This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft File: m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json) Hash identifier: w+B/oIewWMWas5nPZm5iQkWwkAH4Pi/3E+HuAo+Evls= Subject key identifier: 4C:4A:04:82:A3:0C:49:1D:03:27:66:FD:43:FE:1E:BC:C4:09:7A:89 Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf Certificate serial: 019AF50ACB1EF0A91AD0104AE6012DFADDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 19:01:56 +0000 Manifest this update: Sat 06 Dec 2025 19:01:56 +0000 Manifest next update: Sun 07 Dec 2025 19:01:56 +0000 Files and hashes: 1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=) 2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: gL1kaWgN3BaAvCpf/pOgnbO32HdHrRhCbWB5tvhdf6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:cb:1e:f0:a9:1a:d0:10:4a:e6:01:2d:fa:dd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf Validity Not Before: Dec 6 19:01:56 2025 GMT Not After : Dec 7 19:01:56 2025 GMT Subject: CN=4c4a0482a30c491d032766fd43fe1ebcc4097a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:98:f0:19:ed:1c:57:f7:79:cc:8d:7b:be: 20:5e:45:4a:f5:c4:28:04:0c:f8:b6:08:f9:8d:b0: 3c:bb:89:3b:db:ad:06:c9:7f:da:b0:6e:46:7f:5f: db:a6:fe:17:39:c2:c6:8f:99:f7:ea:b2:fb:87:68: 3a:3a:bd:34:de:c3:b4:9a:e5:fc:b8:49:c8:0c:14: 5b:24:cf:49:b0:fe:f6:67:e3:d0:81:08:d5:04:0d: 5a:87:a4:e3:76:0b:a8:48:8b:ba:90:0e:c7:d2:5c: 42:da:4d:cb:77:81:43:1d:31:0c:59:99:91:3b:8c: df:b4:06:93:2e:24:89:f9:b4:b6:78:99:ff:99:0d: 78:b2:95:74:fc:d0:c5:cb:bb:61:d8:e6:7d:7f:38: a7:0a:42:d0:4f:e0:cd:61:59:c7:b9:4a:c3:7e:47: 1c:55:e1:da:90:2c:f4:e8:e2:25:be:91:9a:8d:46: 4d:b6:3e:d7:04:7f:58:78:67:b5:97:f0:09:7a:37: 35:c3:37:c3:6c:57:43:06:e5:c0:6e:49:49:b0:66: c8:43:3d:a9:84:b7:62:34:d8:a5:a1:ff:c8:44:2f: fe:e3:f5:dc:dc:a4:af:33:55:53:7b:35:96:89:bc: bb:66:83:1a:cd:73:90:7f:ab:80:05:6d:2f:9f:21: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4A:04:82:A3:0C:49:1D:03:27:66:FD:43:FE:1E:BC:C4:09:7A:89 X509v3 Authority Key Identifier: keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2a:1c:ca:dc:62:6b:72:c7:78:f1:f6:db:45:95:44:b8:99: 52:5f:d3:b5:88:76:26:ef:88:26:47:42:6a:b7:fe:7c:e4:0c: 8c:a9:0e:2f:85:1a:bf:db:78:b9:43:3b:27:37:0e:c8:0c:47: 13:38:4f:d4:d1:a0:99:2b:eb:7f:e4:66:31:15:c7:a7:e6:e8: 08:dd:ca:41:d5:f1:7f:d3:d3:5e:76:79:31:e2:5e:a9:22:c8: 6e:a4:8d:ed:1e:2b:c2:b0:e0:a6:89:d5:0b:a2:6f:4a:bc:31: 92:6a:b0:fd:03:e6:2c:c2:07:90:1e:7e:8d:b1:d1:e2:f4:1d: 15:35:70:bf:90:9e:bf:c1:8e:2e:27:5f:7e:3b:51:48:f8:e0: 47:c1:56:c0:74:41:9a:83:85:38:4b:3d:13:2e:e0:86:f8:d0: 92:56:99:ca:45:92:c2:6b:22:24:86:3b:c3:6a:28:4a:25:cf: 59:04:6b:e7:e2:be:e0:42:c8:1a:95:63:a9:89:ed:2c:85:f8: ad:a5:bd:3f:ba:27:b4:48:00:e8:08:66:95:03:ab:24:32:ee: 3c:e4:16:f2:13:13:18:91:1a:d5:4e:2e:bd:63:d3:67:55:99: 76:06:95:be:b8:37:b0:78:89:31:28:4e:bb:ea:47:b3:b1:c6: cf:7f:44:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Csse8Kka0BBK5gEt+t3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTIyOGQ3MTNiZWM2ZDRjOWFiY2VjMmYwMGEyOGU4MjFm YzI3YmYwHhcNMjUxMjA2MTkwMTU2WhcNMjUxMjA3MTkwMTU2WjAzMTEwLwYDVQQD Eyg0YzRhMDQ4MmEzMGM0OTFkMDMyNzY2ZmQ0M2ZlMWViY2M0MDk3YTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfCY8BntHFf3ecyNe74gXkVK9cQo BAz4tgj5jbA8u4k7260GyX/asG5Gf1/bpv4XOcLGj5n36rL7h2g6Or003sO0muX8 uEnIDBRbJM9JsP72Z+PQgQjVBA1ah6TjdguoSIu6kA7H0lxC2k3Ld4FDHTEMWZmR O4zftAaTLiSJ+bS2eJn/mQ14spV0/NDFy7th2OZ9fzinCkLQT+DNYVnHuUrDfkcc VeHakCz06OIlvpGajUZNtj7XBH9YeGe1l/AJejc1wzfDbFdDBuXAbklJsGbIQz2p hLdiNNilof/IRC/+4/Xc3KSvM1VTezWWiby7ZoMazXOQf6uABW0vnyFa0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExKBIKjDEkdAydm/UP+HrzECXqJMB8GA1UdIwQY MBaAFJviKNcTvsbUyavOwvAKKOgh/Ce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGIt ZTM1YTIyM2I0OWM3LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGItZTM1YTIyM2I0OWM3 LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSocytxi a3LHePH220WVRLiZUl/TtYh2Ju+IJkdCarf+fOQMjKkOL4Uav9t4uUM7JzcOyAxH EzhP1NGgmSvrf+RmMRXHp+boCN3KQdXxf9PTXnZ5MeJeqSLIbqSN7R4rwrDgponV C6JvSrwxkmqw/QPmLMIHkB5+jbHR4vQdFTVwv5Cev8GOLidffjtRSPjgR8FWwHRB moOFOEs9Ey7ghvjQklaZykWSwmsiJIY7w2ooSiXPWQRr5+K+4ELIGpVjqYntLIX4 raW9P7ontEgA6AhmlQOrJDLuPOQW8hMTGJEa1U4uvWPTZ1WZdgaVvrg3sHiJMShO u+pHs7HGz39EKA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:11 2025 by rpki-client