This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json) Hash identifier: S7YG7N+f/TVnxdHHfgG+hzx03PRQ8aYdVAkLjhKUAu8= Subject key identifier: FF:78:4D:68:0D:D3:0C:EE:1C:48:61:FC:73:BE:5F:09:48:EE:90:CF Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7 Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7 Certificate serial: 019AAC158A06547708AB264114D008B65EE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft Manifest number: 106B Signing time: Sat 22 Nov 2025 15:01:23 +0000 Manifest this update: Sat 22 Nov 2025 15:01:23 +0000 Manifest next update: Sun 23 Nov 2025 15:01:23 +0000 Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=) 2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=) 3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: cpeb+OuyMAdB9UMQav0PNXP+6wDbNJKzC+lepuRONf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:8a:06:54:77:08:ab:26:41:14:d0:08:b6:5e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7 Validity Not Before: Nov 22 15:01:23 2025 GMT Not After : Nov 23 15:01:23 2025 GMT Subject: CN=ff784d680dd30cee1c4861fc73be5f0948ee90cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:c4:13:31:2d:99:b3:00:bd:0a:cf:8a:14: 12:42:16:f5:bb:d9:3c:4a:56:78:a4:8f:33:ce:d4: 80:78:7d:c5:d2:16:c4:63:93:64:05:6e:86:28:02: 52:75:31:9e:4e:4c:2b:ff:a6:7c:d5:10:11:eb:74: f2:c0:18:8e:92:39:3a:3c:db:55:58:ca:f1:ce:cf: 04:d6:5b:0b:71:bb:46:aa:be:67:22:7f:9d:8d:e6: 4e:c2:a3:7a:70:b2:34:7e:d1:a9:7e:93:c7:c2:47: 76:28:3e:06:48:4f:c6:c9:c0:7b:51:66:53:5d:0b: 78:d1:f6:b1:a1:98:be:e5:2c:23:dd:11:d9:05:d3: 96:77:4d:af:89:67:64:75:91:ea:c6:7c:9b:ee:36: 65:bc:be:b4:92:15:4e:8e:79:a7:a6:1f:e6:98:08: 15:69:0b:31:8d:56:4e:1d:92:c1:7d:d8:60:49:3b: 21:d4:24:ce:a8:6d:a4:53:a4:bf:7b:40:33:91:d3: 23:a7:c9:8b:32:4e:be:ee:21:4e:1f:94:aa:05:0d: 20:d6:2c:66:7c:cc:0f:dc:41:c8:ac:1c:b1:1c:00: 20:93:c6:0c:2b:cd:51:f7:98:74:8f:0a:da:ea:db: be:c0:30:28:a5:9e:78:e7:82:1d:19:bb:43:ae:61: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:78:4D:68:0D:D3:0C:EE:1C:48:61:FC:73:BE:5F:09:48:EE:90:CF X509v3 Authority Key Identifier: keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:a1:e9:46:09:c6:d0:f7:d7:a3:2f:6d:b3:82:79:65:5c: a9:14:56:f2:af:37:8a:ed:c2:19:84:ef:4c:87:9a:6b:4f:c3: f1:99:73:b8:a8:24:1c:61:73:c5:7a:da:57:1f:a3:06:a0:1e: d3:e9:eb:57:33:21:b2:a0:04:d2:78:66:65:ea:18:43:46:c5: 1d:8e:11:74:04:2d:79:fa:9c:71:be:92:b9:84:7e:7e:98:16: a6:79:03:f3:d8:a4:99:94:89:95:27:d7:50:41:1f:a8:0b:63: 61:e0:29:8e:97:52:75:90:6c:eb:1d:a7:d2:ae:3e:3c:57:98: f3:a5:c3:52:d0:81:0a:c0:6e:a0:f2:d4:f6:5a:f7:94:e8:d9: 5b:03:f0:d1:5e:ab:67:32:a0:7a:b4:b9:31:4a:64:2a:05:32: e5:c2:8d:57:47:41:1b:2f:79:0b:7b:be:c4:2a:1a:45:7e:3b: 91:2a:39:f4:3e:b4:ab:f9:a8:73:15:0c:1d:27:57:5a:6c:1a: 0e:20:c2:a0:d3:99:ac:4d:91:6d:d3:08:e2:ca:0e:40:72:00: 30:a2:81:1e:66:f5:28:f7:bb:10:fd:14:b0:25:ff:ca:11:94: c2:cf:a3:00:42:75:8a:31:6c:d4:65:65:4e:a3:df:ec:02:8c: 65:f4:c6:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFYoGVHcIqyZBFNAItl7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5 MWQyYTcwHhcNMjUxMTIyMTUwMTIzWhcNMjUxMTIzMTUwMTIzWjAzMTEwLwYDVQQD EyhmZjc4NGQ2ODBkZDMwY2VlMWM0ODYxZmM3M2JlNWYwOTQ4ZWU5MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7LEEzEtmbMAvQrPihQSQhb1u9k8 SlZ4pI8zztSAeH3F0hbEY5NkBW6GKAJSdTGeTkwr/6Z81RAR63TywBiOkjk6PNtV WMrxzs8E1lsLcbtGqr5nIn+djeZOwqN6cLI0ftGpfpPHwkd2KD4GSE/GycB7UWZT XQt40faxoZi+5Swj3RHZBdOWd02viWdkdZHqxnyb7jZlvL60khVOjnmnph/mmAgV aQsxjVZOHZLBfdhgSTsh1CTOqG2kU6S/e0AzkdMjp8mLMk6+7iFOH5SqBQ0g1ixm fMwP3EHIrByxHAAgk8YMK81R95h0jwra6tu+wDAopZ5454IdGbtDrmFCJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP94TWgN0wzuHEhh/HO+XwlI7pDPMB8GA1UdIwQY MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3 LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCeh6UYJ xtD316MvbbOCeWVcqRRW8q83iu3CGYTvTIeaa0/D8ZlzuKgkHGFzxXraVx+jBqAe 0+nrVzMhsqAE0nhmZeoYQ0bFHY4RdAQtefqccb6SuYR+fpgWpnkD89ikmZSJlSfX UEEfqAtjYeApjpdSdZBs6x2n0q4+PFeY86XDUtCBCsBuoPLU9lr3lOjZWwPw0V6r ZzKgerS5MUpkKgUy5cKNV0dBGy95C3u+xCoaRX47kSo59D60q/mocxUMHSdXWmwa DiDCoNOZrE2RbdMI4soOQHIAMKKBHmb1KPe7EP0UsCX/yhGUws+jAEJ1ijFs1GVl TqPf7AKMZfTGpg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:56 2025 by rpki-client