This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json) Hash identifier: cqVNc1E3CSHdKQ8RTedDK7hgwz7OFr7g18FSAdSr0yk= Subject key identifier: 49:58:BB:D9:EE:AA:05:24:A6:DE:A3:2C:1A:FC:42:80:DF:A6:EE:B4 Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Certificate serial: 019AF19A99284D1C8B47FB86D979D8F12FB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft Manifest number: 0803 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=) 2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=) 3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=) 4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: ++/oMMfoPOX6wlCQjV5BxXW4RCV4jiAH98JjgLOFaTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:99:28:4d:1c:8b:47:fb:86:d9:79:d8:f1:2f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=4958bbd9eeaa0524a6dea32c1afc4280dfa6eeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:1c:50:d0:cd:fc:19:bd:43:f6:a0:db:0b: a4:63:7e:29:b8:9c:15:57:3d:6f:1d:12:ab:b4:39: c7:15:99:b3:a8:81:68:d1:1a:60:24:fb:32:28:0c: b7:bb:4e:70:75:24:57:1d:85:33:b2:75:f3:5f:7a: 76:e8:e3:e4:bf:40:7c:9d:e6:98:82:6a:be:19:c0: 86:53:f2:59:8f:a8:6e:e4:39:8c:02:a6:5a:99:3c: 12:c2:5e:dc:40:49:72:96:48:7a:46:ee:e9:77:e4: 8c:76:07:07:9c:41:85:0e:1b:93:d3:d8:39:32:8c: 5f:46:25:27:11:d1:24:1e:0a:46:af:ca:8e:cd:cb: ad:44:cd:7f:96:8f:38:4d:ba:fc:06:a1:f0:3a:44: 35:01:53:cf:37:3e:b3:34:19:5a:43:cb:76:8d:6e: 70:81:57:fd:7b:11:fa:db:7e:01:5d:ba:09:a4:b0: 6d:46:67:8f:55:22:af:12:c9:8c:27:06:4d:36:fb: b9:b2:ff:38:14:92:e9:06:91:50:fc:f3:f8:0f:3c: 65:3a:f2:34:0c:70:19:fb:53:1e:27:13:88:6f:d0: a6:30:e0:31:fd:e6:8a:8b:d4:9c:97:cb:61:98:6e: 7a:f6:11:f8:ef:e3:c4:90:ab:84:e0:d0:15:eb:c6: 06:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:58:BB:D9:EE:AA:05:24:A6:DE:A3:2C:1A:FC:42:80:DF:A6:EE:B4 X509v3 Authority Key Identifier: keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bd:2f:2d:03:0c:cf:a0:35:8f:8e:c9:01:19:17:dd:cb:6c: 36:3b:74:e2:8c:ba:7c:b9:5d:e9:e8:b8:dc:02:17:04:3c:d8: c1:54:f4:30:40:57:28:c9:09:6a:25:a1:3f:2c:96:d8:6a:5d: c6:4a:61:da:ac:90:2c:8d:35:7d:16:2c:f0:49:10:b0:b3:c7: 3e:29:6e:ef:e7:e5:44:6f:6f:71:cf:bb:a8:27:2d:83:30:d8: be:25:de:ed:a0:ba:09:c3:63:ba:38:29:48:c1:2f:fb:1f:db: 95:6d:3e:b3:5a:28:47:4e:e2:f6:db:0e:a3:d7:4b:4c:70:2d: 73:5f:f0:8b:4a:3b:8e:25:86:94:1a:31:59:36:63:25:2c:c0: 84:46:f9:11:8f:44:30:c7:05:3c:09:84:20:ce:ce:c3:6b:bb: 9a:fa:2f:46:e9:85:ec:54:2b:71:12:46:5f:86:f4:86:65:69: 07:0a:7a:4c:eb:a4:7e:6d:47:02:98:aa:a3:0d:96:fb:e4:2e: 72:d9:45:c3:6c:01:04:d1:31:33:ae:13:9d:1d:51:4c:3d:2e: 15:ef:fb:32:16:92:81:5e:a0:60:5d:23:e6:36:b9:71:71:59: 9a:ff:13:89:2c:86:aa:be:87:ce:d8:af:ce:e6:c8:8c:f0:53: 76:79:77:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpkoTRyLR/uG2XnY8S+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi ZGQwMDYwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD Eyg0OTU4YmJkOWVlYWEwNTI0YTZkZWEzMmMxYWZjNDI4MGRmYTZlZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXkcUNDN/Bm9Q/ag2wukY34puJwV Vz1vHRKrtDnHFZmzqIFo0RpgJPsyKAy3u05wdSRXHYUzsnXzX3p26OPkv0B8neaY gmq+GcCGU/JZj6hu5DmMAqZamTwSwl7cQElylkh6Ru7pd+SMdgcHnEGFDhuT09g5 MoxfRiUnEdEkHgpGr8qOzcutRM1/lo84Tbr8BqHwOkQ1AVPPNz6zNBlaQ8t2jW5w gVf9exH6234BXboJpLBtRmePVSKvEsmMJwZNNvu5sv84FJLpBpFQ/PP4DzxlOvI0 DHAZ+1MeJxOIb9CmMOAx/eaKi9Scl8thmG569hH47+PEkKuE4NAV68YGVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElYu9nuqgUkpt6jLBr8QoDfpu60MB8GA1UdIwQY MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr0vLQMM z6A1j47JARkX3ctsNjt04oy6fLld6ei43AIXBDzYwVT0MEBXKMkJaiWhPyyW2Gpd xkph2qyQLI01fRYs8EkQsLPHPilu7+flRG9vcc+7qCctgzDYviXe7aC6CcNjujgp SMEv+x/blW0+s1ooR07i9tsOo9dLTHAtc1/wi0o7jiWGlBoxWTZjJSzAhEb5EY9E MMcFPAmEIM7Ow2u7mvovRumF7FQrcRJGX4b0hmVpBwp6TOukfm1HApiqow2W++Qu ctlFw2wBBNExM64TnR1RTD0uFe/7MhaSgV6gYF0j5ja5cXFZmv8TiSyGqr6Hztiv zubIjPBTdnl3fA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:56 2025 by rpki-client