This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json) Hash identifier: +aqPWp/tMe4LTSLEyIdLQp27ySuUp+Grk2VZf0wt1VY= Subject key identifier: 0B:EF:C2:D9:A1:F1:20:DC:1A:0A:EA:C1:E2:91:86:76:64:A7:71:8E Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Certificate serial: 019B367BFCA558B87BAD8388C877DAE802DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 12:00:53 +0000 Manifest this update: Fri 19 Dec 2025 12:00:53 +0000 Manifest next update: Sat 20 Dec 2025 12:00:53 +0000 Files and hashes: 1: DnNAXyr4mJbh9D2dH8b-Eqlp6x0.roa (hash: cdWRTytNkhNuFkycWb/FtgfNdkALU3YMBn7zWtYw/bY=) 2: Se8nAg0-xrQhHXIbYS2eSChavY4.roa (hash: NDhJCH+ULsr3l5nHLuoOYh5KnKuXbhQ8t+mEi5JVlO4=) 3: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: C6/hYf7531HR6AcYf3UtY+lbw3KZN1L7dJc0yWMwZOk=) 4: t4twN0aSa0K9eQj9_U5RX1_3ON0.roa (hash: bDhB2OJvqSQD0pWiRQx+Ywx+t/naLGQ733yplp/x/5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:fc:a5:58:b8:7b:ad:83:88:c8:77:da:e8:02:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Validity Not Before: Dec 19 12:00:53 2025 GMT Not After : Dec 20 12:00:53 2025 GMT Subject: CN=0befc2d9a1f120dc1a0aeac1e291867664a7718e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:e1:72:cd:1d:f3:7e:5c:fb:6b:aa:35:6b: 14:98:00:6e:02:e3:0d:20:88:2a:b8:e3:74:0f:3e: 61:c2:89:9c:56:59:fd:60:ec:2a:6e:e9:da:3a:61: 7d:3d:15:47:a2:9b:71:84:75:ab:2e:68:68:87:01: 1c:3b:6f:ed:70:d2:7f:80:0b:19:26:b3:58:e9:c2: 43:5e:cf:05:21:34:b3:92:46:25:52:f1:17:b9:af: 04:b0:41:5d:19:17:ab:16:31:50:43:40:0d:60:9f: 29:0c:24:c7:74:41:e5:b4:40:b5:f9:79:ae:98:5a: 5a:09:6e:bc:0b:de:4f:d5:17:07:9b:97:03:17:0c: ba:a5:7d:60:37:fb:e6:92:bc:4c:25:da:74:f4:f0: 0a:5d:3a:16:91:0a:39:3c:ad:56:37:5e:b5:20:b6: d1:4a:86:6c:0e:8d:6b:e2:68:49:42:ca:4d:97:99: a9:95:2d:94:94:0f:e7:6a:fd:49:05:85:ba:d4:0e: 48:0e:ef:26:9b:81:28:ff:00:25:54:55:f7:de:ca: 3e:70:85:ca:37:68:55:51:48:1f:45:9e:16:2b:20: 8c:97:12:40:f6:eb:be:ad:9d:0a:b2:a6:b7:6e:c7: 4e:10:21:a0:04:48:4d:a1:4c:d7:05:f1:9f:06:54: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EF:C2:D9:A1:F1:20:DC:1A:0A:EA:C1:E2:91:86:76:64:A7:71:8E X509v3 Authority Key Identifier: keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4b:38:28:45:16:30:9e:0a:47:20:8e:71:98:ad:bc:4f:46: 30:a4:20:0d:fd:3d:85:e8:6f:e9:73:af:ee:a6:9f:89:17:7c: 4b:c7:f0:26:6e:1a:11:a4:d2:96:25:e7:41:d0:16:4b:07:13: ea:b3:bc:b4:4b:5a:d1:ba:a0:0c:c0:0a:40:35:24:ba:70:98: 98:81:5a:ee:c0:62:30:c6:b6:12:32:0c:2b:7a:9b:cd:de:95: de:e0:56:f3:e8:c9:c1:74:bd:9b:58:67:00:b8:e1:bc:ef:43: b3:c5:8d:96:62:00:45:2e:d8:58:d8:31:5b:8e:87:d2:3d:f4: 0d:7f:d8:e5:0e:14:a6:b1:11:6d:30:26:15:cd:7e:a8:b3:08: 97:08:2f:cd:55:71:65:04:dd:ac:8a:dc:4c:cd:9d:08:cd:5a: 4a:55:e6:32:b2:4d:f5:de:d8:b4:a3:b3:9d:a9:06:84:ab:77: 5c:d2:08:f5:c8:93:99:93:71:5d:25:70:6e:16:56:88:22:10: 7a:0a:ad:14:8f:f2:23:7d:60:32:84:e7:f0:68:9b:ef:06:92: 9f:63:a0:14:73:0e:b9:ca:1f:c1:6c:31:33:5e:74:4c:9e:ae: 3a:b0:fa:2e:6e:17:97:8d:f3:47:27:ba:e1:25:68:f2:db:14: c3:18:73:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e/ylWLh7rYOIyHfa6ALaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz Mjc3ZTgwHhcNMjUxMjE5MTIwMDUzWhcNMjUxMjIwMTIwMDUzWjAzMTEwLwYDVQQD EygwYmVmYzJkOWExZjEyMGRjMWEwYWVhYzFlMjkxODY3NjY0YTc3MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYrhcs0d835c+2uqNWsUmABuAuMN IIgquON0Dz5hwomcVln9YOwqbunaOmF9PRVHoptxhHWrLmhohwEcO2/tcNJ/gAsZ JrNY6cJDXs8FITSzkkYlUvEXua8EsEFdGRerFjFQQ0ANYJ8pDCTHdEHltEC1+Xmu mFpaCW68C95P1RcHm5cDFwy6pX1gN/vmkrxMJdp09PAKXToWkQo5PK1WN161ILbR SoZsDo1r4mhJQspNl5mplS2UlA/nav1JBYW61A5IDu8mm4Eo/wAlVFX33so+cIXK N2hVUUgfRZ4WKyCMlxJA9uu+rZ0Ksqa3bsdOECGgBEhNoUzXBfGfBlRy5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvvwtmh8SDcGgrqweKRhnZkp3GOMB8GA1UdIwQY MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt N2YzYTQyODE3MWM3LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3 LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWks4KEUW MJ4KRyCOcZitvE9GMKQgDf09hehv6XOv7qafiRd8S8fwJm4aEaTSliXnQdAWSwcT 6rO8tEta0bqgDMAKQDUkunCYmIFa7sBiMMa2EjIMK3qbzd6V3uBW8+jJwXS9m1hn ALjhvO9Ds8WNlmIARS7YWNgxW46H0j30DX/Y5Q4UprERbTAmFc1+qLMIlwgvzVVx ZQTdrIrcTM2dCM1aSlXmMrJN9d7YtKOznakGhKt3XNII9ciTmZNxXSVwbhZWiCIQ egqtFI/yI31gMoTn8Gib7waSn2OgFHMOucofwWwxM150TJ6uOrD6Lm4Xl43zRye6 4SVo8tsUwxhzvQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:01:07 2025 by rpki-client