This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json) Hash identifier: ueIyv24ITQRaz6CjulnpX0VxaTpR3IHJyIQgyRa4BnQ= Subject key identifier: C6:2D:5B:22:CF:E5:D6:C3:23:1E:76:F2:27:3F:5E:BE:79:71:ED:35 Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f Certificate serial: 019B3C7FBC617B1F8AB24F2E10FCBE4B9412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft Manifest number: 10CB Signing time: Sat 20 Dec 2025 16:02:42 +0000 Manifest this update: Sat 20 Dec 2025 16:02:42 +0000 Manifest next update: Sun 21 Dec 2025 16:02:42 +0000 Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=) 2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: lLY7wTQg9Wjf6M69M792NgaXbKNavX/kDoxJPYK9mVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:bc:61:7b:1f:8a:b2:4f:2e:10:fc:be:4b:94:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f Validity Not Before: Dec 20 16:02:42 2025 GMT Not After : Dec 21 16:02:42 2025 GMT Subject: CN=c62d5b22cfe5d6c3231e76f2273f5ebe7971ed35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:d3:a6:b1:74:6f:bf:b5:f7:eb:de:54:ee: 21:9a:6a:48:e1:4a:bc:c1:49:37:6c:3d:0d:ee:a6: 2a:35:ee:4c:6d:e4:99:79:e5:d4:5e:67:c9:c4:e1: 91:60:b5:ce:94:98:49:6c:62:6e:83:ab:5b:dd:67: b9:e3:dd:5d:c4:d1:6a:8c:e0:2c:49:4a:70:ab:26: 4a:3b:8c:af:0f:bc:a9:9d:20:29:05:27:6c:1b:3d: a9:35:fe:97:e5:08:78:f3:4f:0d:e3:b1:d7:10:ba: 99:0a:22:d8:d0:56:84:01:d0:a7:19:d6:42:ad:31: 38:3d:85:14:78:24:d1:8b:ee:a9:88:06:f7:05:5d: 8a:f0:6b:30:b2:08:3c:fd:c3:31:2d:40:84:ca:56: e4:ae:74:22:9f:26:9c:35:0f:eb:8e:21:e6:e8:2b: e2:2a:3f:a0:03:f0:a7:52:04:67:f6:66:97:d6:44: 87:20:64:f0:06:62:0e:cf:83:88:fc:5e:fd:c8:c2: 1d:fd:2f:33:be:c5:42:1a:d2:ed:ef:74:04:ba:4f: 44:66:d3:51:11:c6:db:af:be:b9:13:c7:05:3b:c0: a6:00:ee:61:fe:39:74:3d:e7:ba:11:ae:b0:a2:bd: 67:be:aa:45:4a:71:ae:e4:f7:a7:d6:ca:ac:b7:98: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2D:5B:22:CF:E5:D6:C3:23:1E:76:F2:27:3F:5E:BE:79:71:ED:35 X509v3 Authority Key Identifier: keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:48:3e:ff:59:a2:e1:89:a4:a8:6d:3f:4a:15:7d:da:29:49: f0:13:b0:19:d8:85:ed:6f:53:77:fe:17:6d:02:69:ea:18:76: 82:bf:ea:3b:c1:2e:e2:9e:6a:3b:08:87:5b:98:fd:fd:44:6f: c5:da:f7:cd:88:9a:54:92:5b:0b:91:bf:16:57:9b:aa:d4:ea: ea:ad:55:0a:c6:11:e6:63:bd:af:41:24:e4:56:1a:f3:82:56: c0:5e:23:81:8a:08:47:74:c1:fd:ed:c8:07:8e:e6:11:51:7b: 35:09:d4:e7:9b:61:bd:fd:b7:a6:29:20:4e:6b:97:f0:2b:90: b6:59:1d:3c:52:f7:04:20:a3:cf:d5:7a:72:38:c9:ec:85:d7: f1:b1:36:f9:93:6f:8f:bb:d8:f3:6b:40:a8:66:08:89:b3:01: ec:05:f8:ae:da:21:c9:a5:95:e7:e8:de:dd:cb:de:44:d4:cb: 1c:78:31:0d:19:85:db:71:ac:ce:03:1f:7d:7d:23:43:90:20: ed:12:9f:9f:d3:cb:8c:7a:f7:4c:ef:d9:13:79:90:a2:ca:73: 8e:00:a8:42:52:3b:c7:e5:ea:79:16:59:ce:19:b7:61:f4:08: ea:7a:cf:e8:5a:c9:b8:ef:3f:79:2a:1d:f7:ea:b6:ca:52:46: cb:e4:e9:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7xhex+Ksk8uEPy+S5QSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhODk2ZTc2ODU0MGYzODdhMWRkNGZmOWRhYTRiODViYTQ4 YTkwNmYwHhcNMjUxMjIwMTYwMjQyWhcNMjUxMjIxMTYwMjQyWjAzMTEwLwYDVQQD EyhjNjJkNWIyMmNmZTVkNmMzMjMxZTc2ZjIyNzNmNWViZTc5NzFlZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+fTprF0b7+19+veVO4hmmpI4Uq8 wUk3bD0N7qYqNe5MbeSZeeXUXmfJxOGRYLXOlJhJbGJug6tb3We5491dxNFqjOAs SUpwqyZKO4yvD7ypnSApBSdsGz2pNf6X5Qh4808N47HXELqZCiLY0FaEAdCnGdZC rTE4PYUUeCTRi+6piAb3BV2K8Gswsgg8/cMxLUCEylbkrnQinyacNQ/rjiHm6Cvi Kj+gA/CnUgRn9maX1kSHIGTwBmIOz4OI/F79yMId/S8zvsVCGtLt73QEuk9EZtNR Ecbbr765E8cFO8CmAO5h/jl0Pee6Ea6wor1nvqpFSnGu5Pen1sqst5gKtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYtWyLP5dbDIx528ic/Xr55ce01MB8GA1UdIwQY MBaAFIqJbnaFQPOHod1P+dqkuFukipBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEt OGY2OTk0NTY2ZjY3LzEvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEtOGY2OTk0NTY2ZjY3 LzEvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEg+/1mi 4YmkqG0/ShV92ilJ8BOwGdiF7W9Td/4XbQJp6hh2gr/qO8Eu4p5qOwiHW5j9/URv xdr3zYiaVJJbC5G/FlebqtTq6q1VCsYR5mO9r0Ek5FYa84JWwF4jgYoIR3TB/e3I B47mEVF7NQnU55thvf23pikgTmuX8CuQtlkdPFL3BCCjz9V6cjjJ7IXX8bE2+ZNv j7vY82tAqGYIibMB7AX4rtohyaWV5+je3cveRNTLHHgxDRmF23GszgMffX0jQ5Ag 7RKfn9PLjHr3TO/ZE3mQospzjgCoQlI7x+XqeRZZzhm3YfQI6nrP6FrJuO8/eSod 9+q2ylJGy+TpsA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:30 2025 by rpki-client