This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json) Hash identifier: zeYujgLpQ3Q7/zqENstayLEUdH2gJsvmV/7YnN3bCfU= Subject key identifier: EB:BF:FD:25:55:DE:24:E7:C0:62:48:41:B9:BD:94:58:EE:8D:EE:B4 Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18 Certificate serial: 019AF163ED48F8CE6C01854A3607AF272BBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft Manifest number: 1448 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=) 2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: VeNhERc8CM9ZpaKZiLqZqyGgX7VlXZhTWBDsd3DuOXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ed:48:f8:ce:6c:01:85:4a:36:07:af:27:2b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=ebbffd2555de24e7c0624841b9bd9458ee8deeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:64:c0:e1:a0:76:db:c6:ed:0a:25:e0:ba:f1: 2a:15:94:9e:17:89:be:08:f6:ed:1e:3b:d4:ab:ef: 9f:43:36:67:95:94:e5:6f:54:78:c0:7c:ae:e7:58: ee:e5:07:cc:dd:2d:ed:6b:82:ef:03:d0:b4:14:43: fb:3c:28:cc:21:47:bd:9a:2c:cf:56:ba:23:b6:51: d8:a1:19:47:4b:a9:b6:8c:8a:b5:b3:10:6b:0a:44: 59:71:70:29:ae:54:a3:03:78:d6:ff:4b:88:6c:93: 4e:18:49:96:7b:74:e2:8c:a6:ff:d1:d1:5f:f2:8b: 86:ec:d6:92:e1:db:5e:f2:eb:9f:2b:e7:91:6d:d6: 63:40:01:05:91:5b:31:a6:0b:bd:57:1b:ce:79:9a: 5c:24:fe:89:0b:f0:86:60:e3:70:0c:5a:8e:d9:34: 72:9f:90:0b:8d:f1:8e:c5:00:89:54:82:2c:0c:4d: 4f:54:9b:66:2e:f3:65:ae:b9:8e:05:96:27:a3:22: 4a:57:b9:52:c9:d5:dc:76:a5:ec:fb:33:02:38:59: ee:6e:5e:a8:79:5f:17:ca:72:1c:28:f8:f2:ec:c5: 07:2a:a2:6a:4b:0b:1f:e5:60:94:86:ea:51:90:c5: e7:1a:28:5a:26:96:a5:47:ad:47:f1:4f:7c:ac:c9: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BF:FD:25:55:DE:24:E7:C0:62:48:41:B9:BD:94:58:EE:8D:EE:B4 X509v3 Authority Key Identifier: keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ba:a3:87:eb:dd:1c:d6:53:ba:b3:2b:cc:d5:b5:69:e8:89: 41:a1:f9:00:93:ea:1d:24:7a:ea:d0:57:a2:ab:71:19:d3:db: d9:97:df:c4:70:54:2f:15:c0:28:3e:2b:47:d6:c7:88:b7:8d: 77:38:66:5e:76:7c:93:16:a8:09:dc:ba:a4:67:18:95:dc:f0: 6a:df:fe:a1:28:3a:6c:19:7e:47:23:c3:da:5e:e1:fe:a6:8b: 85:30:da:23:99:04:94:3c:b5:b4:60:02:04:ce:c7:8e:17:8e: ae:62:d8:6d:74:33:e8:77:a6:91:8c:24:d3:2c:20:46:81:53: d6:ba:8c:04:69:93:a1:f3:cc:7f:7f:5c:ba:c0:03:96:e4:0a: f5:b1:0b:8b:e1:ec:b3:47:a2:44:93:34:b9:b7:48:2c:7a:c7: 44:41:70:18:c0:19:92:09:39:cf:b2:fc:64:fb:c8:e2:8d:d9: 82:32:ec:d7:07:83:98:ed:5f:4e:98:25:7e:a9:88:17:0e:af: c1:de:37:0b:d0:ac:c6:0e:85:4e:44:4e:84:1c:f2:d4:7b:9d: 6b:bf:0a:10:6d:7b:88:3c:31:a7:8f:bf:c6:96:64:1b:bf:e3: f9:97:56:0f:57:80:da:ef:4e:9f:15:a8:d1:54:ff:ca:95:e1: 4a:08:0f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+1I+M5sAYVKNgevJyu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzE0OTg1Y2I1NDRjNmQyM2QxOWJiNDNhYzkzNzExYWZl OTFmMTgwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhlYmJmZmQyNTU1ZGUyNGU3YzA2MjQ4NDFiOWJkOTQ1OGVlOGRlZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52TA4aB228btCiXguvEqFZSeF4m+ CPbtHjvUq++fQzZnlZTlb1R4wHyu51ju5QfM3S3ta4LvA9C0FEP7PCjMIUe9mizP VrojtlHYoRlHS6m2jIq1sxBrCkRZcXAprlSjA3jW/0uIbJNOGEmWe3TijKb/0dFf 8ouG7NaS4dte8uufK+eRbdZjQAEFkVsxpgu9VxvOeZpcJP6JC/CGYONwDFqO2TRy n5ALjfGOxQCJVIIsDE1PVJtmLvNlrrmOBZYnoyJKV7lSydXcdqXs+zMCOFnubl6o eV8XynIcKPjy7MUHKqJqSwsf5WCUhupRkMXnGihaJpalR61H8U98rMkSvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu//SVV3iTnwGJIQbm9lFjuje60MB8GA1UdIwQY MBaAFIrBSYXLVExtI9GbtDrJNxGv6R8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4Mzgt YTU4OTQ2OTNhZjEwLzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4MzgtYTU4OTQ2OTNhZjEw LzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbqjh+vd HNZTurMrzNW1aeiJQaH5AJPqHSR66tBXoqtxGdPb2ZffxHBULxXAKD4rR9bHiLeN dzhmXnZ8kxaoCdy6pGcYldzwat/+oSg6bBl+RyPD2l7h/qaLhTDaI5kElDy1tGAC BM7HjheOrmLYbXQz6HemkYwk0ywgRoFT1rqMBGmTofPMf39cusADluQK9bELi+Hs s0eiRJM0ubdILHrHREFwGMAZkgk5z7L8ZPvI4o3ZgjLs1weDmO1fTpglfqmIFw6v wd43C9Csxg6FTkROhBzy1Huda78KEG17iDwxp4+/xpZkG7/j+ZdWD1eA2u9OnxWo 0VT/ypXhSggP0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:20 2025 by rpki-client