This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft File: iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json) Hash identifier: UkWLvMi/fnxWqK57M8rJWEO2T65NIU7nJdZK+tU0VeY= Subject key identifier: CB:FE:FF:2B:A6:4A:18:26:B4:FE:32:52:BA:BB:0D:E9:5D:E2:B5:63 Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25 Certificate issuer: /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25 Certificate serial: 019B3F11CB98A2F4996A8641A5D6B4F69DDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft Manifest number: 0F27 Signing time: Sun 21 Dec 2025 04:01:29 +0000 Manifest this update: Sun 21 Dec 2025 04:01:29 +0000 Manifest next update: Mon 22 Dec 2025 04:01:29 +0000 Files and hashes: 1: P5TwA4gqR6DNAZ9Tx38K6wVBeSw.roa (hash: JFHWlXs6ts8+WEohOsphMs0bmJPDZeURLkqEXMqad1U=) 2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: ufAmuQMxUBz5yMWH2CFDx5G0ReAgTRjEr5Bi/KcumiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:cb:98:a2:f4:99:6a:86:41:a5:d6:b4:f6:9d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25 Validity Not Before: Dec 21 04:01:29 2025 GMT Not After : Dec 22 04:01:29 2025 GMT Subject: CN=cbfeff2ba64a1826b4fe3252babb0de95de2b563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:c2:a4:e2:39:1d:9e:bc:7a:5b:75:dc:c2: ae:47:dc:25:54:ea:da:be:71:c0:fb:8a:7f:95:d9: 9b:3f:7d:56:9f:c2:81:bc:d8:7b:ae:dd:6c:71:28: 1f:db:e3:95:f1:4d:87:8f:43:17:33:4d:0d:62:63: 6c:6a:c0:20:78:5a:15:dd:3a:f5:5b:0f:79:f0:76: ea:a7:a0:b1:a7:86:49:0b:17:a6:8b:ef:1a:ef:ee: 54:3a:b5:24:e4:26:7e:bd:68:9e:6a:d5:cc:b5:f7: 3f:8f:8b:27:84:b6:a0:e4:b6:26:1d:f4:38:49:3a: 77:9f:97:c9:5f:cc:8b:16:fa:6d:39:e8:23:4a:10: 61:22:c0:3e:6d:d2:ab:a5:c7:d2:33:29:26:b6:5a: 73:06:ca:95:29:76:b7:90:44:de:50:78:bd:f9:bd: 6a:b6:a7:46:da:9c:ed:91:a4:c1:e4:aa:72:28:ac: 31:33:0a:33:ff:31:0d:ff:cf:79:29:5f:52:16:00: 9e:73:1d:f7:11:8a:42:7b:4d:f7:ad:45:7e:05:bf: 4f:b5:64:1a:42:20:e7:e9:3c:21:4c:ee:6c:91:96: 87:c1:8a:94:d2:96:3e:11:88:0e:0b:4e:e7:cb:8f: 46:37:6d:82:8c:c3:90:e1:f1:cc:81:b1:cc:45:0c: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FE:FF:2B:A6:4A:18:26:B4:FE:32:52:BA:BB:0D:E9:5D:E2:B5:63 X509v3 Authority Key Identifier: keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:09:64:5f:11:bc:f1:15:7b:c6:cd:0a:75:34:34:f7:e1:3d: 79:9e:7a:36:94:a9:80:74:88:ef:5d:4d:5d:f9:7d:63:e7:7d: 50:e5:71:03:6b:ce:ec:f1:8a:f5:ef:1c:79:ec:08:05:a5:9e: 25:81:c5:e2:f1:d5:08:5e:d7:00:eb:07:76:ad:ed:e7:d0:40: ad:06:20:77:72:43:f5:d1:00:60:0e:6a:ab:f5:13:44:bd:72: 56:f8:89:e7:6c:76:5b:c8:9a:0a:b1:bb:f2:06:ac:24:bd:65: 7c:04:b4:8f:af:ac:1b:c7:92:f7:57:3d:27:9b:d8:3c:eb:0f: 0d:45:92:0c:1e:22:e2:58:7e:cd:df:93:b3:df:ca:f0:43:f1: 72:02:c3:cb:48:e5:68:a3:92:70:29:4c:e2:bc:af:ab:05:77: 8e:c4:03:0e:fe:02:a0:57:30:71:18:ef:eb:c1:cb:ae:3e:17: 23:a7:e0:28:45:6a:60:72:ff:03:67:8e:36:94:46:82:43:19: 1e:42:a6:3d:1d:92:d1:09:ab:95:86:df:50:ed:04:22:33:fc: e0:cc:11:09:d6:44:83:59:14:0a:65:04:f8:77:a0:31:e6:96: 51:24:93:4e:e1:39:dc:fe:92:d8:16:0f:16:44:9b:75:c5:1d: 58:dd:e5:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EcuYovSZaoZBpda09p3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWJhYTJmMTc2OWEzZGRmNjVmODczZGMzMWYzNTFlZjA3 OGFkMjUwHhcNMjUxMjIxMDQwMTI5WhcNMjUxMjIyMDQwMTI5WjAzMTEwLwYDVQQD EyhjYmZlZmYyYmE2NGExODI2YjRmZTMyNTJiYWJiMGRlOTVkZTJiNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnffCpOI5HZ68elt13MKuR9wlVOra vnHA+4p/ldmbP31Wn8KBvNh7rt1scSgf2+OV8U2Hj0MXM00NYmNsasAgeFoV3Tr1 Ww958Hbqp6Cxp4ZJCxemi+8a7+5UOrUk5CZ+vWieatXMtfc/j4snhLag5LYmHfQ4 STp3n5fJX8yLFvptOegjShBhIsA+bdKrpcfSMykmtlpzBsqVKXa3kETeUHi9+b1q tqdG2pztkaTB5KpyKKwxMwoz/zEN/895KV9SFgCecx33EYpCe033rUV+Bb9PtWQa QiDn6TwhTO5skZaHwYqU0pY+EYgOC07ny49GN22CjMOQ4fHMgbHMRQxaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv+/yumShgmtP4yUrq7Deld4rVjMB8GA1UdIwQY MBaAFIjrqi8XaaPd9l+HPcMfNR7weK0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEt MmJiZjQ2ODg0NTg1LzEvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEtMmJiZjQ2ODg0NTg1 LzEvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAlkXxG8 8RV7xs0KdTQ09+E9eZ56NpSpgHSI711NXfl9Y+d9UOVxA2vO7PGK9e8ceewIBaWe JYHF4vHVCF7XAOsHdq3t59BArQYgd3JD9dEAYA5qq/UTRL1yVviJ52x2W8iaCrG7 8gasJL1lfAS0j6+sG8eS91c9J5vYPOsPDUWSDB4i4lh+zd+Ts9/K8EPxcgLDy0jl aKOScClM4ryvqwV3jsQDDv4CoFcwcRjv68HLrj4XI6fgKEVqYHL/A2eONpRGgkMZ HkKmPR2S0QmrlYbfUO0EIjP84MwRCdZEg1kUCmUE+HegMeaWUSSTTuE53P6S2BYP FkSbdcUdWN3lgw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:09 2025 by rpki-client