This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft File: Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft (raw, json) Hash identifier: hl2IwRRi5N7gWXwWquoBQqRIQ/8H9WoJ3/cQmu3Zg0M= Subject key identifier: 36:FC:21:11:8E:4F:D1:D5:86:E7:F9:A5:6B:75:66:3E:70:16:04:2E Authority key identifier: 22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 Certificate issuer: /CN=22ce6f80d7670973d32ec4745301011217468822 Certificate serial: 019B593ECF22B6C1105D08A09661B2D5C261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft Manifest number: 7A Signing time: Fri 26 Dec 2025 06:00:46 +0000 Manifest this update: Fri 26 Dec 2025 06:00:46 +0000 Manifest next update: Sat 27 Dec 2025 06:00:46 +0000 Files and hashes: 1: Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl (hash: VSLjpxqHdf/Weqx3FG+h9nE6fOTwH634pXAUm+2bzQ0=) 2: _MzRbBxyGoy9PEsWIvACK-CtNic.roa (hash: 08IFLLSc5HylsTSbFSeyhHQH9IHTjqat4y1TvqrHWhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:cf:22:b6:c1:10:5d:08:a0:96:61:b2:d5:c2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ce6f80d7670973d32ec4745301011217468822 Validity Not Before: Dec 26 06:00:46 2025 GMT Not After : Dec 27 06:00:46 2025 GMT Subject: CN=36fc21118e4fd1d586e7f9a56b75663e7016042e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:50:db:bf:35:0c:92:c0:77:81:00:6d:a3: 5d:4a:6c:d3:73:b6:52:b1:8a:21:9d:c5:2f:e6:f8: 76:18:ae:12:8f:ef:c5:2c:a3:21:9e:f1:80:5f:51: 30:04:64:82:d4:e1:e5:70:87:24:3b:e8:63:21:56: e8:42:d5:61:4c:99:12:12:3a:db:ca:7d:3d:9c:80: 96:6b:cc:6d:48:d3:69:d0:21:8c:ee:bd:aa:ae:68: 4d:e7:c0:15:80:41:e0:df:21:c3:e4:d7:29:7b:93: 7d:df:00:d3:b5:2a:9b:de:89:e0:1e:31:61:9e:39: b4:4a:13:b2:8d:cd:87:10:a5:47:55:6e:07:f0:e0: 80:10:ff:a5:4a:6d:86:6c:d1:f4:e4:3f:10:ad:1c: 2b:aa:1a:5f:17:8a:61:2d:fa:6a:e5:a3:b0:c0:78: 06:2a:b5:71:12:d2:58:d0:4c:04:f1:7c:79:14:20: 06:06:73:d7:f0:4f:fe:03:19:5b:a8:ed:01:7d:c1: 09:06:ce:fd:47:8d:74:fc:5b:6b:cb:85:10:a6:9d: 60:80:d4:60:5f:95:70:31:c9:d1:ee:c2:d1:ed:79: 75:17:5e:a8:b0:c4:6f:07:26:18:c0:b5:43:16:37: 0c:63:0f:5d:68:68:d3:b6:63:95:09:c5:70:c6:77: 18:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FC:21:11:8E:4F:D1:D5:86:E7:F9:A5:6B:75:66:3E:70:16:04:2E X509v3 Authority Key Identifier: keyid:22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1f:87:6f:2a:c9:4e:b6:cd:16:32:99:4a:1e:f6:75:fc:93: 74:82:4c:2a:dc:8b:d3:23:ee:9c:c0:fb:2f:df:13:2f:2c:eb: ab:68:ab:50:5b:42:52:a1:76:63:e0:f0:61:55:13:59:aa:63: 50:d2:2b:31:55:dd:a5:2f:31:6e:b4:09:ec:13:19:aa:c6:42: c2:d2:c7:3d:11:0f:32:67:e5:2c:b6:ef:a6:2a:13:db:b0:b0: 04:3d:a4:ee:dc:df:68:d0:79:d8:df:37:fb:98:df:07:b0:d4: b6:37:72:2a:99:4d:35:41:93:ef:8c:07:c0:41:ae:a3:8a:9f: 3b:79:bb:c3:54:21:33:11:64:57:f8:e5:1b:aa:73:c0:d0:0c: 6d:e4:00:5b:50:6e:37:05:e7:bf:78:85:9a:ed:33:0a:21:24: 09:d5:10:4d:7f:cf:c1:a7:3f:a2:9a:58:ae:8f:8b:47:46:15: 31:8c:a1:3f:79:54:22:5d:ac:93:c9:1b:93:0a:b2:90:97:af: 47:32:41:71:8c:ce:32:a6:bd:5b:fd:44:3e:9c:cd:df:85:dc: 9c:24:e0:4f:33:4f:f7:7e:f7:61:9a:b0:29:a2:e5:48:9f:29: 57:48:ec:77:a0:ef:bd:f5:27:a3:62:6b:c6:1b:e2:0b:52:8e: 67:b8:42:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPs8itsEQXQiglmGy1cJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2U2ZjgwZDc2NzA5NzNkMzJlYzQ3NDUzMDEwMTEyMTc0 Njg4MjIwHhcNMjUxMjI2MDYwMDQ2WhcNMjUxMjI3MDYwMDQ2WjAzMTEwLwYDVQQD EygzNmZjMjExMThlNGZkMWQ1ODZlN2Y5YTU2Yjc1NjYzZTcwMTYwNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgBQ2781DJLAd4EAbaNdSmzTc7ZS sYohncUv5vh2GK4Sj+/FLKMhnvGAX1EwBGSC1OHlcIckO+hjIVboQtVhTJkSEjrb yn09nICWa8xtSNNp0CGM7r2qrmhN58AVgEHg3yHD5Ncpe5N93wDTtSqb3ongHjFh njm0ShOyjc2HEKVHVW4H8OCAEP+lSm2GbNH05D8QrRwrqhpfF4phLfpq5aOwwHgG KrVxEtJY0EwE8Xx5FCAGBnPX8E/+AxlbqO0BfcEJBs79R410/Ftry4UQpp1ggNRg X5VwMcnR7sLR7Xl1F16osMRvByYYwLVDFjcMYw9daGjTtmOVCcVwxncYXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb8IRGOT9HVhuf5pWt1Zj5wFgQuMB8GA1UdIwQY MBaAFCLOb4DXZwlz0y7EdFMBARIXRogiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUt NWFhYmRlMzExZmRiLzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUtNWFhYmRlMzExZmRi LzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB+HbyrJ TrbNFjKZSh72dfyTdIJMKtyL0yPunMD7L98TLyzrq2irUFtCUqF2Y+DwYVUTWapj UNIrMVXdpS8xbrQJ7BMZqsZCwtLHPREPMmflLLbvpioT27CwBD2k7tzfaNB52N83 +5jfB7DUtjdyKplNNUGT74wHwEGuo4qfO3m7w1QhMxFkV/jlG6pzwNAMbeQAW1Bu NwXnv3iFmu0zCiEkCdUQTX/Pwac/oppYro+LR0YVMYyhP3lUIl2sk8kbkwqykJev RzJBcYzOMqa9W/1EPpzN34XcnCTgTzNP9373YZqwKaLlSJ8pV0jsd6DvvfUno2Jr xhviC1KOZ7hCnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:23 2025 by rpki-client