This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json) Hash identifier: XLgdgUWltbCwzJBw/yaRWaaAgOhdA606fpduNSFLu3g= Subject key identifier: 00:63:2E:4F:8F:11:28:76:25:CB:33:9E:7F:30:BA:23:B0:F8:EB:C1 Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6 Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6 Certificate serial: 019B4A39F86772114A38038FD4AA05398063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft Manifest number: 0A14 Signing time: Tue 23 Dec 2025 08:01:11 +0000 Manifest this update: Tue 23 Dec 2025 08:01:11 +0000 Manifest next update: Wed 24 Dec 2025 08:01:11 +0000 Files and hashes: 1: AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa (hash: LnUMs+GFvbcxwBQi1CgG4kL2ZNmGdakKt42fC58+8no=) 2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: 6dDO+AIXGFjAYr4ijgB/rZtwSnReUNFZI7EDFb5lmmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:f8:67:72:11:4a:38:03:8f:d4:aa:05:39:80:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6 Validity Not Before: Dec 23 08:01:11 2025 GMT Not After : Dec 24 08:01:11 2025 GMT Subject: CN=00632e4f8f11287625cb339e7f30ba23b0f8ebc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:80:4f:21:48:b4:bf:2c:d3:98:da:61:d0:8a: 26:21:bd:96:f8:92:3d:15:2b:00:ef:39:da:2b:57: a1:fc:04:be:a8:a5:96:bb:78:68:46:d7:3e:c5:cb: c7:6b:2b:ff:3f:c0:58:35:5a:47:60:ad:42:ba:b7: 44:d9:08:79:06:26:0d:87:de:24:32:74:f5:32:97: 71:7e:fc:a4:bb:cb:5a:04:39:09:70:f8:27:9d:8d: 48:5b:2d:fc:05:1b:05:6c:a7:b0:ea:4d:c1:2c:d9: 09:b4:90:dd:e2:57:34:dd:cf:65:11:3f:3c:16:46: 78:8b:70:fb:c4:fe:11:f7:17:67:cb:36:b0:c0:95: 22:f9:45:2e:c6:5e:cc:cb:9b:fa:5b:2c:c6:a8:f6: b6:88:dd:19:6f:67:39:24:c5:4b:67:50:a1:07:f9: 06:99:89:c9:08:c6:14:8f:75:18:5a:9f:54:6b:d9: 18:8f:6f:d6:40:9e:87:fc:04:ed:85:37:ed:87:00: 2d:28:90:8c:1f:e1:84:7b:73:8a:6f:73:2a:7b:cf: dc:fe:ee:1e:ba:89:a5:a4:b7:2a:bd:c0:3a:26:51: 91:02:30:c0:51:04:2a:29:49:aa:a0:e1:5b:e6:c1: 39:f3:06:13:73:df:d7:c4:3b:c9:50:7d:e6:3c:bb: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:63:2E:4F:8F:11:28:76:25:CB:33:9E:7F:30:BA:23:B0:F8:EB:C1 X509v3 Authority Key Identifier: keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:4f:68:9b:f5:12:ee:9c:cf:1b:23:79:09:fb:0d:ee:02:ff: 6d:99:bb:f5:b0:01:a0:76:d7:08:97:6d:9d:6c:8c:68:8b:0a: 9d:f7:be:3c:b4:2e:ae:60:d1:b5:9b:9b:77:65:52:8b:78:0c: b7:20:58:55:35:5e:fb:c2:f6:71:d5:4e:95:c8:90:e4:81:91: 54:e3:36:2f:b9:95:d0:c2:c7:b7:82:1b:f5:97:31:45:13:b7: 0f:61:c9:ee:80:6e:a3:16:b4:be:7f:2d:0f:eb:3b:22:7f:a2: ca:72:bf:c7:38:42:21:05:58:1c:24:0d:f6:f5:a8:e0:b1:7b: 65:13:b9:95:d7:29:fa:88:a6:0f:3e:30:3b:73:b1:57:33:96: 32:1c:3f:e8:8b:d5:20:47:c7:66:f9:b1:77:03:c7:61:8d:cf: b0:2d:eb:97:20:2b:5e:f9:13:d6:f1:3d:80:92:f8:f9:92:17: 77:07:39:bd:ea:ca:c0:bf:8f:47:24:d6:9f:f5:c7:80:40:ec: e6:4b:94:0d:03:e1:20:0e:de:08:36:f8:1f:f9:0a:0b:65:17: ec:3c:80:10:a3:26:1d:a8:92:63:34:3d:72:43:3d:af:d5:ed: a3:5a:fc:65:76:8d:88:46:40:8c:7f:2a:66:6a:7c:2e:8b:62: 2a:a1:f3:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOfhnchFKOAOP1KoFOYBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWE1MjU1Zjg4ZDRiOTU3MTg5YzE0MmY4YWM1NjgxYzUw YzY4YTYwHhcNMjUxMjIzMDgwMTExWhcNMjUxMjI0MDgwMTExWjAzMTEwLwYDVQQD EygwMDYzMmU0ZjhmMTEyODc2MjVjYjMzOWU3ZjMwYmEyM2IwZjhlYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IBPIUi0vyzTmNph0IomIb2W+JI9 FSsA7znaK1eh/AS+qKWWu3hoRtc+xcvHayv/P8BYNVpHYK1CurdE2Qh5BiYNh94k MnT1Mpdxfvyku8taBDkJcPgnnY1IWy38BRsFbKew6k3BLNkJtJDd4lc03c9lET88 FkZ4i3D7xP4R9xdnyzawwJUi+UUuxl7My5v6WyzGqPa2iN0Zb2c5JMVLZ1ChB/kG mYnJCMYUj3UYWp9Ua9kYj2/WQJ6H/ATthTfthwAtKJCMH+GEe3OKb3Mqe8/c/u4e uomlpLcqvcA6JlGRAjDAUQQqKUmqoOFb5sE58wYTc9/XxDvJUH3mPLsIfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABjLk+PESh2Jcsznn8wuiOw+OvBMB8GA1UdIwQY MBaAFIjqUlX4jUuVcYnBQvisVoHFDGimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzkt ZTdjZTI2ODg0YmU2LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzktZTdjZTI2ODg0YmU2 LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF09om/US 7pzPGyN5CfsN7gL/bZm79bABoHbXCJdtnWyMaIsKnfe+PLQurmDRtZubd2VSi3gM tyBYVTVe+8L2cdVOlciQ5IGRVOM2L7mV0MLHt4Ib9ZcxRRO3D2HJ7oBuoxa0vn8t D+s7In+iynK/xzhCIQVYHCQN9vWo4LF7ZRO5ldcp+oimDz4wO3OxVzOWMhw/6IvV IEfHZvmxdwPHYY3PsC3rlyArXvkT1vE9gJL4+ZIXdwc5verKwL+PRyTWn/XHgEDs 5kuUDQPhIA7eCDb4H/kKC2UX7DyAEKMmHaiSYzQ9ckM9r9Xto1r8ZXaNiEZAjH8q Zmp8LotiKqHzmw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:05 2025 by rpki-client