This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json) Hash identifier: TRQwZ5Ms8k3ckaqjiypCDntnTFpsp8gFe1gcgA1XPLI= Subject key identifier: 9B:F1:EE:F4:44:D2:B0:56:18:A2:B2:78:D1:7D:BD:C5:F8:0C:33:6E Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6 Certificate serial: 019B348D528448C0DEFFB788D64D54DC4284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 03:00:35 +0000 Manifest this update: Fri 19 Dec 2025 03:00:35 +0000 Manifest next update: Sat 20 Dec 2025 03:00:35 +0000 Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: vcN7F8bs8my8rQvBFJOILZ/wrj0YpNFFZKbn3DCY6Yo=) 2: UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa (hash: cfx5VG/AEqP8NMaOBqVctXkelvdIOqGDstY0ytuNLZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:52:84:48:c0:de:ff:b7:88:d6:4d:54:dc:42:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208b221700b281f823e322a32221a867e5b079a6 Validity Not Before: Dec 19 03:00:35 2025 GMT Not After : Dec 20 03:00:35 2025 GMT Subject: CN=9bf1eef444d2b05618a2b278d17dbdc5f80c336e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:48:22:d1:b1:ee:16:1a:8f:7d:50:56:ad: 5a:70:ba:15:90:85:30:5d:a4:c6:74:5f:0a:7b:1d: be:11:cc:70:61:23:a1:e7:72:b7:11:83:73:14:e7: 25:1c:d5:ab:01:89:89:c3:b4:72:2c:f1:62:b7:5e: 82:fb:78:f7:be:c5:77:bd:a7:3f:14:b5:ce:e5:29: 7c:8b:12:38:c3:fd:98:bb:dd:1b:08:e5:06:2e:88: 7e:9b:9f:d3:9c:3a:5f:85:84:e8:26:f9:d6:7a:52: d5:63:2d:4d:a2:cd:cf:9c:20:73:29:1b:f9:ae:66: 92:a2:19:fd:ab:15:9d:83:e6:af:cd:df:8a:c8:d9: 9d:1a:8d:90:f6:65:65:45:97:73:4f:5d:c5:1f:f9: 34:b1:6c:9a:b3:f7:be:a2:c2:48:c5:02:14:cd:b7: d8:88:02:50:be:d1:ae:f6:9b:fe:00:68:f9:79:bd: 77:75:7f:5d:79:95:30:4c:d8:21:76:eb:ac:ac:64: 65:2b:37:7a:ce:c9:47:d1:85:64:17:75:72:0e:41: 95:97:fb:bd:11:08:e2:c2:7c:9e:d8:4c:32:22:3a: c1:1d:61:e7:0a:19:83:28:81:33:fb:a3:92:83:bd: c0:f7:67:73:d6:d7:ce:c3:f3:f1:cf:d1:b1:60:ce: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:EE:F4:44:D2:B0:56:18:A2:B2:78:D1:7D:BD:C5:F8:0C:33:6E X509v3 Authority Key Identifier: keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d6:ec:f8:88:f3:af:cd:08:ee:84:17:1b:54:11:1b:fb:1a: c2:53:39:b7:68:7e:2d:cb:14:95:fd:76:96:82:8c:20:ca:39: 44:2e:c9:0c:16:df:72:5d:2a:8b:47:28:a7:4b:8a:18:6a:3d: 81:81:11:a1:84:17:40:0c:bc:cb:26:71:fc:0b:06:a5:47:6c: d9:43:d7:60:ea:fe:cc:20:54:29:31:7d:8f:c6:15:95:60:68: b3:48:d3:52:35:a9:03:68:6e:66:43:e3:41:1f:4b:46:22:74: 1a:9b:66:53:31:01:19:87:36:6b:15:24:22:e6:73:af:c2:fe: 04:66:93:bb:ce:c5:fc:b9:81:8c:2d:e7:d0:a1:48:25:ca:03: 35:b4:42:02:c8:26:6c:97:a9:ad:c3:fe:ff:9b:8c:bb:6a:95: 58:9c:04:9e:8b:c6:e5:86:89:92:c6:04:c9:d8:84:76:df:ab: 31:23:c3:f4:3c:ed:4d:d1:7e:24:79:40:77:42:14:aa:de:51: 33:d1:0b:64:40:92:56:e9:43:06:2c:f1:43:5a:3a:fb:22:84: 5c:95:5d:00:b5:7b:f3:d4:6b:78:f7:42:e3:d6:05:05:10:7d: 07:94:7a:f9:3d:b2:91:e8:cf:07:e4:31:26:ed:af:2f:3b:d0: 80:29:b6:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jVKESMDe/7eI1k1U3EKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi MDc5YTYwHhcNMjUxMjE5MDMwMDM1WhcNMjUxMjIwMDMwMDM1WjAzMTEwLwYDVQQD Eyg5YmYxZWVmNDQ0ZDJiMDU2MThhMmIyNzhkMTdkYmRjNWY4MGMzMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4pIItGx7hYaj31QVq1acLoVkIUw XaTGdF8Kex2+EcxwYSOh53K3EYNzFOclHNWrAYmJw7RyLPFit16C+3j3vsV3vac/ FLXO5Sl8ixI4w/2Yu90bCOUGLoh+m5/TnDpfhYToJvnWelLVYy1Nos3PnCBzKRv5 rmaSohn9qxWdg+avzd+KyNmdGo2Q9mVlRZdzT13FH/k0sWyas/e+osJIxQIUzbfY iAJQvtGu9pv+AGj5eb13dX9deZUwTNghduusrGRlKzd6zslH0YVkF3VyDkGVl/u9 EQjiwnye2EwyIjrBHWHnChmDKIEz+6OSg73A92dz1tfOw/Pxz9GxYM6DRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvx7vRE0rBWGKKyeNF9vcX4DDNuMB8GA1UdIwQY MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNbs+Ijz r80I7oQXG1QRG/sawlM5t2h+LcsUlf12loKMIMo5RC7JDBbfcl0qi0cop0uKGGo9 gYERoYQXQAy8yyZx/AsGpUds2UPXYOr+zCBUKTF9j8YVlWBos0jTUjWpA2huZkPj QR9LRiJ0GptmUzEBGYc2axUkIuZzr8L+BGaTu87F/LmBjC3n0KFIJcoDNbRCAsgm bJeprcP+/5uMu2qVWJwEnovG5YaJksYEydiEdt+rMSPD9DztTdF+JHlAd0IUqt5R M9ELZECSVulDBizxQ1o6+yKEXJVdALV789RrePdC49YFBRB9B5R6+T2ykejPB+Qx Ju2vLzvQgCm2dw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:58 2025 by rpki-client