This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json) Hash identifier: E/Ccz/AKzK8dIj/BwTe9OzbmpSVFnLz/iOJNNdbkSnc= Subject key identifier: FC:23:5E:71:E3:95:AB:A8:9C:82:95:2B:B3:2B:1B:EB:4E:45:EE:BD Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c Certificate serial: 019B62797C19AC2110878B08C271247B4859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft Manifest number: 15BA Signing time: Sun 28 Dec 2025 01:01:27 +0000 Manifest this update: Sun 28 Dec 2025 01:01:27 +0000 Manifest next update: Mon 29 Dec 2025 01:01:27 +0000 Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=) 2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: iZ10vSybxwLoGYbyNjtg+ztD2LStZ1ObzWUktq5nnhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:7c:19:ac:21:10:87:8b:08:c2:71:24:7b:48:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c Validity Not Before: Dec 28 01:01:27 2025 GMT Not After : Dec 29 01:01:27 2025 GMT Subject: CN=fc235e71e395aba89c82952bb32b1beb4e45eebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:5e:99:46:07:98:77:93:5d:1b:88:b6:57: 64:d0:a9:0e:4e:74:98:bc:9e:43:5c:ca:61:c6:1a: 83:df:5d:fc:1c:74:38:3b:de:49:4a:55:93:5e:0e: f3:50:55:33:ae:33:c2:f5:3a:5d:f5:09:ee:cb:6f: 46:56:e1:f1:7a:de:76:00:0f:41:27:ef:43:e4:8f: df:c0:91:31:c9:06:22:e1:cd:29:f0:98:4c:b3:af: a2:c3:20:9c:17:90:1b:b0:be:42:b8:f8:61:7a:71: 83:48:31:3f:79:69:23:85:21:f7:b7:76:31:57:9d: 88:4b:9d:5c:7a:fa:f6:4b:9a:fc:4a:0f:24:70:de: 13:c5:e6:79:4d:a8:31:21:c0:e9:cf:71:d8:48:63: bc:a4:d5:14:93:d9:80:a8:22:88:84:c3:38:48:15: 00:e1:aa:db:ab:4a:ae:fe:30:67:d6:94:93:8f:f0: 8e:e9:e9:ed:58:b5:8e:71:91:74:c4:77:e2:72:22: a0:58:ee:88:fc:6f:20:57:95:73:07:36:f6:a3:1f: 21:a7:a5:9e:fa:38:9e:82:32:8b:63:90:76:76:27: 48:28:b2:38:75:0d:b9:4d:7b:8d:bf:de:22:72:98: 84:f3:97:3d:31:47:a1:c8:36:b8:4f:8f:1d:4b:8b: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:23:5E:71:E3:95:AB:A8:9C:82:95:2B:B3:2B:1B:EB:4E:45:EE:BD X509v3 Authority Key Identifier: keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2d:fd:2a:8d:eb:19:8f:e1:a2:a9:b9:93:c6:6b:9b:4c:32: 39:39:1a:03:38:b3:71:de:04:30:c3:2c:83:6d:81:91:a9:06: 5b:cb:17:48:30:95:8e:46:33:c4:d9:ac:24:8e:6f:10:5c:0e: 49:31:6d:6a:0c:e9:e5:34:24:33:84:86:03:20:9f:ff:0f:8f: 07:82:e3:95:fa:4a:f2:03:eb:6d:8d:db:f3:a3:52:2f:de:4f: 5f:ec:23:c2:6b:fd:0f:40:82:fb:14:8b:d1:70:20:28:20:d6: c3:fe:00:6d:8a:fc:ce:5d:cc:6e:98:14:81:9c:a9:fb:f3:05: f2:80:71:05:81:13:20:ea:40:50:b0:a9:6c:26:88:a0:21:27: 4a:de:f0:1c:bb:b4:14:7f:63:c1:e4:09:d4:63:e9:e2:45:98: 08:27:a5:6d:28:04:5b:b4:7c:f8:fc:c9:9a:f3:f9:11:3d:ca: 32:69:70:50:0b:b4:15:3c:75:fb:e7:25:38:3d:7e:e3:b3:c0: f9:f9:b7:c0:85:e6:98:bb:10:53:c5:c0:f4:bd:e2:d6:ad:bb: b0:3c:ca:af:4e:1b:9d:7c:d4:54:40:68:c6:e1:b2:d6:8f:94: c9:2a:06:b8:94:6f:c7:a2:44:89:18:32:ed:f2:d4:3a:96:c2: cd:8c:40:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieXwZrCEQh4sIwnEke0hZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZWJhZjU1NGM5MTQ2OGMxMDUyNGJhZjc0MmVhNGIxYTVk MGI0OWMwHhcNMjUxMjI4MDEwMTI3WhcNMjUxMjI5MDEwMTI3WjAzMTEwLwYDVQQD EyhmYzIzNWU3MWUzOTVhYmE4OWM4Mjk1MmJiMzJiMWJlYjRlNDVlZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxZemUYHmHeTXRuItldk0KkOTnSY vJ5DXMphxhqD3138HHQ4O95JSlWTXg7zUFUzrjPC9Tpd9Qnuy29GVuHxet52AA9B J+9D5I/fwJExyQYi4c0p8JhMs6+iwyCcF5AbsL5CuPhhenGDSDE/eWkjhSH3t3Yx V52IS51cevr2S5r8Sg8kcN4TxeZ5TagxIcDpz3HYSGO8pNUUk9mAqCKIhMM4SBUA 4arbq0qu/jBn1pSTj/CO6entWLWOcZF0xHficiKgWO6I/G8gV5VzBzb2ox8hp6We +jiegjKLY5B2didIKLI4dQ25TXuNv94icpiE85c9MUehyDa4T48dS4v1uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwjXnHjlauonIKVK7MrG+tORe69MB8GA1UdIwQY MBaAFCDrr1VMkUaMEFJLr3QupLGl0LScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEt NTlmMTlmYTEwYTFjLzEvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEtNTlmMTlmYTEwYTFj LzEvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei39Ko3r GY/hoqm5k8Zrm0wyOTkaAzizcd4EMMMsg22BkakGW8sXSDCVjkYzxNmsJI5vEFwO STFtagzp5TQkM4SGAyCf/w+PB4LjlfpK8gPrbY3b86NSL95PX+wjwmv9D0CC+xSL 0XAgKCDWw/4AbYr8zl3MbpgUgZyp+/MF8oBxBYETIOpAULCpbCaIoCEnSt7wHLu0 FH9jweQJ1GPp4kWYCCelbSgEW7R8+PzJmvP5ET3KMmlwUAu0FTx1++clOD1+47PA +fm3wIXmmLsQU8XA9L3i1q27sDzKr04bnXzUVEBoxuGy1o+UySoGuJRvx6JEiRgy 7fLUOpbCzYxAFg== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:18 2025 by rpki-client