This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json) Hash identifier: 2aLgZFauxuy/S5spkH0rwxWAA3KB4miTpq/QXQsKEo8= Subject key identifier: 40:FE:28:32:C5:27:3B:FC:0A:0C:D2:10:79:39:F9:22:1E:FB:FA:7A Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76 Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876 Certificate serial: 019B446E65817FC27D6993AE6266CB5A0123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft Manifest number: 1597 Signing time: Mon 22 Dec 2025 05:00:44 +0000 Manifest this update: Mon 22 Dec 2025 05:00:44 +0000 Manifest next update: Tue 23 Dec 2025 05:00:44 +0000 Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: ffdlUeGpqzIRILegyLMH3CjdJg3cASq0yQihPobJEuM=) 2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:65:81:7f:c2:7d:69:93:ae:62:66:cb:5a:01:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20eee05da183dee2b8118141956462c9240d7876 Validity Not Before: Dec 22 05:00:44 2025 GMT Not After : Dec 23 05:00:44 2025 GMT Subject: CN=40fe2832c5273bfc0a0cd2107939f9221efbfa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:88:b8:4f:cb:ba:d4:cf:94:04:d1:8e:fe: cc:35:cf:c1:4d:5f:7e:f4:e7:e6:98:24:b8:fe:77: be:4b:a7:27:ee:d6:53:a0:38:50:57:a4:f6:c1:3b: 1d:32:4d:77:e4:9f:97:ff:09:a0:d0:55:e2:52:12: 5c:e6:ff:9b:1e:1d:4b:f8:79:c2:c8:a4:ba:1f:23: e2:04:6a:f2:8c:b2:52:78:f7:38:9e:87:51:a6:e5: d4:5b:d4:02:d3:fa:b6:23:71:f8:98:05:5f:77:dd: 93:29:b2:36:9d:39:ad:cf:ca:a5:ff:50:22:0c:a8: 16:9c:7b:f9:3f:fd:eb:50:ea:cb:ec:af:fc:a0:6e: 80:80:86:75:2e:6d:d2:21:d7:9c:20:04:70:d1:cb: 94:0e:91:fc:04:e4:89:d4:03:4a:7b:1b:00:7e:bc: 29:70:67:e1:78:93:2f:3e:1f:2e:01:31:06:ed:43: b2:c0:e2:14:47:46:ad:13:ab:c2:d4:c6:78:7f:e6: 1e:65:e5:a5:40:68:73:15:cc:21:d5:4d:47:d2:39: 43:e4:ae:27:18:55:52:2b:ae:72:27:e5:29:5f:2d: b2:dc:03:45:45:fc:2a:d1:2c:84:e5:f9:3d:95:b3: 08:1f:b7:33:7c:66:85:2a:fd:96:6d:aa:2e:2c:2d: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FE:28:32:C5:27:3B:FC:0A:0C:D2:10:79:39:F9:22:1E:FB:FA:7A X509v3 Authority Key Identifier: keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:72:ba:ed:3f:ee:8c:d8:b6:ee:ed:e4:bd:46:58:41:2b:09: 63:9a:ce:6e:92:e1:ea:00:d6:84:06:af:18:8d:f8:dc:43:74: ac:e3:c0:c9:80:e2:5e:8a:a5:f8:1f:0c:4d:e1:23:9f:1c:26: b6:98:52:77:a8:9b:8e:02:e3:17:f0:99:ed:a8:aa:17:32:13: ee:d5:91:fc:09:c0:29:3b:b6:e5:bb:3f:9e:20:d2:5a:c6:c0: 78:1e:bf:64:12:83:99:3b:36:ae:ed:bd:0a:e3:0e:11:a1:b5: 81:db:6c:ad:9e:b8:f9:85:2b:f1:f6:4a:f1:12:88:e7:4b:53: 42:0d:38:59:87:b7:fe:eb:6e:19:3c:94:1c:de:7d:3d:e8:fe: e7:fd:ea:a8:35:cb:c6:9d:7b:0c:fd:98:06:3d:ce:9b:c5:07: 37:01:8a:58:10:4a:f6:75:90:18:88:d0:5d:a5:51:7c:75:57: 12:e8:12:fe:b1:b9:44:82:15:02:07:ee:80:97:18:58:7a:e2: be:aa:86:39:04:18:93:c1:c8:14:f1:f7:f1:12:24:53:11:1a: 26:1c:47:a7:de:46:08:ff:b8:c9:77:8e:37:ef:64:e9:48:8b: 99:bb:45:6a:ac:79:16:89:c0:f0:73:b8:b4:27:af:cd:c4:46: d3:19:1b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbmWBf8J9aZOuYmbLWgEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZWVlMDVkYTE4M2RlZTJiODExODE0MTk1NjQ2MmM5MjQw ZDc4NzYwHhcNMjUxMjIyMDUwMDQ0WhcNMjUxMjIzMDUwMDQ0WjAzMTEwLwYDVQQD Eyg0MGZlMjgzMmM1MjczYmZjMGEwY2QyMTA3OTM5ZjkyMjFlZmJmYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp22IuE/LutTPlATRjv7MNc/BTV9+ 9OfmmCS4/ne+S6cn7tZToDhQV6T2wTsdMk135J+X/wmg0FXiUhJc5v+bHh1L+HnC yKS6HyPiBGryjLJSePc4nodRpuXUW9QC0/q2I3H4mAVfd92TKbI2nTmtz8ql/1Ai DKgWnHv5P/3rUOrL7K/8oG6AgIZ1Lm3SIdecIARw0cuUDpH8BOSJ1ANKexsAfrwp cGfheJMvPh8uATEG7UOywOIUR0atE6vC1MZ4f+YeZeWlQGhzFcwh1U1H0jlD5K4n GFVSK65yJ+UpXy2y3ANFRfwq0SyE5fk9lbMIH7czfGaFKv2WbaouLC3HBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED+KDLFJzv8CgzSEHk5+SIe+/p6MB8GA1UdIwQY MBaAFCDu4F2hg97iuBGBQZVkYskkDXh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQt Mzk4NTI5OWZhZDZkLzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQtMzk4NTI5OWZhZDZk LzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3K67T/u jNi27u3kvUZYQSsJY5rObpLh6gDWhAavGI343EN0rOPAyYDiXoql+B8MTeEjnxwm tphSd6ibjgLjF/CZ7aiqFzIT7tWR/AnAKTu25bs/niDSWsbAeB6/ZBKDmTs2ru29 CuMOEaG1gdtsrZ64+YUr8fZK8RKI50tTQg04WYe3/utuGTyUHN59Pej+5/3qqDXL xp17DP2YBj3Om8UHNwGKWBBK9nWQGIjQXaVRfHVXEugS/rG5RIIVAgfugJcYWHri vqqGOQQYk8HIFPH38RIkUxEaJhxHp95GCP+4yXeON+9k6UiLmbtFaqx5FonA8HO4 tCevzcRG0xkbfw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:50 2025 by rpki-client