This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json) Hash identifier: tS0/0uedT15wg6eGhPHIE+ZKeLsYiYxdaVMzxM1S650= Subject key identifier: 38:41:15:9E:60:5D:0E:55:B3:87:3C:1B:91:85:71:97:D7:85:27:F0 Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039 Certificate serial: 019B2C2F9AA520F4B86D3D4B025E01092FF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 12:01:15 +0000 Manifest this update: Wed 17 Dec 2025 12:01:15 +0000 Manifest next update: Thu 18 Dec 2025 12:01:15 +0000 Files and hashes: 1: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: tAmqYn1f/PT/4KRcAkfxlLQQ4FpwRttC1hJ4fMf0gR4=) 2: UrbTQ94JxNgYNpJivV6a1qmD0_A.roa (hash: TSib+fjl7l1ifEcWuz5+zR2oEqhkqRFFxSAkrpwIXbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:9a:a5:20:f4:b8:6d:3d:4b:02:5e:01:09:2f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039 Validity Not Before: Dec 17 12:01:15 2025 GMT Not After : Dec 18 12:01:15 2025 GMT Subject: CN=3841159e605d0e55b3873c1b91857197d78527f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:a8:9d:7e:58:ef:29:ec:51:ef:a8:b5:1c: 71:1e:df:ef:40:c9:7b:c4:e2:c0:4b:cd:dc:7a:0d: 4e:8e:0b:a8:c4:c5:ee:b2:48:f6:60:10:0d:64:f6: 1b:49:45:84:b3:b3:c6:05:32:11:2c:c6:e0:9f:f8: b1:f7:44:2c:90:11:e0:34:c5:41:b7:38:4d:55:cf: 3f:46:ab:75:37:e0:18:ad:fe:b4:c7:be:c5:df:63: ed:6c:e7:87:a0:94:f6:02:fd:65:04:21:a3:ac:5b: f9:77:8a:ec:2e:7b:49:d5:90:2a:f0:a1:3f:26:07: f6:bb:45:3c:95:c0:ef:00:bb:88:c9:98:9f:41:fb: 54:21:73:32:48:e6:fe:6e:9f:1e:49:45:89:71:ae: 79:be:e0:09:5c:e0:25:74:5f:7b:87:c2:19:07:97: ce:15:79:fc:ec:10:89:95:84:9d:49:40:dc:ee:e5: a3:0f:55:a4:25:65:59:1a:77:20:0c:9e:eb:5e:ef: 3f:5a:93:97:74:82:45:d1:f3:fb:74:98:2d:fc:2c: 6a:81:d4:ea:51:f6:ce:06:81:2d:65:87:fc:ba:92: a1:ee:00:67:ad:4c:28:53:ea:9c:e4:ac:03:a9:00: 02:cf:72:87:83:56:94:e0:49:5f:10:65:19:4c:ad: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:41:15:9E:60:5D:0E:55:B3:87:3C:1B:91:85:71:97:D7:85:27:F0 X509v3 Authority Key Identifier: keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:25:3b:d5:80:42:54:d5:c2:34:59:23:75:35:03:a0:f7:b9: 79:e4:f9:f6:94:ce:09:b1:98:d2:2c:8b:68:be:f6:46:9e:f7: db:18:c3:31:c0:94:a5:a7:88:76:bb:63:db:2d:c7:3e:86:5b: e0:c9:ae:6d:e3:d6:5e:e2:f3:c1:8d:58:41:9b:cd:11:b1:dd: ba:3d:af:f4:55:6b:5b:6e:7e:fa:63:0f:82:2c:81:ac:46:3f: a0:02:79:f1:39:19:d4:d2:a0:ac:eb:ad:74:73:bf:c4:e4:06: 16:55:4c:4b:13:fa:98:fd:2e:3b:b3:5e:51:f2:71:27:cd:b8: 11:8f:16:ca:2e:e3:cf:d7:1b:13:24:86:d6:31:6a:87:cb:63: 60:b8:b1:6c:c5:23:84:fa:8d:e9:80:e4:af:e7:ab:b2:0d:61: 35:29:c5:e8:50:43:04:3b:01:3f:b3:e2:a0:cd:b0:fe:8a:c5: 27:04:7e:05:25:aa:de:40:f6:80:08:c1:1e:be:46:48:cc:b0: 29:bd:ad:f3:be:5b:59:d8:07:0a:a0:c7:f9:33:66:85:a6:f7: 89:10:8f:83:6f:38:ed:df:00:0b:40:29:25:c7:4d:1b:53:31: 74:85:e3:a2:70:aa:5c:34:2c:5f:b1:64:cc:57:e8:6a:1e:37: ca:37:7a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5qlIPS4bT1LAl4BCS/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzVmZWIyZDI1ZmFjNGRkOGJhYTRmNzFkOGRjMjI2ODE4 NmEwMzkwHhcNMjUxMjE3MTIwMTE1WhcNMjUxMjE4MTIwMTE1WjAzMTEwLwYDVQQD EygzODQxMTU5ZTYwNWQwZTU1YjM4NzNjMWI5MTg1NzE5N2Q3ODUyN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYqonX5Y7ynsUe+otRxxHt/vQMl7 xOLAS83ceg1OjguoxMXuskj2YBANZPYbSUWEs7PGBTIRLMbgn/ix90QskBHgNMVB tzhNVc8/Rqt1N+AYrf60x77F32PtbOeHoJT2Av1lBCGjrFv5d4rsLntJ1ZAq8KE/ Jgf2u0U8lcDvALuIyZifQftUIXMySOb+bp8eSUWJca55vuAJXOAldF97h8IZB5fO FXn87BCJlYSdSUDc7uWjD1WkJWVZGncgDJ7rXu8/WpOXdIJF0fP7dJgt/CxqgdTq UfbOBoEtZYf8upKh7gBnrUwoU+qc5KwDqQACz3KHg1aU4ElfEGUZTK3GYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhBFZ5gXQ5Vs4c8G5GFcZfXhSfwMB8GA1UdIwQY MBaAFCLF/rLSX6xN2Lqk9x2NwiaBhqA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTkt NDY4ZjQ5OGZhZjFjLzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTktNDY4ZjQ5OGZhZjFj LzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSU71YBC VNXCNFkjdTUDoPe5eeT59pTOCbGY0iyLaL72Rp732xjDMcCUpaeIdrtj2y3HPoZb 4MmubePWXuLzwY1YQZvNEbHduj2v9FVrW25++mMPgiyBrEY/oAJ58TkZ1NKgrOut dHO/xOQGFlVMSxP6mP0uO7NeUfJxJ824EY8Wyi7jz9cbEySG1jFqh8tjYLixbMUj hPqN6YDkr+ersg1hNSnF6FBDBDsBP7PioM2w/orFJwR+BSWq3kD2gAjBHr5GSMyw Kb2t875bWdgHCqDH+TNmhab3iRCPg2847d8AC0ApJcdNG1MxdIXjonCqXDQsX7Fk zFfoah43yjd6vg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:24:02 2025 by rpki-client