This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json) Hash identifier: UBdgLwziOP93RtHFLy9u8RmoNrJOqGbHAQoAA40PLjw= Subject key identifier: 0C:E7:48:0D:28:D4:BD:A6:77:A2:69:67:E2:00:FA:63:CD:25:8B:62 Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da Certificate serial: 019AF12F0EBD3CC2DB06A37CE4B20105664D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:03:04 +0000 Manifest this update: Sat 06 Dec 2025 01:03:04 +0000 Manifest next update: Sun 07 Dec 2025 01:03:04 +0000 Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: UEFuDnJWaVJcu+klHXsQiXz98AbK49RsaYXF7zzY5kY=) 2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:0e:bd:3c:c2:db:06:a3:7c:e4:b2:01:05:66:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da Validity Not Before: Dec 6 01:03:04 2025 GMT Not After : Dec 7 01:03:04 2025 GMT Subject: CN=0ce7480d28d4bda677a26967e200fa63cd258b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:11:05:bc:56:64:d4:89:36:ab:28:ec:1f: 22:31:04:09:73:70:86:22:ea:de:56:53:59:70:6c: bf:0e:fe:87:8f:7d:d4:ae:6d:a0:00:d2:66:d3:d6: 53:b2:e6:d7:57:2d:ab:96:b0:09:05:86:61:d2:47: c2:98:2b:7d:49:38:3e:18:cd:a7:d5:98:5e:2c:50: ea:c8:31:6f:9f:87:74:40:52:ba:82:11:9f:f0:2f: a9:0c:ba:51:52:46:3a:10:a2:2e:f8:6b:f3:a9:c0: 7a:7b:b7:ab:33:0a:75:3f:39:30:ed:41:1d:74:ce: cc:a7:b0:a7:88:95:00:ed:f9:dd:b0:1f:a9:c9:a9: 0d:4d:99:97:13:12:03:fe:22:23:39:0d:0a:ed:5f: 0e:c8:e1:36:ef:14:19:72:23:5e:df:f0:0f:f3:6e: 87:a7:eb:49:ad:95:4f:73:0c:2c:db:ec:38:0e:01: 11:5d:29:5a:37:ca:93:95:e5:25:95:d2:12:75:70: 51:6b:34:d2:b8:83:79:00:cf:8e:59:10:01:66:49: c0:44:02:62:67:28:d4:f0:84:23:1f:ff:59:45:6e: a2:5c:6e:17:72:51:76:37:91:8d:b7:93:a2:0e:2c: 2d:3b:7a:ce:84:54:fd:db:b7:dc:e7:85:1f:a8:49: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E7:48:0D:28:D4:BD:A6:77:A2:69:67:E2:00:FA:63:CD:25:8B:62 X509v3 Authority Key Identifier: keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cd:cb:98:1d:2e:ca:d3:d1:a2:ed:53:61:0e:08:de:a1:eb: 69:22:6a:ba:1a:a1:70:e1:7e:b1:5d:9b:90:29:4c:25:91:8a: 10:66:75:c2:e4:4b:07:88:d4:5b:63:9e:a0:27:52:1c:71:45: 84:1b:00:61:e5:44:30:4d:0c:63:eb:c9:b4:3f:a4:f0:c2:5c: e4:c8:49:2e:96:de:f1:1a:ab:b1:eb:59:14:28:7b:cc:3b:78: 7d:3d:1d:75:fb:b9:42:d8:a4:f4:e7:d8:2e:7f:2c:16:d2:00: a6:2e:a0:4a:d6:78:36:d1:05:64:61:1f:64:a0:34:cf:68:34: 68:c6:87:23:e7:43:6d:4b:f4:e0:19:d0:8c:75:8c:a6:59:4e: ff:cf:0c:81:a3:ed:97:12:5e:11:bb:6c:60:e6:63:3a:c2:75: 17:ab:98:b5:92:c8:9f:4a:12:3b:11:b8:57:fd:0c:c0:c9:98: 28:d8:57:4e:78:ec:f2:81:b3:40:31:d0:b1:40:5c:a7:c2:5a: 0d:f1:67:77:b1:eb:e6:07:4b:c5:09:3b:92:94:a9:60:ed:2b: c5:2b:6f:33:4c:a4:48:fb:db:a4:e5:d4:e9:ac:d3:b3:f7:56: 7e:0e:1f:a0:bf:fd:8d:99:32:89:6a:15:32:5e:0e:c7:48:75: 05:8f:ec:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLw69PMLbBqN85LIBBWZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi YmEzZGEwHhcNMjUxMjA2MDEwMzA0WhcNMjUxMjA3MDEwMzA0WjAzMTEwLwYDVQQD EygwY2U3NDgwZDI4ZDRiZGE2NzdhMjY5NjdlMjAwZmE2M2NkMjU4YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1MRBbxWZNSJNqso7B8iMQQJc3CG IureVlNZcGy/Dv6Hj33Urm2gANJm09ZTsubXVy2rlrAJBYZh0kfCmCt9STg+GM2n 1ZheLFDqyDFvn4d0QFK6ghGf8C+pDLpRUkY6EKIu+GvzqcB6e7erMwp1Pzkw7UEd dM7Mp7CniJUA7fndsB+pyakNTZmXExID/iIjOQ0K7V8OyOE27xQZciNe3/AP826H p+tJrZVPcwws2+w4DgERXSlaN8qTleUlldISdXBRazTSuIN5AM+OWRABZknARAJi ZyjU8IQjH/9ZRW6iXG4XclF2N5GNt5OiDiwtO3rOhFT927fc54UfqEkZIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAznSA0o1L2md6JpZ+IA+mPNJYtiMB8GA1UdIwQY MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt MGZlNGQ3ZjdkYjNkLzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM3LmB0u ytPRou1TYQ4I3qHraSJquhqhcOF+sV2bkClMJZGKEGZ1wuRLB4jUW2OeoCdSHHFF hBsAYeVEME0MY+vJtD+k8MJc5MhJLpbe8RqrsetZFCh7zDt4fT0ddfu5Qtik9OfY Ln8sFtIApi6gStZ4NtEFZGEfZKA0z2g0aMaHI+dDbUv04BnQjHWMpllO/88MgaPt lxJeEbtsYOZjOsJ1F6uYtZLIn0oSOxG4V/0MwMmYKNhXTnjs8oGzQDHQsUBcp8Ja DfFnd7Hr5gdLxQk7kpSpYO0rxStvM0ykSPvbpOXU6azTs/dWfg4foL/9jZkyiWoV Ml4Ox0h1BY/saQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:50 2025 by rpki-client