This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json) Hash identifier: DIR0ThtW1P/XfItY9wTHcwX+/juMWbBbZoREiNiV6kA= Subject key identifier: 55:C8:87:06:E5:E9:DF:E3:90:04:2B:FE:15:8A:18:3B:C4:1C:0A:1D Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Certificate serial: 019B3E356D4A3B4C230FDF2C892E697AA77E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 00:00:47 +0000 Manifest this update: Sun 21 Dec 2025 00:00:47 +0000 Manifest next update: Mon 22 Dec 2025 00:00:47 +0000 Files and hashes: 1: DnNAXyr4mJbh9D2dH8b-Eqlp6x0.roa (hash: cdWRTytNkhNuFkycWb/FtgfNdkALU3YMBn7zWtYw/bY=) 2: Se8nAg0-xrQhHXIbYS2eSChavY4.roa (hash: NDhJCH+ULsr3l5nHLuoOYh5KnKuXbhQ8t+mEi5JVlO4=) 3: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: dp+Dayhlk6UuePllI676CcFqAl/GPF2J7ejgCmzv1Dk=) 4: t4twN0aSa0K9eQj9_U5RX1_3ON0.roa (hash: bDhB2OJvqSQD0pWiRQx+Ywx+t/naLGQ733yplp/x/5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:6d:4a:3b:4c:23:0f:df:2c:89:2e:69:7a:a7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8 Validity Not Before: Dec 21 00:00:47 2025 GMT Not After : Dec 22 00:00:47 2025 GMT Subject: CN=55c88706e5e9dfe390042bfe158a183bc41c0a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:a3:f1:e9:78:b8:80:a1:dd:51:ab:66:a1: 60:93:26:8b:3b:c5:e1:39:28:b0:39:89:db:83:ad: 4e:08:92:02:0b:96:92:7f:2d:6e:29:e1:76:63:db: e5:8d:e6:36:a0:73:8e:73:ad:62:85:a3:56:f0:92: 4f:40:11:92:9a:f2:5f:73:49:f9:a2:38:1a:0f:ae: 9d:24:93:8b:55:8f:e5:67:6f:e7:d4:c2:be:4b:3c: a1:52:a1:b2:b0:4c:c0:25:19:5f:f7:63:ef:d2:96: 34:e6:47:0b:a9:0a:90:d7:7f:32:2c:62:3a:92:bd: c1:ee:a8:95:1f:92:89:83:a5:5c:87:53:62:ac:44: f7:0f:50:ca:7d:98:38:b7:03:60:4f:17:82:27:92: ed:cc:69:75:17:89:f1:d8:dc:b8:73:dc:04:b1:6a: ad:57:43:5a:9e:f0:fe:6f:05:90:85:bf:4b:e5:f5: f6:3c:9a:48:a2:d1:d2:b3:92:76:e3:b0:7f:57:07: fb:49:54:7d:6a:d0:e1:4d:b9:a5:06:35:06:be:61: 7d:bc:6c:e4:5d:69:53:45:3c:36:3d:b0:34:91:5f: fd:a6:5a:41:c3:97:8b:40:4f:3c:e9:5f:5c:34:d5: f1:47:41:a9:de:d2:94:1f:5d:6c:5b:f5:a3:ec:ee: dd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:87:06:E5:E9:DF:E3:90:04:2B:FE:15:8A:18:3B:C4:1C:0A:1D X509v3 Authority Key Identifier: keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:16:d0:36:d4:c4:13:51:cf:40:47:94:a6:e4:26:18:98:2d: 59:50:4a:81:11:4d:7e:1f:1b:b5:95:bf:ac:b9:89:a5:13:2b: 61:20:41:7a:02:75:41:8e:b3:0a:6c:da:71:bb:9f:d6:7c:b3: ea:20:ff:81:35:c8:0a:ab:86:8e:a5:55:b7:8e:eb:da:20:b0: cf:16:d6:80:71:e5:8b:34:40:02:4f:f2:8d:d9:c8:d0:3f:6a: 85:34:0f:95:33:c5:90:bb:ca:8f:04:17:56:ad:2f:20:17:be: 3a:10:e6:27:e9:1e:89:dd:0a:b3:0f:23:d4:19:4e:05:d6:5b: 73:c3:d2:28:30:a3:7a:38:42:19:94:34:62:f7:6d:9f:e8:02: ab:ba:8c:47:72:32:17:54:bb:b4:3e:8c:eb:7a:2f:e8:2c:91: 1a:4c:6f:3e:d2:2a:94:5f:62:c5:ca:d8:da:af:8a:dc:6d:6a: 34:57:e8:4b:05:b6:7f:45:1c:ed:61:73:df:95:19:d0:ad:ee: 78:ab:96:ae:3b:14:fe:fd:ef:e0:d4:2c:0c:fc:86:a9:d6:9e: 84:31:54:b4:aa:8e:93:1c:3a:15:b8:3a:0b:7d:a8:c9:6b:6f: ae:c3:71:c2:40:c1:f6:23:1c:44:6b:58:3d:49:02:66:e8:35: 00:60:b3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NW1KO0wjD98siS5peqd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmExYTY3ZTJkYTcxMTJkNDU1OWNkOGRiZDgxNDFmOGYz Mjc3ZTgwHhcNMjUxMjIxMDAwMDQ3WhcNMjUxMjIyMDAwMDQ3WjAzMTEwLwYDVQQD Eyg1NWM4ODcwNmU1ZTlkZmUzOTAwNDJiZmUxNThhMTgzYmM0MWMwYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiyj8el4uICh3VGrZqFgkyaLO8Xh OSiwOYnbg61OCJICC5aSfy1uKeF2Y9vljeY2oHOOc61ihaNW8JJPQBGSmvJfc0n5 ojgaD66dJJOLVY/lZ2/n1MK+SzyhUqGysEzAJRlf92Pv0pY05kcLqQqQ138yLGI6 kr3B7qiVH5KJg6Vch1NirET3D1DKfZg4twNgTxeCJ5LtzGl1F4nx2Ny4c9wEsWqt V0NanvD+bwWQhb9L5fX2PJpIotHSs5J247B/Vwf7SVR9atDhTbmlBjUGvmF9vGzk XWlTRTw2PbA0kV/9plpBw5eLQE886V9cNNXxR0Gp3tKUH11sW/Wj7O7dzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXIhwbl6d/jkAQr/hWKGDvEHAodMB8GA1UdIwQY MBaAFJIqGmfi2nES1FWc2NvYFB+PMnfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEt N2YzYTQyODE3MWM3LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZGFjMzAtODU3MC00N2IyLWIyNmEtN2YzYTQyODE3MWM3 LzEva2lvYVotTGFjUkxVVlp6WTI5Z1VINDh5ZC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRbQNtTE E1HPQEeUpuQmGJgtWVBKgRFNfh8btZW/rLmJpRMrYSBBegJ1QY6zCmzacbuf1nyz 6iD/gTXICquGjqVVt47r2iCwzxbWgHHlizRAAk/yjdnI0D9qhTQPlTPFkLvKjwQX Vq0vIBe+OhDmJ+keid0Ksw8j1BlOBdZbc8PSKDCjejhCGZQ0Yvdtn+gCq7qMR3Iy F1S7tD6M63ov6CyRGkxvPtIqlF9ixcrY2q+K3G1qNFfoSwW2f0Uc7WFz35UZ0K3u eKuWrjsU/v3v4NQsDPyGqdaehDFUtKqOkxw6Fbg6C32oyWtvrsNxwkDB9iMcRGtY PUkCZug1AGCzGw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:43 2025 by rpki-client