This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json) Hash identifier: W4W0qerGL5bLpFhNhRLi5m9YvKXZb8cdGgQCibROkPw= Subject key identifier: AB:01:CE:AC:14:1D:0E:56:9F:58:92:2B:09:BD:AA:AB:70:1D:5D:83 Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Certificate serial: 019B0E926546023ADC66F33C10B05004CC10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft Manifest number: 0812 Signing time: Thu 11 Dec 2025 18:00:33 +0000 Manifest this update: Thu 11 Dec 2025 18:00:33 +0000 Manifest next update: Fri 12 Dec 2025 18:00:33 +0000 Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=) 2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=) 3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=) 4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: hUbCtq6QtoQzaMD0/Ttglt6QnMvdFRyt7UiwnIeZv90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:65:46:02:3a:dc:66:f3:3c:10:b0:50:04:cc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006 Validity Not Before: Dec 11 18:00:33 2025 GMT Not After : Dec 12 18:00:33 2025 GMT Subject: CN=ab01ceac141d0e569f58922b09bdaaab701d5d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:50:bb:f3:21:1c:71:99:6e:b1:4f:eb:e6: 10:f2:05:54:59:48:70:ab:bd:96:75:90:8f:cd:d7: 38:7b:61:74:52:fc:d1:e2:c7:d4:30:11:b1:4d:0d: 3c:d0:de:d0:ad:53:10:25:67:4b:39:e9:59:0a:2a: 93:5f:6a:39:a1:13:bb:ee:70:97:0a:d7:af:f6:40: 7e:85:d5:93:75:5b:f4:58:93:1c:08:12:f4:d9:bf: c6:f5:c0:44:46:a4:cc:23:74:86:ca:22:7d:13:49: f6:89:8b:38:4c:0b:63:cc:0d:2d:19:9a:86:7d:9d: 61:82:9c:af:ea:fd:9b:ae:23:06:9a:26:57:ae:d1: dc:86:fb:f3:93:be:b0:58:00:0a:69:ef:2f:82:75: 26:2a:82:f8:93:ae:ff:21:26:3f:ec:7b:a0:ca:f0: 99:d6:2d:c3:a7:88:08:34:e3:6c:c3:5f:01:84:52: 70:8f:16:5b:93:9f:e0:e2:dd:d7:de:47:b4:07:4c: 2c:d2:5c:c9:82:48:3f:29:35:6b:0a:b3:46:f9:0a: 42:58:83:62:75:7c:6b:da:7c:19:64:68:f8:a6:4d: d0:ac:db:ef:3a:6e:f2:92:74:cc:ad:01:58:74:3e: 53:d5:29:c5:1a:01:7d:9f:39:9a:cf:af:38:98:23: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:01:CE:AC:14:1D:0E:56:9F:58:92:2B:09:BD:AA:AB:70:1D:5D:83 X509v3 Authority Key Identifier: keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b9:eb:1a:4d:58:32:9f:e0:0f:1e:61:4b:10:fc:80:08:7d: af:10:32:c0:32:19:f8:cf:a0:79:bf:23:07:9b:7a:cb:4f:57: 43:81:95:4d:2b:28:7c:6b:40:80:02:d7:08:40:94:3c:34:b6: f4:4b:80:cd:ce:a9:7b:c6:37:d8:07:b8:7f:ac:91:80:1d:6d: 49:0f:e3:c5:51:88:20:5b:12:b8:d8:42:65:13:de:66:f0:08: 7a:4e:57:50:9c:d6:ea:5d:98:31:97:39:9e:7d:03:6d:97:3d: d3:6c:54:48:38:43:6e:21:b0:9d:b6:b3:3d:8c:c7:77:ab:1b: 3f:84:3a:80:fa:7e:9a:b3:89:e0:3d:e5:79:ea:a6:83:7c:06: ae:13:41:b4:2b:18:d3:5b:e3:d2:ab:ed:d5:80:e7:3b:25:54: 85:0f:20:f2:5f:3c:11:24:df:55:79:85:91:6b:55:d5:e0:81: 9d:df:c4:28:47:9b:7d:0b:1d:ee:d9:77:81:f0:51:ea:01:47: 2c:71:28:10:e3:db:33:9f:95:55:ed:aa:c9:c9:75:6e:60:9f: a3:23:ad:ec:c7:e4:d8:73:09:a1:6a:21:a0:c2:a3:9f:e9:0c: 64:e4:37:e2:20:b4:4a:c2:1d:26:d0:65:c5:6e:56:f2:b8:ae: 37:f2:1d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkmVGAjrcZvM8ELBQBMwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi ZGQwMDYwHhcNMjUxMjExMTgwMDMzWhcNMjUxMjEyMTgwMDMzWjAzMTEwLwYDVQQD EyhhYjAxY2VhYzE0MWQwZTU2OWY1ODkyMmIwOWJkYWFhYjcwMWQ1ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVxQu/MhHHGZbrFP6+YQ8gVUWUhw q72WdZCPzdc4e2F0UvzR4sfUMBGxTQ080N7QrVMQJWdLOelZCiqTX2o5oRO77nCX Ctev9kB+hdWTdVv0WJMcCBL02b/G9cBERqTMI3SGyiJ9E0n2iYs4TAtjzA0tGZqG fZ1hgpyv6v2briMGmiZXrtHchvvzk76wWAAKae8vgnUmKoL4k67/ISY/7HugyvCZ 1i3Dp4gINONsw18BhFJwjxZbk5/g4t3X3ke0B0ws0lzJgkg/KTVrCrNG+QpCWINi dXxr2nwZZGj4pk3QrNvvOm7yknTMrQFYdD5T1SnFGgF9nzmaz684mCMfcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsBzqwUHQ5Wn1iSKwm9qqtwHV2DMB8GA1UdIwQY MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7nrGk1Y Mp/gDx5hSxD8gAh9rxAywDIZ+M+geb8jB5t6y09XQ4GVTSsofGtAgALXCECUPDS2 9EuAzc6pe8Y32Ae4f6yRgB1tSQ/jxVGIIFsSuNhCZRPeZvAIek5XUJzW6l2YMZc5 nn0DbZc902xUSDhDbiGwnbazPYzHd6sbP4Q6gPp+mrOJ4D3leeqmg3wGrhNBtCsY 01vj0qvt1YDnOyVUhQ8g8l88ESTfVXmFkWtV1eCBnd/EKEebfQsd7tl3gfBR6gFH LHEoEOPbM5+VVe2qycl1bmCfoyOt7Mfk2HMJoWohoMKjn+kMZOQ34iC0SsIdJtBl xW5W8riuN/IdjA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:42 2025 by rpki-client