This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json) Hash identifier: cFz73osIZOFk0tN/qdozxeCsM+H3nOHe9LtK/QGbiLE= Subject key identifier: 8B:77:B9:DC:BE:D7:6C:23:AB:1D:9C:6A:E6:35:0B:FC:15:62:48:98 Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5 Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5 Certificate serial: 019B1D982816DA1C89A98C0F65028515FB6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft Manifest number: 1780 Signing time: Sun 14 Dec 2025 16:01:09 +0000 Manifest this update: Sun 14 Dec 2025 16:01:09 +0000 Manifest next update: Mon 15 Dec 2025 16:01:09 +0000 Files and hashes: 1: 7OSbUsexneQ0Q14f6d4gS3FqwKA.roa (hash: bTywqIASCFGsuBv+6N7v2D8L1Q+x4uOFKiuvSJi+2o4=) 2: BAFnA8E_-fRHFvJR66V5dNg4Xzc.roa (hash: zli04q+UUFDZ6LvNlKF4wEZntdZy+cQL9il9Oh4rSZo=) 3: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: CSWM0EA9IwlEyFk0ibh/2SnU4ycOrCcVrgkTW1V/yOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:28:16:da:1c:89:a9:8c:0f:65:02:85:15:fb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5 Validity Not Before: Dec 14 16:01:09 2025 GMT Not After : Dec 15 16:01:09 2025 GMT Subject: CN=8b77b9dcbed76c23ab1d9c6ae6350bfc15624898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:eb:bf:3d:7b:21:8a:f2:9a:98:22:d5:51: 89:9d:a4:c8:64:7d:d5:9f:89:b9:8a:fb:b9:a8:0b: 55:32:7d:8a:d5:f1:22:c9:d9:cb:57:7d:c1:d4:30: f6:bf:b1:ae:f7:6c:f9:44:cb:b7:cb:26:d4:e8:53: b9:fd:64:48:81:c8:56:05:6b:81:ae:cb:ff:04:f1: 7a:bd:61:82:ca:b9:fe:ff:1f:77:5a:67:c6:4b:6d: 69:aa:93:91:fd:a5:13:b1:ba:70:e9:09:8c:7c:70: aa:dd:db:cf:81:45:76:8a:cf:56:d5:93:da:58:4e: 25:b0:74:28:0c:ad:16:50:cc:13:6e:b4:57:df:f2: fc:ce:82:5b:2f:90:15:59:1c:45:70:48:cc:f3:28: 7f:da:02:88:c6:a9:c1:2f:f6:e2:9b:6a:59:b8:a6: a3:f9:0e:51:f4:72:a2:ed:3e:00:7b:90:53:14:35: 3b:16:2c:a6:f6:20:39:2b:04:7b:ff:e9:9e:db:5c: 2e:7c:a6:c5:96:96:47:d0:d1:30:f5:12:a0:6f:18: ef:d9:79:f6:5b:d4:84:71:43:f6:dd:f5:f3:55:23: c3:90:5d:49:5e:98:60:62:7a:2c:8e:e9:2d:8e:c7: 9e:7e:bd:80:eb:6a:5f:ec:7a:37:42:50:3d:f8:f7: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:77:B9:DC:BE:D7:6C:23:AB:1D:9C:6A:E6:35:0B:FC:15:62:48:98 X509v3 Authority Key Identifier: keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e9:a3:94:fa:12:10:36:d4:bf:35:2c:5a:59:07:df:5e:2f: 3d:5f:3d:8d:a1:40:b7:d1:08:dd:4c:96:a8:3e:97:39:38:1f: c4:1d:da:e5:90:b0:72:92:bb:d0:0e:9c:e5:ad:e2:81:3a:6f: dc:d2:71:5d:54:26:d4:98:00:94:fa:2d:e4:4d:e4:9a:ee:2d: e3:f5:0e:4b:59:6b:9b:1d:63:7d:09:0e:13:8b:66:52:01:e3: e8:4f:fa:22:9e:98:24:2f:c1:0a:27:24:ee:a0:fb:63:2e:0f: 09:5f:79:e1:bd:51:3d:1c:a7:09:e5:bb:7a:ce:e5:24:90:09: 7c:46:fa:53:d6:de:5e:b7:03:90:81:46:2b:9a:6e:32:63:6e: d8:b0:48:98:bf:c5:c7:31:ea:1f:3e:a8:12:d5:67:d2:4e:03: 13:6d:84:c5:21:bb:3f:63:66:69:0e:32:7f:04:a2:b7:5c:b4: b3:63:de:b9:83:51:ef:26:16:dd:88:e6:49:1f:9b:01:fe:2b: b6:12:29:bc:b2:0c:46:b8:25:7b:b5:67:60:6b:32:78:70:b2: 10:69:53:76:0f:19:39:03:35:df:a7:65:da:aa:43:32:63:a8: 04:38:c5:7d:a0:4f:34:1d:e3:80:03:7e:bf:1e:67:af:c5:f8: 19:d0:78:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmCgW2hyJqYwPZQKFFftsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOGEwZTBiMWIyMWYwOTMzMzNjMDc0ODE0NWIxNjI4NDE4 Y2YyYjUwHhcNMjUxMjE0MTYwMTA5WhcNMjUxMjE1MTYwMTA5WjAzMTEwLwYDVQQD Eyg4Yjc3YjlkY2JlZDc2YzIzYWIxZDljNmFlNjM1MGJmYzE1NjI0ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGPrvz17IYrympgi1VGJnaTIZH3V n4m5ivu5qAtVMn2K1fEiydnLV33B1DD2v7Gu92z5RMu3yybU6FO5/WRIgchWBWuB rsv/BPF6vWGCyrn+/x93WmfGS21pqpOR/aUTsbpw6QmMfHCq3dvPgUV2is9W1ZPa WE4lsHQoDK0WUMwTbrRX3/L8zoJbL5AVWRxFcEjM8yh/2gKIxqnBL/bim2pZuKaj +Q5R9HKi7T4Ae5BTFDU7Fiym9iA5KwR7/+me21wufKbFlpZH0NEw9RKgbxjv2Xn2 W9SEcUP23fXzVSPDkF1JXphgYnosjuktjseefr2A62pf7Ho3QlA9+PdvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt3udy+12wjqx2cauY1C/wVYkiYMB8GA1UdIwQY MBaAFKyKDgsbIfCTMzwHSBRbFihBjPK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMt ZGI4ZWZmMWIxMWEwLzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMtZGI4ZWZmMWIxMWEw LzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+mjlPoS EDbUvzUsWlkH314vPV89jaFAt9EI3UyWqD6XOTgfxB3a5ZCwcpK70A6c5a3igTpv 3NJxXVQm1JgAlPot5E3kmu4t4/UOS1lrmx1jfQkOE4tmUgHj6E/6Ip6YJC/BCick 7qD7Yy4PCV954b1RPRynCeW7es7lJJAJfEb6U9beXrcDkIFGK5puMmNu2LBImL/F xzHqHz6oEtVn0k4DE22ExSG7P2NmaQ4yfwSit1y0s2PeuYNR7yYW3YjmSR+bAf4r thIpvLIMRrgle7VnYGsyeHCyEGlTdg8ZOQM136dl2qpDMmOoBDjFfaBPNB3jgAN+ vx5nr8X4GdB4jQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:30 2025 by rpki-client