This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json) Hash identifier: bgs/Yx1RMH71ynYYadKRJdPCPfIlc3nUDQbMoJfMD4c= Subject key identifier: 4E:AA:99:19:A2:B8:46:0A:F7:04:B1:A8:BF:2F:84:15:B5:4A:EE:46 Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb Certificate serial: 019B44DC6FA23E49EC9E54FC1789BB7226D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft Manifest number: 1062 Signing time: Mon 22 Dec 2025 07:00:55 +0000 Manifest this update: Mon 22 Dec 2025 07:00:55 +0000 Manifest next update: Tue 23 Dec 2025 07:00:55 +0000 Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=) 2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: huDko56C1Y7x6bieFTDjSKt3MChg1tp7vYK0wLDFAiY=) 3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=) 4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:6f:a2:3e:49:ec:9e:54:fc:17:89:bb:72:26:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215a409d27b9a69346324004694da11beae02dbb Validity Not Before: Dec 22 07:00:55 2025 GMT Not After : Dec 23 07:00:55 2025 GMT Subject: CN=4eaa9919a2b8460af704b1a8bf2f8415b54aee46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:5a:20:15:d9:09:33:39:72:9f:ed:ab:ce: 6a:7d:4a:1b:35:df:19:4f:17:d4:f9:ca:0e:9b:61: 84:f8:9a:36:e1:c1:15:1a:51:14:22:e6:96:89:71: b2:90:85:83:ee:08:d3:82:81:66:08:83:24:72:06: 12:76:fd:a8:bc:84:0e:d0:94:b9:56:5c:7e:ec:ff: 3e:73:50:01:26:5a:0a:a6:55:5b:45:f7:d6:2d:48: 64:e6:e9:69:6d:4b:a8:0f:e1:65:69:05:6e:69:fb: 48:b4:db:99:dc:6b:58:de:b2:83:19:e8:6c:f8:f3: b1:df:eb:0d:89:57:66:7a:45:8d:34:fa:60:c6:1d: 1f:36:f2:79:6f:e5:85:d0:87:f2:aa:00:73:46:b3: 65:72:84:14:d4:82:3a:7b:d5:26:5e:cb:25:10:b9: bb:0b:92:ff:2b:aa:ee:67:86:a8:16:83:5b:c4:f2: 3c:3b:fd:b0:e7:11:1e:82:a3:2a:93:89:03:c9:1f: 32:a8:9c:ba:21:67:f1:30:e4:a9:20:b1:ff:0e:25: 87:81:4f:29:e7:c9:d2:be:1e:63:52:45:bd:ff:39: 4d:ae:06:7d:b4:a5:30:46:71:45:e9:a0:08:11:68: 36:6c:8d:32:d8:b7:ae:9c:11:38:21:90:d1:05:58: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AA:99:19:A2:B8:46:0A:F7:04:B1:A8:BF:2F:84:15:B5:4A:EE:46 X509v3 Authority Key Identifier: keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ae:47:c8:f9:64:b5:fc:e2:30:22:18:23:37:ab:d1:d5:8a: 64:f3:93:97:7f:aa:9a:03:fd:8f:20:da:03:16:99:f7:4f:6e: ff:a9:36:e4:26:88:8c:bc:a1:81:44:69:c6:16:2b:f7:56:bb: 92:ce:84:e5:7b:77:7f:00:2c:a1:30:24:2c:10:b2:38:be:9d: b4:c4:08:5b:ff:a4:21:a3:40:af:f5:82:c2:c2:c0:c1:51:45: 25:83:de:cf:32:04:e4:57:86:84:bf:52:60:93:30:48:37:4c: 2d:a2:dd:23:32:d8:65:22:1b:79:4a:d6:6f:e0:19:7d:fd:a0: a0:37:e2:d0:87:1e:d4:f8:9d:ef:8b:1e:15:16:b6:bd:e0:68: 98:b3:03:19:e2:ad:58:aa:41:a7:f5:6e:49:16:43:0a:5a:7a: 91:c9:17:84:7a:37:d4:c0:68:2a:ea:55:28:17:5b:68:8a:84: 15:73:e9:15:86:a8:c0:88:bd:54:fb:df:f1:36:d3:23:0f:49: 7a:80:a0:8a:0b:2e:32:5e:07:57:53:c2:03:16:4e:3f:d3:44: 33:cf:61:dd:97:e2:16:49:c9:06:d1:51:9e:fa:d2:14:e3:49: ef:2c:78:8f:da:0d:9a:57:03:06:c2:08:d1:ad:a6:b9:97:d7: 53:b2:8b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3G+iPknsnlT8F4m7cibWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl MDJkYmIwHhcNMjUxMjIyMDcwMDU1WhcNMjUxMjIzMDcwMDU1WjAzMTEwLwYDVQQD Eyg0ZWFhOTkxOWEyYjg0NjBhZjcwNGIxYThiZjJmODQxNWI1NGFlZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMxaIBXZCTM5cp/tq85qfUobNd8Z TxfU+coOm2GE+Jo24cEVGlEUIuaWiXGykIWD7gjTgoFmCIMkcgYSdv2ovIQO0JS5 Vlx+7P8+c1ABJloKplVbRffWLUhk5ulpbUuoD+FlaQVuaftItNuZ3GtY3rKDGehs +POx3+sNiVdmekWNNPpgxh0fNvJ5b+WF0IfyqgBzRrNlcoQU1II6e9UmXsslELm7 C5L/K6ruZ4aoFoNbxPI8O/2w5xEegqMqk4kDyR8yqJy6IWfxMOSpILH/DiWHgU8p 58nSvh5jUkW9/zlNrgZ9tKUwRnFF6aAIEWg2bI0y2LeunBE4IZDRBVgSsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6qmRmiuEYK9wSxqL8vhBW1Su5GMB8GA1UdIwQY MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut OThkMmZlZTBmODdhLzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK5HyPlk tfziMCIYIzer0dWKZPOTl3+qmgP9jyDaAxaZ909u/6k25CaIjLyhgURpxhYr91a7 ks6E5Xt3fwAsoTAkLBCyOL6dtMQIW/+kIaNAr/WCwsLAwVFFJYPezzIE5FeGhL9S YJMwSDdMLaLdIzLYZSIbeUrWb+AZff2goDfi0Ice1Pid74seFRa2veBomLMDGeKt WKpBp/VuSRZDClp6kckXhHo31MBoKupVKBdbaIqEFXPpFYaowIi9VPvf8TbTIw9J eoCgigsuMl4HV1PCAxZOP9NEM89h3ZfiFknJBtFRnvrSFONJ7yx4j9oNmlcDBsII 0a2muZfXU7KLtQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:14:26 2025 by rpki-client