This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft File: IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json) Hash identifier: 4RWQ0+rd55AzbQaRD3zGD6KMZvO+PrL5Z9N5yNztk+A= Subject key identifier: 8A:CD:78:3E:DD:45:39:E4:15:F7:72:97:05:17:C0:25:91:B8:5F:E4 Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59 Certificate issuer: /CN=22c3851071f96088c7b7119cb5e1463cbab98c59 Certificate serial: 019AF12DA48C64F575364101E42925D108AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft Manifest number: 11AE Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: mCPaOxDpa7lMvFVhqYDFkN+0s+F7YhxCiqVNWrUqgqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a4:8c:64:f5:75:36:41:01:e4:29:25:d1:08:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59 Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=8acd783edd4539e415f772970517c02591b85fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:c5:94:7c:f5:91:b4:9d:2b:97:d8:2f:c8: 80:81:bf:89:66:06:69:ac:68:9c:12:2d:de:e1:27: 94:fb:44:d2:73:b0:c2:da:2d:c8:f9:ff:88:fb:4a: 1d:16:79:f1:23:df:34:c3:ab:5e:86:ce:35:5f:50: c4:fb:cb:86:e6:c1:47:26:12:18:30:e8:6e:66:d4: af:ee:e7:93:d9:fd:9b:50:1a:b4:48:a2:7f:25:1f: f9:9f:34:5d:76:b2:d1:1e:de:e5:14:02:75:40:af: cd:39:3d:d1:53:8c:7c:a6:a6:7b:5a:dd:02:56:ad: 89:46:8f:3f:e8:9b:d4:d8:4e:91:6a:8f:95:47:dc: 0c:83:58:90:eb:cb:6a:d6:01:f1:6b:cb:b0:09:14: a1:8b:35:6d:94:c2:34:e4:57:e5:4b:09:f7:3d:7c: 06:43:ee:d8:83:8d:35:80:4c:65:38:cb:94:b6:89: da:c9:8a:1f:21:91:a2:90:ad:00:b1:ec:55:ec:8f: a8:9f:89:3c:9b:18:a6:e3:20:74:99:c1:33:63:37: 1e:8c:05:45:06:92:ab:36:1e:49:03:e3:29:85:6e: 16:7e:41:b1:20:36:99:65:fd:8a:0c:5c:95:2e:c9: 96:ef:82:b6:a4:79:42:d5:ee:78:c5:cd:2a:81:d2: dd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:78:3E:DD:45:39:E4:15:F7:72:97:05:17:C0:25:91:B8:5F:E4 X509v3 Authority Key Identifier: keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:d8:0c:a8:9f:d6:4d:e2:d2:ff:80:b0:d3:83:45:9d:b2:70: c0:e9:56:a3:ac:7e:ed:32:86:0f:14:3d:27:92:2b:2b:91:57: a7:da:b3:81:7d:56:af:a0:80:9a:ff:e5:26:cf:45:ff:02:6f: 69:e3:d2:9a:42:6b:b7:1d:7f:0a:0f:78:6e:85:8c:76:ed:10: 9a:68:fb:04:7b:b0:1f:52:3b:b4:66:a5:b8:93:e6:c8:5c:20: 88:cf:d9:10:55:97:81:0f:c1:0c:8e:51:aa:e8:be:78:cb:65: a1:90:2c:48:46:7e:bc:95:66:6b:96:9b:ab:04:f1:4b:d6:5c: e5:07:e3:dc:d4:7e:e9:79:47:13:fe:70:12:a0:08:9b:f9:70: c8:c3:1a:2a:bc:0c:ed:ef:2a:bd:2b:79:3e:e8:5c:58:ed:88: 15:ec:e3:10:c2:de:c2:b4:52:43:0c:f0:89:6d:4e:a9:ec:a8: 9c:10:46:22:b2:b7:49:ff:ca:b0:a6:98:f2:e8:24:b8:39:3f: 6b:57:f1:2c:96:06:27:1f:c8:e2:1c:35:c5:d1:bf:53:ff:b3: 05:27:79:cb:4b:e6:57:d5:18:20:05:ed:e9:e4:44:09:e9:3a: b6:1c:95:62:67:5d:7c:28:a1:bf:9c:67:b6:d4:1e:dd:0b:d0: 4a:a4:f9:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaSMZPV1NkEB5Ckl0QisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzM4NTEwNzFmOTYwODhjN2I3MTE5Y2I1ZTE0NjNjYmFi OThjNTkwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD Eyg4YWNkNzgzZWRkNDUzOWU0MTVmNzcyOTcwNTE3YzAyNTkxYjg1ZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp/FlHz1kbSdK5fYL8iAgb+JZgZp rGicEi3e4SeU+0TSc7DC2i3I+f+I+0odFnnxI980w6tehs41X1DE+8uG5sFHJhIY MOhuZtSv7ueT2f2bUBq0SKJ/JR/5nzRddrLRHt7lFAJ1QK/NOT3RU4x8pqZ7Wt0C Vq2JRo8/6JvU2E6Rao+VR9wMg1iQ68tq1gHxa8uwCRShizVtlMI05FflSwn3PXwG Q+7Yg401gExlOMuUtonayYofIZGikK0AsexV7I+on4k8mxim4yB0mcEzYzcejAVF BpKrNh5JA+MphW4WfkGxIDaZZf2KDFyVLsmW74K2pHlC1e54xc0qgdLdHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrNeD7dRTnkFfdylwUXwCWRuF/kMB8GA1UdIwQY MBaAFCLDhRBx+WCIx7cRnLXhRjy6uYxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTIt Y2JmZGUwMjkwNzA4LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTItY2JmZGUwMjkwNzA4 LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA09gMqJ/W TeLS/4Cw04NFnbJwwOlWo6x+7TKGDxQ9J5IrK5FXp9qzgX1Wr6CAmv/lJs9F/wJv aePSmkJrtx1/Cg94boWMdu0Qmmj7BHuwH1I7tGaluJPmyFwgiM/ZEFWXgQ/BDI5R qui+eMtloZAsSEZ+vJVma5abqwTxS9Zc5Qfj3NR+6XlHE/5wEqAIm/lwyMMaKrwM 7e8qvSt5PuhcWO2IFezjEMLewrRSQwzwiW1OqeyonBBGIrK3Sf/KsKaY8ugkuDk/ a1fxLJYGJx/I4hw1xdG/U/+zBSd5y0vmV9UYIAXt6eRECek6thyVYmddfCihv5xn ttQe3QvQSqT5aA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:30 2025 by rpki-client