This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json) Hash identifier: xWx68tyV0xshwe2hMm3x1TDI4FAvjY7Yrd739FesacU= Subject key identifier: 07:03:14:3A:1C:16:CC:FF:6F:93:47:22:BC:95:AA:58:3E:93:B8:EE Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd Certificate serial: 019AF276821A9481C6441998A4AEE9675A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft Manifest number: 0FD2 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: h70MV22/0XpuiGjkahY0B6XS8jQOXgypByCJPEpht+Q=) 2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:82:1a:94:81:c6:44:19:98:a4:ae:e9:67:5a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=0703143a1c16ccff6f934722bc95aa583e93b8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:c4:b6:da:c4:1e:7f:d4:8a:06:e0:cf:d8: 47:3b:17:84:47:81:53:07:5d:da:0f:32:af:70:10: 11:46:35:26:08:59:dd:d2:e1:b0:f8:e9:e5:ae:f1: 22:73:26:60:81:8a:38:d2:56:1c:45:4d:b4:c9:be: 45:d5:8c:09:b6:ed:ae:a5:e4:53:8e:ba:a5:2f:8e: e3:ec:f9:66:70:4c:05:36:7a:7e:07:c1:ae:a6:d2: 34:9a:85:b9:32:fb:ff:34:ea:99:08:cd:26:68:1d: ea:d4:73:e2:2f:cd:91:d7:fe:f8:6f:db:ee:7b:d9: 8c:3b:14:e9:a3:86:06:1f:5b:17:98:7b:70:89:51: 9c:1c:88:5c:20:42:ba:96:fc:17:dd:3f:14:05:cd: 06:e3:ba:b7:c5:b6:04:4e:27:b5:2b:00:6a:eb:ad: 8c:ab:88:a4:8f:6e:88:80:30:b8:a0:be:39:ae:66: 0e:e2:e8:6b:42:6a:35:2d:38:f1:d5:50:93:26:89: dc:86:fa:77:0d:7f:a1:3c:12:17:c1:45:2d:e1:09: 64:3d:8a:b0:23:d3:11:47:d2:74:60:b2:c4:1d:d1: 2a:9e:64:48:7d:b4:22:40:30:cd:59:f6:77:2c:27: 09:60:af:e4:64:e9:71:01:7c:16:fd:58:97:ef:2b: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:03:14:3A:1C:16:CC:FF:6F:93:47:22:BC:95:AA:58:3E:93:B8:EE X509v3 Authority Key Identifier: keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f9:c8:68:58:83:1c:ea:ac:49:3b:b8:e8:8b:d9:a9:22:e4: c0:c4:21:63:1d:c8:42:35:2d:fa:23:8e:7c:f7:78:cf:52:25: 2c:0a:8a:2c:3c:c0:27:bb:6f:51:cd:f1:43:3c:2b:18:73:12: b8:97:f9:e1:57:de:e5:11:f5:ec:e7:b2:e9:7c:2a:0a:64:bc: c3:22:78:1e:07:2d:de:b7:cb:e3:22:48:f8:76:95:31:f5:90: f8:ac:6f:30:3a:4d:ee:4b:52:0c:f6:07:d1:30:ac:95:94:ff: 43:cb:04:09:f1:6f:02:58:2f:3b:42:90:8a:d3:51:97:20:58: 1a:df:ad:bc:50:1b:34:81:10:ab:c5:61:df:f7:c9:ca:f7:10: 6e:04:39:6e:23:90:49:5c:4b:89:6d:b1:38:88:50:b4:32:65: c5:13:4f:19:0e:f0:46:03:16:fc:ce:62:14:53:92:6c:db:fa: 72:6e:b2:55:14:1f:60:87:ad:1b:df:11:e5:3d:9f:5e:57:0e: 6e:3e:91:ba:9a:a5:cc:33:09:c4:56:ee:f6:17:0d:92:c3:54: 83:fa:44:1b:70:56:00:f7:39:09:9b:65:81:f4:95:cb:f1:2f: e8:5a:5d:c7:d2:74:25:d7:23:39:cf:9d:ab:8d:c7:6f:48:da: e1:66:66:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoIalIHGRBmYpK7pZ1p7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ODQ4MTYyODkyODMxYWRkNWEwN2Q0MzAyZTdmY2ZmZjUy ZjAyZmQwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EygwNzAzMTQzYTFjMTZjY2ZmNmY5MzQ3MjJiYzk1YWE1ODNlOTNiOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/EttrEHn/Uigbgz9hHOxeER4FT B13aDzKvcBARRjUmCFnd0uGw+OnlrvEicyZggYo40lYcRU20yb5F1YwJtu2upeRT jrqlL47j7PlmcEwFNnp+B8GuptI0moW5Mvv/NOqZCM0maB3q1HPiL82R1/74b9vu e9mMOxTpo4YGH1sXmHtwiVGcHIhcIEK6lvwX3T8UBc0G47q3xbYETie1KwBq662M q4ikj26IgDC4oL45rmYO4uhrQmo1LTjx1VCTJonchvp3DX+hPBIXwUUt4QlkPYqw I9MRR9J0YLLEHdEqnmRIfbQiQDDNWfZ3LCcJYK/kZOlxAXwW/ViX7yuzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcDFDocFsz/b5NHIryVqlg+k7juMB8GA1UdIwQY MBaAFJSEgWKJKDGt1aB9QwLn/P/1LwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYt MTE5YzNlNzQ3OWQ5LzEvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYtMTE5YzNlNzQ3OWQ5 LzEvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/nIaFiD HOqsSTu46IvZqSLkwMQhYx3IQjUt+iOOfPd4z1IlLAqKLDzAJ7tvUc3xQzwrGHMS uJf54Vfe5RH17Oey6XwqCmS8wyJ4Hgct3rfL4yJI+HaVMfWQ+KxvMDpN7ktSDPYH 0TCslZT/Q8sECfFvAlgvO0KQitNRlyBYGt+tvFAbNIEQq8Vh3/fJyvcQbgQ5biOQ SVxLiW2xOIhQtDJlxRNPGQ7wRgMW/M5iFFOSbNv6cm6yVRQfYIetG98R5T2fXlcO bj6RupqlzDMJxFbu9hcNksNUg/pEG3BWAPc5CZtlgfSVy/Ev6Fpdx9J0JdcjOc+d q43Hb0ja4WZmmw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:28 2025 by rpki-client