This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json) Hash identifier: e8ZA4GYhOozBEX292rfRhoH9Y/SLZPOwY9GbpgFYO20= Subject key identifier: FF:12:E0:86:D8:28:01:0F:F3:38:A7:53:9E:67:A8:A1:6B:5B:7E:21 Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6 Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6 Certificate serial: 019B42805039308C2490A47B812C4103BD13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft Manifest number: 0A10 Signing time: Sun 21 Dec 2025 20:01:03 +0000 Manifest this update: Sun 21 Dec 2025 20:01:03 +0000 Manifest next update: Mon 22 Dec 2025 20:01:03 +0000 Files and hashes: 1: AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa (hash: LnUMs+GFvbcxwBQi1CgG4kL2ZNmGdakKt42fC58+8no=) 2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: ch8h4wUNgox+SNZ0w1zLqpNfyxTz7muUnsPvHJDLot8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:50:39:30:8c:24:90:a4:7b:81:2c:41:03:bd:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6 Validity Not Before: Dec 21 20:01:03 2025 GMT Not After : Dec 22 20:01:03 2025 GMT Subject: CN=ff12e086d828010ff338a7539e67a8a16b5b7e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:bf:57:d4:86:2a:8a:9b:a1:ef:22:4c:c2: 44:af:88:dc:cf:a2:f7:da:9a:93:65:1f:0c:85:69: 6c:7d:e1:ee:bf:ea:a5:f5:0e:b4:ad:5f:29:3e:2c: 75:66:30:20:e6:18:14:3d:54:b3:9c:d6:f9:2a:19: b1:27:3e:da:df:38:61:b5:8d:15:93:9e:fd:94:aa: 95:56:19:76:aa:6a:c3:e9:9e:35:da:e2:44:76:82: 32:11:72:35:4b:b3:7c:2f:01:f9:b8:6c:4c:10:86: 5a:a0:66:ea:5b:4c:0f:a6:a8:6e:39:e7:9d:44:59: a5:6d:66:93:1a:42:05:3a:2e:9e:da:ef:29:06:2c: 97:22:0d:62:05:84:4b:9b:03:80:2f:96:bd:c9:7e: 16:ea:5e:b7:b4:e2:c3:b8:a8:30:90:7d:e6:53:b0: 9f:7f:27:58:0d:98:ed:22:5c:94:74:2d:8a:6d:09: 18:4d:37:67:81:33:c0:9b:d9:7e:72:7e:62:c1:66: a7:33:3e:7e:f3:ca:96:05:1d:31:dc:e3:8f:95:50: 4b:f1:1d:e6:94:ab:d7:be:96:1a:8f:c0:41:2c:89: de:db:8b:c3:eb:46:b1:00:9e:ca:d3:26:70:b0:bd: 43:a1:bd:15:85:c6:60:85:2c:9d:91:e6:11:34:2c: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:12:E0:86:D8:28:01:0F:F3:38:A7:53:9E:67:A8:A1:6B:5B:7E:21 X509v3 Authority Key Identifier: keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3d:2e:80:27:a4:b3:02:e0:7d:e7:39:cf:0d:08:fe:1e:0b: 7e:2c:dc:a1:f5:6a:30:18:c6:b4:c8:ab:6e:da:30:b3:f4:d4: a6:b1:0f:d0:cb:0a:60:25:d7:e6:ab:df:7e:7d:d0:75:bc:ba: 05:9a:f6:cc:7d:ca:b3:38:6d:ac:42:a7:13:54:06:6f:6c:88: 54:79:15:ee:5c:b3:0c:14:59:be:f6:f6:f3:ef:57:96:d2:a7: 93:b5:48:b9:cb:fb:bb:65:45:4b:2d:c5:15:d9:28:c3:f4:7f: de:4f:9d:de:55:11:a8:b3:9f:43:b0:c4:67:26:b1:a7:3a:7a: dd:54:87:84:06:c3:3a:51:e3:ff:fb:4c:21:83:ea:8f:bb:02: ec:97:0a:15:68:c7:47:8f:17:d7:bd:ac:d6:f5:fd:a4:39:bf: c2:df:8d:ec:71:e1:f8:6a:ae:7c:8a:96:13:f9:81:e2:8d:af: 2c:ad:0b:59:ac:18:b7:64:d2:7d:f1:e3:e4:92:aa:fa:8d:e0: cb:ef:cc:0d:52:7b:cf:b2:78:77:e9:d1:7c:ac:cf:e6:39:d0: ec:85:4f:59:8e:75:83:a4:7e:de:56:39:b9:96:dc:c1:20:58: 82:04:33:80:e8:c5:4b:1c:63:96:89:ad:b2:55:a6:59:bd:e9: fc:5a:84:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgFA5MIwkkKR7gSxBA70TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWE1MjU1Zjg4ZDRiOTU3MTg5YzE0MmY4YWM1NjgxYzUw YzY4YTYwHhcNMjUxMjIxMjAwMTAzWhcNMjUxMjIyMjAwMTAzWjAzMTEwLwYDVQQD EyhmZjEyZTA4NmQ4MjgwMTBmZjMzOGE3NTM5ZTY3YThhMTZiNWI3ZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndC/V9SGKoqboe8iTMJEr4jcz6L3 2pqTZR8MhWlsfeHuv+ql9Q60rV8pPix1ZjAg5hgUPVSznNb5KhmxJz7a3zhhtY0V k579lKqVVhl2qmrD6Z412uJEdoIyEXI1S7N8LwH5uGxMEIZaoGbqW0wPpqhuOeed RFmlbWaTGkIFOi6e2u8pBiyXIg1iBYRLmwOAL5a9yX4W6l63tOLDuKgwkH3mU7Cf fydYDZjtIlyUdC2KbQkYTTdngTPAm9l+cn5iwWanMz5+88qWBR0x3OOPlVBL8R3m lKvXvpYaj8BBLIne24vD60axAJ7K0yZwsL1Dob0VhcZghSydkeYRNCxSUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8S4IbYKAEP8zinU55nqKFrW34hMB8GA1UdIwQY MBaAFIjqUlX4jUuVcYnBQvisVoHFDGimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzkt ZTdjZTI2ODg0YmU2LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzktZTdjZTI2ODg0YmU2 LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD0ugCek swLgfec5zw0I/h4LfizcofVqMBjGtMirbtows/TUprEP0MsKYCXX5qvffn3Qdby6 BZr2zH3KszhtrEKnE1QGb2yIVHkV7lyzDBRZvvb28+9XltKnk7VIucv7u2VFSy3F Fdkow/R/3k+d3lURqLOfQ7DEZyaxpzp63VSHhAbDOlHj//tMIYPqj7sC7JcKFWjH R48X172s1vX9pDm/wt+N7HHh+GqufIqWE/mB4o2vLK0LWawYt2TSffHj5JKq+o3g y+/MDVJ7z7J4d+nRfKzP5jnQ7IVPWY51g6R+3lY5uZbcwSBYggQzgOjFSxxjlomt slWmWb3p/FqErw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:03:41 2025 by rpki-client