This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json) Hash identifier: i3Z9lLvxm89c0oA/uI+rUcNAIg7NLlIe2SwhqdWuoQk= Subject key identifier: D7:30:35:E6:AA:3B:D1:3E:82:A4:45:2C:43:92:3A:9F:9B:73:7B:93 Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d Certificate serial: 019AF208E2506755B417DF5E3C90F276763E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: VnjAZXEV2IpEDwg3p4BnaouHiwY.roa (hash: +OjGTLOvqNCpLYSjRU9GeBSRZeFRlVpWW6Mj3HPVgqw=) 2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: ZO8tHALGpc5HnKYMtqgjVbuJRO43O04KDAIP0LdYCww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:50:67:55:b4:17:df:5e:3c:90:f2:76:76:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=d73035e6aa3bd13e82a4452c43923a9f9b737b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:d2:74:9f:f7:31:0a:cb:93:90:d3:b3:95: 58:86:17:ec:15:0e:6a:a4:79:96:63:cb:cd:83:86: d9:b3:aa:88:02:0c:59:a0:6d:a2:cd:74:fc:72:61: 34:be:16:26:d4:ce:fe:72:0f:b9:a1:c2:44:f2:7a: 02:96:1e:c3:86:4f:f6:83:f5:82:18:ed:50:2e:46: 66:d6:19:06:9c:9e:e2:2d:6b:d9:28:31:c0:a8:b3: f5:9a:50:5d:a9:20:a2:34:84:ef:24:74:b1:4d:7b: 8a:58:d3:b3:a3:e0:a3:d2:d4:95:34:7e:c7:49:c8: 8d:a2:48:56:30:6f:a4:ab:81:de:92:46:f8:5b:27: 93:c7:f6:df:d8:16:2d:ab:d8:fd:71:0b:cf:d2:3f: 18:0e:0d:00:4d:e4:26:30:e9:e1:ff:5c:6f:56:ef: d6:a4:e1:96:41:90:72:e0:a0:fe:da:58:74:c9:63: e8:91:60:31:2f:61:60:e4:7d:41:3a:08:61:f5:08: 81:f1:c9:69:7d:40:a2:be:33:cb:51:f9:18:2c:31: 7a:7b:1e:06:3c:24:84:69:f7:ee:42:a5:37:04:04: 2b:55:ae:42:dd:12:94:12:63:1d:e3:24:45:0d:b7: 9b:39:1c:06:fb:c2:5a:f6:92:88:de:c1:8d:50:43: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:30:35:E6:AA:3B:D1:3E:82:A4:45:2C:43:92:3A:9F:9B:73:7B:93 X509v3 Authority Key Identifier: keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:7f:70:5f:e4:60:61:f3:b1:56:8c:63:af:41:a3:14:61:20: 10:b6:93:76:9b:10:e7:2a:b0:4b:70:b4:d9:38:49:d3:40:37: 0e:41:52:79:cb:12:a7:21:70:06:5d:da:b2:c0:af:5f:a7:f5: 4e:cc:2f:e8:24:b4:ce:68:e3:45:fa:a9:ad:cb:c6:b0:84:67: c1:c1:66:fb:4e:6b:34:da:d3:fc:a3:5d:3d:c7:e6:61:22:e7: 3f:e2:db:bb:fd:9f:43:5d:e2:30:5e:91:29:ad:1d:83:40:55: 01:69:28:74:ac:6f:14:45:67:ce:45:67:10:cb:46:a4:09:85: 27:1d:db:e7:94:f4:fa:80:02:6f:e2:72:21:a2:f1:77:59:fc: f6:fe:8f:4a:56:57:10:93:dc:22:56:54:7a:a2:5a:30:fa:09: 7e:5d:86:f9:79:9a:0f:55:07:72:ec:54:2d:d4:b2:4d:d8:b4: 70:b5:28:16:3f:0b:71:40:ba:81:a9:9d:3f:7c:96:00:39:f4: 2f:e6:1f:ca:6a:cb:e5:96:0a:f8:47:d2:55:49:c1:5d:41:8c: 0a:71:eb:57:c2:23:25:86:81:70:6c:5c:51:58:40:8d:35:87: a5:a8:95:5b:fa:3b:48:ce:5a:bb:f6:02:47:e3:07:b6:30:4f: b6:78:e8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOJQZ1W0F99ePJDydnY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzdlYWU2NDlkOTU0N2IwYWQwYWIwMDdhYjRlOGE0OGRl ZDRkNWQwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EyhkNzMwMzVlNmFhM2JkMTNlODJhNDQ1MmM0MzkyM2E5ZjliNzM3YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrzSdJ/3MQrLk5DTs5VYhhfsFQ5q pHmWY8vNg4bZs6qIAgxZoG2izXT8cmE0vhYm1M7+cg+5ocJE8noClh7Dhk/2g/WC GO1QLkZm1hkGnJ7iLWvZKDHAqLP1mlBdqSCiNITvJHSxTXuKWNOzo+Cj0tSVNH7H SciNokhWMG+kq4Hekkb4WyeTx/bf2BYtq9j9cQvP0j8YDg0ATeQmMOnh/1xvVu/W pOGWQZBy4KD+2lh0yWPokWAxL2Fg5H1BOghh9QiB8clpfUCivjPLUfkYLDF6ex4G PCSEaffuQqU3BAQrVa5C3RKUEmMd4yRFDbebORwG+8Ja9pKI3sGNUENSvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcwNeaqO9E+gqRFLEOSOp+bc3uTMB8GA1UdIwQY MBaAFIrH6uZJ2VR7CtCrAHq06KSN7U1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYt YWMwMWYwYzU2NjJiLzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYtYWMwMWYwYzU2NjJi LzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn9wX+Rg YfOxVoxjr0GjFGEgELaTdpsQ5yqwS3C02ThJ00A3DkFSecsSpyFwBl3assCvX6f1 Tswv6CS0zmjjRfqprcvGsIRnwcFm+05rNNrT/KNdPcfmYSLnP+Lbu/2fQ13iMF6R Ka0dg0BVAWkodKxvFEVnzkVnEMtGpAmFJx3b55T0+oACb+JyIaLxd1n89v6PSlZX EJPcIlZUeqJaMPoJfl2G+XmaD1UHcuxULdSyTdi0cLUoFj8LcUC6gamdP3yWADn0 L+YfymrL5ZYK+EfSVUnBXUGMCnHrV8IjJYaBcGxcUVhAjTWHpaiVW/o7SM5au/YC R+MHtjBPtnjoQw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:05 2025 by rpki-client