This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json) Hash identifier: SiEop41OdY0y0z04VSLrbUlDlIL5RCoJGdmOCIaPNPY= Subject key identifier: 36:6B:CB:BE:EA:DB:53:96:26:48:E2:82:8E:6A:31:E9:AF:60:F9:F9 Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Certificate serial: 019B4C5F1414F4C84DAACA8CBA5D0147B89F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft Manifest number: 0FFE Signing time: Tue 23 Dec 2025 18:00:57 +0000 Manifest this update: Tue 23 Dec 2025 18:00:57 +0000 Manifest next update: Wed 24 Dec 2025 18:00:57 +0000 Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=) 2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: 2C34w8dRkOg152XA9lBQACJ4nhECX97VykPo7ftxmis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:14:14:f4:c8:4d:aa:ca:8c:ba:5d:01:47:b8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Validity Not Before: Dec 23 18:00:57 2025 GMT Not After : Dec 24 18:00:57 2025 GMT Subject: CN=366bcbbeeadb53962648e2828e6a31e9af60f9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ff:4b:11:c7:e5:a2:ef:1a:44:66:62:42:e0: d1:60:37:e5:21:7c:30:19:aa:14:8e:94:a2:cb:7d: aa:c2:2e:ed:05:53:3b:41:fd:3a:a1:4c:69:cf:e6: 5a:4c:f7:16:4a:2f:c9:34:4b:0a:80:f7:99:b9:cb: bb:1f:04:05:b2:f3:59:a2:f8:bc:c8:07:f7:c8:ed: 9c:4a:fa:7f:f2:ed:b4:94:3b:15:c9:f4:fe:e4:f9: 75:ec:69:06:64:e5:8d:02:e9:ed:7f:68:64:54:3c: b8:40:76:70:c3:82:f9:44:82:db:00:ca:2c:9f:e4: b1:b3:a7:65:bb:70:a4:54:0f:b7:fb:24:7d:10:8d: 6e:bb:e4:7d:80:37:d4:db:4f:56:29:fd:f5:7c:38: f9:fe:95:2b:9d:1d:f6:fd:cb:80:45:4a:e9:b5:75: 0b:9e:8e:77:f1:8c:42:78:aa:3e:e8:8e:65:8c:c1: 08:d9:92:b7:a3:52:59:21:a4:08:70:8b:df:4c:db: 21:e1:88:61:76:ab:91:9d:8c:da:05:5c:fa:e8:40: 86:af:b4:1b:b8:9e:6f:5b:d8:d4:52:60:72:16:04: 52:6e:13:7a:21:0c:34:e9:b8:0e:81:bd:1c:18:d6: 9c:49:58:70:33:c7:67:a4:76:7d:27:02:ba:3c:c3: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6B:CB:BE:EA:DB:53:96:26:48:E2:82:8E:6A:31:E9:AF:60:F9:F9 X509v3 Authority Key Identifier: keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7c:24:e6:bd:d6:74:76:88:15:8a:b0:7e:7c:8b:e0:10:20: 74:a5:11:00:ad:9c:c2:58:3f:1b:d5:82:18:20:6f:d8:c4:72: 9c:84:7f:c9:dd:a8:c5:49:24:ea:66:29:31:8c:a6:18:87:60: 3a:ba:09:b9:c8:1d:0e:87:4e:60:96:f3:93:5c:53:e0:67:1b: 33:7c:00:32:77:5e:ca:60:7d:26:5e:c5:b4:4c:6f:13:c1:74: e4:d0:7f:93:cd:bb:a4:5e:f8:bd:93:ab:cf:34:e5:90:9f:68: 92:9e:4f:fb:04:82:92:86:22:44:7a:46:45:72:d4:82:cc:4e: ca:f4:57:fc:78:b6:da:2d:16:18:d4:db:ee:29:12:fe:22:48: 07:4d:7f:0b:15:d0:a7:a5:d9:e5:06:b7:52:6e:85:3e:a2:eb: 2d:3a:73:59:a8:2e:da:28:c8:fe:ea:cb:a7:5c:22:cf:01:cb: 82:f0:c1:ae:74:a2:54:a7:45:a9:96:20:d0:6e:bf:24:c0:5c: 0c:46:f9:3b:46:9b:71:85:96:b3:0c:d3:a2:7e:e5:75:bf:85: 41:fc:ce:19:94:7b:55:2f:c4:83:f3:b5:1a:d7:ba:99:dd:6c: 29:14:dc:23:c3:56:a8:bf:40:6f:fc:4b:ff:1b:82:c5:b7:9e: f1:56:d6:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXxQU9MhNqsqMul0BR7ifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhODM1NTVjYWEyMmNlOWI5YjE2ODM1MDNhMTRlM2NkZDgz NmUwMWIwHhcNMjUxMjIzMTgwMDU3WhcNMjUxMjI0MTgwMDU3WjAzMTEwLwYDVQQD EygzNjZiY2JiZWVhZGI1Mzk2MjY0OGUyODI4ZTZhMzFlOWFmNjBmOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f9LEcflou8aRGZiQuDRYDflIXww GaoUjpSiy32qwi7tBVM7Qf06oUxpz+ZaTPcWSi/JNEsKgPeZucu7HwQFsvNZovi8 yAf3yO2cSvp/8u20lDsVyfT+5Pl17GkGZOWNAuntf2hkVDy4QHZww4L5RILbAMos n+Sxs6dlu3CkVA+3+yR9EI1uu+R9gDfU209WKf31fDj5/pUrnR32/cuARUrptXUL no538YxCeKo+6I5ljMEI2ZK3o1JZIaQIcIvfTNsh4YhhdquRnYzaBVz66ECGr7Qb uJ5vW9jUUmByFgRSbhN6IQw06bgOgb0cGNacSVhwM8dnpHZ9JwK6PMPxrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZry77q21OWJkjigo5qMemvYPn5MB8GA1UdIwQY MBaAFIqDVVyqIs6bmxaDUDoU483YNuAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAt MWYzMjU0NzNjZTY4LzEvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAtMWYzMjU0NzNjZTY4 LzEvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHwk5r3W dHaIFYqwfnyL4BAgdKURAK2cwlg/G9WCGCBv2MRynIR/yd2oxUkk6mYpMYymGIdg OroJucgdDodOYJbzk1xT4GcbM3wAMndeymB9Jl7FtExvE8F05NB/k827pF74vZOr zzTlkJ9okp5P+wSCkoYiRHpGRXLUgsxOyvRX/Hi22i0WGNTb7ikS/iJIB01/CxXQ p6XZ5Qa3Um6FPqLrLTpzWagu2ijI/urLp1wizwHLgvDBrnSiVKdFqZYg0G6/JMBc DEb5O0abcYWWswzTon7ldb+FQfzOGZR7VS/Eg/O1Gte6md1sKRTcI8NWqL9Ab/xL /xuCxbee8VbWdQ== -----END CERTIFICATE-----Generated at Wed Dec 24 01:59:26 2025 by rpki-client