This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json) Hash identifier: G4O+RBDwnL6Uht1Yjad8tpv6PuPbT0frNEpH+Okbnp0= Subject key identifier: 65:55:A1:26:C7:89:79:D3:E2:A6:86:1C:E3:40:36:17:15:36:E4:C3 Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116 Certificate serial: 019AF19AAA0BEF14C280182D3CF7A17A734D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=) 2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=) 3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: vt9ZvLGLAzK9exKD3MjIN0+crBuP7WutLZobqCb5opk=) 4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:aa:0b:ef:14:c2:80:18:2d:3c:f7:a1:7a:73:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e719f426793b1e9063771460abd311a3dff116 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=6555a126c78979d3e2a6861ce34036171536e4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:41:61:a7:98:ee:c1:af:80:50:f6:05:f0: 83:44:84:9f:08:dc:f5:cb:c3:c3:f1:86:a8:e1:df: 7e:bf:c0:e7:b3:49:cc:30:3f:72:95:68:d1:c3:5d: 21:55:e8:a0:05:80:bd:31:3d:c1:c2:8d:6e:53:45: 2e:7b:76:5e:6c:c9:69:73:2c:84:75:0f:90:1f:fb: 40:5c:92:8c:a2:87:a5:eb:eb:fc:34:a4:f7:48:d1: e0:4e:77:32:0e:b5:e2:46:b2:33:71:cf:42:f8:7f: 79:f1:d4:f3:66:9e:b0:b6:c3:dc:1d:c2:0c:9a:56: 57:05:d5:a9:df:45:ea:9b:a8:54:1c:76:fa:66:08: d0:a4:42:2c:18:e4:83:f9:05:97:b9:e9:59:db:ce: 24:71:4a:87:fe:e0:3f:94:0a:9c:64:45:64:f6:ad: 62:83:2c:a5:5d:d5:be:05:05:98:2d:81:82:38:38: a9:04:4c:a0:18:d9:37:02:21:a6:d1:6f:91:35:4b: 1e:46:b6:48:70:9a:33:98:d2:5f:e0:ad:16:d0:7b: 47:09:3c:0f:48:77:0a:55:87:58:08:a5:7a:88:e8: d6:e6:8f:d3:de:b3:eb:ae:6f:2d:ef:ca:37:1e:bf: f8:4f:29:9d:f8:e0:bf:68:5e:9c:5d:e0:9e:ea:6c: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:A1:26:C7:89:79:D3:E2:A6:86:1C:E3:40:36:17:15:36:E4:C3 X509v3 Authority Key Identifier: keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:84:9f:9b:00:e9:22:f3:2e:c0:ab:30:15:73:60:74:ea:53: 6a:35:1d:2d:33:3d:0f:07:a9:ea:84:40:45:83:4f:d7:2f:ce: 3d:fd:e4:34:3c:36:76:4c:e2:c2:0e:a6:e3:fd:1e:72:a2:78: ee:f5:2f:9c:88:15:c4:d0:25:d8:e3:96:95:ae:6c:e2:54:0d: 51:53:3c:bd:88:c3:b1:cb:ee:07:95:2e:98:6e:bf:ff:bc:81: 82:9f:96:10:ef:a6:31:78:ef:94:95:02:19:59:2b:7b:16:66: d9:f1:3d:8c:78:6d:f8:37:3a:e2:4f:72:bf:8e:f5:61:0e:b9: a4:d6:57:72:28:b6:69:90:21:b0:45:15:25:a2:0b:e1:9b:64: d7:da:21:21:67:db:2f:11:30:1d:01:42:ab:6e:18:1e:57:d1: 64:ff:8c:b2:e3:d5:47:bb:22:63:f4:48:be:1b:66:7d:94:61: c4:fe:9b:08:48:de:14:df:56:d0:68:c7:a6:dc:5c:00:47:ef: 39:8f:52:16:66:c9:99:8b:2a:ec:71:b4:ad:73:de:36:28:70: 00:2f:12:8d:3f:5f:c5:a5:48:da:01:e6:9e:79:6a:2f:d4:89: 05:8b:d0:af:87:28:9f:fa:de:8b:96:7b:e5:82:bf:92:0e:97: a3:96:f0:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqoL7xTCgBgtPPehenNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZTcxOWY0MjY3OTNiMWU5MDYzNzcxNDYwYWJkMzExYTNk ZmYxMTYwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD Eyg2NTU1YTEyNmM3ODk3OWQzZTJhNjg2MWNlMzQwMzYxNzE1MzZlNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIVBYaeY7sGvgFD2BfCDRISfCNz1 y8PD8Yao4d9+v8Dns0nMMD9ylWjRw10hVeigBYC9MT3Bwo1uU0Uue3ZebMlpcyyE dQ+QH/tAXJKMooel6+v8NKT3SNHgTncyDrXiRrIzcc9C+H958dTzZp6wtsPcHcIM mlZXBdWp30Xqm6hUHHb6ZgjQpEIsGOSD+QWXuelZ284kcUqH/uA/lAqcZEVk9q1i gyylXdW+BQWYLYGCODipBEygGNk3AiGm0W+RNUseRrZIcJozmNJf4K0W0HtHCTwP SHcKVYdYCKV6iOjW5o/T3rPrrm8t78o3Hr/4Tymd+OC/aF6cXeCe6mxuuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVVoSbHiXnT4qaGHONANhcVNuTDMB8GA1UdIwQY MBaAFIjnGfQmeTsekGN3FGCr0xGj3/EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjct YWU1MmUxNTZiNzdlLzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjctYWU1MmUxNTZiNzdl LzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboSfmwDp IvMuwKswFXNgdOpTajUdLTM9Dwep6oRARYNP1y/OPf3kNDw2dkziwg6m4/0ecqJ4 7vUvnIgVxNAl2OOWla5s4lQNUVM8vYjDscvuB5UumG6//7yBgp+WEO+mMXjvlJUC GVkrexZm2fE9jHht+Dc64k9yv471YQ65pNZXcii2aZAhsEUVJaIL4Ztk19ohIWfb LxEwHQFCq24YHlfRZP+MsuPVR7siY/RIvhtmfZRhxP6bCEjeFN9W0GjHptxcAEfv OY9SFmbJmYsq7HG0rXPeNihwAC8SjT9fxaVI2gHmnnlqL9SJBYvQr4con/rei5Z7 5YK/kg6Xo5bwIw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:33 2025 by rpki-client