This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft File: IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json) Hash identifier: Fz+zFWJNiLiJpRsoKrJgQ4rLDf7iVFTo3C44arsI6F0= Subject key identifier: A3:A6:AE:12:A4:4E:15:84:B0:8A:A6:88:91:3E:FD:DD:50:10:2A:7A Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95 Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695 Certificate serial: 019AF276DD68CA680E6A1711CF24BAD6586C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft Manifest number: 0DE4 Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: chfb1AWutQTCKBhAw/ehn36/kn1AZKQDOdkTiXM4t5E=) 2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:dd:68:ca:68:0e:6a:17:11:cf:24:ba:d6:58:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695 Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=a3a6ae12a44e1584b08aa688913efddd50102a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:39:96:79:3b:96:1b:41:27:0e:62:78:bb: 0a:79:8e:49:b4:c2:e6:16:bd:a5:94:2d:8e:80:9b: d7:da:96:ac:5e:3a:69:61:8a:f1:d8:a2:52:1a:be: 82:3d:c3:d0:18:e7:99:51:32:ab:21:23:7b:72:57: 73:73:91:5d:a8:be:09:7c:cc:db:32:51:27:ce:31: cb:41:31:10:8e:10:9d:8b:fb:b8:99:66:f1:cc:0f: e1:cf:e5:3c:1d:24:94:95:0d:0c:49:91:3d:0b:6b: a0:d7:5d:38:04:54:3d:13:79:29:19:85:98:ce:85: 3a:d4:16:8e:5e:a9:9d:fa:01:e6:aa:2d:30:fc:0e: 93:ed:0f:5b:f6:14:8c:42:0c:a4:16:5a:b3:cb:da: f8:4b:1f:20:ba:d1:a0:c9:fb:ea:57:6b:69:28:ad: a5:41:44:ec:8f:b4:f4:2e:6f:a9:2b:6a:b2:8f:f5: 29:b9:b1:3e:f6:6b:de:70:33:a6:fd:70:2f:02:92: dc:03:c8:89:4a:b1:59:f6:71:cc:de:0e:2b:0c:0d: 56:b5:c5:0e:71:1c:01:bb:61:3c:ee:a1:9d:5d:d3: ed:18:a6:c9:d8:17:72:ca:84:14:3a:45:1d:26:04: 33:95:5a:f0:2d:43:8b:8b:1b:ff:bb:e0:36:bf:b7: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A6:AE:12:A4:4E:15:84:B0:8A:A6:88:91:3E:FD:DD:50:10:2A:7A X509v3 Authority Key Identifier: keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:45:e9:c3:62:9b:75:ce:d2:8f:45:d4:85:20:0a:8a:d8:b5: 8e:d2:be:77:6b:fe:10:1b:7e:69:7e:7b:5d:f7:dc:4c:cf:89: 09:f9:ee:fd:62:74:59:e7:a7:f5:ae:f4:68:3d:d9:32:62:7c: ba:17:8b:2e:9e:1d:4b:30:4b:56:ff:71:ed:7b:21:a3:ae:7e: 79:96:d9:a6:38:61:eb:b8:f4:7b:92:b1:0e:a9:18:d6:c5:0b: a6:15:ab:25:37:f1:78:cb:6c:d4:b0:e3:9a:f5:8a:cb:9a:e9: bd:be:e0:52:5b:3a:4f:d2:f8:a5:64:7f:31:13:1b:4b:63:21: aa:b9:66:f6:8d:16:d0:2e:4c:35:83:7d:65:47:9b:d1:8e:f1: 10:72:c3:7d:e1:8f:e9:b8:60:fd:84:b2:98:6a:ef:7b:47:2d: df:99:2a:91:58:fe:db:0e:4f:60:3a:ae:5b:3d:72:0f:3d:ae: 1f:2f:9c:d6:cd:bf:18:82:17:1b:47:3e:e5:ee:0e:f5:b9:fe: 73:00:01:7a:a4:36:35:ec:ba:e9:f4:46:81:29:d2:0d:4e:7e: 47:54:48:94:fc:c7:1d:14:dc:91:4d:58:7c:ca:af:21:c0:81: 5c:3a:11:2f:59:e2:11:49:b1:a5:05:13:53:e3:84:f3:23:ac: 02:f1:5e:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydt1oymgOahcRzyS61lhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzVjYzdjMzY0YzkwZWFmYWJhNjk3ZTBiZjU5ZjA1NTY5 YTk2OTUwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EyhhM2E2YWUxMmE0NGUxNTg0YjA4YWE2ODg5MTNlZmRkZDUwMTAyYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbU5lnk7lhtBJw5ieLsKeY5JtMLm Fr2llC2OgJvX2pasXjppYYrx2KJSGr6CPcPQGOeZUTKrISN7cldzc5FdqL4JfMzb MlEnzjHLQTEQjhCdi/u4mWbxzA/hz+U8HSSUlQ0MSZE9C2ug1104BFQ9E3kpGYWY zoU61BaOXqmd+gHmqi0w/A6T7Q9b9hSMQgykFlqzy9r4Sx8gutGgyfvqV2tpKK2l QUTsj7T0Lm+pK2qyj/UpubE+9mvecDOm/XAvApLcA8iJSrFZ9nHM3g4rDA1WtcUO cRwBu2E87qGdXdPtGKbJ2BdyyoQUOkUdJgQzlVrwLUOLixv/u+A2v7dhvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOmrhKkThWEsIqmiJE+/d1QECp6MB8GA1UdIwQY MBaAFCLFzHw2TJDq+rppfgv1nwVWmpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81Njk0NDItNGU2ZC00ZWJlLTliYjIt M2ZkYjc1M2E4NjE5LzEvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81Njk0NDItNGU2ZC00ZWJlLTliYjItM2ZkYjc1M2E4NjE5 LzEvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkXpw2Kb dc7Sj0XUhSAKiti1jtK+d2v+EBt+aX57XffcTM+JCfnu/WJ0Ween9a70aD3ZMmJ8 uheLLp4dSzBLVv9x7Xsho65+eZbZpjhh67j0e5KxDqkY1sULphWrJTfxeMts1LDj mvWKy5rpvb7gUls6T9L4pWR/MRMbS2Mhqrlm9o0W0C5MNYN9ZUeb0Y7xEHLDfeGP 6bhg/YSymGrve0ct35kqkVj+2w5PYDquWz1yDz2uHy+c1s2/GIIXG0c+5e4O9bn+ cwABeqQ2Ney66fRGgSnSDU5+R1RIlPzHHRTckU1YfMqvIcCBXDoRL1niEUmxpQUT U+OE8yOsAvFexg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:15 2025 by rpki-client