This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: RC47POL/ZICEdZMOiuvOkSI6C8eEyYuhD79lPDcD2aY= Subject key identifier: 8E:98:5B:9E:86:C5:B7:66:D9:0C:9D:46:52:2C:BE:19:95:C4:1A:93 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019AF0BF44A74C1A7F5A706BC30EE2A4B040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 10BD Signing time: Fri 05 Dec 2025 23:00:58 +0000 Manifest this update: Fri 05 Dec 2025 23:00:58 +0000 Manifest next update: Sat 06 Dec 2025 23:00:58 +0000 Files and hashes: 1: 1-YME93lc1AWh4-bMqvVDZYenQg0.roa (hash: Euu0W5ctvY2bfvnvaMrD1zBWGCi2DVPvkYQ6p9zTjts=) 2: HdvJhluj0mmgaFdPVm0s0ofNMQM.roa (hash: p1LONhiWBtnwDM/uG7ENsu+2YSQKoESJAbc98yta6C4=) 3: PG5DPUzHhisMDmHNMi2OiyC4Krk.roa (hash: 5vgSE6xpOM3tTVvShPg0nfAqcYxZUDm3VYRogPEs1nM=) 4: QWifAQ3dSu8nhEAeOh_F1BphWro.roa (hash: itO7AV5EF/O+Sl0fYRa8cl6eA4q/nRa0iBG6sGElFQI=) 5: XX2wYcwap8ipUrsF5QxMCkU6q3s.roa (hash: 5rJ1cTY8WuJEVbqP9odqHpQe40kbl4hVcRgWYYyQhgQ=) 6: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: bSghBzyejeAOgnuMI3+NbkQWZNUffyENvm3bx0Qh5ao=) 7: Z6ubH84vQbgEnifkNYkjjYx5LIg.roa (hash: A5Iyh12sixazcVNr3007j9RNY5bFIJZSLARvNvwI0hI=) 8: cWGszmobGgkTRu82roBLKR9vgkE.roa (hash: bXFzT/7+8yagPIwyKl0fdIxc7uJ/wfFRRzbV8w0a7yI=) 9: flrC_8zXbr01pJXgtmy__huZXOA.roa (hash: vzxZLPURPSKJVHe6QAWg0rqm4QhuQOuF7VBOWspThjA=) 10: lms_h40r3-LvmvS_QZG5u3K67Uw.roa (hash: sioeVX/bhxcVhyyVff9dr3QSj+48OLBpgP5/WVrFXzw=) 11: nGntDaqcmONxUi1sd87UMvT9x4I.roa (hash: JUPdqbOgdaD6LXB1MI+aJwuym5PZcQO3ILLdGvRsfU8=) 12: nzJ1VVo_PG7VRYK1qXbMx1rFS50.roa (hash: /GaOWlamFjP2Dj79UI9A1USxEJfBxcpOsY5WVrDbQNw=) 13: p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa (hash: iKYw9dWKEOaAlzn5AmL4rdC2+rWU6FDA6bFijDgxb2w=) 14: qXSDx6qMLmAkAg9CUQzF6i4iyY0.roa (hash: wdkB7sltE+pNfWEVP8+xe0pE2lM5C0vVvLdbwwyDf04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:44:a7:4c:1a:7f:5a:70:6b:c3:0e:e2:a4:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Dec 5 23:00:58 2025 GMT Not After : Dec 6 23:00:58 2025 GMT Subject: CN=8e985b9e86c5b766d90c9d46522cbe1995c41a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:24:9f:ae:b2:c1:34:21:68:14:b1:f2:68: b2:a0:b3:99:18:dc:7b:9a:67:92:d4:2d:2c:ca:88: d6:43:a4:68:1e:f1:0c:08:b7:13:8c:76:5f:dd:f3: 2d:20:ed:a4:d7:d6:3f:79:20:b4:49:21:d2:44:7a: 57:58:75:c1:ae:11:5c:d6:6e:af:7b:c0:30:31:d4: 4b:ad:f0:98:44:2b:7c:f0:7e:c2:2b:d9:48:ff:7a: ce:d8:6e:4d:85:cb:73:88:60:2a:c6:83:cd:27:3f: ec:17:2c:6d:50:bd:99:13:22:4b:46:c0:fe:72:fa: a6:b9:09:95:49:bf:24:5c:2e:b3:09:2c:1f:77:42: