This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json) Hash identifier: Zyr/YxASG8AKTs4Et9LGt1N7ja4LNmakCFq2CNgU99E= Subject key identifier: 82:FA:F9:F0:34:FB:B8:4B:B1:CF:FE:4B:ED:69:97:97:68:D6:19:5A Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94 Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694 Certificate serial: 019B44DD2571A006BC103A4756FF4024D26A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft Manifest number: 018A Signing time: Mon 22 Dec 2025 07:01:42 +0000 Manifest this update: Mon 22 Dec 2025 07:01:42 +0000 Manifest next update: Tue 23 Dec 2025 07:01:42 +0000 Files and hashes: 1: 1sean_EV9gz0RRAdSjhoVX8U59c.roa (hash: 7IzX2Oje7AVG7H1WaHSKbKj4BoZgEgCyLYyC1XwAE3w=) 2: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: sFZ6+gdnHFdS6LuW/289WKsxcOrtVgv/IftCJL28RRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:25:71:a0:06:bc:10:3a:47:56:ff:40:24:d2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694 Validity Not Before: Dec 22 07:01:42 2025 GMT Not After : Dec 23 07:01:42 2025 GMT Subject: CN=82faf9f034fbb84bb1cffe4bed69979768d6195a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:82:13:dd:20:9a:dc:b7:61:63:f3:af:9c: 00:b4:80:f0:7e:0e:fb:bd:ae:f6:07:9f:3a:17:23: ec:a7:f8:58:eb:b9:0f:2f:d5:b1:1e:21:51:5d:41: e9:4f:b4:6c:23:3e:77:18:18:71:5f:4f:9f:10:ee: 6e:04:4f:4b:fb:01:40:9f:7e:f1:be:4f:ff:9d:fd: ff:b9:01:28:d8:c7:94:1e:88:e7:94:ee:25:e7:71: aa:52:52:eb:69:db:e3:c2:4a:ac:f5:b3:36:5d:cc: e1:1f:5f:40:7d:f2:ca:8c:c0:a6:72:e1:b5:a0:c6: a9:37:db:24:f0:06:e7:a1:af:4f:14:6b:82:70:17: da:4c:37:90:88:9e:b5:48:04:e6:2c:89:4b:3d:4a: 38:cd:8a:c9:7b:20:4c:f1:47:35:38:ef:6f:82:2c: 9b:25:98:0a:cf:cf:3c:a3:4d:86:0b:3b:d5:92:71: 82:b0:fd:56:d6:c1:e6:4f:bf:c0:70:3f:28:0e:24: e4:0d:d3:02:6f:4d:94:50:c0:be:a6:0a:63:98:84: 09:c6:77:be:39:c2:0c:7c:e3:af:83:17:93:14:e5: 92:fa:77:98:4c:3b:5a:84:bb:54:0e:e5:a4:94:e1: a1:8d:21:94:37:33:59:f9:09:7c:cf:a2:6d:79:91: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:F9:F0:34:FB:B8:4B:B1:CF:FE:4B:ED:69:97:97:68:D6:19:5A X509v3 Authority Key Identifier: keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:91:31:f7:ef:3a:14:fb:c1:b8:d5:dc:06:95:f8:ee:07:dd: a6:9b:c3:b8:f3:51:55:4b:76:9c:8b:fe:0a:81:ce:23:01:3f: 11:0c:26:ee:97:1c:63:5f:95:14:2f:ef:cb:55:a0:ef:ac:8e: 2f:87:bd:b0:0c:3a:3e:af:9c:a3:d5:ab:58:b1:c1:a9:d6:e9: 65:f4:71:15:12:56:bb:3d:11:04:e0:92:40:09:e3:3a:27:0a: 12:d8:bf:7e:cc:60:2c:f0:b9:84:d1:a2:e2:ca:15:7f:3e:be: 90:95:6d:e6:69:f3:68:af:35:74:75:6b:25:1c:fb:6a:d4:a1: 32:44:43:11:fb:7b:1c:09:38:b3:b9:68:a6:ef:ad:0f:12:68: 9f:83:28:ea:4b:fd:c6:0b:0a:f9:d9:67:2c:57:d0:b1:1b:17: 08:00:e4:72:4c:79:e1:1e:f2:39:2e:d1:b6:d9:da:dc:31:fd: 37:25:7a:2a:ad:c6:97:96:d9:e1:c9:30:e8:9c:c6:67:80:c2: 36:e5:28:8e:69:36:6c:4c:06:2b:3b:ee:35:2d:b4:94:7d:79: e3:00:aa:68:91:1a:9c:b5:1b:f0:e3:76:4e:06:1a:95:62:bf: 37:77:af:2b:07:5c:2a:eb:bb:f2:54:35:e3:86:ff:87:18:5a: b8:d1:05:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3SVxoAa8EDpHVv9AJNJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTIzZGQwNTg0OWNjODEzMjU1YWI4ZDFiODUzZmI5YzQ1 ZDg2OTQwHhcNMjUxMjIyMDcwMTQyWhcNMjUxMjIzMDcwMTQyWjAzMTEwLwYDVQQD Eyg4MmZhZjlmMDM0ZmJiODRiYjFjZmZlNGJlZDY5OTc5NzY4ZDYxOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJiCE90gmty3YWPzr5wAtIDwfg77 va72B586FyPsp/hY67kPL9WxHiFRXUHpT7RsIz53GBhxX0+fEO5uBE9L+wFAn37x vk//nf3/uQEo2MeUHojnlO4l53GqUlLradvjwkqs9bM2XczhH19AffLKjMCmcuG1 oMapN9sk8Abnoa9PFGuCcBfaTDeQiJ61SATmLIlLPUo4zYrJeyBM8Uc1OO9vgiyb JZgKz888o02GCzvVknGCsP1W1sHmT7/AcD8oDiTkDdMCb02UUMC+pgpjmIQJxne+ OcIMfOOvgxeTFOWS+neYTDtahLtUDuWklOGhjSGUNzNZ+Ql8z6JteZEoKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL6+fA0+7hLsc/+S+1pl5do1hlaMB8GA1UdIwQY MBaAFCDiPdBYScyBMlWrjRuFP7nEXYaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYt Yjg4OGEzMTI0NDU0LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYtYjg4OGEzMTI0NDU0 LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpEx9+86 FPvBuNXcBpX47gfdppvDuPNRVUt2nIv+CoHOIwE/EQwm7pccY1+VFC/vy1Wg76yO L4e9sAw6Pq+co9WrWLHBqdbpZfRxFRJWuz0RBOCSQAnjOicKEti/fsxgLPC5hNGi 4soVfz6+kJVt5mnzaK81dHVrJRz7atShMkRDEft7HAk4s7lopu+tDxJon4Mo6kv9 xgsK+dlnLFfQsRsXCADkckx54R7yOS7Rttna3DH9NyV6Kq3Gl5bZ4ckw6JzGZ4DC NuUojmk2bEwGKzvuNS20lH154wCqaJEanLUb8ON2TgYalWK/N3evKwdcKuu78lQ1 44b/hxhauNEF2A== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:34 2025 by rpki-client