This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json) Hash identifier: vEhWJ4YV58QukVb68z1aPeQDAww0VJiKzcEgH8YkLbg= Subject key identifier: 93:F6:B0:68:99:C7:DA:AF:9A:64:1F:11:D9:9C:7B:83:A3:6F:5B:4A Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486 Certificate serial: 019B6844980CFAFC235C6BB33A2A554B2053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft Manifest number: 08F4 Signing time: Mon 29 Dec 2025 04:01:24 +0000 Manifest this update: Mon 29 Dec 2025 04:01:24 +0000 Manifest next update: Tue 30 Dec 2025 04:01:24 +0000 Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=) 2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: LSw9ghnj3CNdQhPGf+7qAuLHCpzF2XX09RsMHpnM3NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:98:0c:fa:fc:23:5c:6b:b3:3a:2a:55:4b:20:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486 Validity Not Before: Dec 29 04:01:24 2025 GMT Not After : Dec 30 04:01:24 2025 GMT Subject: CN=93f6b06899c7daaf9a641f11d99c7b83a36f5b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:be:c6:c8:8d:7c:bd:25:8c:2b:36:56:12: f2:e1:21:5a:70:17:bf:da:28:e7:4c:07:9d:be:fa: ff:c4:59:df:5a:62:f8:05:c0:f0:54:36:19:e1:ca: c2:fe:9d:68:7e:52:b3:11:10:94:37:e3:80:22:ba: 19:db:a5:e3:b5:c3:ca:ff:fd:3e:97:81:a2:73:1b: 7f:4a:b0:c3:cf:4c:57:29:43:3a:6b:eb:2b:a3:b4: b0:94:35:0f:d2:35:c2:99:64:67:93:ec:ed:7d:4b: e1:13:9c:05:61:40:c9:f3:c0:df:e8:ff:de:d3:71: 74:47:44:84:a6:1d:1a:53:a9:43:df:69:6c:a9:ec: dc:0b:1c:ad:f6:60:1a:46:2e:01:18:dc:5c:26:ab: 44:da:38:51:cc:11:9e:81:34:73:39:3a:f0:7a:a4: b1:e0:b4:71:64:b4:1f:b7:98:0a:52:2e:a8:8f:ea: 44:96:7d:40:3e:af:63:f3:04:87:30:f3:ab:0e:bc: 82:d0:25:0d:ed:24:f8:5f:1e:ec:f1:51:8d:b2:db: aa:e9:9f:71:ba:28:2c:a2:3f:db:3d:7d:96:20:58: a0:89:3e:78:60:66:87:bd:24:58:ff:61:01:cd:3e: 83:7f:fb:92:fe:fe:bc:3e:db:a4:97:80:5b:87:c4: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F6:B0:68:99:C7:DA:AF:9A:64:1F:11:D9:9C:7B:83:A3:6F:5B:4A X509v3 Authority Key Identifier: keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a6:01:10:2f:4c:46:28:cf:a6:c3:01:58:fc:3b:2d:aa:e5: cb:56:f2:08:9f:04:2b:d1:e5:a3:e5:da:76:5b:75:a0:d7:c1: 4c:d1:a0:a0:1b:56:0a:2a:94:91:a1:20:50:57:29:8b:c5:de: 2c:28:57:40:c8:35:61:9c:75:0a:84:38:dc:a2:54:18:0d:d4: f8:33:74:8c:98:ba:5e:b2:ca:e5:3d:06:62:8f:04:2a:96:a0: 18:61:d3:b2:62:35:c4:3a:21:1b:07:53:69:7d:a9:35:57:d2: c4:4d:f0:bc:79:a6:25:83:c6:a8:ab:f2:14:49:79:a2:64:3e: 8a:0c:ad:7b:46:a8:f2:ec:67:57:f7:4b:6d:81:d1:7f:b9:58: e4:8b:e1:08:1d:5f:29:37:97:34:82:84:3a:20:e1:c0:e6:86: 53:9e:d5:79:50:90:11:50:aa:2b:d7:f9:6c:2e:0c:f2:21:81: 34:1b:0c:c7:c9:e8:03:63:b9:40:05:3b:4f:10:87:01:94:11: 48:67:b1:05:d0:53:3a:dc:9d:ee:ca:d7:43:d1:32:0b:50:4d: bc:be:aa:a4:7f:0b:50:fd:f7:27:95:4b:c5:92:4a:fd:a8:4c: a8:93:f1:05:cf:a5:40:ba:f6:51:8e:68:7e:eb:87:f6:70:7b: f5:63:28:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRJgM+vwjXGuzOipVSyBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOGZhOTkyYmMwYTYxZGIyY2JlNzg2ZTFjNTlkMzYwY2Nl NTQ0ODYwHhcNMjUxMjI5MDQwMTI0WhcNMjUxMjMwMDQwMTI0WjAzMTEwLwYDVQQD Eyg5M2Y2YjA2ODk5YzdkYWFmOWE2NDFmMTFkOTljN2I4M2EzNmY1YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rO+xsiNfL0ljCs2VhLy4SFacBe/ 2ijnTAedvvr/xFnfWmL4BcDwVDYZ4crC/p1oflKzERCUN+OAIroZ26XjtcPK//0+ l4Gicxt/SrDDz0xXKUM6a+sro7SwlDUP0jXCmWRnk+ztfUvhE5wFYUDJ88Df6P/e 03F0R0SEph0aU6lD32lsqezcCxyt9mAaRi4BGNxcJqtE2jhRzBGegTRzOTrweqSx 4LRxZLQft5gKUi6oj+pEln1APq9j8wSHMPOrDryC0CUN7ST4Xx7s8VGNstuq6Z9x uigsoj/bPX2WIFigiT54YGaHvSRY/2EBzT6Df/uS/v68Ptukl4Bbh8SLawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJP2sGiZx9qvmmQfEdmce4Ojb1tKMB8GA1UdIwQY MBaAFIqPqZK8CmHbLL54bhxZ02DM5USGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWIt OTZhNjAxYmI2YmE4LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWItOTZhNjAxYmI2YmE4 LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaYBEC9M RijPpsMBWPw7Larly1byCJ8EK9Hlo+Xadlt1oNfBTNGgoBtWCiqUkaEgUFcpi8Xe LChXQMg1YZx1CoQ43KJUGA3U+DN0jJi6XrLK5T0GYo8EKpagGGHTsmI1xDohGwdT aX2pNVfSxE3wvHmmJYPGqKvyFEl5omQ+igyte0ao8uxnV/dLbYHRf7lY5IvhCB1f KTeXNIKEOiDhwOaGU57VeVCQEVCqK9f5bC4M8iGBNBsMx8noA2O5QAU7TxCHAZQR SGexBdBTOtyd7srXQ9EyC1BNvL6qpH8LUP33J5VLxZJK/ahMqJPxBc+lQLr2UY5o fuuH9nB79WMoYw== -----END CERTIFICATE-----Generated at Mon Dec 29 08:26:37 2025 by rpki-client