This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json) Hash identifier: iQzC7C09ZCN07Seo/oo94kKI1ZC644MmQyrwrxKpqxw= Subject key identifier: A6:0E:CD:52:05:F0:FF:81:3C:3A:D9:2B:63:3D:B2:D0:19:9D:2A:7A Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486 Certificate serial: 019AF27725203276F4B799A10C6C4F75D2EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft Manifest number: 08B7 Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=) 2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: cq3f0wy4eb93H4/YgkK4UkCNIuLCPNQdVAglo1vsNQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:25:20:32:76:f4:b7:99:a1:0c:6c:4f:75:d2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486 Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=a60ecd5205f0ff813c3ad92b633db2d0199d2a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:16:fa:37:30:c7:69:99:ed:ea:57:ea:c0: 4a:e1:b9:1c:4d:55:97:df:9b:f3:53:65:53:14:02: 0c:54:b6:da:b5:e7:1a:13:30:2a:09:69:5e:3b:58: 1a:ba:6c:e8:ed:8a:c6:d2:d9:7c:44:df:b5:76:bb: 9f:52:e6:c9:87:ce:4c:22:a1:71:62:37:03:03:1b: 65:0a:47:eb:4d:e7:fa:78:f8:43:8d:13:76:93:73: 7a:71:8f:c5:41:46:e3:19:6b:e2:03:78:9d:68:fd: 5f:9d:f6:75:aa:8b:a6:f1:7f:7a:da:17:7c:02:50: 68:12:df:c1:ec:35:47:d8:aa:9b:3b:38:c3:cb:c4: 89:b0:4e:8e:0f:e9:b8:a1:e5:f1:01:47:31:94:4b: 9d:3e:51:3b:fa:8f:37:42:e7:9c:d9:0c:8a:dc:2f: 29:30:b9:e0:51:2e:78:df:cc:5c:3d:e8:4a:ed:fd: f6:14:b0:13:9d:66:e6:0b:9d:ed:55:a6:ff:07:aa: 34:03:e7:63:46:74:05:31:e3:10:13:06:91:0a:d2: 74:f5:3d:14:99:59:ba:df:ce:d8:92:69:9e:cc:e2: 90:78:7f:df:50:95:57:1c:0d:43:43:21:81:0d:95: 5a:3a:7b:62:b6:7c:8f:f2:a4:d3:69:d5:e4:0f:bc: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0E:CD:52:05:F0:FF:81:3C:3A:D9:2B:63:3D:B2:D0:19:9D:2A:7A X509v3 Authority Key Identifier: keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:05:f5:20:50:6d:8d:a0:af:71:c5:4e:ba:00:31:64:19:bf: c2:c5:60:4a:26:cb:b0:dc:51:af:24:3a:05:ce:f8:07:b2:31: bb:28:67:97:32:51:9d:37:b5:ee:96:a3:c5:7e:59:63:31:c6: fd:40:b0:17:e9:d4:a1:a2:b6:13:06:bd:01:d5:a8:93:95:da: 52:b1:11:cd:04:2d:9e:a5:d5:0f:bf:22:69:d1:7f:8f:7e:bb: 84:fd:ab:a7:e4:f4:e4:76:f7:d0:4c:f1:50:c6:a2:f4:ae:0a: ec:d9:77:91:d1:94:c5:a4:1b:b1:2c:e5:89:57:7d:19:b2:7f: 4e:e0:b0:44:66:80:16:21:55:ba:65:5f:a9:2e:5d:06:3b:95: d7:6a:25:e7:ac:b7:f6:96:4f:93:6b:19:10:33:60:c2:3b:1a: 69:dc:e6:9d:ad:6d:44:db:6f:ba:44:f9:37:a7:ab:ea:1d:de: a5:08:4a:2c:8d:b7:60:6e:74:eb:4e:d6:c7:8d:a8:f7:9a:70: 53:9b:1d:8a:3f:88:b2:fd:5c:48:9c:6f:9c:3c:22:81:85:2f: ef:b6:75:2b:fd:f6:37:d0:56:79:33:8d:06:46:25:c8:73:44: 37:85:35:28:71:48:3f:1b:f5:5d:3f:17:94:85:3a:35:0e:1f: 94:4e:83:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyUgMnb0t5mhDGxPddLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOGZhOTkyYmMwYTYxZGIyY2JlNzg2ZTFjNTlkMzYwY2Nl NTQ0ODYwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD EyhhNjBlY2Q1MjA1ZjBmZjgxM2MzYWQ5MmI2MzNkYjJkMDE5OWQyYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsosW+jcwx2mZ7epX6sBK4bkcTVWX 35vzU2VTFAIMVLbatecaEzAqCWleO1gaumzo7YrG0tl8RN+1drufUubJh85MIqFx YjcDAxtlCkfrTef6ePhDjRN2k3N6cY/FQUbjGWviA3idaP1fnfZ1qoum8X962hd8 AlBoEt/B7DVH2KqbOzjDy8SJsE6OD+m4oeXxAUcxlEudPlE7+o83Quec2QyK3C8p MLngUS5438xcPehK7f32FLATnWbmC53tVab/B6o0A+djRnQFMeMQEwaRCtJ09T0U mVm6387YkmmezOKQeH/fUJVXHA1DQyGBDZVaOntitnyP8qTTadXkD7z5cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYOzVIF8P+BPDrZK2M9stAZnSp6MB8GA1UdIwQY MBaAFIqPqZK8CmHbLL54bhxZ02DM5USGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWIt OTZhNjAxYmI2YmE4LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWItOTZhNjAxYmI2YmE4 LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwX1IFBt jaCvccVOugAxZBm/wsVgSibLsNxRryQ6Bc74B7IxuyhnlzJRnTe17pajxX5ZYzHG /UCwF+nUoaK2Ewa9AdWok5XaUrERzQQtnqXVD78iadF/j367hP2rp+T05Hb30Ezx UMai9K4K7Nl3kdGUxaQbsSzliVd9GbJ/TuCwRGaAFiFVumVfqS5dBjuV12ol56y3 9pZPk2sZEDNgwjsaadzmna1tRNtvukT5N6er6h3epQhKLI23YG50607Wx42o95pw U5sdij+Isv1cSJxvnDwigYUv77Z1K/32N9BWeTONBkYlyHNEN4U1KHFIPxv1XT8X lIU6NQ4flE6DXg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:18 2025 by rpki-client