This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json) Hash identifier: pRtr/uCMNg/+sSlVqKJUQ/gvl5mi2CqFaZi22BAlLAw= Subject key identifier: B0:E7:0C:BF:A4:D5:90:D6:53:6B:60:68:52:90:E6:9C:8C:48:6C:3E Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Certificate serial: 019B522A4A6A7FBE43D6FB5BDE4882F0999F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft Manifest number: 1001 Signing time: Wed 24 Dec 2025 21:01:01 +0000 Manifest this update: Wed 24 Dec 2025 21:01:01 +0000 Manifest next update: Thu 25 Dec 2025 21:01:01 +0000 Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=) 2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: xQTRCIbKVhN81x0fUVuRiub6BWCQxO2OFaLd1nuIQvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:4a:6a:7f:be:43:d6:fb:5b:de:48:82:f0:99:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Validity Not Before: Dec 24 21:01:01 2025 GMT Not After : Dec 25 21:01:01 2025 GMT Subject: CN=b0e70cbfa4d590d6536b60685290e69c8c486c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:61:8b:fc:2d:9c:7f:74:98:fd:30:68:93: 51:4e:26:0e:a1:41:b4:24:b6:06:02:04:de:62:79: a8:db:7c:5c:c5:21:17:e6:0c:8e:98:95:ef:3b:bb: 51:d8:da:e3:b8:9b:08:90:23:d6:84:07:62:03:92: 32:81:67:a9:2f:b9:d7:9d:12:0c:a7:3e:c0:dd:ac: d7:0a:35:cf:6a:6d:d0:db:fe:03:91:fc:3c:06:7a: 96:b8:cc:cc:a4:ff:ad:01:62:92:e1:6a:7f:85:06: b7:9e:8e:42:a9:a4:ca:e5:7c:38:aa:84:4f:e7:a9: dd:a6:4c:1e:0f:b2:29:49:19:1a:b7:94:e8:9a:9a: 75:9c:c8:28:c2:7e:90:59:7a:1f:9d:46:e9:8a:08: 8c:0d:42:7a:05:44:98:8c:61:8e:13:93:e0:2f:b7: 97:c1:98:f5:e8:b4:42:10:8a:5c:46:72:d2:6a:56: 0e:fc:88:9e:d1:5c:43:c9:06:b5:01:a7:a9:cb:b3: 1c:bf:a3:77:ea:6f:e4:40:49:b1:bd:36:27:9e:3d: b3:6f:09:60:5d:24:6f:09:86:d3:c9:81:65:c6:a8: 97:88:fb:45:39:8a:13:76:69:0f:c3:94:af:ae:27: 40:4b:16:a4:94:a7:c5:a0:f4:30:7f:12:60:72:08: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E7:0C:BF:A4:D5:90:D6:53:6B:60:68:52:90:E6:9C:8C:48:6C:3E X509v3 Authority Key Identifier: keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:cd:1c:a5:46:52:81:e8:29:28:e3:8a:5c:35:a3:57:39: 85:cb:45:dd:28:4e:c3:af:a4:d4:90:05:8f:0f:77:e7:89:96: 63:15:d4:ce:2b:22:1c:97:5b:44:54:21:4f:f3:30:13:ee:b9: 16:60:b5:a6:35:ca:0f:17:be:a4:b4:0f:51:30:5f:b6:da:4d: 97:cc:5c:08:33:bb:d4:a6:67:bc:98:12:72:d9:43:79:94:ec: be:e8:12:56:a4:dc:3a:b7:e9:98:01:d7:82:dd:e6:4c:6c:74: f0:c7:ee:b9:5f:66:4b:ad:56:6c:22:29:10:68:0c:ea:29:2c: 25:01:ff:c9:89:00:1a:94:18:0b:38:71:43:64:ba:c7:bf:37: 61:02:1b:9e:08:0f:4a:7a:16:9c:ac:be:67:c8:29:82:ed:5d: 3a:fb:19:f0:3b:df:5d:89:7f:bd:63:51:98:9b:ea:6b:ea:df: 61:bd:81:75:d9:b7:85:73:01:fb:b0:80:fe:cd:10:70:0f:c7: 2d:71:72:9f:fb:19:d2:a8:e6:88:c3:ae:0d:97:c8:e1:c8:74: 0d:90:72:08:f9:62:20:5b:8e:2e:5f:b9:a0:28:f6:d2:88:44: e0:b0:06:17:df:cf:9b:f6:b0:a9:55:42:8e:af:54:a0:1c:31: e4:61:cf:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKkpqf75D1vtb3kiC8JmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhODM1NTVjYWEyMmNlOWI5YjE2ODM1MDNhMTRlM2NkZDgz NmUwMWIwHhcNMjUxMjI0MjEwMTAxWhcNMjUxMjI1MjEwMTAxWjAzMTEwLwYDVQQD EyhiMGU3MGNiZmE0ZDU5MGQ2NTM2YjYwNjg1MjkwZTY5YzhjNDg2YzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB9hi/wtnH90mP0waJNRTiYOoUG0 JLYGAgTeYnmo23xcxSEX5gyOmJXvO7tR2NrjuJsIkCPWhAdiA5IygWepL7nXnRIM pz7A3azXCjXPam3Q2/4Dkfw8BnqWuMzMpP+tAWKS4Wp/hQa3no5CqaTK5Xw4qoRP 56ndpkweD7IpSRkat5Tompp1nMgown6QWXofnUbpigiMDUJ6BUSYjGGOE5PgL7eX wZj16LRCEIpcRnLSalYO/Iie0VxDyQa1Aaepy7Mcv6N36m/kQEmxvTYnnj2zbwlg XSRvCYbTyYFlxqiXiPtFOYoTdmkPw5SvridASxaklKfFoPQwfxJgcgi4eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDnDL+k1ZDWU2tgaFKQ5pyMSGw+MB8GA1UdIwQY MBaAFIqDVVyqIs6bmxaDUDoU483YNuAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAt MWYzMjU0NzNjZTY4LzEvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAtMWYzMjU0NzNjZTY4 LzEvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohHNHKVG UoHoKSjjilw1o1c5hctF3ShOw6+k1JAFjw9354mWYxXUzisiHJdbRFQhT/MwE+65 FmC1pjXKDxe+pLQPUTBfttpNl8xcCDO71KZnvJgSctlDeZTsvugSVqTcOrfpmAHX gt3mTGx08MfuuV9mS61WbCIpEGgM6iksJQH/yYkAGpQYCzhxQ2S6x783YQIbnggP SnoWnKy+Z8gpgu1dOvsZ8DvfXYl/vWNRmJvqa+rfYb2Bddm3hXMB+7CA/s0QcA/H LXFyn/sZ0qjmiMOuDZfI4ch0DZByCPliIFuOLl+5oCj20ohE4LAGF9/Pm/awqVVC jq9UoBwx5GHPbA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:57:58 2025 by rpki-client