This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json) Hash identifier: TDaAzOj/3bJK6TS9ZHIG6wb1RnbbkOWFOYYEnvcTa7E= Subject key identifier: C4:E4:02:05:E9:35:6A:90:36:03:8A:9E:84:19:7A:55:9A:3A:44:9D Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85 Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85 Certificate serial: 019AF3F76B280D7AFB302589726CEE04EC49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 14:01:09 +0000 Manifest this update: Sat 06 Dec 2025 14:01:09 +0000 Manifest next update: Sun 07 Dec 2025 14:01:09 +0000 Files and hashes: 1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=) 2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: zry9FvDmtufPXXb0b6N5hdDKNHlYWYG+3t66YkO0JlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:6b:28:0d:7a:fb:30:25:89:72:6c:ee:04:ec:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85 Validity Not Before: Dec 6 14:01:09 2025 GMT Not After : Dec 7 14:01:09 2025 GMT Subject: CN=c4e40205e9356a9036038a9e84197a559a3a449d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:21:47:0a:90:0b:b3:94:93:0a:df:d1:03: 9a:d6:6e:70:65:b1:88:29:7b:14:e1:44:85:bb:96: 02:cb:99:ff:39:3c:cb:f4:70:fe:3d:8d:3b:17:13: 8d:a3:37:4d:f1:88:3a:f2:5d:b7:0f:17:a2:6e:d9: f5:22:62:dd:23:34:9f:21:a1:82:58:2a:58:73:a0: 1b:3c:64:a1:88:6e:d9:09:1b:32:90:51:45:0f:a5: c5:43:99:6a:14:d7:1d:17:9b:b5:80:cc:02:10:e6: 63:1c:a6:95:d8:6c:81:e6:00:81:00:17:7f:ac:f1: 7b:d8:22:06:4d:98:b4:85:46:02:e0:72:d0:8a:03: d8:a5:f1:e3:08:9d:3c:41:6b:90:82:52:b8:9e:e5: 1d:21:ee:c6:04:7b:41:a1:ea:20:30:48:6f:60:fa: b1:0e:50:21:37:b3:6f:4f:76:34:cf:be:b6:a4:4f: 54:c6:4e:26:c6:db:0b:cd:4c:a8:7b:dc:51:f0:2b: e5:79:59:15:13:cc:8f:f5:aa:6e:66:90:3a:89:05: 42:25:94:0d:38:4b:cb:09:3f:c0:ac:a7:ad:f9:ff: 94:db:58:94:ae:6f:08:fe:92:b7:37:c0:d9:95:df: 75:ae:3e:30:f3:3a:b6:e0:40:fc:4e:93:26:a8:ee: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E4:02:05:E9:35:6A:90:36:03:8A:9E:84:19:7A:55:9A:3A:44:9D X509v3 Authority Key Identifier: keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a2:e8:22:01:cc:cc:da:3a:da:a8:79:58:f6:f1:0c:9b:1c: 93:7a:bb:6d:b0:5d:02:73:46:46:71:6c:22:92:1b:d7:b5:35: 05:ae:31:42:f6:df:34:32:6b:d5:e3:73:63:8b:c2:1a:36:7e: 28:6a:9e:c9:37:38:2b:0f:e0:58:c0:5f:02:4d:3a:1e:31:0e: 01:aa:2d:75:8d:f5:1c:f7:95:e7:da:3e:93:a3:d3:1b:ef:20: 8a:4d:da:3f:ba:b7:1a:92:ed:7b:18:85:59:38:d3:a0:c3:69: e1:88:b3:e8:1e:45:25:be:92:0b:c5:95:4c:0b:66:38:7a:e5: 89:5b:ff:a0:e4:2d:bd:8b:8e:3a:ff:55:a4:0e:63:94:f8:6b: c7:b7:c2:96:66:a7:43:07:e3:74:a2:7f:67:d5:c0:93:39:ba: 39:34:d3:bd:2d:b4:48:44:7e:b0:aa:2f:ee:53:e9:d7:fb:73: 02:88:72:36:b6:8f:21:cc:d1:1e:99:b1:3d:4a:3f:84:95:41: 5f:6c:9d:df:51:9d:9c:3f:6f:d2:b7:de:2c:e4:10:9a:77:fc: 97:a2:1f:0c:30:c6:04:0d:fb:5d:cc:bf:ec:95:3a:08:06:cf: 85:e5:d2:0b:19:09:d8:99:15:20:0d:d7:c1:33:a8:7b:5c:8d: dc:20:e3:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92soDXr7MCWJcmzuBOxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmVhZjU5YTJiZmYzY2FiMTE4NzExODk0NDc4YmI5ZWZm OTNiODUwHhcNMjUxMjA2MTQwMTA5WhcNMjUxMjA3MTQwMTA5WjAzMTEwLwYDVQQD EyhjNGU0MDIwNWU5MzU2YTkwMzYwMzhhOWU4NDE5N2E1NTlhM2E0NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPEhRwqQC7OUkwrf0QOa1m5wZbGI KXsU4USFu5YCy5n/OTzL9HD+PY07FxONozdN8Yg68l23Dxeibtn1ImLdIzSfIaGC WCpYc6AbPGShiG7ZCRsykFFFD6XFQ5lqFNcdF5u1gMwCEOZjHKaV2GyB5gCBABd/ rPF72CIGTZi0hUYC4HLQigPYpfHjCJ08QWuQglK4nuUdIe7GBHtBoeogMEhvYPqx DlAhN7NvT3Y0z762pE9Uxk4mxtsLzUyoe9xR8CvleVkVE8yP9apuZpA6iQVCJZQN OEvLCT/ArKet+f+U21iUrm8I/pK3N8DZld91rj4w8zq24ED8TpMmqO7SiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTkAgXpNWqQNgOKnoQZelWaOkSdMB8GA1UdIwQY MBaAFCEur1miv/PKsRhxGJRHi7nv+TuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVM2dldhS184OHF4R0hFWWxFZUx1ZV81TzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yOGY2YWMtZjgwNS00YzkxLWI0ZWEt MTk0ODg3YmRhNDIzLzEvSVM2dldhS184OHF4R0hFWWxFZUx1ZV81TzRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yOGY2YWMtZjgwNS00YzkxLWI0ZWEtMTk0ODg3YmRhNDIz LzEvSVM2dldhS184OHF4R0hFWWxFZUx1ZV81TzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6LoIgHM zNo62qh5WPbxDJsck3q7bbBdAnNGRnFsIpIb17U1Ba4xQvbfNDJr1eNzY4vCGjZ+ KGqeyTc4Kw/gWMBfAk06HjEOAaotdY31HPeV59o+k6PTG+8gik3aP7q3GpLtexiF WTjToMNp4Yiz6B5FJb6SC8WVTAtmOHrliVv/oOQtvYuOOv9VpA5jlPhrx7fClman QwfjdKJ/Z9XAkzm6OTTTvS20SER+sKov7lPp1/tzAohyNraPIczRHpmxPUo/hJVB X2yd31GdnD9v0rfeLOQQmnf8l6IfDDDGBA37Xcy/7JU6CAbPheXSCxkJ2JkVIA3X wTOoe1yN3CDjhg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:35 2025 by rpki-client