This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json) Hash identifier: vR733yunrk6JSPhP9tROib7F98h3tiLGp6rDqJgVK5U= Subject key identifier: 31:4B:D5:2C:EE:8D:C0:CC:8D:2D:21:D1:E2:72:9E:A0:F6:73:D3:E2 Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Certificate serial: 019AF2E44D4EB80FF3359D707E050DD9E6F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 09:00:39 +0000 Manifest this update: Sat 06 Dec 2025 09:00:39 +0000 Manifest next update: Sun 07 Dec 2025 09:00:39 +0000 Files and hashes: 1: DnNAXyr4mJbh9D2dH8b-Eqlp6x0.roa (hash: cdWRTytNkhNuFkycWb/FtgfNdkALU3YMBn7zWtYw/bY=) 2: Se8nAg0-xrQhHXIbYS2eSChavY4.roa (hash: NDhJCH+ULsr3l5nHLuoOYh5KnKuXbhQ8t+mEi5JVlO4=) 3: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: Z3vycErjESvUY+RUcBmBqeX7u6UMVgvZ1htXCj+O2LU=) 4: t4twN0aSa0K9eQj9_U5RX1_3ON0.roa (hash: bDhB2OJvqSQD0pWiRQx+Ywx+t/naLGQ733yplp/x/5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4d:4e:b8:0f:f3:35:9d:70:7e:05:0d:d9:e6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Validity Not Before: Dec 6 09:00:39 2025 GMT Not After : Dec 7 09:00:39 2025 GMT Subject: CN=314bd52cee8dc0cc8d2d21d1e2729ea0f673d3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:45:28:41:ee:4e:0e:1a:b7:37:22:64:b1: 74:93:12:a5:b4:48:b8:6c:1d:ec:19:a0:66:ef:4e: 5e:a0:9e:76:72:c3:f8:08:5a:d4:16:6e:63:d8:73: 75:36:a4:ef:36:a6:09:32:46:9f:49:7d:6e:36:38: c8:8e:92:4a:4c:11:af:57:16:82:d7:52:6a:e2:2b: e2:cf:60:0d:6b:b3:d2:02:f7:d6:d0:ee:a4:2a:89: 0e:7f:c7:08:3c:f8:48:42:9c:e6:71:91:a0:b6:35: 17:14:3d:55:ee:70:11:e6:74:62:13:71:2a:26:9b: 7f:ca:38:a4:ab:b1:a8:21:9f:dd:22:47:ae:0a:a3: 63:f3:12:7a:c6:29:6e:a0:6b:7d:17:6c:c0:95:0a: 62:e7:a9:33:7c:70:7c:1d:d1:1c:04:22:2e:26:65: 0c:19:46:c6:ca:80:cd:8c:20:ca:d8:c6:c5:0a:cc: ea:19:a6:cc:b1:b5:e1:42:36:33:f6:20:7e:73:55: 48:43:f8:6a:55:38:8f:bc:72:6a:c1:d4:fd:22:1f: e5:a4:d7:43:26:3d:e3:02:38:e9:4f:3a:83:ed:c3: 99:49:3d:04:55:44:eb:ae:75:30:4e:c1:a5:b4:0c: 9d:a2:cd:5c:a2:e5:cf:45:96:80:8c:01:08:6c:54: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:D5:2C:EE:8D:C0:CC:8D:2D:21:D1:E2:72:9E:A0:F6:73:D3:E2 X509v3 Authority Key Identifier: keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2a:b8:31:5c:bb:60:52:f7:30:b2:01:ce:55:53:af:6e:ba: 61:f3:46:62:99:d3:37:fd:da:46:12:ee:0a:92:12:df:f4:7e: f7:14:41:80:6b:f3:73:1d:45:3b:31:c6:19:f4:3a:fc:ad:9d: a7:b7:d8:02:a3:2e:36:9d:c0:10:0d:4e:35:94:38:c3:e4:48: f6:4a:6c:33:cf:9d:a4:77:c3:da:43:24:81:30:84:cc:ec:10: 00:3c:54:84:4b:f9:fb:c9:81:aa:e2:e8:83:77:e3:5f:e8:6e: c5:1a:30:09:12:c7:b4:b9:0c:42:d8:10:67:51:3c:d1:1b:51: c7:13:7a:7c:f4:eb:76:94:87:a6:b8:19:36:92:77:4f:1a:6c: 57:e6:22:79:63:6a:73:f8:cd:0f:5a:b7:00:b4:8e:bc:84:c9: c4:73:81:c5:7e:44:68:6f:9d:e2:7c:f7:64:f7:c9:4f:c4:4b: ca:a7:02:e4:24:80:f6:54:91:fd:08:ba:9c:a7:3e:1d:43:56: a1:97:2a:a2:f0:53:99:58:2b:be:be:25:48:1d:84:e5:0e:52: cd:0b:db:e1:63:d1:67:1a:7d:d7:c7:e4:0a:c7:25:06:8f:db: 90:38:3b:d0:c2:b7:e1:12:cf:7a:61:4f:07:ca:20:60:08:56: da:83:e4:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5E1OuA/zNZ1wfgUN2eb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz Mjc3ZTgwHhcNMjUxMjA2MDkwMDM5WhcNMjUxMjA3MDkwMDM5WjAzMTEwLwYDVQQD EygzMTRiZDUyY2VlOGRjMGNjOGQyZDIxZDFlMjcyOWVhMGY2NzNkM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFVFKEHuTg4atzciZLF0kxKltEi4 bB3sGaBm705eoJ52csP4CFrUFm5j2HN1NqTvNqYJMkafSX1uNjjIjpJKTBGvVxaC 11Jq4iviz2ANa7PSAvfW0O6kKokOf8cIPPhIQpzmcZGgtjUXFD1V7nAR5nRiE3Eq Jpt/yjikq7GoIZ/dIkeuCqNj8xJ6xiluoGt9F2zAlQpi56kzfHB8HdEcBCIuJmUM GUbGyoDNjCDK2MbFCszqGabMsbXhQjYz9iB+c1VIQ/hqVTiPvHJqwdT9Ih/lpNdD Jj3jAjjpTzqD7cOZST0EVUTrrnUwTsGltAydos1couXPRZaAjAEIbFT4CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFL1SzujcDMjS0h0eJynqD2c9PiMB8GA1UdIwQY MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt N2YzYTQyODE3MWM3LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3 LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSq4MVy7 YFL3MLIBzlVTr266YfNGYpnTN/3aRhLuCpIS3/R+9xRBgGvzcx1FOzHGGfQ6/K2d p7fYAqMuNp3AEA1ONZQ4w+RI9kpsM8+dpHfD2kMkgTCEzOwQADxUhEv5+8mBquLo g3fjX+huxRowCRLHtLkMQtgQZ1E80RtRxxN6fPTrdpSHprgZNpJ3TxpsV+YieWNq c/jND1q3ALSOvITJxHOBxX5EaG+d4nz3ZPfJT8RLyqcC5CSA9lSR/Qi6nKc+HUNW oZcqovBTmVgrvr4lSB2E5Q5SzQvb4WPRZxp918fkCsclBo/bkDg70MK34RLPemFP B8ogYAhW2oPkyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:46 2025 by rpki-client