This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft File: AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json) Hash identifier: s4FlZwryuJb5LkCyW4Ffl2kD6UPlAVZmxEguCYTUgb0= Subject key identifier: CC:0B:65:C9:B3:E1:86:5D:99:A8:97:32:2A:50:FF:F5:81:13:F3:28 Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80 Certificate issuer: /CN=008b280588054ed8c446e27b49cac45588a9e980 Certificate serial: 019B36B4836A05938E377E2EB7E6BDC2149E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft Manifest number: 1241 Signing time: Fri 19 Dec 2025 13:02:38 +0000 Manifest this update: Fri 19 Dec 2025 13:02:38 +0000 Manifest next update: Sat 20 Dec 2025 13:02:38 +0000 Files and hashes: 1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: cA1h+Ig+1Dmzwk4Dwn7gsdvnGRlDCxbgHgXDG+q09Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:83:6a:05:93:8e:37:7e:2e:b7:e6:bd:c2:14:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980 Validity Not Before: Dec 19 13:02:38 2025 GMT Not After : Dec 20 13:02:38 2025 GMT Subject: CN=cc0b65c9b3e1865d99a897322a50fff58113f328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:95:ed:6d:fe:11:78:61:bc:b0:2a:55:a5: e1:44:8b:e1:5c:76:46:c2:5a:34:0d:19:25:4d:26: 0b:6d:99:f1:70:4d:04:2e:26:29:52:8d:36:ec:30: ea:04:80:bb:69:f8:47:27:34:1a:1d:60:2b:ac:19: 53:e6:a0:80:47:12:20:7d:3b:66:71:6c:b2:5b:6c: 33:bd:97:0f:c4:05:cd:b3:eb:c3:67:ab:0b:7e:30: eb:91:14:ea:44:06:9f:af:27:2d:12:32:84:0b:9d: ee:ed:3b:87:4a:84:1a:34:49:3b:60:7e:82:ba:bb: d6:c5:06:16:f1:17:af:97:23:2f:d7:b3:0b:66:d7: 3b:80:8f:e5:35:d9:24:ea:00:e8:62:58:16:e5:64: 6d:c5:c0:87:97:ed:b6:d3:33:9e:dc:87:1a:2e:9b: 25:82:05:f8:dd:cc:a4:13:55:03:d6:45:b8:6e:47: b7:6c:be:30:55:7b:3b:22:d0:4f:4d:cb:0a:c2:c2: 0c:07:92:87:a8:94:0a:47:25:7c:19:e3:bb:29:2e: 0d:0d:89:e4:6d:6c:a6:3a:8c:58:88:9e:e8:d4:ba: d7:c3:35:9f:bf:80:50:b6:8a:f4:f4:18:bf:c1:57: 0b:c8:09:92:d7:17:a3:fe:97:9d:c2:29:36:20:16: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:65:C9:B3:E1:86:5D:99:A8:97:32:2A:50:FF:F5:81:13:F3:28 X509v3 Authority Key Identifier: keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:93:7d:02:bd:0d:38:78:36:7b:95:b7:d9:95:67:c4:82: 8c:bd:7a:fb:b1:b3:71:16:0e:bf:b5:15:8d:99:4a:e0:c3:94: fb:f5:81:a4:1c:d3:67:72:be:0b:a8:a1:94:b0:ec:cd:d4:d3: 4f:d1:76:a0:64:0c:54:07:43:49:dd:7c:e7:4f:06:09:c1:07: 75:b9:ea:02:11:92:c9:1a:36:7b:38:08:29:c2:22:35:53:08: f9:5d:12:5a:d3:72:98:c3:b6:09:9e:70:cf:70:79:92:85:09: 64:69:40:be:98:b0:4a:44:c7:48:a9:dd:02:48:78:81:92:62: 8e:32:40:a4:ac:19:12:8c:c7:a3:b3:3d:91:6c:2e:34:5b:33: 4f:8f:4b:84:96:7f:06:3d:3a:6e:6a:1c:15:86:cd:d8:0b:ab: 80:e8:00:09:9f:80:e7:6b:c7:31:70:4d:08:fd:0a:a7:f8:12: da:88:a4:78:a0:f7:8c:e8:72:4c:10:11:38:8b:63:ce:33:f3: da:89:6d:fa:06:2e:9d:09:75:81:a7:9c:d5:2b:59:af:af:75: 2b:0a:a0:3c:a7:de:4b:f1:db:11:21:29:0e:46:76:9b:b0:47: 9d:73:28:cc:da:53:ce:08:12:10:74:e8:18:64:a1:97:a3:64: b2:a8:95:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tINqBZOON34ut+a9whSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOGIyODA1ODgwNTRlZDhjNDQ2ZTI3YjQ5Y2FjNDU1ODhh OWU5ODAwHhcNMjUxMjE5MTMwMjM4WhcNMjUxMjIwMTMwMjM4WjAzMTEwLwYDVQQD EyhjYzBiNjVjOWIzZTE4NjVkOTlhODk3MzIyYTUwZmZmNTgxMTNmMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubiV7W3+EXhhvLAqVaXhRIvhXHZG wlo0DRklTSYLbZnxcE0ELiYpUo027DDqBIC7afhHJzQaHWArrBlT5qCARxIgfTtm cWyyW2wzvZcPxAXNs+vDZ6sLfjDrkRTqRAafryctEjKEC53u7TuHSoQaNEk7YH6C urvWxQYW8RevlyMv17MLZtc7gI/lNdkk6gDoYlgW5WRtxcCHl+220zOe3IcaLpsl ggX43cykE1UD1kW4bke3bL4wVXs7ItBPTcsKwsIMB5KHqJQKRyV8GeO7KS4NDYnk bWymOoxYiJ7o1LrXwzWfv4BQtor09Bi/wVcLyAmS1xej/pedwik2IBZw9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwLZcmz4YZdmaiXMipQ//WBE/MoMB8GA1UdIwQY MBaAFACLKAWIBU7YxEbie0nKxFWIqemAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMt NTYzZDZiZDNmODI3LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMtNTYzZDZiZDNmODI3 LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj66TfQK9 DTh4NnuVt9mVZ8SCjL16+7GzcRYOv7UVjZlK4MOU+/WBpBzTZ3K+C6ihlLDszdTT T9F2oGQMVAdDSd18508GCcEHdbnqAhGSyRo2ezgIKcIiNVMI+V0SWtNymMO2CZ5w z3B5koUJZGlAvpiwSkTHSKndAkh4gZJijjJApKwZEozHo7M9kWwuNFszT49LhJZ/ Bj06bmocFYbN2AurgOgACZ+A52vHMXBNCP0Kp/gS2oikeKD3jOhyTBAROItjzjPz 2olt+gYunQl1gaec1StZr691KwqgPKfeS/HbESEpDkZ2m7BHnXMozNpTzggSEHTo GGShl6NksqiV9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 22:06:35 2025 by rpki-client