This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json) Hash identifier: oFDwEjp6KOYi/VUCQx/2RuEl4edfbJaqIesoobv+HbI= Subject key identifier: 15:88:E0:15:56:6C:E5:25:E9:87:0C:74:1D:E1:D3:CE:2E:54:5C:01 Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22 Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022 Certificate serial: 019AF3898A71D77C7E2865D0AB408784C8D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:01:08 +0000 Manifest this update: Sat 06 Dec 2025 12:01:08 +0000 Manifest next update: Sun 07 Dec 2025 12:01:08 +0000 Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: hs49VitG7OyKfbtGmTE3PSnXDvAXBwkX64sapc7v/FM=) 2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8a:71:d7:7c:7e:28:65:d0:ab:40:87:84:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022 Validity Not Before: Dec 6 12:01:08 2025 GMT Not After : Dec 7 12:01:08 2025 GMT Subject: CN=1588e015566ce525e9870c741de1d3ce2e545c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:6c:4b:6b:45:bf:e1:b6:5c:9c:ae:0d:ea: 21:73:ae:b9:64:c6:2d:70:ba:37:32:ba:e0:c3:23: 24:42:99:a4:6d:ec:05:84:96:ec:ca:1e:c8:a2:18: a8:a5:d1:00:cf:df:6e:a5:47:08:3d:21:99:d4:79: bf:46:34:e7:75:d3:75:8e:f2:9d:be:3e:e5:1a:4b: 44:b1:ff:8b:f5:4d:43:12:97:76:1a:a2:83:d4:a4: 65:ee:ad:f5:bd:5d:73:6f:d2:99:75:66:d1:da:fa: df:a6:9e:ea:c6:8c:64:0b:1e:0b:42:d4:f6:25:c1: 9c:bf:a0:ee:ac:85:ce:c5:ab:39:b5:06:ef:65:aa: 17:76:0c:67:43:5d:fd:ff:17:dd:fe:4e:83:1f:d4: 10:a1:73:08:4f:cc:cb:38:a1:4b:88:29:d6:39:67: 18:7f:12:c0:cc:3f:23:7e:e2:ab:d3:b1:42:c7:da: d0:ff:b6:d8:a4:8f:e5:19:0b:4c:c1:55:15:92:6e: d1:b3:24:c7:cc:27:cc:1d:57:ac:f0:62:75:79:b4: 7e:da:9c:36:35:b3:c7:91:dd:3f:c4:e6:9d:87:87: 5b:54:13:1d:07:e0:35:ef:b1:f1:3f:03:4f:97:a7: 41:b4:b2:85:b8:0d:f0:79:c6:2b:32:4a:f5:58:f5: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:88:E0:15:56:6C:E5:25:E9:87:0C:74:1D:E1:D3:CE:2E:54:5C:01 X509v3 Authority Key Identifier: keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b6:d0:c1:62:da:1e:0b:50:d6:08:ad:dc:bc:f6:f9:6e:8a: d5:30:7a:0e:28:e1:00:83:4f:68:eb:93:ef:ff:17:d7:66:16: 6b:7a:d0:65:57:13:b0:8b:7e:9f:86:ab:d1:82:09:88:6f:bd: 76:06:4b:10:f0:9a:61:13:ef:b2:aa:f9:42:27:6d:a9:eb:2a: 82:3d:85:af:2e:31:da:6d:a6:d3:9b:6c:80:40:91:67:7f:6d: bd:03:a5:43:a9:7c:5c:e3:0c:47:8b:5b:ea:0f:e5:0c:28:75: 25:e7:ec:b6:30:40:47:b8:63:2d:57:d1:c0:88:27:1a:b8:e1: 2d:c2:dd:6d:2d:6d:04:35:a4:34:8e:84:b4:06:76:94:8e:f4: 2a:c5:89:e9:04:a9:e3:5b:c2:1c:21:aa:ee:5e:81:b7:2b:55: 53:cc:9d:18:38:07:07:09:41:24:3d:b0:c7:6d:b6:9f:f9:09: 04:cc:9c:45:86:b4:f7:fe:93:47:e3:5b:d5:ce:f3:40:21:a9: 25:59:64:d5:b3:94:cb:39:4d:65:00:06:b1:20:0a:13:d1:7d: 5b:49:6b:d5:d0:fb:fb:d3:f8:c2:c9:a3:82:7f:2e:ac:d4:57: d0:53:68:56:29:bf:5a:6c:19:93:5e:3a:55:ca:8d:30:f0:9b: 49:46:14:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYpx13x+KGXQq0CHhMjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhY2RiMjgxZmI2NWYwMjhiN2NkY2FiOWM0NzA2ZWE3YzQ1 OTQwMjIwHhcNMjUxMjA2MTIwMTA4WhcNMjUxMjA3MTIwMTA4WjAzMTEwLwYDVQQD EygxNTg4ZTAxNTU2NmNlNTI1ZTk4NzBjNzQxZGUxZDNjZTJlNTQ1YzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcxsS2tFv+G2XJyuDeohc665ZMYt cLo3MrrgwyMkQpmkbewFhJbsyh7IohiopdEAz99upUcIPSGZ1Hm/RjTnddN1jvKd vj7lGktEsf+L9U1DEpd2GqKD1KRl7q31vV1zb9KZdWbR2vrfpp7qxoxkCx4LQtT2 JcGcv6DurIXOxas5tQbvZaoXdgxnQ139/xfd/k6DH9QQoXMIT8zLOKFLiCnWOWcY fxLAzD8jfuKr07FCx9rQ/7bYpI/lGQtMwVUVkm7RsyTHzCfMHVes8GJ1ebR+2pw2 NbPHkd0/xOadh4dbVBMdB+A177HxPwNPl6dBtLKFuA3wecYrMkr1WPUqewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWI4BVWbOUl6YcMdB3h084uVFwBMB8GA1UdIwQY MBaAFIrNsoH7ZfAot83KucRwbqfEWUAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUt ZmFjMzQ2NDAwMzY5LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUtZmFjMzQ2NDAwMzY5 LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrbQwWLa HgtQ1git3Lz2+W6K1TB6DijhAINPaOuT7/8X12YWa3rQZVcTsIt+n4ar0YIJiG+9 dgZLEPCaYRPvsqr5Qidtqesqgj2Fry4x2m2m05tsgECRZ39tvQOlQ6l8XOMMR4tb 6g/lDCh1JefstjBAR7hjLVfRwIgnGrjhLcLdbS1tBDWkNI6EtAZ2lI70KsWJ6QSp 41vCHCGq7l6BtytVU8ydGDgHBwlBJD2wx222n/kJBMycRYa09/6TR+Nb1c7zQCGp JVlk1bOUyzlNZQAGsSAKE9F9W0lr1dD7+9P4wsmjgn8urNRX0FNoVim/WmwZk146 VcqNMPCbSUYUFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:06 2025 by rpki-client