This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: SJ32kMYXm1f/BPXPmZKjeZ7NM4HD61Xhsor9w08OTfs= Subject key identifier: 91:D2:E0:67:CA:36:19:75:5A:6D:C6:65:AD:D2:69:76:46:93:6A:D3 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019AF31C2086EC64AAECD26A4D0FEA237018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 155B Signing time: Sat 06 Dec 2025 10:01:38 +0000 Manifest this update: Sat 06 Dec 2025 10:01:38 +0000 Manifest next update: Sun 07 Dec 2025 10:01:38 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: rFIVoHXp+ipAz4D4YJtGQbBTqhsOyAbBozNbcgLPxuA=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:20:86:ec:64:aa:ec:d2:6a:4d:0f:ea:23:70:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Dec 6 10:01:38 2025 GMT Not After : Dec 7 10:01:38 2025 GMT Subject: CN=91d2e067ca3619755a6dc665add2697646936ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:fc:7e:4d:bb:72:45:ac:9b:68:b5:73:e1: fa:db:b8:e1:c4:37:9c:02:e8:96:72:b8:95:5e:8c: d6:cb:27:0e:ad:20:8e:bd:36:53:8e:ab:4c:96:15: c6:df:dd:f1:5b:49:2d:45:ff:90:2f:ea:92:68:b5: 5d:bb:b5:8b:3c:16:0e:9d:35:3f:41:40:9d:04:13: e9:bb:ad:f8:5b:17:19:69:94:6c:e4:ab:05:ea:ca: aa:8e:4a:f4:b1:e3:0d:44:66:3d:21:94:0a:ba:e6: 4b:2a:98:6b:26:25:8e:b6:2c:44:c1:a1:58:14:c3: f6:2b:7b:57:90:cf:32:b4:7d:73:b8:c9:62:94:85: 14:05:25:eb:a0:e9:63:1d:4a:02:b3:87:6a:08:70: 50:9d:29:d2:c1:07:88:53:fa:a8:73:47:f5:07:ee: 7d:78:c0:aa:a6:98:41:76:bb:47:27:6e:96:77:de: 83:95:c1:8e:64:ab:e4:96:ac:41:34:7c:1d:64:70: 0a:38:0d:d1:94:f4:1e:62:32:40:4c:a2:a9:9d:97: 65:da:cd:bb:22:53:1b:43:ab:60:7d:6a:27:d6:f0: f5:90:dc:ce:7a:85:e0:c8:11:2f:ba:dc:5c:33:e7: 41:ae:55:9e:88:3f:3d:67:d5:9f:7f:32:50:0a:4a: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D2:E0:67:CA:36:19:75:5A:6D:C6:65:AD:D2:69:76:46:93:6A:D3 X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:14:52:17:0c:eb:a5:81:92:3a:cd:c2:f7:3a:d9:9a:30:f9: e7:f3:b4:dd:5b:a8:16:36:d7:6a:20:71:a2:63:2f:fc:14:03: 14:72:8c:f8:50:9d:77:dd:5e:c2:82:5a:53:1e:c8:3d:6b:12: 12:1d:1c:fb:58:88:77:0f:83:d7:64:ec:0b:0c:87:57:ce:1a: 75:d6:7c:c3:92:90:21:11:80:29:a7:4b:dd:04:94:4c:0b:5b: 50:b9:f5:b9:ea:af:4f:60:2f:6c:c2:05:fe:b0:23:d7:74:44: ad:9f:51:7b:3c:60:98:aa:99:c2:18:e8:43:70:09:ef:41:c2: a6:ba:83:08:70:76:36:83:09:0d:d0:d3:e7:09:48:1b:3c:b0: 14:99:23:4c:9a:22:f0:0e:b7:05:d6:9b:0b:b6:a1:d3:6f:d7: 0f:2f:83:7c:ba:67:f5:2f:ea:48:98:08:c4:31:dc:ff:05:90: 78:aa:76:3f:45:95:db:1f:f9:d6:6c:f6:90:c6:6b:62:f7:53: f2:dc:51:05:1d:3d:e4:e8:0e:20:33:1c:80:dd:74:46:e5:65: 78:28:ae:3a:ca:a8:a1:88:3c:1b:90:5d:1f:ed:74:d0:66:49: d0:d4:0d:6a:74:e1:42:38:f2:35:f1:fa:1c:e1:be:cf:8a:16: fe:5d:0c:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCCG7GSq7NJqTQ/qI3AYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUxMjA2MTAwMTM4WhcNMjUxMjA3MTAwMTM4WjAzMTEwLwYDVQQD Eyg5MWQyZTA2N2NhMzYxOTc1NWE2ZGM2NjVhZGQyNjk3NjQ2OTM2YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv78fk27ckWsm2i1c+H627jhxDec AuiWcriVXozWyycOrSCOvTZTjqtMlhXG393xW0ktRf+QL+qSaLVdu7WLPBYOnTU/ QUCdBBPpu634WxcZaZRs5KsF6sqqjkr0seMNRGY9IZQKuuZLKphrJiWOtixEwaFY FMP2K3tXkM8ytH1zuMlilIUUBSXroOljHUoCs4dqCHBQnSnSwQeIU/qoc0f1B+59 eMCqpphBdrtHJ26Wd96DlcGOZKvklqxBNHwdZHAKOA3RlPQeYjJATKKpnZdl2s27 IlMbQ6tgfWon1vD1kNzOeoXgyBEvutxcM+dBrlWeiD89Z9WffzJQCkpGawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHS4GfKNhl1Wm3GZa3SaXZGk2rTMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARRSFwzr pYGSOs3C9zrZmjD55/O03VuoFjbXaiBxomMv/BQDFHKM+FCdd91ewoJaUx7IPWsS Eh0c+1iIdw+D12TsCwyHV84addZ8w5KQIRGAKadL3QSUTAtbULn1ueqvT2AvbMIF /rAj13RErZ9RezxgmKqZwhjoQ3AJ70HCprqDCHB2NoMJDdDT5wlIGzywFJkjTJoi 8A63BdabC7ah02/XDy+DfLpn9S/qSJgIxDHc/wWQeKp2P0WV2x/51mz2kMZrYvdT 8txRBR095OgOIDMcgN10RuVleCiuOsqooYg8G5BdH+100GZJ0NQNanThQjjyNfH6 HOG+z4oW/l0MdA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:44 2025 by rpki-client