This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json) Hash identifier: f9ruCjGL1qyOQUINWNYpc+hV9LRgvJg7RZYz4UvR2fg= Subject key identifier: B1:45:82:07:14:A2:AF:0A:2E:B9:AC:53:F3:B4:C1:A0:FB:38:14:D1 Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7 Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7 Certificate serial: 019AF19B84C05B69C3B7E6308E3B65C642D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft Manifest number: 108F Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=) 2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=) 3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: KlfUuNRXvLzFgSr96a+37B6cx+x+FcYMGlo5NdMSsME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:84:c0:5b:69:c3:b7:e6:30:8e:3b:65:c6:42:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7 Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=b145820714a2af0a2eb9ac53f3b4c1a0fb3814d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:51:61:56:47:7e:f7:a0:aa:3f:fd:c1:47: 8e:cd:a8:5d:47:16:db:5f:f5:b6:b1:b2:d6:4a:5d: 49:03:f1:23:f8:00:c6:f6:5a:4c:ce:06:f7:34:59: 42:1b:47:87:74:39:c2:c4:68:fd:10:5e:4c:1f:94: 3a:15:41:11:d7:bd:ca:89:21:44:e6:e8:c7:b6:fb: e5:df:8e:d8:2d:e5:ae:25:05:e1:34:9d:9e:3b:5c: 30:78:36:00:47:22:0f:6e:b5:ae:08:f2:a4:2f:ac: 99:14:f0:bf:6f:5a:e6:7a:b7:f7:93:fb:ac:33:f5: 3e:d9:52:4c:3d:45:13:57:49:28:4a:15:38:9e:b0: 6f:71:e8:d3:9c:45:4c:f6:38:c8:58:55:6f:39:5d: 0b:ec:d6:6b:1c:f3:46:fc:29:a7:cd:74:25:0f:8e: 17:18:cd:fb:73:0b:b2:16:35:35:9a:af:20:a2:c6: 28:2b:28:65:e5:c0:97:bb:1f:ce:64:19:b8:7b:d3: 2d:47:47:ba:94:bc:14:18:d4:c9:d2:d5:39:fb:dc: 9c:ef:e1:7a:cc:e9:c7:95:e4:1c:c9:e8:75:50:b6: f6:1b:c0:6e:81:52:a5:6d:48:46:db:e4:2f:c6:2d: c4:bb:e7:3a:7f:fc:fa:e2:69:96:6e:38:3f:03:48: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:45:82:07:14:A2:AF:0A:2E:B9:AC:53:F3:B4:C1:A0:FB:38:14:D1 X509v3 Authority Key Identifier: keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:92:ca:b5:a2:95:d1:e9:eb:cd:63:da:5a:11:e7:2e:60:a4: de:9f:59:23:be:6e:ed:43:65:cb:63:03:80:01:a3:b8:34:e8: 16:d6:d7:96:6b:87:9e:45:de:4d:b1:2b:58:44:7b:9d:f6:c9: 6a:6f:ae:2b:0e:84:98:4e:6d:8e:42:56:e7:6c:f3:17:4c:8b: 45:64:b5:27:e0:81:e7:a6:39:69:ec:d9:44:5e:ec:a6:2f:ac: b6:d2:87:f4:16:d1:29:e2:0f:fa:ce:21:a3:4d:14:77:8b:29: 27:b3:62:07:3d:38:be:82:1a:06:b6:2b:98:9e:cb:93:24:94: a4:c3:88:18:0b:dc:b4:33:7d:90:84:64:8e:28:52:ab:4b:de: 18:f9:15:84:f9:bb:da:9c:8b:fb:a2:c3:23:c4:cc:bd:2b:9e: a7:f2:88:0f:8f:ac:9f:d3:7d:67:82:84:a7:fb:01:0b:45:8f: 1d:64:2b:15:fd:4f:88:6f:1f:8e:6b:df:dc:1c:30:af:d5:da: d6:27:0a:dc:74:70:6e:4b:99:55:e6:37:92:ce:6b:c7:83:db: 54:91:39:bc:f7:c6:5f:f6:58:7c:4f:30:91:09:15:f8:3a:d3: fe:59:92:17:88:8f:7f:5f:43:ea:b5:87:78:d3:23:1d:3b:80: 46:2f:86:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4TAW2nDt+YwjjtlxkLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5 MWQyYTcwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EyhiMTQ1ODIwNzE0YTJhZjBhMmViOWFjNTNmM2I0YzFhMGZiMzgxNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz1RYVZHfvegqj/9wUeOzahdRxbb X/W2sbLWSl1JA/Ej+ADG9lpMzgb3NFlCG0eHdDnCxGj9EF5MH5Q6FUER173KiSFE 5ujHtvvl347YLeWuJQXhNJ2eO1wweDYARyIPbrWuCPKkL6yZFPC/b1rmerf3k/us M/U+2VJMPUUTV0koShU4nrBvcejTnEVM9jjIWFVvOV0L7NZrHPNG/CmnzXQlD44X GM37cwuyFjU1mq8gosYoKyhl5cCXux/OZBm4e9MtR0e6lLwUGNTJ0tU5+9yc7+F6 zOnHleQcyeh1ULb2G8BugVKlbUhG2+Qvxi3Eu+c6f/z64mmWbjg/A0jy4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFFggcUoq8KLrmsU/O0waD7OBTRMB8GA1UdIwQY MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3 LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5LKtaKV 0enrzWPaWhHnLmCk3p9ZI75u7UNly2MDgAGjuDToFtbXlmuHnkXeTbErWER7nfbJ am+uKw6EmE5tjkJW52zzF0yLRWS1J+CB56Y5aezZRF7spi+sttKH9BbRKeIP+s4h o00Ud4spJ7NiBz04voIaBrYrmJ7LkySUpMOIGAvctDN9kIRkjihSq0veGPkVhPm7 2pyL+6LDI8TMvSuep/KID4+sn9N9Z4KEp/sBC0WPHWQrFf1PiG8fjmvf3Bwwr9Xa 1icK3HRwbkuZVeY3ks5rx4PbVJE5vPfGX/ZYfE8wkQkV+DrT/lmSF4iPf19D6rWH eNMjHTuARi+GkA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:35 2025 by rpki-client