This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft File: iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json) Hash identifier: iQWmnRU8h3Fv8jKNli6wLZ2dGeBRfc5UyT6pnyyUus8= Subject key identifier: 00:FA:A9:87:35:03:91:05:3A:AE:46:A7:D7:8F:B9:C4:A1:8E:3F:14 Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25 Certificate issuer: /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25 Certificate serial: 019AF1D246D8DDD9B40945EBED8C01DD0795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft Manifest number: 0EFF Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: P5TwA4gqR6DNAZ9Tx38K6wVBeSw.roa (hash: JFHWlXs6ts8+WEohOsphMs0bmJPDZeURLkqEXMqad1U=) 2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: eqL774X5WcEGOn6hotTzhEOGlN3bgxa+qlZFnmJdeF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:46:d8:dd:d9:b4:09:45:eb:ed:8c:01:dd:07:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=00faa987350391053aae46a7d78fb9c4a18e3f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:da:e9:72:fe:22:0e:52:f1:a3:a8:8b:06: 0e:09:37:6c:04:d7:6d:c6:c9:51:7b:7e:18:19:f9: d9:ab:88:bf:b0:ab:f2:53:79:4d:d5:0e:64:0f:77: 72:f8:44:7e:5c:18:7c:ae:8f:10:1b:f3:bf:c8:b7: 41:05:76:b9:14:65:42:f0:29:15:9c:34:01:fa:8c: f8:ba:35:46:39:33:fd:ad:8d:fa:56:78:85:4a:97: ac:ed:b5:2c:50:9e:c2:88:90:77:56:c4:f2:d4:3a: 78:7a:50:77:4d:aa:64:6c:30:ad:be:31:f6:1f:93: d9:9a:de:e7:56:26:51:84:52:88:ce:5f:2e:4e:a2: 71:d8:fa:f9:86:c2:d3:4b:52:b0:0e:d7:9c:57:75: a2:09:df:31:91:c6:a6:e1:09:01:cf:af:e9:17:ff: 22:fd:a4:7b:a3:8c:d3:76:38:79:40:a3:19:1f:e5: c8:20:14:f3:0e:48:ee:9e:d7:98:25:ca:ff:37:9e: 2b:48:e3:c8:1b:c5:5a:b9:b3:1e:c2:ba:9a:db:1d: 44:a8:e5:5d:55:01:53:4c:bb:0f:dd:c9:ec:70:64: b7:0d:fa:a6:fe:cf:ac:dd:d9:43:6d:13:2b:ea:4c: 91:68:3b:37:05:db:f3:45:6c:c1:d5:9f:7a:90:ad: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:A9:87:35:03:91:05:3A:AE:46:A7:D7:8F:B9:C4:A1:8E:3F:14 X509v3 Authority Key Identifier: keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d2:90:4f:99:8a:70:62:12:19:1e:32:38:62:a3:e0:09:25: 30:7e:ae:f7:9d:03:cd:89:82:fd:35:e4:ed:92:43:9a:79:64: 9e:0c:23:c8:c5:a5:38:b4:84:5d:5f:56:10:07:a4:ac:4c:e5: 73:87:1d:92:dc:1b:47:18:f1:7c:3e:d7:93:dd:44:15:ea:df: d3:bc:2d:6d:bc:24:60:64:75:82:5e:3c:ab:73:f3:63:53:c9: a7:e9:28:40:97:0e:e6:0d:78:dd:94:01:a3:bb:36:24:8f:df: 4c:55:12:55:93:c7:2f:ff:cd:80:5a:be:32:a1:26:e8:7b:21: e6:7a:d8:60:e5:a0:60:75:8a:e5:e3:6d:02:3a:53:09:09:07: c2:2e:bc:a7:f3:eb:ef:b5:8b:be:d9:93:9b:8c:74:0a:21:1e: 7f:88:ac:35:f0:42:fd:48:6c:54:e5:fe:c9:48:68:8b:e2:f8: b2:73:0a:de:81:88:ad:d3:bf:c5:9e:dd:04:b7:cb:21:00:e4: a1:fd:4b:27:c2:3d:3a:54:fb:b4:7c:df:3e:98:15:8d:b8:db: d7:96:6a:95:7d:f5:5d:81:9c:c8:32:13:b2:27:c6:fe:fb:30: 57:dd:c2:d9:6c:db:20:33:54:73:db:9b:ec:fe:34:6e:f3:72: 6b:37:4f:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kbY3dm0CUXr7YwB3QeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWJhYTJmMTc2OWEzZGRmNjVmODczZGMzMWYzNTFlZjA3 OGFkMjUwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD EygwMGZhYTk4NzM1MDM5MTA1M2FhZTQ2YTdkNzhmYjljNGExOGUzZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZPa6XL+Ig5S8aOoiwYOCTdsBNdt xslRe34YGfnZq4i/sKvyU3lN1Q5kD3dy+ER+XBh8ro8QG/O/yLdBBXa5FGVC8CkV nDQB+oz4ujVGOTP9rY36VniFSpes7bUsUJ7CiJB3VsTy1Dp4elB3TapkbDCtvjH2 H5PZmt7nViZRhFKIzl8uTqJx2Pr5hsLTS1KwDtecV3WiCd8xkcam4QkBz6/pF/8i /aR7o4zTdjh5QKMZH+XIIBTzDkjunteYJcr/N54rSOPIG8VaubMewrqa2x1EqOVd VQFTTLsP3cnscGS3Dfqm/s+s3dlDbRMr6kyRaDs3BdvzRWzB1Z96kK2ZzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD6qYc1A5EFOq5Gp9ePucShjj8UMB8GA1UdIwQY MBaAFIjrqi8XaaPd9l+HPcMfNR7weK0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEt MmJiZjQ2ODg0NTg1LzEvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEtMmJiZjQ2ODg0NTg1 LzEvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNKQT5mK cGISGR4yOGKj4AklMH6u950DzYmC/TXk7ZJDmnlkngwjyMWlOLSEXV9WEAekrEzl c4cdktwbRxjxfD7Xk91EFerf07wtbbwkYGR1gl48q3PzY1PJp+koQJcO5g143ZQB o7s2JI/fTFUSVZPHL//NgFq+MqEm6Hsh5nrYYOWgYHWK5eNtAjpTCQkHwi68p/Pr 77WLvtmTm4x0CiEef4isNfBC/UhsVOX+yUhoi+L4snMK3oGIrdO/xZ7dBLfLIQDk of1LJ8I9OlT7tHzfPpgVjbjb15ZqlX31XYGcyDITsifG/vswV93C2WzbIDNUc9ub 7P40bvNyazdPJA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:09 2025 by rpki-client