df:e0:fe:6d:3d:69:50:c8:f2:93:eb:ae:ea:3f:1a: cb:f7:55:d8:26:24:55:a7:93:1b:c0:ee:a3:83:99: fd:0b:38:cd:e4:21:df:9f:0f:0f:d9:72:1f:a6:79: 03:2e:ba:6b:f7:34:28:ab:fd:79:71:6f:2d:dc:d4: 7f:14:e5:99:36:c6:fa:0c:39:07:60:f8:4e:4d:9c: 72:45:0d:13:1a:90:f0:65:fd:64:77:7f:d8:ae:0c: 41:27:5b:d6:b6:be:36:f0:e3:28:62:67:54:42:52: 80:13:55:50:c1:a7:ba:02:e5:b4:34:d7:fa:7e:b2: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:5B:9E:86:C5:B7:66:D9:0C:9D:46:52:2C:BE:19:95:C4:1A:93 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2f:8c:07:e3:61:88:a5:6f:a9:30:d8:ee:1a:f2:54:c0:51: ed:bb:cc:0c:98:77:1a:f0:db:62:f3:6a:25:c0:95:12:93:c5: 05:d2:16:24:84:96:db:e2:69:f6:0e:88:f4:70:df:85:b8:7d: a4:a6:88:7d:dd:81:7e:99:8e:1e:ae:f2:46:91:c0:93:7a:bc: a5:05:a9:58:1c:5c:e9:89:7f:69:5d:3b:4b:09:80:97:44:39: 42:b9:06:fd:db:6d:e5:67:d3:87:28:ce:49:ee:88:69:70:2f: 3d:82:a0:ef:8f:e0:21:cd:4c:06:e8:3e:62:f1:52:ca:01:3a: 5e:51:0b:16:a8:36:7c:6d:fe:13:d7:22:af:d5:11:fd:1b:95: 41:27:6f:97:1d:9a:a6:04:42:67:29:3d:8b:a8:dd:30:54:fa: bd:87:05:73:46:02:5c:18:2a:93:4f:d0:6d:99:a7:71:fd:2f: d2:a5:fe:3b:3c:1c:04:00:98:4a:b2:6f:01:bc:80:85:f0:f4: 8f:6c:81:67:06:bf:20:ba:12:46:b2:75:6e:6e:f2:c8:0e:9b: 5d:cc:1c:8f:a2:98:bb:c2:09:42:af:5f:3d:ba:d0:ea:31:83: c5:64:f2:a9:71:89:e9:a6:38:65:54:84:d8:74:b8:31:ba:e3: 3f:be:12:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0SnTBp/WnBrww7ipLBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjUxMjA1MjMwMDU4WhcNMjUxMjA2MjMwMDU4WjAzMTEwLwYDVQQD Eyg4ZTk4NWI5ZTg2YzViNzY2ZDkwYzlkNDY1MjJjYmUxOTk1YzQxYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhMkn66ywTQhaBSx8miyoLOZGNx7 mmeS1C0syojWQ6RoHvEMCLcTjHZf3fMtIO2k19Y/eSC0SSHSRHpXWHXBrhFc1m6v e8AwMdRLrfCYRCt88H7CK9lI/3rO2G5NhctziGAqxoPNJz/sFyxtUL2ZEyJLRsD+ cvqmuQmVSb8kXC6zCSwfd0Lf4P5tPWlQyPKT667qPxrL91XYJiRVp5MbwO6jg5n9 CzjN5CHfnw8P2XIfpnkDLrpr9zQoq/15cW8t3NR/FOWZNsb6DDkHYPhOTZxyRQ0T GpDwZf1kd3/YrgxBJ1vWtr428OMoYmdUQlKAE1VQwae6AuW0NNf6frJRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6YW56Gxbdm2QydRlIsvhmVxBqTMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi+MB+Nh iKVvqTDY7hryVMBR7bvMDJh3GvDbYvNqJcCVEpPFBdIWJISW2+Jp9g6I9HDfhbh9 pKaIfd2BfpmOHq7yRpHAk3q8pQWpWBxc6Yl/aV07SwmAl0Q5QrkG/dtt5WfThyjO Se6IaXAvPYKg74/gIc1MBug+YvFSygE6XlELFqg2fG3+E9cir9UR/RuVQSdvlx2a pgRCZyk9i6jdMFT6vYcFc0YCXBgqk0/QbZmncf0v0qX+OzwcBACYSrJvAbyAhfD0 j2yBZwa/ILoSRrJ1bm7yyA6bXcwcj6KYu8IJQq9fPbrQ6jGDxWTyqXGJ6aY4ZVSE 2HS4MbrjP74Sog== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:39 2025 by rpki-client