This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: L/u0VRKE7gKcijYpOAzH4jFOMClfs526NeCwMa906aY= Subject key identifier: DB:E5:04:30:57:01:11:9B:EC:40:55:6E:9F:3D:D4:70:20:DB:E6:3D Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B3CEBB53661AC2C0576C93AEFE60BA818 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 17AD Signing time: Sat 20 Dec 2025 18:00:38 +0000 Manifest this update: Sat 20 Dec 2025 18:00:38 +0000 Manifest next update: Sun 21 Dec 2025 18:00:38 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=) 4: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 5: AbjHdO_ih7eu4AB0MD87DSrEVyg.roa (hash: K/wxvuWNfZCed3xovqP1ilL+Dg1htCygooCGyG2tXuA=) 6: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: QF99qrStsWgTVXiGuzoa2n2AmXhOzGMPHrb0TgF1CaU=) 8: OQwatOOKNts1l5QciIRYlIrZrUA.roa (hash: /WVw3A1izDTxQhVDT4B9DMpIDCfh/f6b1AgbmhKnBE4=) 9: TsT5WaKHHZB-JvTLxHzgqzbC7j4.roa (hash: nhQWYMu3qPydKoRyyFbgvaQmgpO09CG2cC8eGuvFdmU=) 10: VM7NBzljc-wtTrqP56M9539lbgc.roa (hash: vBQyHiLXkYiKjrIGh1q5dMs6KoS64i4gV+QTksQfMRY=) 11: XACDzW2DvJtXZqh32shSyTGpMfo.roa (hash: 7jDJaTEf/pbjfn/nXaVKj3Ipty/13MWGNhQwOBvO9uQ=) 12: dxfXnbx8g-ueseuqILyAyDh00Qs.roa (hash: vb8oCBCazuh1bfgy8OwyPqKmC8xg0hB0ISse4SKyWgE=) 13: eBMU47RJAdEYTPzla1b8mlhhl6A.roa (hash: M/ja1MMxsAp21s/DGBsjHZmAiVCmpwTnVIxkdI37Uso=) 14: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 15: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=) 16: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) 17: pL3i2ZZ9emPHPv8_low9IJJ1mqM.roa (hash: RjovUh5nlh9maakqrR1LT9Y7/iHkn9blWZ2NzRVi0JI=) 18: zK-byoszE4NY6E1kzAerRlMAkRw.roa (hash: rU/ovIRGgstJt6kwx00cqegZjBk/AcsVlza0mM2AauE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b5:36:61:ac:2c:05:76:c9:3a:ef:e6:0b:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Dec 20 18:00:38 2025 GMT Not After : Dec 21 18:00:38 2025 GMT Subject: CN=dbe504305701119bec40556e9f3dd47020dbe63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:6d:3b:77:23:14:c6:06:62:9d:5e:19:e2: c1:62:c6:3d:4d:90:5f:1c:45:2f:c5:61:08:28:11: 10:4c:15:aa:d4:23:50:1c:c8:45:48:b4:bf:dd:ed: 56:b0:c6:44:81:08:2b:7b:7f:6a:16:58:18:9f:3f: cd:47:af:df:ae:58:3a:90:d0:64:3e:74:05:72:23: 1a:01:04:e0:2d:31:86:0f:8e:d9:76:dc:29:c3:9f: dc:bc:c7:8c:de:35:f1:67:0b:41:1d:03:5b:7b:4e: 3a:54:3b:ca:95:17:e7:75:0f:06:ee:5c:68:8a:86: a2:d7:dd:91:7d:c6:47:72:61:76:48:2c:90:b4:5e: fa:83:0f:4a:2d:be:84:ac:09:98:d9:ae:48:c5:87: 