This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft File: AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json) Hash identifier: EZkGCmpP1yz4spby/UsIQtca3kol65uyCnnwo1lqqSs= Subject key identifier: 72:62:5D:BF:71:90:57:69:D8:B4:C1:6F:12:B4:9A:3E:E9:FF:E1:F1 Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80 Certificate issuer: /CN=008b280588054ed8c446e27b49cac45588a9e980 Certificate serial: 019AF31B6DC9BE2B72EC2F3FBFCB110DDAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft Manifest number: 121E Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: Q70y+TqmDEn9HEX31Zo1w1+bSCP+VBS5RKuPwnw8PWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6d:c9:be:2b:72:ec:2f:3f:bf:cb:11:0d:da:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=72625dbf71905769d8b4c16f12b49a3ee9ffe1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:3c:d0:80:70:46:b9:01:35:a2:f8:ce:9c: 69:04:e2:94:f1:12:a3:86:df:f6:91:b6:8f:e5:9f: 0f:e1:ba:9a:b8:dc:ed:7d:d6:19:99:95:ba:57:f9: d7:0a:ee:62:82:d0:12:87:df:e0:2a:65:9e:93:c1: 57:db:e7:5e:9e:ff:cc:8d:15:7a:ae:8b:02:1c:6f: b6:80:42:0f:45:0c:f9:db:8c:60:e4:a7:40:ec:ed: 07:2b:33:e9:7e:db:99:d2:7a:cc:d8:f8:64:2f:ad: c4:a7:6f:65:e0:fc:97:5a:e5:8b:bf:d5:50:40:34: c2:c8:40:8c:e5:89:3c:86:9e:d5:b4:59:d7:66:07: 14:07:79:34:a3:90:9c:d4:2f:67:9e:1b:3e:07:ce: 79:f0:44:e9:7d:a0:12:6b:b0:ff:fb:01:57:56:9c: 66:e4:cf:2c:b9:2f:ee:38:62:25:36:44:77:4d:0b: a8:27:12:45:df:55:eb:c5:64:ef:ff:65:19:f0:e0: 84:94:88:cb:d2:e2:7d:7d:25:a1:e9:d1:78:0e:9f: 35:b9:35:98:b1:b8:66:db:19:96:71:2d:45:82:82: c2:70:9a:c2:20:23:a4:11:03:92:f7:6d:84:64:6d: e4:02:47:6d:eb:61:25:de:38:d9:b8:75:39:98:6b: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:5D:BF:71:90:57:69:D8:B4:C1:6F:12:B4:9A:3E:E9:FF:E1:F1 X509v3 Authority Key Identifier: keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:36:5f:20:f5:c5:5a:f2:07:43:6e:8c:6a:57:e9:58:c9:5d: ab:0d:c9:88:48:19:00:d3:8d:f2:7f:71:f8:97:c2:81:12:b4: da:c4:2b:e0:76:62:87:f5:75:b8:27:f0:a9:41:2e:64:06:88: 8f:6a:70:ad:b3:6c:c6:1e:5d:f0:ff:d3:3c:80:0c:28:2a:24: f0:df:94:7a:f5:1a:35:35:9e:ad:93:28:fc:7b:76:ef:6f:27: 07:b7:17:f8:d3:9c:ae:63:6e:df:20:6b:85:8f:ec:9e:4c:84: 2b:ca:aa:40:23:0d:9f:7d:9e:30:59:48:12:b4:b9:65:b6:59: 6e:0c:bc:49:97:02:54:11:9f:9e:83:a8:d8:40:49:4e:d5:e8: 22:f9:bf:d2:f2:66:ae:98:28:3d:b7:63:3c:4e:0e:33:4f:b8: a6:f8:bf:20:ff:7b:0d:f5:42:a6:e0:64:73:f4:ca:1d:77:bf: 02:5c:de:2f:26:7f:80:47:11:40:66:21:fb:d6:67:6a:96:3c: 25:a6:bf:01:0c:2c:59:46:c4:77:ed:cc:d9:59:06:46:62:1c: db:87:a6:b0:00:b6:59:d5:df:72:75:fa:93:b3:62:ee:c0:92: 2d:d5:cd:aa:9f:00:06:3e:6b:77:25:03:69:14:32:7f:0b:ae: 72:89:a3:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG23Jvity7C8/v8sRDdrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOGIyODA1ODgwNTRlZDhjNDQ2ZTI3YjQ5Y2FjNDU1ODhh OWU5ODAwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD Eyg3MjYyNWRiZjcxOTA1NzY5ZDhiNGMxNmYxMmI0OWEzZWU5ZmZlMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshc80IBwRrkBNaL4zpxpBOKU8RKj ht/2kbaP5Z8P4bqauNztfdYZmZW6V/nXCu5igtASh9/gKmWek8FX2+denv/MjRV6 rosCHG+2gEIPRQz524xg5KdA7O0HKzPpftuZ0nrM2PhkL63Ep29l4PyXWuWLv9VQ QDTCyECM5Yk8hp7VtFnXZgcUB3k0o5Cc1C9nnhs+B8558ETpfaASa7D/+wFXVpxm 5M8suS/uOGIlNkR3TQuoJxJF31XrxWTv/2UZ8OCElIjL0uJ9fSWh6dF4Dp81uTWY sbhm2xmWcS1FgoLCcJrCICOkEQOS922EZG3kAkdt62El3jjZuHU5mGtfmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJiXb9xkFdp2LTBbxK0mj7p/+HxMB8GA1UdIwQY MBaAFACLKAWIBU7YxEbie0nKxFWIqemAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMt NTYzZDZiZDNmODI3LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMtNTYzZDZiZDNmODI3 LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDZfIPXF WvIHQ26MalfpWMldqw3JiEgZANON8n9x+JfCgRK02sQr4HZih/V1uCfwqUEuZAaI j2pwrbNsxh5d8P/TPIAMKCok8N+UevUaNTWerZMo/Ht2728nB7cX+NOcrmNu3yBr hY/snkyEK8qqQCMNn32eMFlIErS5ZbZZbgy8SZcCVBGfnoOo2EBJTtXoIvm/0vJm rpgoPbdjPE4OM0+4pvi/IP97DfVCpuBkc/TKHXe/AlzeLyZ/gEcRQGYh+9ZnapY8 Jaa/AQwsWUbEd+3M2VkGRmIc24emsAC2WdXfcnX6k7Ni7sCSLdXNqp8ABj5rdyUD aRQyfwuucomjbg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:51 2025 by rpki-client