This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json) Hash identifier: WBsQ50fL5SJKU3wVXNcjTWaAoY37+qM/0EeTOjJcFqQ= Subject key identifier: 31:DE:A9:52:33:69:45:79:19:FB:3E:9A:16:5B:4D:74:62:C9:46:7C Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Certificate serial: 019AF164290FBB24E2D04FA294FFF60F98D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=) 2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: cXTupSmkqWLJTqLFuUJoeH38fz67/k4iNnVypBbFWho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:29:0f:bb:24:e2:d0:4f:a2:94:ff:f6:0f:98:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=31dea9523369457919fb3e9a165b4d7462c9467c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:6d:7c:81:30:ba:e7:27:f0:e3:ff:0b:7c: 73:75:71:00:3f:16:8c:b4:54:26:15:41:4c:ca:31: 7a:12:74:64:03:65:b2:79:51:f9:08:ab:82:f0:79: 82:3b:6b:2c:e9:2b:97:91:08:f9:f7:80:86:2c:62: 19:c3:35:2a:24:18:70:0f:b9:eb:93:bb:aa:b5:db: 5b:4d:c0:54:24:d7:14:1f:cf:e6:f8:d2:f3:be:8d: 92:b6:e7:0f:83:13:b1:f7:1c:d5:cc:30:c6:b0:5a: 09:13:a8:10:7d:45:6e:3f:8e:61:ce:71:0f:b1:10: de:ed:62:cf:18:96:66:87:84:d6:cd:46:ae:52:92: 6d:71:4b:2c:14:08:5a:7a:2f:27:38:59:b2:f3:4f: 04:be:94:80:7f:31:17:4c:ae:94:5d:6d:af:f2:ae: 61:26:3c:fd:7e:0c:1e:f8:8d:1e:69:99:8c:59:8c: b7:ac:63:ef:4a:83:18:19:63:2f:ac:dc:74:de:42: e3:84:50:4a:71:3f:77:82:65:97:34:3f:68:c3:2b: 32:09:40:c8:41:a6:ce:10:1f:d0:49:fe:d1:33:5b: b6:3a:4a:a0:bd:d7:48:84:84:b4:0e:9a:d8:78:cb: 17:f7:93:0a:5e:00:95:13:97:77:61:54:13:2b:88: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:A9:52:33:69:45:79:19:FB:3E:9A:16:5B:4D:74:62:C9:46:7C X509v3 Authority Key Identifier: keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:88:4e:d9:72:76:7b:27:27:4b:7f:bf:2b:f9:46:a4:e5:b3: e0:50:39:3c:7d:0e:46:01:aa:1e:7e:81:47:f1:b1:0b:a5:9e: 7b:6a:6b:65:e0:16:ff:94:5d:c9:83:d9:90:03:0e:5a:74:50: 3c:65:97:26:ae:d9:98:1f:e5:6b:80:c7:b6:7c:23:28:a6:1b: e2:8b:2a:3b:dc:ba:63:74:2c:10:30:9d:ca:0c:5c:6e:14:1d: 21:00:67:1c:fa:1d:1d:e4:56:cc:d7:f9:7b:74:81:26:90:aa: a4:af:e8:84:6a:10:16:e0:d5:19:72:ca:3a:7b:2e:d3:a9:a1: d7:a1:e0:5a:50:f2:2a:bc:3d:04:67:d0:28:e4:be:15:0e:c2: f9:df:f6:d0:cb:94:93:a2:6b:99:77:2d:f4:0c:bf:ff:65:79: fe:32:e1:eb:b3:f2:8d:19:0e:ca:09:27:1c:df:d8:1f:4b:9f: d4:9b:d8:a4:c3:b4:74:81:b3:19:6d:10:b4:8d:82:ef:82:24: 7c:3b:2c:df:0c:72:23:38:27:6f:3e:41:c0:18:59:9e:ad:e0: 9e:1e:16:c4:12:c9:3c:9c:0b:2e:35:b3:7b:c0:59:c6:02:c3: 61:8c:fc:b9:b8:05:1f:3f:f4:17:41:b8:58:76:88:46:da:40: d1:9c:ac:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCkPuyTi0E+ilP/2D5jTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTExNGE4ZmVjM2Y1M2NiZTljYmY2ZDZhMGJlMDA4OWUz MGM3NTcwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EygzMWRlYTk1MjMzNjk0NTc5MTlmYjNlOWExNjViNGQ3NDYyYzk0NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qhtfIEwuucn8OP/C3xzdXEAPxaM tFQmFUFMyjF6EnRkA2WyeVH5CKuC8HmCO2ss6SuXkQj594CGLGIZwzUqJBhwD7nr k7uqtdtbTcBUJNcUH8/m+NLzvo2StucPgxOx9xzVzDDGsFoJE6gQfUVuP45hznEP sRDe7WLPGJZmh4TWzUauUpJtcUssFAhaei8nOFmy808EvpSAfzEXTK6UXW2v8q5h Jjz9fgwe+I0eaZmMWYy3rGPvSoMYGWMvrNx03kLjhFBKcT93gmWXND9owysyCUDI QabOEB/QSf7RM1u2OkqgvddIhIS0DprYeMsX95MKXgCVE5d3YVQTK4gYWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHeqVIzaUV5Gfs+mhZbTXRiyUZ8MB8GA1UdIwQY MBaAFCDhFKj+w/U8vpy/bWoL4AieMMdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEt MzUzNGM4YzVhMzUxLzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEtMzUzNGM4YzVhMzUx LzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYhO2XJ2 eycnS3+/K/lGpOWz4FA5PH0ORgGqHn6BR/GxC6Wee2prZeAW/5RdyYPZkAMOWnRQ PGWXJq7ZmB/la4DHtnwjKKYb4osqO9y6Y3QsEDCdygxcbhQdIQBnHPodHeRWzNf5 e3SBJpCqpK/ohGoQFuDVGXLKOnsu06mh16HgWlDyKrw9BGfQKOS+FQ7C+d/20MuU k6JrmXct9Ay//2V5/jLh67PyjRkOygknHN/YH0uf1JvYpMO0dIGzGW0QtI2C74Ik fDss3wxyIzgnbz5BwBhZnq3gnh4WxBLJPJwLLjWze8BZxgLDYYz8ubgFHz/0F0G4 WHaIRtpA0Zysvw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:59 2025 by rpki-client