85:3e:10:55:47:7c:d6:e7:d2:47:e7:85:66:99:3e: 84:41:b2:2d:d8:f7:91:c4:ef:5a:e6:9e:d9:ea:de: 2f:ce:61:a2:69:e1:fc:74:58:51:d3:be:a7:1b:0f: f7:a4:31:5d:ef:d0:7b:fd:92:4b:dc:d2:02:ac:fd: da:b8:2e:d3:b3:f2:ab:b0:b5:a1:56:91:26:7b:e0: 40:7b:0c:af:5b:42:a9:fc:20:dc:f6:ae:d5:d3:3a: 3d:42:01:1d:47:5f:7e:64:7b:4e:b3:6b:fb:c6:60: 75:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E5:04:30:57:01:11:9B:EC:40:55:6E:9F:3D:D4:70:20:DB:E6:3D X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a0:4e:76:75:66:0b:3d:9f:b0:24:7c:ee:b4:e5:94:b4:7c: e1:3a:78:5d:2f:46:59:ae:ef:15:8d:e5:03:37:b5:92:01:39: 39:f0:62:3a:d3:51:77:34:9c:b2:da:96:43:5f:74:04:4d:b4: 2d:b7:aa:82:98:be:d9:66:13:8f:12:8a:48:78:ba:d2:c5:2a: 16:46:85:5a:b5:3e:6e:da:29:3e:79:ed:0e:d4:8d:2a:d7:d8: 7f:26:38:34:76:8b:9d:f8:6f:73:59:c2:a2:05:80:5e:04:28: a3:fc:d9:79:4b:11:e4:b8:64:a9:82:dd:d1:d4:3d:4f:36:08: b5:3c:7d:80:f0:87:a3:91:cd:29:6c:90:55:90:5b:39:57:24: 75:c7:ad:59:16:72:58:2e:c5:3f:a8:1e:5c:e6:31:41:00:93: c9:1c:b4:ef:6c:a2:f0:30:52:42:dc:75:1f:6a:35:0a:b7:58: 0b:1d:7e:5b:70:d7:99:71:f9:b8:e3:1d:d2:34:ea:bb:af:a4: dd:44:36:4e:a4:a2:e9:45:df:38:b5:7a:ad:d0:a6:8a:f6:91: 12:a9:0e:8e:ba:41:ee:51:81:de:38:e0:d3:da:a8:c1:88:0c: a5:bd:77:b6:3a:8b:be:e1:17:2f:5a:7f:b5:08:97:05:95:eb: 2c:40:62:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867U2YawsBXbJOu/mC6gYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMjIwMTgwMDM4WhcNMjUxMjIxMTgwMDM4WjAzMTEwLwYDVQQD EyhkYmU1MDQzMDU3MDExMTliZWM0MDU1NmU5ZjNkZDQ3MDIwZGJlNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcZtO3cjFMYGYp1eGeLBYsY9TZBf HEUvxWEIKBEQTBWq1CNQHMhFSLS/3e1WsMZEgQgre39qFlgYnz/NR6/frlg6kNBk PnQFciMaAQTgLTGGD47Zdtwpw5/cvMeM3jXxZwtBHQNbe046VDvKlRfndQ8G7lxo ioai192RfcZHcmF2SCyQtF76gw9KLb6ErAmY2a5IxYeFPhBVR3zW59JH54VmmT6E QbIt2PeRxO9a5p7Z6t4vzmGiaeH8dFhR076nGw/3pDFd79B7/ZJL3NICrP3auC7T s/KrsLWhVpEme+BAewyvW0Kp/CDc9q7V0zo9QgEdR19+ZHtOs2v7xmB1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvlBDBXARGb7EBVbp891HAg2+Y9MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqBOdnVm Cz2fsCR87rTllLR84Tp4XS9GWa7vFY3lAze1kgE5OfBiOtNRdzScstqWQ190BE20 Lbeqgpi+2WYTjxKKSHi60sUqFkaFWrU+btopPnntDtSNKtfYfyY4NHaLnfhvc1nC ogWAXgQoo/zZeUsR5LhkqYLd0dQ9TzYItTx9gPCHo5HNKWyQVZBbOVckdcetWRZy WC7FP6geXOYxQQCTyRy072yi8DBSQtx1H2o1CrdYCx1+W3DXmXH5uOMd0jTqu6+k 3UQ2TqSi6UXfOLV6rdCmivaREqkOjrpB7lGB3jjg09qowYgMpb13tjqLvuEXL1p/ tQiXBZXrLEBiBw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:39:48 2025 by rpki-client