This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json) Hash identifier: mYX+Y1nrhpaNWa14ieMhG1Nmeyjp70coa/oTN+/kVxI= Subject key identifier: B8:9B:FE:55:21:6C:EC:E5:00:B9:B8:2D:92:C1:35:F2:7B:79:92:09 Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Certificate serial: 019B18A85BD462B18D6B91D335FA185F7158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft Manifest number: 0448 Signing time: Sat 13 Dec 2025 17:00:45 +0000 Manifest this update: Sat 13 Dec 2025 17:00:45 +0000 Manifest next update: Sun 14 Dec 2025 17:00:45 +0000 Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: hldtJNGoVmyUQcPwUu3QyJTO5eljXsUASPqM33086G4=) 2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:5b:d4:62:b1:8d:6b:91:d3:35:fa:18:5f:71:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Validity Not Before: Dec 13 17:00:45 2025 GMT Not After : Dec 14 17:00:45 2025 GMT Subject: CN=b89bfe55216cece500b9b82d92c135f27b799209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:54:12:45:66:e1:dd:f9:f0:ac:be:fd:06: 11:6c:ea:25:51:4c:9b:be:03:78:6f:6b:9d:58:16: 88:40:5b:eb:16:09:ed:1b:13:78:45:53:e7:40:a9: a7:81:1f:98:cc:22:27:48:9c:ff:f6:d8:79:1a:b4: 7e:b1:6e:45:bc:56:9b:c7:cc:60:55:d0:38:7c:63: e4:09:d2:21:1f:66:39:f3:ff:35:3e:49:26:a4:a1: ea:a0:06:1a:8d:01:ac:e0:16:62:be:7d:f7:81:08: ad:1e:21:d5:92:4f:f3:ac:9e:cb:2f:3c:31:1b:c2: 2d:62:22:a2:de:63:4b:b3:f7:7c:64:bb:52:9f:99: 1e:d6:00:27:2a:0c:21:fc:17:53:c2:c1:39:80:68: a6:cc:4c:46:f2:f7:c8:5b:3e:f1:94:2f:2e:a9:61: 1f:25:15:5d:09:d8:6a:a9:02:7c:eb:ec:fd:ca:e1: 9d:a3:b9:bb:70:1e:2c:30:fc:2c:e6:2f:c3:f3:b9: ff:e9:b6:78:45:8f:03:cc:bc:b5:23:e5:0c:ba:9b: 82:32:d5:7a:86:c2:4e:fa:d6:c4:a0:1d:c6:12:d3: 75:6c:9d:87:48:60:73:31:e1:ac:84:f6:87:7b:56: 43:6b:17:b2:0d:1a:f9:74:7b:57:cb:95:be:3e:17: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9B:FE:55:21:6C:EC:E5:00:B9:B8:2D:92:C1:35:F2:7B:79:92:09 X509v3 Authority Key Identifier: keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7a:dc:19:76:ff:91:f2:aa:c5:4f:65:9e:fe:cd:73:0f:d1: 0a:f1:99:4f:5d:77:a3:21:5b:a8:3b:34:c7:af:81:35:bd:48: df:36:9f:9d:52:09:41:3c:b8:db:bb:3b:c2:b0:b8:2b:6e:3e: 7a:9d:c9:3c:05:0e:91:cc:4a:7d:8d:fb:65:b1:25:c4:2b:f5: 61:c2:ad:d1:63:83:d1:e6:54:c0:5f:38:ed:2c:b6:7b:74:b9: 15:3c:87:db:59:f9:27:0f:ac:e1:6d:38:2f:b2:b9:cc:e0:b1: 38:65:4c:8b:5e:f0:bf:1a:8c:39:80:56:45:83:61:a8:c5:b2: 84:51:45:54:a3:1d:1d:5a:59:6a:3f:92:67:1b:d9:f5:96:b2: ee:e6:d3:1d:9f:88:a2:d5:2b:0e:27:ec:4d:c9:a5:b4:a1:28: 40:8a:6d:b4:ba:b0:89:a6:9e:99:5b:38:ba:3e:f7:fa:d7:86: a9:ab:eb:d5:50:5f:29:cf:fe:6b:9d:28:ae:a1:99:d7:5f:86: cc:f5:99:de:35:c3:c9:dd:b2:e4:02:cb:65:aa:8f:fb:04:17: e4:b5:36:66:7d:b3:3f:7d:a9:e3:89:83:c6:02:3f:bb:d1:16: e0:2c:18:47:7d:36:68:f8:f0:a2:0c:40:14:e0:00:f1:aa:d8: fc:a6:08:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqFvUYrGNa5HTNfoYX3FYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGZlMmIxOWJkM2ViN2Y3MGE0ZWVkYWI2MTZiNTMyNTAw MTE1MjAwHhcNMjUxMjEzMTcwMDQ1WhcNMjUxMjE0MTcwMDQ1WjAzMTEwLwYDVQQD EyhiODliZmU1NTIxNmNlY2U1MDBiOWI4MmQ5MmMxMzVmMjdiNzk5MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwBUEkVm4d358Ky+/QYRbOolUUyb vgN4b2udWBaIQFvrFgntGxN4RVPnQKmngR+YzCInSJz/9th5GrR+sW5FvFabx8xg VdA4fGPkCdIhH2Y58/81PkkmpKHqoAYajQGs4BZivn33gQitHiHVkk/zrJ7LLzwx G8ItYiKi3mNLs/d8ZLtSn5ke1gAnKgwh/BdTwsE5gGimzExG8vfIWz7xlC8uqWEf JRVdCdhqqQJ86+z9yuGdo7m7cB4sMPws5i/D87n/6bZ4RY8DzLy1I+UMupuCMtV6 hsJO+tbEoB3GEtN1bJ2HSGBzMeGshPaHe1ZDaxeyDRr5dHtXy5W+PhdQCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLib/lUhbOzlALm4LZLBNfJ7eZIJMB8GA1UdIwQY MBaAFDyP4rGb0+t/cKTu2rYWtTJQARUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUt MTJlNmE2ZWRkMTI0LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUtMTJlNmE2ZWRkMTI0 LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinrcGXb/ kfKqxU9lnv7Ncw/RCvGZT113oyFbqDs0x6+BNb1I3zafnVIJQTy427s7wrC4K24+ ep3JPAUOkcxKfY37ZbElxCv1YcKt0WOD0eZUwF847Sy2e3S5FTyH21n5Jw+s4W04 L7K5zOCxOGVMi17wvxqMOYBWRYNhqMWyhFFFVKMdHVpZaj+SZxvZ9Zay7ubTHZ+I otUrDifsTcmltKEoQIpttLqwiaaemVs4uj73+teGqavr1VBfKc/+a50orqGZ11+G zPWZ3jXDyd2y5ALLZaqP+wQX5LU2Zn2zP32p44mDxgI/u9EW4CwYR302aPjwogxA FOAA8arY/KYIwg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:46 2025 by rpki-client