This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json) Hash identifier: IRYGZOIWjZxeIHxzIplP74Zx09Proo2YSSylliEzkEI= Subject key identifier: D3:2A:79:6D:0B:40:41:49:0E:92:7E:7F:D7:00:35:F4:28:F1:8D:52 Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Certificate serial: 019B3E6C7DEF96A7002FADF079675A64594D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft Manifest number: 142B Signing time: Sun 21 Dec 2025 01:00:55 +0000 Manifest this update: Sun 21 Dec 2025 01:00:55 +0000 Manifest next update: Mon 22 Dec 2025 01:00:55 +0000 Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: BPmuNkVUyVxlIb9Djn4GgEZQ3jJByfT/6IfsbHMURCM=) 2: nMkEmJ51wxGZCh8yEkXwS1N3iAs.roa (hash: 28RMWY33rrxPKF667SNzPxBMXl2tl3acI2LPVuAYmGg=) 3: zMR6QVCY7XDu7CjlFF2Zc2HvYX8.roa (hash: H+/kniid9OfMhYsVomtjxQTvfv/uf2k0o/IUWQqiT1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:7d:ef:96:a7:00:2f:ad:f0:79:67:5a:64:59:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Validity Not Before: Dec 21 01:00:55 2025 GMT Not After : Dec 22 01:00:55 2025 GMT Subject: CN=d32a796d0b4041490e927e7fd70035f428f18d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:d5:5d:60:4b:99:ee:34:b5:a5:36:15:05: 12:4e:8d:ab:66:61:b1:0f:cc:6b:89:8a:13:34:2c: 05:e5:87:8e:73:a4:6e:20:b1:52:85:30:be:5f:37: 2f:7c:33:8f:70:f6:16:25:37:01:21:f0:c7:27:2d: a3:e3:4a:4b:fe:9f:13:61:a9:a8:fa:d5:5d:cb:91: 9f:83:ed:91:ab:71:c6:dc:d4:5b:52:8e:69:fd:02: 7f:18:83:cc:cc:5c:95:1f:7c:f8:dc:f3:b8:5f:91: 48:0b:c3:63:f5:7b:0c:e5:c5:21:f8:97:f6:de:c6: 80:6d:42:24:00:87:ff:ae:86:d7:58:b9:db:14:34: 37:80:c1:32:d4:90:74:00:14:b1:78:9d:77:52:b8: 20:96:8c:11:4e:f1:3f:1b:dd:96:a0:28:d4:d6:8b: 81:49:4b:2c:dd:61:56:22:0b:27:6c:a4:0a:6a:9f: d2:88:52:6a:1f:41:40:12:75:c5:ed:22:00:80:7b: ae:78:81:77:92:72:4b:05:a2:52:07:73:02:78:2e: 6d:1a:67:be:22:90:1f:38:bc:7e:5c:4d:ae:fb:13: a1:fd:38:f5:30:d1:f6:c2:88:4c:04:1b:7f:c6:46: 42:4b:2a:f8:83:a8:8b:89:61:ef:d4:4a:a5:86:46: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:79:6D:0B:40:41:49:0E:92:7E:7F:D7:00:35:F4:28:F1:8D:52 X509v3 Authority Key Identifier: keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:de:52:b6:f3:de:5a:e3:39:14:f0:e8:5c:30:59:7d:19:07: 1e:74:80:fd:72:e0:e0:b1:10:14:b6:19:92:f8:36:26:d2:1f: d0:2e:b2:2f:13:12:ef:de:ce:0c:05:11:02:e3:89:09:fb:8c: 22:85:ac:55:49:4f:45:32:8f:67:a1:80:6c:14:93:98:cc:2a: 44:5a:56:b1:9d:cb:ea:43:0c:dc:a2:84:94:ce:df:66:6d:1f: 34:2f:f2:e3:40:50:05:c8:7b:15:71:25:22:64:42:55:7e:c9: 0d:e6:80:f8:a9:f1:14:77:f4:e1:0b:e3:b5:f3:07:66:72:18: d8:01:06:5c:87:4f:1d:ad:e7:27:e7:a2:4b:30:9a:ad:ba:03: 58:6f:9a:56:ac:e6:cd:27:96:a8:e3:c5:19:b4:39:e3:1b:6d: 9e:59:c3:74:d8:01:ac:27:db:d9:07:24:f3:15:06:b8:47:f9: 5d:46:3a:a5:c9:dd:4e:eb:db:78:a8:54:32:db:c7:26:bd:59: 90:84:95:f9:ac:a1:d2:ce:ba:88:b3:43:49:8b:7b:36:80:d9: fd:d0:c5:5b:52:03:c0:ea:a8:a3:62:5c:8e:b4:b3:ea:f9:c2: 7f:27:c4:52:a1:10:0b:74:8a:d9:bb:bc:3c:fb:35:04:1b:16: e1:ae:d2:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bH3vlqcAL63weWdaZFlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj ZTBhNzkwHhcNMjUxMjIxMDEwMDU1WhcNMjUxMjIyMDEwMDU1WjAzMTEwLwYDVQQD EyhkMzJhNzk2ZDBiNDA0MTQ5MGU5MjdlN2ZkNzAwMzVmNDI4ZjE4ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArezVXWBLme40taU2FQUSTo2rZmGx D8xriYoTNCwF5YeOc6RuILFShTC+XzcvfDOPcPYWJTcBIfDHJy2j40pL/p8TYamo +tVdy5Gfg+2Rq3HG3NRbUo5p/QJ/GIPMzFyVH3z43PO4X5FIC8Nj9XsM5cUh+Jf2 3saAbUIkAIf/robXWLnbFDQ3gMEy1JB0ABSxeJ13UrgglowRTvE/G92WoCjU1ouB SUss3WFWIgsnbKQKap/SiFJqH0FAEnXF7SIAgHuueIF3knJLBaJSB3MCeC5tGme+ IpAfOLx+XE2u+xOh/Tj1MNH2wohMBBt/xkZCSyr4g6iLiWHv1EqlhkZKcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMqeW0LQEFJDpJ+f9cANfQo8Y1SMB8GA1UdIwQY MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt NmYxZmVjZTg3Yzg5LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5 LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn95StvPe WuM5FPDoXDBZfRkHHnSA/XLg4LEQFLYZkvg2JtIf0C6yLxMS797ODAURAuOJCfuM IoWsVUlPRTKPZ6GAbBSTmMwqRFpWsZ3L6kMM3KKElM7fZm0fNC/y40BQBch7FXEl ImRCVX7JDeaA+KnxFHf04QvjtfMHZnIY2AEGXIdPHa3nJ+eiSzCarboDWG+aVqzm zSeWqOPFGbQ54xttnlnDdNgBrCfb2Qck8xUGuEf5XUY6pcndTuvbeKhUMtvHJr1Z kISV+ayh0s66iLNDSYt7NoDZ/dDFW1IDwOqoo2JcjrSz6vnCfyfEUqEQC3SK2bu8 PPs1BBsW4a7Sdg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:38 2025 by rpki-client