjI3 LzEvaXZ2R1RWa193SFBHa3hRMVpqRUNsZDRLZ3pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZftBG/61 gycoVedhgszHSGBE7eyr+zyW/V+3eA5YFMwrExsdJaPj6JyJnzIcIaD13Iv7i1nV Q18QN17n1nyZy/rLJ55dPsB6AU3kLOIYdRsJH9JMzJiecew4j8NV4aWZeBW/rV4g hSM0f0LmTuBzLzpixWZ0xWX+sXKxz51Co5Zr1vFU32VteiBRM8b1K38a0sW4iWmP evc8rygw4s1quOTbt1pH7Z1p9gxgKpySGneiTKiI1FfAnDVcZAUOPezRZPL3/irM yxQcXtwU7QwDv31mVlGJeOWc0OsFiSc2sgeMgJm47dpB3aN5elVgDZ3cMaDbqI2k CNv7oFQQoDMLkw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:44 2025 by rpki-client