This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json) Hash identifier: qX4vuWO+ree5aRBf526V/diR9lKiWnhDjbYPKrAYXBw= Subject key identifier: E4:80:8A:65:8D:19:10:F6:4B:1F:70:5C:28:1F:13:EB:10:03:C9:8A Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Certificate serial: 019AFCC33EB74EE7075CA5D903EAF01D17D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft Manifest number: 1767 Signing time: Mon 08 Dec 2025 07:00:45 +0000 Manifest this update: Mon 08 Dec 2025 07:00:45 +0000 Manifest next update: Tue 09 Dec 2025 07:00:45 +0000 Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=) 2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=) 3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: 4ivAV2OkN7v+r0PoGgZB1TKoD4KurBLBk6Tl8vND98o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:3e:b7:4e:e7:07:5c:a5:d9:03:ea:f0:1d:17:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Validity Not Before: Dec 8 07:00:45 2025 GMT Not After : Dec 9 07:00:45 2025 GMT Subject: CN=e4808a658d1910f64b1f705c281f13eb1003c98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:8a:86:cc:24:c6:8a:83:b4:fd:1f:64:15: d5:4c:27:0d:05:9b:ce:0e:89:20:6d:80:9a:da:a9: ee:a7:30:91:f6:b8:51:5d:ba:5a:b5:8f:fb:63:55: cb:c8:46:c1:cb:ac:f7:48:56:4c:74:97:7d:6a:c7: 9b:fc:c3:0f:64:90:5d:ee:9a:c2:ec:28:e7:89:17: ec:e0:f1:27:14:70:e0:62:53:84:39:35:6e:03:40: 33:3a:f4:1f:e0:26:83:1b:52:b3:2e:e7:56:fc:30: 01:b8:b4:c5:ff:71:99:64:55:4d:f5:80:2b:58:18: ec:a6:a1:5c:49:cb:94:83:0a:69:bb:b8:74:7c:94: d0:60:8e:b1:e8:67:f6:d3:12:b6:f3:e6:c5:20:5b: 5c:20:b9:4a:5f:74:3a:a1:69:ed:26:6c:cd:59:4e: f1:a2:a2:cd:99:be:e9:78:25:25:a3:9b:59:91:91: c5:cb:9d:48:eb:ee:7e:60:7d:6e:20:ef:ec:3e:e2: 63:4c:ce:a4:89:ad:31:ae:88:d2:be:db:02:ad:f7: 47:96:d5:fc:d5:c8:28:58:75:42:d2:9c:47:97:54: 58:8e:db:f0:0c:e3:13:94:aa:08:9f:d1:8a:63:10: fb:d2:39:44:99:31:e1:d0:04:66:31:20:b1:8d:d1: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:8A:65:8D:19:10:F6:4B:1F:70:5C:28:1F:13:EB:10:03:C9:8A X509v3 Authority Key Identifier: keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:bb:36:36:05:07:11:0a:0c:a2:a8:e9:f1:21:11:b5:4a:47: 40:f4:f3:e4:f1:f6:d2:23:1b:73:ea:93:70:4a:5e:4c:2a:a0: ec:66:df:3c:ba:27:1d:50:31:1c:d9:ea:bf:85:a1:36:d2:a7: 84:41:bd:88:fa:90:28:21:8c:68:be:84:a3:3e:70:9c:e0:0d: 3e:fe:d0:9d:cf:7d:af:2f:1a:83:07:d2:5f:7b:61:69:76:de: 73:c2:c5:cb:36:a3:b9:72:75:3a:e5:0c:64:a0:fb:b7:ab:da: 94:75:4f:7e:68:49:39:63:d1:e9:0f:24:56:f5:80:4b:f1:d0: 96:37:16:35:c1:ff:4f:3f:36:f6:4e:63:8a:ce:a7:7c:53:17: ae:a2:9b:fb:77:5f:66:b4:b9:e0:ba:98:56:65:7f:e2:10:d1: be:08:ac:bb:c3:42:3e:bf:7a:fe:9e:2f:67:c9:97:1b:5d:eb: bd:37:89:31:58:5a:f3:f6:a9:45:60:02:ff:43:3c:a4:c7:59: 53:14:09:9c:7b:27:5d:2b:c0:43:19:fd:83:1e:07:16:67:4a: 01:67:55:34:cb:36:01:ba:4e:df:4f:98:b7:d6:91:c2:6d:4d: f6:77:57:0d:52:c0:44:91:25:72:4c:9a:df:be:c1:6a:5a:37: 44:d2:89:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8wz63TucHXKXZA+rwHRfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmEyM2EyZmQxYTA5NTYzNzhhMzdkNGZjZTI1OWRmMmJk Nzk0YTcwHhcNMjUxMjA4MDcwMDQ1WhcNMjUxMjA5MDcwMDQ1WjAzMTEwLwYDVQQD EyhlNDgwOGE2NThkMTkxMGY2NGIxZjcwNWMyODFmMTNlYjEwMDNjOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnqKhswkxoqDtP0fZBXVTCcNBZvO DokgbYCa2qnupzCR9rhRXbpatY/7Y1XLyEbBy6z3SFZMdJd9aseb/MMPZJBd7prC 7CjniRfs4PEnFHDgYlOEOTVuA0AzOvQf4CaDG1KzLudW/DABuLTF/3GZZFVN9YAr WBjspqFcScuUgwppu7h0fJTQYI6x6Gf20xK28+bFIFtcILlKX3Q6oWntJmzNWU7x oqLNmb7peCUlo5tZkZHFy51I6+5+YH1uIO/sPuJjTM6kia0xrojSvtsCrfdHltX8 1cgoWHVC0pxHl1RYjtvwDOMTlKoIn9GKYxD70jlEmTHh0ARmMSCxjdHYHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSAimWNGRD2Sx9wXCgfE+sQA8mKMB8GA1UdIwQY MBaAFItqI6L9GglWN4o31PziWd8r15SnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAt OWE0NmVkNWI0MmRiLzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAtOWE0NmVkNWI0MmRi LzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7s2NgUH EQoMoqjp8SERtUpHQPTz5PH20iMbc+qTcEpeTCqg7GbfPLonHVAxHNnqv4WhNtKn hEG9iPqQKCGMaL6Eoz5wnOANPv7Qnc99ry8agwfSX3thaXbec8LFyzajuXJ1OuUM ZKD7t6valHVPfmhJOWPR6Q8kVvWAS/HQljcWNcH/Tz829k5jis6nfFMXrqKb+3df ZrS54LqYVmV/4hDRvgisu8NCPr96/p4vZ8mXG13rvTeJMVha8/apRWAC/0M8pMdZ UxQJnHsnXSvAQxn9gx4HFmdKAWdVNMs2AbpO30+Yt9aRwm1N9ndXDVLARJElckya 377Balo3RNKJ2w== -----END CERTIFICATE-----Generated at Mon Dec 8 09:14:08 2025 by rpki-client