This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json) Hash identifier: +A/ioWSGarOSYvp4mwcKaRxK6Yc42D3/nxjeYFSt4hk= Subject key identifier: 8A:7E:01:8D:2E:72:86:52:9E:E6:6F:D9:75:EC:23:75:D7:4B:E4:8C Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Certificate serial: 019B3F48A4599632703626CBADE9C22C666B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft Manifest number: 1545 Signing time: Sun 21 Dec 2025 05:01:23 +0000 Manifest this update: Sun 21 Dec 2025 05:01:23 +0000 Manifest next update: Mon 22 Dec 2025 05:01:23 +0000 Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: zunFl6MRolZQsts88g3lu1LLJSAutCDvSQXY/Lo6uhA=) 2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=) 3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:a4:59:96:32:70:36:26:cb:ad:e9:c2:2c:66:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Validity Not Before: Dec 21 05:01:23 2025 GMT Not After : Dec 22 05:01:23 2025 GMT Subject: CN=8a7e018d2e7286529ee66fd975ec2375d74be48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:9d:3a:08:2a:64:2e:55:fa:b0:4b:1e:f5: 94:80:24:ee:cd:13:5d:fd:07:db:be:e5:39:7f:16: ce:f3:34:ba:82:3c:46:56:d4:3a:9f:89:37:80:ac: 83:09:c6:bd:24:2d:2b:05:fb:49:c8:31:1a:c3:11: 1e:5e:26:ef:df:7d:e6:6b:13:83:91:a5:3f:50:b7: 9d:96:de:b3:2e:38:e6:9e:33:38:0b:5b:1c:a4:ac: b5:38:86:bd:dd:4c:85:81:71:b1:db:59:c0:62:4a: e9:63:0f:78:75:61:42:4f:2c:a0:e2:b2:ca:20:97: af:09:31:4c:f8:83:66:d3:b0:71:eb:7e:6b:0e:78: aa:87:20:64:2e:ac:67:9b:3f:2c:55:25:f5:7d:01: f7:e0:91:cb:f7:6f:85:1b:39:8d:5a:da:61:34:b7: 32:a7:19:aa:2d:31:7e:89:7a:85:ff:46:c2:b4:6d: fd:57:3c:ce:da:4d:b4:83:71:69:0e:80:29:85:5c: e4:8c:34:bc:4c:43:7d:d4:ba:3f:86:94:63:4a:d8: 5a:7f:18:66:51:ba:d3:ba:8c:ee:dd:1d:57:08:a7: b7:e5:c5:4a:25:b9:67:48:4f:0d:b2:1b:95:45:03: 6d:a4:08:52:fe:ee:17:88:ea:f1:47:3f:0e:b5:8a: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7E:01:8D:2E:72:86:52:9E:E6:6F:D9:75:EC:23:75:D7:4B:E4:8C X509v3 Authority Key Identifier: keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d0:d5:83:a7:9b:8e:d4:23:ce:d7:34:6f:26:3c:09:3d:e6: af:a7:a8:df:79:6f:2a:23:b1:16:a6:5e:b1:e7:df:b2:97:db: fe:20:81:f1:48:53:0d:11:ae:ba:85:1c:dc:95:9c:ba:9d:a5: 44:15:b2:79:03:9e:fb:72:32:71:a9:3e:9d:6c:23:47:17:e9: be:80:be:e5:27:5f:98:53:b7:81:34:e6:68:f0:0e:d5:5d:1c: 6b:48:44:82:ec:11:09:8d:a9:d6:3d:1c:aa:94:33:34:35:40: ce:9b:61:61:e3:32:4c:33:4b:52:36:5e:d2:25:db:87:0c:49: da:8d:e9:f6:f3:a1:b2:2e:c7:0d:c8:93:41:ea:94:0d:26:5b: e5:04:e0:f2:bf:1b:d8:1a:67:4a:df:06:ad:b1:52:ac:30:e8: f2:5f:43:04:35:85:cb:bd:e7:2b:8e:3e:e6:81:cd:ba:1f:77: a3:bf:ab:61:c0:4e:ca:50:b0:4f:28:97:1e:f2:6c:d8:6b:2c: 00:21:6d:8b:0e:dc:23:d5:eb:eb:0e:f5:55:a0:1a:02:18:75: 7e:89:8a:b4:c0:a4:6e:53:c3:78:ef:02:fd:18:e7:bf:d0:65: 31:e4:96:0c:99:1d:c9:63:40:76:09:6e:30:7e:a7:01:9f:da: 7e:c2:fc:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKRZljJwNibLrenCLGZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNGEwOTY1MDRjZGJiOWYyZmI3ZmQwZTY2NDA2ZDUyNmZl MTBiNWEwHhcNMjUxMjIxMDUwMTIzWhcNMjUxMjIyMDUwMTIzWjAzMTEwLwYDVQQD Eyg4YTdlMDE4ZDJlNzI4NjUyOWVlNjZmZDk3NWVjMjM3NWQ3NGJlNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0udOggqZC5V+rBLHvWUgCTuzRNd /QfbvuU5fxbO8zS6gjxGVtQ6n4k3gKyDCca9JC0rBftJyDEawxEeXibv333maxOD kaU/ULedlt6zLjjmnjM4C1scpKy1OIa93UyFgXGx21nAYkrpYw94dWFCTyyg4rLK IJevCTFM+INm07Bx635rDniqhyBkLqxnmz8sVSX1fQH34JHL92+FGzmNWtphNLcy pxmqLTF+iXqF/0bCtG39VzzO2k20g3FpDoAphVzkjDS8TEN91Lo/hpRjSthafxhm UbrTuozu3R1XCKe35cVKJblnSE8NshuVRQNtpAhS/u4XiOrxRz8OtYoNBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp+AY0ucoZSnuZv2XXsI3XXS+SMMB8GA1UdIwQY MBaAFCBKCWUEzbufL7f9DmZAbVJv4QtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYt MTU0MjI0Nzg4MDBiLzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYtMTU0MjI0Nzg4MDBi LzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9DVg6eb jtQjztc0byY8CT3mr6eo33lvKiOxFqZeseffspfb/iCB8UhTDRGuuoUc3JWcup2l RBWyeQOe+3Iycak+nWwjRxfpvoC+5SdfmFO3gTTmaPAO1V0ca0hEguwRCY2p1j0c qpQzNDVAzpthYeMyTDNLUjZe0iXbhwxJ2o3p9vOhsi7HDciTQeqUDSZb5QTg8r8b 2BpnSt8GrbFSrDDo8l9DBDWFy73nK44+5oHNuh93o7+rYcBOylCwTyiXHvJs2Gss ACFtiw7cI9Xr6w71VaAaAhh1fomKtMCkblPDeO8C/Rjnv9BlMeSWDJkdyWNAdglu MH6nAZ/afsL8mw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:42 2025 by rpki-client