This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json) Hash identifier: om2JpuPvP3qGrk+4iVjte0J8Q59+jnyVIflkGbDWO18= Subject key identifier: 91:70:A9:4E:8D:0E:AB:90:A4:32:F1:30:49:E8:5B:8C:6A:F3:59:40 Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb Certificate serial: 019B42EE22FED788FBBB7B93BE269C387519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft Manifest number: 1061 Signing time: Sun 21 Dec 2025 22:01:01 +0000 Manifest this update: Sun 21 Dec 2025 22:01:01 +0000 Manifest next update: Mon 22 Dec 2025 22:01:01 +0000 Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=) 2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: pqRi52vNtCVS1gxsaCHyFb4kU09En+zmqd9AeZhAgIE=) 3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=) 4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:22:fe:d7:88:fb:bb:7b:93:be:26:9c:38:75:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215a409d27b9a69346324004694da11beae02dbb Validity Not Before: Dec 21 22:01:01 2025 GMT Not After : Dec 22 22:01:01 2025 GMT Subject: CN=9170a94e8d0eab90a432f13049e85b8c6af35940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:2c:20:55:0d:b3:c7:4e:ea:20:f9:2d:45: 6a:9a:87:f0:2c:f0:64:50:70:60:12:b2:5e:d2:28: 1a:1b:e3:cc:7c:ab:88:15:8c:91:d3:bf:92:0d:96: 07:fb:85:46:06:92:e7:64:49:01:0d:4a:e7:57:8d: 1d:ea:46:f6:84:e8:31:75:1b:ae:e5:1b:a8:fc:ed: 7d:93:31:f0:cf:09:40:cc:7c:33:89:a5:35:3e:ee: fe:e5:60:2a:85:88:97:83:cc:5a:db:1c:e6:80:c4: 6a:74:ad:3c:e7:84:8e:9b:26:5c:0a:24:b3:cc:36: 8b:57:cb:77:d0:0e:ff:65:96:47:73:05:94:0a:f6: 3f:e3:f1:2a:b2:32:e7:9d:56:3c:9d:9d:1b:29:9c: ac:29:ad:84:fe:a9:1d:86:bb:33:aa:c7:71:dd:89: 33:5d:d1:f8:46:8c:72:fd:10:72:db:16:40:cb:3c: 72:0b:b3:82:19:d9:18:62:cb:a6:92:a3:ba:92:e7: 7e:94:29:51:84:43:af:a4:36:e8:7e:3f:79:24:92: 8e:04:16:f2:b5:26:af:4e:9a:ab:40:cc:1b:31:98: b6:25:95:35:91:42:33:ca:09:1d:fd:5f:69:99:c7: e7:f7:f4:03:22:69:43:9c:c4:bf:e2:06:27:4c:a0: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:70:A9:4E:8D:0E:AB:90:A4:32:F1:30:49:E8:5B:8C:6A:F3:59:40 X509v3 Authority Key Identifier: keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:1d:df:c9:b3:26:bc:fe:9d:e4:2d:47:8c:9e:08:85:4a:fa: db:1f:f3:1c:23:61:37:b3:2a:57:0f:54:80:2b:ee:2f:b8:7a: 52:ff:4f:99:e9:bc:5e:97:21:c8:f0:48:bf:d8:ed:40:a2:ad: 6a:f7:72:05:a5:f7:c6:44:eb:f2:19:08:d8:74:84:43:3f:42: 26:6f:2a:0f:f7:57:37:e6:52:51:d9:4d:9b:e6:56:30:ba:c8: f5:55:2b:e9:43:0d:de:c7:18:67:8f:4e:0a:42:37:2b:09:27: 42:5f:3a:5d:e3:8a:6d:7c:62:49:11:49:f1:cb:8a:18:6e:25: 6d:d8:85:91:1c:8e:35:bf:b3:94:43:ad:0c:a2:d2:f0:ef:96: 36:cf:d8:15:59:f8:cf:87:3a:dc:2e:39:52:e6:76:d7:62:13: 44:f6:44:09:d3:85:f2:e0:5e:ed:dd:3d:a8:c8:7a:25:0e:56: 94:f9:38:16:e6:68:97:2a:55:ff:97:54:26:43:20:44:b2:bd: 6d:82:cb:f3:2d:86:dc:65:09:2a:c9:17:b8:4b:b7:00:8f:87: 94:51:86:a0:49:e0:a5:a1:5a:f1:a7:98:25:7b:da:07:0a:e9: 07:bf:d6:bd:8c:a5:09:55:0b:1a:2a:df:96:26:2e:08:a1:34: 40:50:67:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7iL+14j7u3uTviacOHUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl MDJkYmIwHhcNMjUxMjIxMjIwMTAxWhcNMjUxMjIyMjIwMTAxWjAzMTEwLwYDVQQD Eyg5MTcwYTk0ZThkMGVhYjkwYTQzMmYxMzA0OWU4NWI4YzZhZjM1OTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB4sIFUNs8dO6iD5LUVqmofwLPBk UHBgErJe0igaG+PMfKuIFYyR07+SDZYH+4VGBpLnZEkBDUrnV40d6kb2hOgxdRuu 5Ruo/O19kzHwzwlAzHwziaU1Pu7+5WAqhYiXg8xa2xzmgMRqdK0854SOmyZcCiSz zDaLV8t30A7/ZZZHcwWUCvY/4/EqsjLnnVY8nZ0bKZysKa2E/qkdhrszqsdx3Ykz XdH4Roxy/RBy2xZAyzxyC7OCGdkYYsumkqO6kud+lClRhEOvpDbofj95JJKOBBby tSavTpqrQMwbMZi2JZU1kUIzygkd/V9pmcfn9/QDImlDnMS/4gYnTKCccwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFwqU6NDquQpDLxMEnoW4xq81lAMB8GA1UdIwQY MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut OThkMmZlZTBmODdhLzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuB3fybMm vP6d5C1HjJ4IhUr62x/zHCNhN7MqVw9UgCvuL7h6Uv9Pmem8XpchyPBIv9jtQKKt avdyBaX3xkTr8hkI2HSEQz9CJm8qD/dXN+ZSUdlNm+ZWMLrI9VUr6UMN3scYZ49O CkI3KwknQl86XeOKbXxiSRFJ8cuKGG4lbdiFkRyONb+zlEOtDKLS8O+WNs/YFVn4 z4c63C45UuZ212ITRPZECdOF8uBe7d09qMh6JQ5WlPk4FuZolypV/5dUJkMgRLK9 bYLL8y2G3GUJKskXuEu3AI+HlFGGoEngpaFa8aeYJXvaBwrpB7/WvYylCVULGirf liYuCKE0QFBnPQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:18:53 2025 by rpki-client