This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json) Hash identifier: PekYBV56aY4C49bItJ7azW+Ibj+4Cgj/L1bW3bt2GTs= Subject key identifier: 92:C7:A6:14:6B:27:85:26:2A:84:1D:02:57:8D:F6:1D:0A:8C:F1:49 Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Certificate serial: 019B3CEC9470C71095027344E833DFC89AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft Manifest number: 0B81 Signing time: Sat 20 Dec 2025 18:01:35 +0000 Manifest this update: Sat 20 Dec 2025 18:01:35 +0000 Manifest next update: Sun 21 Dec 2025 18:01:35 +0000 Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: ZOYljr6IxixgP8r7knaTOt57wRpigwyhWQ4EF+AfK98=) 2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:94:70:c7:10:95:02:73:44:e8:33:df:c8:9a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Validity Not Before: Dec 20 18:01:35 2025 GMT Not After : Dec 21 18:01:35 2025 GMT Subject: CN=92c7a6146b2785262a841d02578df61d0a8cf149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:d9:f1:5a:3a:c3:4c:8a:1d:60:92:17:02: c3:76:6c:36:7e:be:29:50:b2:68:12:88:1f:07:c5: a4:6e:ab:59:0e:eb:b3:53:50:9d:e1:40:ab:24:b8: 9b:8e:83:11:68:b2:3a:79:16:06:42:f1:b7:a1:34: 3d:e1:03:3b:89:fc:49:7b:f0:fd:e2:00:b4:12:29: 21:32:11:23:0f:04:6d:a8:90:65:ac:23:bc:86:0d: ac:81:bb:b0:e0:a6:90:0b:37:e0:68:b8:7b:d9:2d: 06:dd:07:89:fe:84:05:ec:6e:f9:2e:e2:53:2c:0d: db:40:40:c6:90:7b:d0:81:48:dd:be:35:08:4f:59: 76:d8:27:26:82:99:c1:ee:5d:5c:bb:2f:eb:dd:82: d4:49:ab:21:af:2f:4a:13:d9:60:26:62:3b:f8:29: 44:88:b8:6c:4a:12:69:fb:a3:b1:9f:4a:55:3d:b4: 4a:1b:a8:e4:63:25:a8:64:47:2c:f2:94:60:50:a3: 53:ec:cc:16:9a:1a:60:d5:74:2f:a4:c1:55:d1:81: 06:bc:8b:49:09:90:70:aa:34:3c:c3:2e:f7:87:56: c5:6d:92:46:06:de:0e:55:bc:f5:39:4b:b7:5b:0f: d3:68:98:33:7f:20:2f:0b:f1:8e:a2:43:fd:6a:76: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C7:A6:14:6B:27:85:26:2A:84:1D:02:57:8D:F6:1D:0A:8C:F1:49 X509v3 Authority Key Identifier: keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fd:87:70:1a:9d:81:ec:e8:08:fb:6b:23:00:5b:8d:b7:fd: ac:65:96:63:5f:72:11:11:c5:80:16:c2:b0:77:f6:43:6c:5d: ba:c5:d4:62:ce:d0:7d:82:a6:7b:60:a3:10:10:34:5a:1d:38: f8:1e:2c:7a:d9:33:04:b7:9c:52:f7:9f:24:b3:1f:78:b1:18: 88:11:b2:ce:94:99:45:5d:c1:51:54:80:ed:2b:5d:91:30:5b: 33:a8:23:51:29:e5:09:ad:f8:45:b5:d9:82:02:6a:f0:7c:48: 7d:25:e5:fb:a0:27:51:6e:d9:61:42:25:3a:fb:da:13:c8:0b: 52:fd:d5:5b:9a:7e:d5:aa:a4:1c:14:54:bc:a6:7a:1c:d9:1f: 63:9b:55:4c:6f:e9:18:be:38:de:cd:a4:a9:cb:39:f5:2a:b6: 05:e4:23:ff:dc:5c:b4:8d:8b:ae:e4:2c:09:cc:7b:77:01:d9: af:7e:f2:eb:fa:0a:b3:4d:9f:91:ce:be:ea:31:76:8f:29:be: 64:9d:5e:e0:16:38:55:3d:b2:d9:3a:f0:68:4a:6d:b2:b6:6f: 57:12:b4:e9:4a:a4:54:13:c1:29:3a:ad:d3:d5:20:e6:db:6e: a7:b1:63:77:8f:99:d6:d6:49:ac:88:ab:28:f0:2b:ce:af:d7: 23:ce:14:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87JRwxxCVAnNE6DPfyJqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey YjJhYWMwHhcNMjUxMjIwMTgwMTM1WhcNMjUxMjIxMTgwMTM1WjAzMTEwLwYDVQQD Eyg5MmM3YTYxNDZiMjc4NTI2MmE4NDFkMDI1NzhkZjYxZDBhOGNmMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre/Z8Vo6w0yKHWCSFwLDdmw2fr4p ULJoEogfB8WkbqtZDuuzU1Cd4UCrJLibjoMRaLI6eRYGQvG3oTQ94QM7ifxJe/D9 4gC0EikhMhEjDwRtqJBlrCO8hg2sgbuw4KaQCzfgaLh72S0G3QeJ/oQF7G75LuJT LA3bQEDGkHvQgUjdvjUIT1l22CcmgpnB7l1cuy/r3YLUSashry9KE9lgJmI7+ClE iLhsShJp+6Oxn0pVPbRKG6jkYyWoZEcs8pRgUKNT7MwWmhpg1XQvpMFV0YEGvItJ CZBwqjQ8wy73h1bFbZJGBt4OVbz1OUu3Ww/TaJgzfyAvC/GOokP9anaDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLHphRrJ4UmKoQdAleN9h0KjPFJMB8GA1UdIwQY MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/2HcBqd gezoCPtrIwBbjbf9rGWWY19yERHFgBbCsHf2Q2xdusXUYs7QfYKme2CjEBA0Wh04 +B4setkzBLecUvefJLMfeLEYiBGyzpSZRV3BUVSA7StdkTBbM6gjUSnlCa34RbXZ ggJq8HxIfSXl+6AnUW7ZYUIlOvvaE8gLUv3VW5p+1aqkHBRUvKZ6HNkfY5tVTG/p GL443s2kqcs59Sq2BeQj/9xctI2LruQsCcx7dwHZr37y6/oKs02fkc6+6jF2jym+ ZJ1e4BY4VT2y2TrwaEptsrZvVxK06UqkVBPBKTqt09Ug5ttup7Fjd4+Z1tZJrIir KPArzq/XI84UPw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:11 2025 by rpki-client