This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft File: Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft (raw, json) Hash identifier: 4tad127JqsEcgeKHPa9gxSWokj/U/pF/3A+g+p+30D0= Subject key identifier: F9:7D:F1:78:19:7F:D0:7E:0F:2C:B4:23:1C:76:4D:F7:02:92:08:51 Authority key identifier: 22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 Certificate issuer: /CN=22ce6f80d7670973d32ec4745301011217468822 Certificate serial: 019AF0F5D4CDF1B8E182526F494659618057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft Manifest number: 44 Signing time: Sat 06 Dec 2025 00:00:33 +0000 Manifest this update: Sat 06 Dec 2025 00:00:33 +0000 Manifest next update: Sun 07 Dec 2025 00:00:33 +0000 Files and hashes: 1: Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl (hash: eimgFjdNuR/g+Td7oJ/mD4vTTVl9vF3DzhwfjIwECfs=) 2: _MzRbBxyGoy9PEsWIvACK-CtNic.roa (hash: 08IFLLSc5HylsTSbFSeyhHQH9IHTjqat4y1TvqrHWhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d4:cd:f1:b8:e1:82:52:6f:49:46:59:61:80:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ce6f80d7670973d32ec4745301011217468822 Validity Not Before: Dec 6 00:00:33 2025 GMT Not After : Dec 7 00:00:33 2025 GMT Subject: CN=f97df178197fd07e0f2cb4231c764df702920851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:80:80:d0:69:82:f1:ff:1f:6f:a5:80:38: f2:82:93:fa:4a:d9:c1:69:30:08:26:df:64:9f:b6: 75:c8:65:be:b8:1c:12:f9:e9:5e:5f:72:9e:95:2d: f2:3b:b6:8a:9b:7d:02:17:7e:a4:4a:68:6e:28:67: 26:0d:c6:05:f6:b3:7d:17:0e:af:a9:cc:5e:2e:7c: 64:29:10:e2:60:70:19:3d:ef:25:39:10:36:71:c6: f8:d6:7d:25:b7:63:aa:5f:15:f9:e9:fa:05:fd:b9: 3b:77:01:01:85:e1:f5:2c:3b:a2:f1:c5:4b:9b:80: 2f:c6:97:b0:fe:ef:bf:35:ec:2d:69:70:29:db:54: 16:ad:9a:68:77:c8:90:f4:4c:fe:89:8a:fe:75:ff: 56:6a:be:38:d7:44:76:4c:f1:2e:eb:8c:d8:c3:ac: 8f:18:45:e8:7c:30:68:58:4e:2b:72:6a:55:a5:4a: 81:16:09:a4:5f:18:9a:a9:d2:ec:ae:ef:4e:e9:86: 4c:19:46:5e:84:4d:73:25:b0:db:46:f5:52:82:b4: 10:8b:69:e0:39:12:79:b4:47:27:7b:b1:68:a3:f6: 9f:ad:27:5b:88:7b:5f:80:25:9f:dc:dd:68:0f:44: 45:e3:c3:38:f2:ae:39:7e:77:5f:49:bc:13:dd:1f: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7D:F1:78:19:7F:D0:7E:0F:2C:B4:23:1C:76:4D:F7:02:92:08:51 X509v3 Authority Key Identifier: keyid:22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:42:d5:66:33:d3:b9:3f:4a:89:14:8a:5e:17:c5:a8:ac:a1: 32:32:f1:74:90:4e:bc:3e:ba:9a:34:24:6a:b7:f4:c8:69:79: 9b:00:12:03:13:2f:d0:5f:e3:33:4f:db:44:db:c5:cb:24:43: ca:d6:e8:fe:a4:5a:28:95:0e:22:78:b4:8b:15:f2:87:e2:a0: 9b:d8:47:34:1e:df:0b:0f:ff:77:0c:13:ff:51:20:18:53:d5: f2:c2:2a:ef:05:72:13:20:3d:f0:3b:b5:61:73:4f:85:70:22: 9f:3f:ae:5e:d0:21:25:da:f8:70:51:d0:53:d8:3c:33:b2:a4: 95:0d:0d:98:19:06:51:a7:e8:4f:ce:d9:73:11:1d:01:3b:3a: fd:8e:27:0c:8c:a9:3a:ba:3e:e6:95:3b:c0:d1:e1:43:46:77: e7:69:9d:26:80:fe:44:d8:5c:42:31:63:64:16:48:f0:33:c7: 83:73:02:ba:c0:a2:b9:b9:66:f0:bb:03:8b:c7:43:8b:09:63: 76:54:25:1a:73:68:b5:94:73:80:02:e9:fb:90:5c:5d:fd:35: 32:13:c0:86:9d:80:e6:29:3a:64:b5:62:85:fe:55:20:4e:2f: c5:36:f7:94:76:22:65:54:68:bd:36:ad:73:3a:c4:7e:98:9a: 64:52:01:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dTN8bjhglJvSUZZYYBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2U2ZjgwZDc2NzA5NzNkMzJlYzQ3NDUzMDEwMTEyMTc0 Njg4MjIwHhcNMjUxMjA2MDAwMDMzWhcNMjUxMjA3MDAwMDMzWjAzMTEwLwYDVQQD EyhmOTdkZjE3ODE5N2ZkMDdlMGYyY2I0MjMxYzc2NGRmNzAyOTIwODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup2AgNBpgvH/H2+lgDjygpP6StnB aTAIJt9kn7Z1yGW+uBwS+eleX3KelS3yO7aKm30CF36kSmhuKGcmDcYF9rN9Fw6v qcxeLnxkKRDiYHAZPe8lORA2ccb41n0lt2OqXxX56foF/bk7dwEBheH1LDui8cVL m4Avxpew/u+/NewtaXAp21QWrZpod8iQ9Ez+iYr+df9War4410R2TPEu64zYw6yP GEXofDBoWE4rcmpVpUqBFgmkXxiaqdLsru9O6YZMGUZehE1zJbDbRvVSgrQQi2ng ORJ5tEcne7Foo/afrSdbiHtfgCWf3N1oD0RF48M48q45fndfSbwT3R8BcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPl98XgZf9B+Dyy0Ixx2TfcCkghRMB8GA1UdIwQY MBaAFCLOb4DXZwlz0y7EdFMBARIXRogiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUt NWFhYmRlMzExZmRiLzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUtNWFhYmRlMzExZmRi LzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARELVZjPT uT9KiRSKXhfFqKyhMjLxdJBOvD66mjQkarf0yGl5mwASAxMv0F/jM0/bRNvFyyRD ytbo/qRaKJUOIni0ixXyh+Kgm9hHNB7fCw//dwwT/1EgGFPV8sIq7wVyEyA98Du1 YXNPhXAinz+uXtAhJdr4cFHQU9g8M7KklQ0NmBkGUafoT87ZcxEdATs6/Y4nDIyp Oro+5pU7wNHhQ0Z352mdJoD+RNhcQjFjZBZI8DPHg3MCusCiublm8LsDi8dDiwlj dlQlGnNotZRzgALp+5BcXf01MhPAhp2A5ik6ZLVihf5VIE4vxTb3lHYiZVRovTat czrEfpiaZFIBfg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:43 2025 by rpki-client