This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json) Hash identifier: QkTanx6OdBgAs3EBgquyqsu4Vlf8/pan0+cl8MtpaGk= Subject key identifier: DD:AC:F2:8B:94:FA:E4:26:E9:B4:6D:7D:1B:54:96:B3:28:AA:41:B7 Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f Certificate serial: 019B74806083F8E0ACEFC58CCE74926EEE2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft Manifest number: 10E8 Signing time: Wed 31 Dec 2025 13:02:08 +0000 Manifest this update: Wed 31 Dec 2025 13:02:08 +0000 Manifest next update: Thu 01 Jan 2026 13:02:08 +0000 Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=) 2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: ZqGsrcqBnJgf8vR16EiHokinlyihG2+u4kjY1ADPyl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:80:60:83:f8:e0:ac:ef:c5:8c:ce:74:92:6e:ee:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f Validity Not Before: Dec 31 13:02:08 2025 GMT Not After : Jan 1 13:02:08 2026 GMT Subject: CN=ddacf28b94fae426e9b46d7d1b5496b328aa41b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:1b:f7:9c:20:69:bb:1c:5c:bf:7f:ea:f7: fb:7f:a3:97:c3:39:35:d1:7b:56:15:3a:81:78:a2: 38:16:e6:56:11:f6:eb:e3:3b:f3:14:53:42:24:ee: c5:65:4d:22:81:6b:9f:ee:ed:c4:6a:a7:17:31:19: 59:12:16:d5:50:d9:46:0f:d0:86:99:26:9a:33:d1: ad:3b:19:df:cd:97:48:e7:16:d4:73:21:0a:e9:30: 9a:70:66:b8:c1:09:a3:c5:97:3d:06:2e:c8:ef:f9: 26:47:af:b9:e8:27:1e:7e:8a:44:5c:b0:68:23:72: c5:f0:40:48:28:d6:6f:67:c5:e3:cf:24:4c:98:b9: f4:91:9d:e9:f9:9e:a4:06:50:74:d3:f8:7a:15:3e: 10:d3:ea:11:8b:6c:ea:f4:30:a1:38:de:a6:72:3c: c8:a3:cc:29:39:cb:7d:cc:93:60:15:39:59:3a:ad: be:09:bf:71:b9:7b:a0:cb:a3:28:79:c6:4d:17:e1: 64:5f:2b:0f:a3:fe:33:ff:3c:b7:ff:3c:35:0c:fa: 31:79:75:3a:c1:44:93:17:1c:cd:47:cd:d9:d5:84: 69:6b:69:8f:47:35:52:ac:f3:ad:ce:67:d3:f1:c7: b4:41:12:bc:0b:e3:eb:1b:6d:ad:be:13:99:eb:c8: d4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AC:F2:8B:94:FA:E4:26:E9:B4:6D:7D:1B:54:96:B3:28:AA:41:B7 X509v3 Authority Key Identifier: keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:54:3f:6e:06:8c:ac:74:b0:25:da:66:38:88:53:f1:5f:c2: 56:8b:a1:f4:89:f6:28:72:15:b5:23:3e:0b:1d:df:cb:0d:2f: 66:58:53:fa:4f:b2:f9:84:81:81:60:f2:07:0f:bb:c4:8b:f4: 88:14:d7:a5:6a:20:ab:d8:32:09:30:63:8f:51:7a:a9:59:bb: 08:5e:de:30:5b:59:98:a4:20:62:2b:5e:f3:e8:ca:7f:de:f1: 6a:07:35:bb:bf:ea:0b:2a:a4:f1:8e:f4:21:10:87:95:14:50: 59:5e:54:4f:96:b7:55:db:69:27:28:d7:62:8e:7c:3e:99:1c: 8d:ca:71:40:68:de:90:3b:bb:a5:0e:d5:f5:a2:73:17:69:a3: 6f:5f:a8:36:1c:d7:f6:52:16:26:36:6a:9d:25:1b:1f:cb:41: 7a:78:21:4c:2b:30:d7:5e:18:f6:f2:9a:6b:6c:0f:c8:66:5e: b5:ac:ad:0a:a6:3f:10:72:a4:7f:24:63:c2:2a:02:0f:e7:ad: 45:85:33:2f:78:e4:f0:84:e9:ae:af:04:08:e3:74:56:40:76: fc:ba:91:9b:3d:4f:e1:36:56:42:13:bd:12:e0:3c:4e:a1:c2: b2:7f:04:2a:04:40:bb:f5:ab:c4:1a:3b:f1:de:26:47:34:12: ff:13:97:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0gGCD+OCs78WMznSSbu4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhODk2ZTc2ODU0MGYzODdhMWRkNGZmOWRhYTRiODViYTQ4 YTkwNmYwHhcNMjUxMjMxMTMwMjA4WhcNMjYwMTAxMTMwMjA4WjAzMTEwLwYDVQQD EyhkZGFjZjI4Yjk0ZmFlNDI2ZTliNDZkN2QxYjU0OTZiMzI4YWE0MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Eb95wgabscXL9/6vf7f6OXwzk1 0XtWFTqBeKI4FuZWEfbr4zvzFFNCJO7FZU0igWuf7u3EaqcXMRlZEhbVUNlGD9CG mSaaM9GtOxnfzZdI5xbUcyEK6TCacGa4wQmjxZc9Bi7I7/kmR6+56CcefopEXLBo I3LF8EBIKNZvZ8XjzyRMmLn0kZ3p+Z6kBlB00/h6FT4Q0+oRi2zq9DChON6mcjzI o8wpOct9zJNgFTlZOq2+Cb9xuXugy6MoecZNF+FkXysPo/4z/zy3/zw1DPoxeXU6 wUSTFxzNR83Z1YRpa2mPRzVSrPOtzmfT8ce0QRK8C+PrG22tvhOZ68jUPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2s8ouU+uQm6bRtfRtUlrMoqkG3MB8GA1UdIwQY MBaAFIqJbnaFQPOHod1P+dqkuFukipBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEt OGY2OTk0NTY2ZjY3LzEvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEtOGY2OTk0NTY2ZjY3 LzEvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVQ/bgaM rHSwJdpmOIhT8V/CVouh9In2KHIVtSM+Cx3fyw0vZlhT+k+y+YSBgWDyBw+7xIv0 iBTXpWogq9gyCTBjj1F6qVm7CF7eMFtZmKQgYite8+jKf97xagc1u7/qCyqk8Y70 IRCHlRRQWV5UT5a3VdtpJyjXYo58PpkcjcpxQGjekDu7pQ7V9aJzF2mjb1+oNhzX 9lIWJjZqnSUbH8tBenghTCsw114Y9vKaa2wPyGZetaytCqY/EHKkfyRjwioCD+et RYUzL3jk8ITprq8ECON0VkB2/LqRmz1P4TZWQhO9EuA8TqHCsn8EKgRAu/WrxBo7 8d4mRzQS/xOXrQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:08:24 2025 by rpki-client