This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json) Hash identifier: 8g2C2lgf7RHwrhMHOW/WcbulgNk3hwIiWBIAN+87U58= Subject key identifier: 20:FF:DE:7C:FC:90:30:6E:F2:76:2F:C8:D7:6F:62:A0:D4:53:46:C4 Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Certificate serial: 019B23D16E5F0DA473C1811AB10E270D0F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft Manifest number: 0B74 Signing time: Mon 15 Dec 2025 21:01:25 +0000 Manifest this update: Mon 15 Dec 2025 21:01:25 +0000 Manifest next update: Tue 16 Dec 2025 21:01:25 +0000 Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: eutUG2Gw1VWMbqnmtLOfwb2egSHbP4uH3zs4wQuC5Vs=) 2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:6e:5f:0d:a4:73:c1:81:1a:b1:0e:27:0d:0f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Validity Not Before: Dec 15 21:01:25 2025 GMT Not After : Dec 16 21:01:25 2025 GMT Subject: CN=20ffde7cfc90306ef2762fc8d76f62a0d45346c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:25:32:45:12:c6:de:62:b5:8f:3a:f9:1c: da:00:00:50:4b:86:48:22:00:0d:e0:9d:ce:ec:45: 16:5a:e6:5e:6a:0c:e8:2a:83:0f:38:41:b6:d1:2b: e4:b2:b5:ad:be:a1:99:73:d7:3e:e4:99:13:5f:23: dd:c3:20:9f:70:80:b7:e0:3f:a3:e8:13:05:00:e8: c4:55:59:74:8a:78:89:4e:2c:84:f8:f2:72:ec:47: ad:f9:18:04:6d:cf:d0:65:37:aa:a6:26:ca:76:b1: 31:6b:55:c2:78:c0:17:bc:25:21:52:7e:77:62:80: 1e:6d:17:eb:82:fd:7c:89:58:2b:f5:e6:3e:56:40: 42:77:9b:22:5a:24:33:88:c3:9d:70:fa:e8:b2:27: 38:11:6a:1b:f4:8a:79:81:57:27:39:4a:df:f3:b4: 49:5e:1c:a6:08:a1:67:f0:25:dc:89:5d:cb:02:7a: 7c:88:8c:38:7b:9b:7d:b2:74:b2:39:06:58:19:ff: eb:f4:51:93:f5:34:05:54:31:2f:9e:4d:a3:9c:39: 63:bc:ab:e4:a5:25:f9:ca:a8:31:80:d4:a4:dd:b5: 20:ad:55:a4:f5:fe:d1:b7:a8:56:2e:90:f0:b3:b7: a9:a6:50:a9:84:08:e0:a2:53:c9:fd:ed:7b:65:6a: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:DE:7C:FC:90:30:6E:F2:76:2F:C8:D7:6F:62:A0:D4:53:46:C4 X509v3 Authority Key Identifier: keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ac:ca:1f:64:e8:09:a1:d8:4c:72:d3:95:50:24:06:85:f8: 87:3d:9e:ce:b4:0a:98:d3:50:30:5c:69:c3:5e:ce:07:d9:e1: 01:01:21:d1:6c:da:84:a9:64:95:38:9e:72:b8:5c:72:a7:e7: 46:13:4c:ef:27:19:f1:d7:8c:1c:81:21:7c:4c:98:3c:28:5b: 48:4a:15:28:1e:f6:05:af:ba:fa:83:32:74:4c:12:04:79:4e: e7:44:7c:db:b1:fa:c4:82:64:e5:00:07:0f:67:c9:0e:8a:60: a7:88:0c:a5:6a:a0:30:e1:b0:1c:ee:76:e3:19:05:6c:e7:95: a9:ac:5e:bb:32:ca:89:87:22:b7:ff:a4:43:5e:e0:ab:9e:cb: 11:41:1e:ab:64:3a:57:6e:4a:13:e4:79:36:71:fa:cc:01:17: 7d:9c:95:a3:f1:3e:c0:d6:7d:00:32:c0:f6:70:94:dd:25:7a: 54:6a:d3:81:a2:f9:09:0b:4f:b3:57:43:65:35:5a:1e:4d:be: ff:df:f5:3a:4d:85:14:81:f7:b0:c7:b7:7c:3c:7b:eb:48:71: b9:49:a0:c3:7e:c4:c2:41:db:3f:ac:49:de:58:75:cc:d6:4f: 70:48:f8:31:fb:2a:af:2e:92:37:16:f1:78:21:1d:9c:e5:e4: 4f:98:ef:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0W5fDaRzwYEasQ4nDQ9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey YjJhYWMwHhcNMjUxMjE1MjEwMTI1WhcNMjUxMjE2MjEwMTI1WjAzMTEwLwYDVQQD EygyMGZmZGU3Y2ZjOTAzMDZlZjI3NjJmYzhkNzZmNjJhMGQ0NTM0NmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMlMkUSxt5itY86+RzaAABQS4ZI IgAN4J3O7EUWWuZeagzoKoMPOEG20SvksrWtvqGZc9c+5JkTXyPdwyCfcIC34D+j 6BMFAOjEVVl0iniJTiyE+PJy7Eet+RgEbc/QZTeqpibKdrExa1XCeMAXvCUhUn53 YoAebRfrgv18iVgr9eY+VkBCd5siWiQziMOdcProsic4EWob9Ip5gVcnOUrf87RJ XhymCKFn8CXciV3LAnp8iIw4e5t9snSyOQZYGf/r9FGT9TQFVDEvnk2jnDljvKvk pSX5yqgxgNSk3bUgrVWk9f7Rt6hWLpDws7epplCphAjgolPJ/e17ZWpxDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD/3nz8kDBu8nYvyNdvYqDUU0bEMB8GA1UdIwQY MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6zKH2To CaHYTHLTlVAkBoX4hz2ezrQKmNNQMFxpw17OB9nhAQEh0WzahKlklTiecrhccqfn RhNM7ycZ8deMHIEhfEyYPChbSEoVKB72Ba+6+oMydEwSBHlO50R827H6xIJk5QAH D2fJDopgp4gMpWqgMOGwHO524xkFbOeVqaxeuzLKiYcit/+kQ17gq57LEUEeq2Q6 V25KE+R5NnH6zAEXfZyVo/E+wNZ9ADLA9nCU3SV6VGrTgaL5CQtPs1dDZTVaHk2+ /9/1Ok2FFIH3sMe3fDx760hxuUmgw37EwkHbP6xJ3lh1zNZPcEj4Mfsqry6SNxbx eCEdnOXkT5jvFw== -----END CERTIFICATE-----Generated at Tue Dec 16 03:59:29 2025 by rpki-client