This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json) Hash identifier: WAO+FAr3tDs4Vb9B6EtAkiQzjT3u/OP6lh2HbsuTIwA= Subject key identifier: 17:A0:27:A2:9D:40:97:EA:EF:8E:BD:FE:95:56:03:F6:13:FB:3B:4D Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Certificate serial: 019AF12EA6A5A6822CCA85754DEC2AFCB773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft Manifest number: 0A8B Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=) 2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: 4MW4SUv+Olq71MrwQgpHJ2qgT2N3vAuYIQlc8AmAn4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a6:a5:a6:82:2c:ca:85:75:4d:ec:2a:fc:b7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=17a027a29d4097eaef8ebdfe955603f613fb3b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:16:ed:e2:4b:d7:aa:98:95:5f:fa:b1:74: ab:e6:2d:aa:35:69:27:61:87:6b:83:e1:b8:ab:af: 76:55:62:99:d7:5b:ce:7c:6f:18:69:12:cc:63:d3: e2:2c:7a:89:22:2f:ab:07:70:af:a8:82:a2:7f:9f: 87:8e:6f:e8:f5:84:ac:67:83:a9:7a:b6:34:0f:55: 5c:86:2d:99:4d:e6:80:7f:5e:fa:e7:59:1d:42:98: 87:b8:91:61:27:d3:c3:e8:fa:d5:ec:c4:92:08:c6: 0e:bd:6d:b4:1d:09:48:71:8e:27:b8:b8:ba:55:13: 2b:18:34:55:f0:f7:c6:1a:12:54:bc:25:32:c5:65: f6:e2:c8:5e:92:1d:d8:8d:89:0b:0e:59:50:57:7a: a1:58:f8:a2:bc:d2:3b:4a:5c:a0:2b:d8:06:a3:2b: 0a:2c:92:0c:96:20:2b:cf:83:c5:34:b7:c4:77:a8: d2:ca:51:63:74:c4:b0:99:49:2b:cf:81:f0:3e:33: c5:43:8d:45:19:5a:a3:e6:a3:e8:cc:61:67:f4:f9: c0:2c:d2:f3:4f:39:2e:46:84:69:55:74:73:0c:0e: 9a:f6:4d:db:fd:7d:32:a1:e6:b8:cf:49:7f:88:b5: 3b:65:f1:a4:8a:e8:92:8a:30:9f:88:0f:e7:d4:60: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A0:27:A2:9D:40:97:EA:EF:8E:BD:FE:95:56:03:F6:13:FB:3B:4D X509v3 Authority Key Identifier: keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:35:e2:4c:86:0e:cb:77:d7:c4:f5:4a:0f:2a:03:2b:a8:27: 1a:3a:21:0e:37:44:0d:95:d7:26:cf:ff:0b:0b:29:86:cf:cd: 56:f6:44:1b:ce:23:c2:74:84:32:89:4e:ef:c4:c8:79:56:e8: 97:ba:0b:16:54:cc:a7:ab:53:1c:80:f4:b3:53:d4:b6:61:e4: 32:0c:3a:2b:2c:53:fe:0e:dc:ab:23:53:e3:3a:59:b7:a2:58: 43:d6:c1:4c:64:e2:c4:7c:4d:7e:c3:35:aa:d4:70:5e:af:c3: 2e:63:25:7d:c0:0f:a2:4a:3f:d6:7d:6a:12:51:cb:7a:47:91: a7:2d:bc:68:d6:96:7c:f5:dd:19:93:3f:15:a0:98:fc:91:28: 16:cb:7c:60:51:5c:aa:d0:2e:57:e1:f8:ac:b6:bf:c3:15:b9: 67:dc:56:6c:96:fc:19:52:11:62:47:2b:ef:18:8f:bb:b1:da: d8:26:13:d7:4f:4b:12:1d:44:5c:9b:2a:f5:22:b2:fb:ec:03: 3a:08:62:fb:e8:8a:1b:1f:f9:31:af:4f:54:d4:63:b1:de:ab: 9f:f7:e9:ba:c8:d2:a3:eb:62:59:47:c3:ca:12:84:83:d1:5c: 70:6d:60:40:4b:62:74:06:54:a5:20:7c:f2:05:b4:be:da:15: d1:3d:88:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqalpoIsyoV1Tewq/LdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx YTkyMzMwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD EygxN2EwMjdhMjlkNDA5N2VhZWY4ZWJkZmU5NTU2MDNmNjEzZmIzYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O4W7eJL16qYlV/6sXSr5i2qNWkn YYdrg+G4q692VWKZ11vOfG8YaRLMY9PiLHqJIi+rB3CvqIKif5+Hjm/o9YSsZ4Op erY0D1Vchi2ZTeaAf17651kdQpiHuJFhJ9PD6PrV7MSSCMYOvW20HQlIcY4nuLi6 VRMrGDRV8PfGGhJUvCUyxWX24shekh3YjYkLDllQV3qhWPiivNI7SlygK9gGoysK LJIMliArz4PFNLfEd6jSylFjdMSwmUkrz4HwPjPFQ41FGVqj5qPozGFn9PnALNLz TzkuRoRpVXRzDA6a9k3b/X0yoea4z0l/iLU7ZfGkiuiSijCfiA/n1GBp1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBegJ6KdQJfq7469/pVWA/YT+ztNMB8GA1UdIwQY MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1 LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDXiTIYO y3fXxPVKDyoDK6gnGjohDjdEDZXXJs//Cwsphs/NVvZEG84jwnSEMolO78TIeVbo l7oLFlTMp6tTHID0s1PUtmHkMgw6KyxT/g7cqyNT4zpZt6JYQ9bBTGTixHxNfsM1 qtRwXq/DLmMlfcAPoko/1n1qElHLekeRpy28aNaWfPXdGZM/FaCY/JEoFst8YFFc qtAuV+H4rLa/wxW5Z9xWbJb8GVIRYkcr7xiPu7Ha2CYT109LEh1EXJsq9SKy++wD Oghi++iKGx/5Ma9PVNRjsd6rn/fpusjSo+tiWUfDyhKEg9FccG1gQEtidAZUpSB8 8gW0vtoV0T2IlA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:31 2025 by rpki-client