This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json) Hash identifier: XjMkt/oScGerts6Z+H5ymAlfAtwjfpnD6vDznruKPPs= Subject key identifier: A7:4C:B3:31:AB:A0:A0:84:54:D5:C1:D8:56:0F:E2:23:B7:07:61:51 Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3 Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3 Certificate serial: 019AF31D4076E68A73475D9D5759ADFC4750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft Manifest number: 1386 Signing time: Sat 06 Dec 2025 10:02:51 +0000 Manifest this update: Sat 06 Dec 2025 10:02:51 +0000 Manifest next update: Sun 07 Dec 2025 10:02:51 +0000 Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: FCesXlQ1iO3SrSFnHxdGKFM8C8Mnyv8qoyxVJs0q670=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:40:76:e6:8a:73:47:5d:9d:57:59:ad:fc:47:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3 Validity Not Before: Dec 6 10:02:51 2025 GMT Not After : Dec 7 10:02:51 2025 GMT Subject: CN=a74cb331aba0a08454d5c1d8560fe223b7076151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:67:07:84:21:4c:30:a5:be:5a:95:27:01: b0:ba:7e:ec:b1:c6:03:10:72:d6:18:51:1a:ca:00: fd:7d:c8:93:94:7c:cf:81:d3:c8:53:ab:5c:18:4b: 7f:21:63:83:07:d7:03:c9:f8:b5:a9:ef:a3:d1:51: 62:fe:73:16:a4:dc:4d:9a:76:66:b3:16:ea:fb:65: ae:6b:ca:d2:f4:da:93:59:83:24:f8:8b:9b:cb:d9: 9e:4f:96:77:50:6b:25:58:1e:05:bc:2d:02:bb:33: b3:11:43:5c:f5:17:a0:e0:05:20:a3:63:c0:9f:8d: ce:cf:f3:6a:b5:cf:02:c4:51:81:79:cf:75:71:53: 30:14:14:06:09:38:1f:ca:67:23:98:82:2c:65:3f: fd:2f:55:cc:74:5c:a5:1c:95:55:08:c1:b7:aa:a0: 39:b3:28:37:a8:46:e6:a6:ad:86:a9:e4:f3:ab:5f: 80:68:72:3f:e9:e2:3c:f2:3c:b2:1a:6a:9f:13:b7: ee:de:94:26:c3:f2:3f:87:aa:de:dc:b2:41:76:81: e9:2a:a4:b5:39:81:a0:d2:db:86:a8:a3:0c:bc:b3: 03:4c:7d:98:06:60:45:63:63:d8:24:1e:11:15:58: 58:86:44:8a:9b:2e:02:7d:27:27:21:fa:2a:f0:bd: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4C:B3:31:AB:A0:A0:84:54:D5:C1:D8:56:0F:E2:23:B7:07:61:51 X509v3 Authority Key Identifier: keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4f:2d:86:6f:fa:7b:6a:f8:f1:cb:33:4b:33:a3:34:a7:40: 55:c1:83:c5:ec:3f:f5:3f:49:b3:00:fc:c6:97:72:d7:65:81: 2a:1a:50:cb:5a:2c:56:22:fd:f2:61:5c:ea:c6:ed:74:13:dd: e9:3d:84:77:7f:38:e0:41:25:6d:6d:e7:4f:fb:0b:77:76:6f: 58:a4:97:61:7f:6c:51:5f:79:6e:af:3a:66:a6:4c:ec:fe:71: 34:c5:8e:cc:6b:69:d1:4c:6b:3f:bb:bf:61:66:0f:e8:58:05: b6:c6:24:66:d2:e5:da:34:29:04:89:2d:1d:2d:a7:f3:df:fa: 4a:a4:d4:a4:35:f6:66:7f:bd:40:8c:fc:3c:76:15:40:98:fb: ce:55:63:9d:ba:e8:7b:bb:64:74:fb:56:ae:f2:9e:86:2a:3b: c7:88:bf:1a:bc:9a:07:c2:3a:f0:b9:2f:15:26:a2:96:e0:cf: 55:54:ef:27:c4:7a:0a:fb:55:36:c1:1c:6d:9e:b4:b7:22:a4: c5:a4:20:05:58:c8:0e:ff:20:53:fd:1e:03:9c:d7:c4:83:35: c9:c3:ac:e3:d4:b6:45:91:23:69:a0:14:d7:d1:67:67:65:3d: 61:b8:c5:02:11:0b:ae:d0:c0:50:1c:41:18:8b:b6:11:c5:1d: 32:cc:23:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUB25opzR12dV1mt/EdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZWIwY2Q0ZDMzYWY0ZTI4YjdhODZkYjIxMmQ5NTkxYTBi ZTYyZTMwHhcNMjUxMjA2MTAwMjUxWhcNMjUxMjA3MTAwMjUxWjAzMTEwLwYDVQQD EyhhNzRjYjMzMWFiYTBhMDg0NTRkNWMxZDg1NjBmZTIyM2I3MDc2MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApetnB4QhTDClvlqVJwGwun7sscYD EHLWGFEaygD9fciTlHzPgdPIU6tcGEt/IWODB9cDyfi1qe+j0VFi/nMWpNxNmnZm sxbq+2Wua8rS9NqTWYMk+Iuby9meT5Z3UGslWB4FvC0CuzOzEUNc9Reg4AUgo2PA n43Oz/Nqtc8CxFGBec91cVMwFBQGCTgfymcjmIIsZT/9L1XMdFylHJVVCMG3qqA5 syg3qEbmpq2GqeTzq1+AaHI/6eI88jyyGmqfE7fu3pQmw/I/h6re3LJBdoHpKqS1 OYGg0tuGqKMMvLMDTH2YBmBFY2PYJB4RFVhYhkSKmy4CfScnIfoq8L37qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdMszGroKCEVNXB2FYP4iO3B2FRMB8GA1UdIwQY MBaAFCDrDNTTOvTii3qG2yEtlZGgvmLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNDQ0OTQtOWI0Ni00MGFjLTlmZTUt NDU5ZDFlNmQwZWU5LzEvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xNDQ0OTQtOWI0Ni00MGFjLTlmZTUtNDU5ZDFlNmQwZWU5 LzEvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ08thm/6 e2r48cszSzOjNKdAVcGDxew/9T9JswD8xpdy12WBKhpQy1osViL98mFc6sbtdBPd 6T2Ed3844EElbW3nT/sLd3ZvWKSXYX9sUV95bq86ZqZM7P5xNMWOzGtp0UxrP7u/ YWYP6FgFtsYkZtLl2jQpBIktHS2n89/6SqTUpDX2Zn+9QIz8PHYVQJj7zlVjnbro e7tkdPtWrvKehio7x4i/GryaB8I68LkvFSailuDPVVTvJ8R6CvtVNsEcbZ60tyKk xaQgBVjIDv8gU/0eA5zXxIM1ycOs49S2RZEjaaAU19FnZ2U9YbjFAhELrtDAUBxB GIu2EcUdMswjlw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:57 2025 by rpki-client