This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json) Hash identifier: GdokABE/JUYTFOjlL9NNho7AjH6XXUxADUA+3Tm+QhI= Subject key identifier: F0:3A:0A:8F:99:11:8A:71:11:89:0F:1F:74:A5:9D:A1:20:A2:FA:AE Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c Certificate serial: 019B39EB3B5E5D1CECFA952BD9CFCF1065EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft Manifest number: 15A5 Signing time: Sat 20 Dec 2025 04:01:15 +0000 Manifest this update: Sat 20 Dec 2025 04:01:15 +0000 Manifest next update: Sun 21 Dec 2025 04:01:15 +0000 Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=) 2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: NFgB1aDO/qTfhjWw8PMNmO5q1oqe4DejrwllhQtdk+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:3b:5e:5d:1c:ec:fa:95:2b:d9:cf:cf:10:65:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c Validity Not Before: Dec 20 04:01:15 2025 GMT Not After : Dec 21 04:01:15 2025 GMT Subject: CN=f03a0a8f99118a7111890f1f74a59da120a2faae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:c8:07:94:05:12:5e:3f:86:a4:b4:9a:57: 79:b0:f2:2d:79:08:8f:33:d3:1e:f6:03:97:24:b1: ce:dc:42:be:3d:38:51:b2:d5:db:77:4d:4e:e2:27: f6:b6:82:fa:0b:3c:6f:52:36:40:f3:00:ee:3d:83: bf:ce:db:36:ef:b4:17:03:54:f4:1e:7b:24:a4:fb: 1d:07:06:11:23:e0:b8:d2:22:b2:a3:17:8c:b9:21: 4f:b8:79:bc:56:55:a0:1a:82:d3:82:96:45:70:0e: 03:52:b6:42:13:f7:b4:c4:e8:3f:ff:de:63:34:b7: 24:13:45:49:cf:2b:66:e7:68:31:7f:f2:83:99:cb: 1d:27:56:5a:2a:c1:2b:d8:50:ab:f0:48:4d:71:d6: 22:6d:38:ed:34:d5:84:b8:24:6c:57:96:fd:53:c7: 06:45:ef:c7:23:b7:e1:c5:e7:75:58:36:9a:92:e5: 7c:11:e1:c9:0b:88:09:b2:08:d5:8f:9a:5d:67:c1: 1d:e5:92:98:24:6f:0f:04:90:51:af:45:bb:9b:f7: 51:0e:7e:ec:18:79:41:0c:dc:6a:b9:0e:d3:bf:0c: c8:b6:2a:a8:e6:ad:b1:f3:6b:fa:14:66:f8:10:0b: 9b:ab:5a:e2:ba:94:5a:49:2f:a5:f8:40:06:4c:ab: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3A:0A:8F:99:11:8A:71:11:89:0F:1F:74:A5:9D:A1:20:A2:FA:AE X509v3 Authority Key Identifier: keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:47:61:e2:fd:02:a2:db:48:47:5b:dd:99:80:2c:4b:f8:76: f2:f5:2c:b0:c2:27:95:19:0a:84:f1:21:e3:ec:8d:da:eb:49: 94:23:3d:fd:0e:6b:e1:8f:71:f0:a5:c1:1a:d4:ba:de:fb:ee: d5:c9:1f:eb:1a:08:55:e6:e0:ea:28:22:a0:ac:95:c5:b5:60: 00:92:63:04:90:3c:89:67:d2:2a:63:1b:36:d2:db:7c:90:60: e0:9a:8a:e6:8c:d8:8e:e3:68:1a:8d:a6:da:1e:67:1d:fc:4d: 46:68:36:11:31:d8:a6:98:35:01:c0:bf:57:0b:ca:75:e3:f7: 5f:cf:07:3f:bb:c1:1c:8f:ec:a7:ec:30:d5:ed:49:82:ac:5f: 7d:cd:82:20:8d:a5:47:8b:15:65:78:d7:9f:36:3c:e6:eb:ca: e9:0c:2c:22:3a:54:e0:1b:e4:bd:1a:c7:dc:02:3d:f2:fc:40: de:e0:4c:a4:e9:ac:eb:eb:33:ad:f1:7b:4d:de:83:d1:c8:a4: 15:39:6a:75:0c:cd:4e:7e:3c:bb:39:57:d1:d7:9e:27:5e:73: d2:40:31:b6:91:78:ed:20:4c:4e:25:d3:c8:c9:8d:f1:a5:f3: 13:9b:7c:10:6e:f6:11:74:9d:79:35:6a:18:a1:c2:dc:b1:6c: 20:38:d2:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56zteXRzs+pUr2c/PEGXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZWJhZjU1NGM5MTQ2OGMxMDUyNGJhZjc0MmVhNGIxYTVk MGI0OWMwHhcNMjUxMjIwMDQwMTE1WhcNMjUxMjIxMDQwMTE1WjAzMTEwLwYDVQQD EyhmMDNhMGE4Zjk5MTE4YTcxMTE4OTBmMWY3NGE1OWRhMTIwYTJmYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PDIB5QFEl4/hqS0mld5sPIteQiP M9Me9gOXJLHO3EK+PThRstXbd01O4if2toL6CzxvUjZA8wDuPYO/zts277QXA1T0 HnskpPsdBwYRI+C40iKyoxeMuSFPuHm8VlWgGoLTgpZFcA4DUrZCE/e0xOg//95j NLckE0VJzytm52gxf/KDmcsdJ1ZaKsEr2FCr8EhNcdYibTjtNNWEuCRsV5b9U8cG Re/HI7fhxed1WDaakuV8EeHJC4gJsgjVj5pdZ8Ed5ZKYJG8PBJBRr0W7m/dRDn7s GHlBDNxquQ7TvwzItiqo5q2x82v6FGb4EAubq1riupRaSS+l+EAGTKuq7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPA6Co+ZEYpxEYkPH3SlnaEgovquMB8GA1UdIwQY MBaAFCDrr1VMkUaMEFJLr3QupLGl0LScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEt NTlmMTlmYTEwYTFjLzEvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEtNTlmMTlmYTEwYTFj LzEvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0dh4v0C ottIR1vdmYAsS/h28vUssMInlRkKhPEh4+yN2utJlCM9/Q5r4Y9x8KXBGtS63vvu 1ckf6xoIVebg6igioKyVxbVgAJJjBJA8iWfSKmMbNtLbfJBg4JqK5ozYjuNoGo2m 2h5nHfxNRmg2ETHYppg1AcC/VwvKdeP3X88HP7vBHI/sp+ww1e1Jgqxffc2CII2l R4sVZXjXnzY85uvK6QwsIjpU4BvkvRrH3AI98vxA3uBMpOms6+szrfF7Td6D0cik FTlqdQzNTn48uzlX0deeJ15z0kAxtpF47SBMTiXTyMmN8aXzE5t8EG72EXSdeTVq GKHC3LFsIDjSew== -----END CERTIFICATE-----Generated at Sat Dec 20 09:52:36 2025 by rpki-client