This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json) Hash identifier: aK01FDGYbWCeSaFCM8NCPYnjjCoGOOD/tdzeUrkhrfA= Subject key identifier: 7C:69:03:36:14:66:02:37:9D:D3:56:DA:3C:C4:5C:CA:1E:E5:61:5B Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Certificate serial: 019AF389DB0882227FD98B35B05ED02DD3BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft Manifest number: 0FD0 Signing time: Sat 06 Dec 2025 12:01:29 +0000 Manifest this update: Sat 06 Dec 2025 12:01:29 +0000 Manifest next update: Sun 07 Dec 2025 12:01:29 +0000 Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=) 2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: yjYrn26fzeOcsGS7cBBD6lwTLP+QxeLWKwCpjbupZtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:db:08:82:22:7f:d9:8b:35:b0:5e:d0:2d:d3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Validity Not Before: Dec 6 12:01:29 2025 GMT Not After : Dec 7 12:01:29 2025 GMT Subject: CN=7c690336146602379dd356da3cc45cca1ee5615b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4d:d5:a5:3f:b7:a9:19:b1:aa:09:29:67:2c: 9a:93:5e:a7:c7:79:49:00:b6:85:0e:4f:46:9b:74: 30:20:e6:c4:68:db:42:d4:55:19:22:8c:f1:54:a8: 60:b6:e9:74:5a:08:1f:79:48:ea:67:e5:8f:b7:76: d5:81:bd:c8:fa:17:8b:af:96:f4:95:1e:d7:c4:70: fb:ad:b5:af:9d:da:2a:c1:23:a5:aa:b8:9e:52:91: 54:9e:b9:f0:0a:e8:72:1e:a3:c1:9a:80:da:a9:c5: 70:86:fb:0d:51:94:e2:2d:93:b4:54:2b:04:81:eb: ea:6b:41:ad:39:d8:50:fd:1d:d7:87:4e:11:fe:ac: 73:26:22:f0:57:8d:e3:9c:69:89:7e:13:8c:a2:88: 33:bd:24:48:ae:ac:23:c7:4d:7b:8a:6e:ce:73:d7: ce:ab:0d:44:e7:fd:7e:92:be:18:4c:2c:de:1a:00: 27:64:09:06:2f:98:17:b2:ae:67:2b:c9:1c:03:cb: e6:fc:be:b9:36:d6:7f:01:b9:d4:70:2f:3c:53:14: af:7a:8b:98:47:96:e1:5b:0f:80:8d:b2:07:fd:ba: 49:0c:ac:37:6b:09:e1:43:bc:de:31:d0:60:75:a1: ee:11:f2:c6:2b:fa:a3:d1:fe:8a:14:50:62:d5:55: ac:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:03:36:14:66:02:37:9D:D3:56:DA:3C:C4:5C:CA:1E:E5:61:5B X509v3 Authority Key Identifier: keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5e:b0:c9:90:07:38:6d:b8:ee:9e:36:74:ae:29:ae:8f:c5: 41:f0:14:38:b6:a0:c2:52:b5:e2:4f:d1:05:00:63:0f:a9:7e: 50:61:2c:7d:6d:66:a2:74:a1:7a:a6:95:76:1b:00:52:f8:76: a2:00:84:b7:ed:73:0c:4e:e1:33:c3:d6:d5:73:57:f8:08:f9: 29:07:b7:fa:86:ab:35:8e:94:b3:21:6e:4d:79:03:33:14:47: ae:68:d1:56:fb:11:aa:d4:29:dc:4e:30:e3:13:55:8b:c5:40: 9a:78:23:0e:38:79:de:c5:f1:1a:52:d3:a1:a2:0c:2a:c9:1f: ad:5c:5a:07:41:d7:54:d9:4a:a1:dd:e9:47:e4:02:3a:8c:71: 8b:e6:e5:bd:b0:69:99:45:db:4a:66:ea:ac:ae:a6:10:dd:12: 2a:f2:00:f6:7b:c8:eb:26:1f:a0:4b:e3:aa:d7:8b:1c:34:19: 72:34:11:6c:b4:62:44:d3:37:e2:16:81:ae:60:a2:d2:d1:97: da:e2:c9:a2:8c:fd:f7:fa:78:ed:4d:26:43:d6:9c:cf:6b:c2: 61:3c:33:8c:16:88:62:84:7f:d9:5c:37:f5:b1:69:ef:fd:96: 64:11:cb:16:fe:99:81:48:30:f0:2b:fa:9e:2c:ce:88:f7:ec: 89:8f:9d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidsIgiJ/2Ys1sF7QLdO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhODM1NTVjYWEyMmNlOWI5YjE2ODM1MDNhMTRlM2NkZDgz NmUwMWIwHhcNMjUxMjA2MTIwMTI5WhcNMjUxMjA3MTIwMTI5WjAzMTEwLwYDVQQD Eyg3YzY5MDMzNjE0NjYwMjM3OWRkMzU2ZGEzY2M0NWNjYTFlZTU2MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl03VpT+3qRmxqgkpZyyak16nx3lJ ALaFDk9Gm3QwIObEaNtC1FUZIozxVKhgtul0WggfeUjqZ+WPt3bVgb3I+heLr5b0 lR7XxHD7rbWvndoqwSOlqrieUpFUnrnwCuhyHqPBmoDaqcVwhvsNUZTiLZO0VCsE gevqa0GtOdhQ/R3Xh04R/qxzJiLwV43jnGmJfhOMoogzvSRIrqwjx017im7Oc9fO qw1E5/1+kr4YTCzeGgAnZAkGL5gXsq5nK8kcA8vm/L65NtZ/AbnUcC88UxSveouY R5bhWw+AjbIH/bpJDKw3awnhQ7zeMdBgdaHuEfLGK/qj0f6KFFBi1VWsQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxpAzYUZgI3ndNW2jzEXMoe5WFbMB8GA1UdIwQY MBaAFIqDVVyqIs6bmxaDUDoU483YNuAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAt MWYzMjU0NzNjZTY4LzEvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAtMWYzMjU0NzNjZTY4 LzEvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF6wyZAH OG247p42dK4pro/FQfAUOLagwlK14k/RBQBjD6l+UGEsfW1monSheqaVdhsAUvh2 ogCEt+1zDE7hM8PW1XNX+Aj5KQe3+oarNY6UsyFuTXkDMxRHrmjRVvsRqtQp3E4w 4xNVi8VAmngjDjh53sXxGlLToaIMKskfrVxaB0HXVNlKod3pR+QCOoxxi+blvbBp mUXbSmbqrK6mEN0SKvIA9nvI6yYfoEvjqteLHDQZcjQRbLRiRNM34haBrmCi0tGX 2uLJooz99/p47U0mQ9acz2vCYTwzjBaIYoR/2Vw39bFp7/2WZBHLFv6ZgUgw8Cv6 nizOiPfsiY+d1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:18 2025 by rpki-client