This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json) Hash identifier: pgxqRhRp3Q03+6UFXSJ1a7GWFntPLvDVd8hbophTe6Y= Subject key identifier: F8:A7:13:26:09:49:17:05:64:D0:BB:43:62:70:71:2D:CE:03:00:6E Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Certificate serial: 019B42802C54E50ED38F419708AE7ADDB727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 20:00:54 +0000 Manifest this update: Sun 21 Dec 2025 20:00:54 +0000 Manifest next update: Mon 22 Dec 2025 20:00:54 +0000 Files and hashes: 1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=) 2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: OCN8cCuEQS1+AAqOzg+d+zEHmF9vkt2NqXygcSHny5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:2c:54:e5:0e:d3:8f:41:97:08:ae:7a:dd:b7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Validity Not Before: Dec 21 20:00:54 2025 GMT Not After : Dec 22 20:00:54 2025 GMT Subject: CN=f8a713260949170564d0bb436270712dce03006e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:9c:75:b3:56:58:44:81:0d:27:fd:4b:42: 0c:0b:5c:b5:c0:c6:7b:7c:74:cb:99:79:70:ff:0b: 45:9f:9b:3e:07:64:d0:c3:0c:f2:19:65:a3:b2:68: 92:7e:1c:80:b9:7f:99:19:a9:65:e1:d6:33:9b:8b: c9:b7:b8:74:a6:82:db:81:a4:f7:5d:d6:85:9e:84: 9c:01:10:4a:dd:99:13:63:02:f2:6d:84:7a:be:e1: f9:7a:1c:13:04:5c:c3:3f:bd:0e:90:71:89:30:dc: e7:ae:f2:4e:d2:70:f3:8c:31:46:37:ed:b5:41:17: 5f:f1:75:76:83:72:68:ca:cc:fe:e8:e9:d0:17:96: e5:0b:e3:f2:63:15:e3:b3:5b:ca:d4:29:6f:2e:bc: b8:55:80:f6:01:b0:8e:bc:05:c8:a2:c1:93:9f:ba: c1:6e:26:22:fb:9a:53:5f:4d:8d:ee:f7:af:4b:fb: ac:82:8b:e2:40:f5:04:5d:fc:65:a4:9c:3b:5e:ca: 9a:a6:06:b9:3b:42:b1:e0:20:ac:64:f4:8d:68:90: 3b:8f:a0:f9:ef:15:0b:bb:1f:18:c7:39:68:5b:31: a4:9e:1b:80:e4:82:3e:30:b9:44:03:1d:c7:12:c7: 8c:96:c5:a6:7f:3e:b6:1d:1a:2b:cb:5d:ab:e8:7e: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A7:13:26:09:49:17:05:64:D0:BB:43:62:70:71:2D:CE:03:00:6E X509v3 Authority Key Identifier: keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:77:e2:61:a3:f5:67:4d:6f:5e:3c:83:23:b7:7b:a7:f7:7d: eb:20:d3:c4:87:f1:18:04:62:54:e9:93:25:5b:9e:74:f8:a5: 3e:d5:60:7b:81:74:7f:76:17:70:6d:15:ef:d6:87:46:de:aa: e6:fd:97:9f:7f:60:2a:87:b3:0f:70:b0:b8:70:08:f9:cd:58: 53:81:6e:ac:b4:e5:db:63:90:5c:15:31:af:87:b2:24:09:9b: dc:94:78:69:41:3f:80:62:db:25:fd:71:0e:9a:56:b9:95:9b: cb:36:33:a4:db:e4:28:9a:fb:3d:93:74:15:bc:58:2d:95:d9: c1:11:02:4a:71:a2:88:3f:9c:6c:df:f6:a8:05:c7:16:a5:c1: 94:f2:04:a3:25:a8:16:c5:1f:a2:0e:01:e7:dc:4e:60:f5:e3: bd:18:96:c0:7b:fd:52:56:0b:da:7c:32:7f:c2:7a:cb:6c:59: e8:79:ac:0b:0e:44:21:26:ac:47:47:e7:da:42:d5:e7:64:67: 52:c2:bc:c3:b6:f0:23:d2:ec:a0:c8:57:73:7e:5b:a9:16:24: 69:d1:2d:ce:ef:ce:40:e5:37:66:26:07:ba:65:b4:04:db:47: 31:fd:df:be:54:40:1a:ca:33:a5:04:73:a9:f2:cf:71:67:0a: 09:ce:2b:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCxU5Q7Tj0GXCK563bcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTExNGE4ZmVjM2Y1M2NiZTljYmY2ZDZhMGJlMDA4OWUz MGM3NTcwHhcNMjUxMjIxMjAwMDU0WhcNMjUxMjIyMjAwMDU0WjAzMTEwLwYDVQQD EyhmOGE3MTMyNjA5NDkxNzA1NjRkMGJiNDM2MjcwNzEyZGNlMDMwMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYacdbNWWESBDSf9S0IMC1y1wMZ7 fHTLmXlw/wtFn5s+B2TQwwzyGWWjsmiSfhyAuX+ZGall4dYzm4vJt7h0poLbgaT3 XdaFnoScARBK3ZkTYwLybYR6vuH5ehwTBFzDP70OkHGJMNznrvJO0nDzjDFGN+21 QRdf8XV2g3Joysz+6OnQF5blC+PyYxXjs1vK1ClvLry4VYD2AbCOvAXIosGTn7rB biYi+5pTX02N7vevS/usgoviQPUEXfxlpJw7Xsqapga5O0Kx4CCsZPSNaJA7j6D5 7xULux8YxzloWzGknhuA5II+MLlEAx3HEseMlsWmfz62HRory12r6H5lxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPinEyYJSRcFZNC7Q2JwcS3OAwBuMB8GA1UdIwQY MBaAFCDhFKj+w/U8vpy/bWoL4AieMMdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEt MzUzNGM4YzVhMzUxLzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEtMzUzNGM4YzVhMzUx LzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHfiYaP1 Z01vXjyDI7d7p/d96yDTxIfxGARiVOmTJVuedPilPtVge4F0f3YXcG0V79aHRt6q 5v2Xn39gKoezD3CwuHAI+c1YU4FurLTl22OQXBUxr4eyJAmb3JR4aUE/gGLbJf1x DppWuZWbyzYzpNvkKJr7PZN0FbxYLZXZwRECSnGiiD+cbN/2qAXHFqXBlPIEoyWo FsUfog4B59xOYPXjvRiWwHv9UlYL2nwyf8J6y2xZ6HmsCw5EISasR0fn2kLV52Rn UsK8w7bwI9LsoMhXc35bqRYkadEtzu/OQOU3ZiYHumW0BNtHMf3fvlRAGsozpQRz qfLPcWcKCc4r4g== -----END CERTIFICATE-----Generated at Mon Dec 22 02:32:59 2025 by rpki-client