This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json) Hash identifier: JGvlzYGJdhoNAz5dgbithFJMO3ihZIwq9KqvTjh0Xag= Subject key identifier: 9E:43:A7:93:2B:F7:1F:81:84:9B:B5:FD:E2:C9:4A:08:31:FF:D4:FD Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69 Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269 Certificate serial: 019B19F1D1E89217A657623EA9CC552FFC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 23:00:36 +0000 Manifest this update: Sat 13 Dec 2025 23:00:36 +0000 Manifest next update: Sun 14 Dec 2025 23:00:36 +0000 Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: 5sHpW0br0WLHi2tQjdSDxsG9qkA95JaTsRAswqylK18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:d1:e8:92:17:a6:57:62:3e:a9:cc:55:2f:fc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269 Validity Not Before: Dec 13 23:00:36 2025 GMT Not After : Dec 14 23:00:36 2025 GMT Subject: CN=9e43a7932bf71f81849bb5fde2c94a0831ffd4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:77:22:ef:98:f9:48:ec:94:88:2a:22:54: 6e:8b:de:01:99:91:73:26:0f:72:0c:59:41:a4:1b: a7:05:ed:ec:72:e9:64:78:04:bc:f1:c6:55:72:86: 87:53:7b:bf:5f:98:54:ec:fb:dc:1e:b9:aa:0f:6d: b8:da:25:50:01:93:be:a3:1b:55:e1:ff:7f:2a:4b: 48:a7:24:45:27:cc:1e:7b:12:62:fb:74:cf:8e:c9: eb:4f:c9:96:f0:ca:c5:b0:74:19:b3:95:21:5e:83: 45:f1:c5:cf:ed:d4:fb:d3:f4:c0:b0:db:fb:3c:7f: fc:48:67:5a:eb:10:c3:0d:4f:9b:07:7d:6d:79:b3: 54:e7:86:9d:99:8b:a0:aa:04:f4:7f:a1:f3:54:07: 9a:2f:fc:57:54:2f:e6:03:8f:0c:79:b0:d3:af:ca: ec:0a:b7:d2:87:de:92:25:4a:a7:20:37:f2:9c:4f: 03:7e:e9:ce:11:a3:96:cd:73:f6:57:0c:af:1f:f7: a0:cf:4e:2d:c2:9b:da:75:29:73:39:51:9d:b0:3a: f3:dd:4f:5b:ae:d7:f6:52:8f:a7:78:fc:dc:f9:5d: ae:59:b8:a3:fc:d3:1d:2a:76:14:a6:f0:65:f9:0c: 62:2a:8f:8b:bf:fe:a7:43:80:13:75:b4:68:c0:e5: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:A7:93:2B:F7:1F:81:84:9B:B5:FD:E2:C9:4A:08:31:FF:D4:FD X509v3 Authority Key Identifier: keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:f4:5e:99:19:e0:25:02:53:9e:58:71:c4:18:9a:bb:a2: b7:65:28:a8:02:e3:74:66:f0:86:02:fe:4b:f3:05:08:84:2e: aa:d7:cc:c4:13:01:4b:c2:42:62:23:e6:f8:37:be:cf:f4:e0: 47:09:5f:ef:dd:02:c0:e5:1f:f5:c1:97:d8:d9:82:94:dc:ab: 29:05:a3:4b:af:69:a0:25:ec:dd:48:e1:85:95:72:c1:c3:69: 80:7f:98:48:2a:06:40:53:45:b6:43:5d:2f:47:93:14:83:52: 6d:15:cb:9c:fb:9a:47:7a:ed:4c:d2:af:b5:de:90:78:7d:84: 32:11:05:4e:b7:3b:9f:f4:86:a6:4c:ad:4c:0a:51:cb:fd:08: 76:8c:30:c6:74:97:a9:7f:61:7c:68:fa:11:8c:5d:cc:dd:6b: 4f:f5:3f:7b:2b:72:a0:76:e8:1d:f6:f5:d8:b9:2b:8f:84:ef: 9d:aa:22:f7:e6:d4:a5:e5:fb:88:2a:23:ab:7a:b7:a5:dd:02: 80:a3:d4:1d:61:39:d5:7f:1b:4d:3b:14:d4:2e:da:1b:64:1b: 86:8b:ba:db:2d:81:fe:00:1c:78:54:c6:55:ed:e4:c6:ce:e7: 75:e8:a1:2b:d8:e6:3b:00:bc:e6:a8:ce:f8:fe:03:a8:37:4f: 82:33:88:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8dHokhemV2I+qcxVL/xwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MjNkNzAyMjRiN2JkM2MyYTdjZTdkYzdhODdjOTJhZDVh ZmYyNjkwHhcNMjUxMjEzMjMwMDM2WhcNMjUxMjE0MjMwMDM2WjAzMTEwLwYDVQQD Eyg5ZTQzYTc5MzJiZjcxZjgxODQ5YmI1ZmRlMmM5NGEwODMxZmZkNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFZ3Iu+Y+UjslIgqIlRui94BmZFz Jg9yDFlBpBunBe3sculkeAS88cZVcoaHU3u/X5hU7PvcHrmqD2242iVQAZO+oxtV 4f9/KktIpyRFJ8weexJi+3TPjsnrT8mW8MrFsHQZs5UhXoNF8cXP7dT70/TAsNv7 PH/8SGda6xDDDU+bB31tebNU54admYugqgT0f6HzVAeaL/xXVC/mA48MebDTr8rs CrfSh96SJUqnIDfynE8DfunOEaOWzXP2VwyvH/egz04twpvadSlzOVGdsDrz3U9b rtf2Uo+nePzc+V2uWbij/NMdKnYUpvBl+QxiKo+Lv/6nQ4ATdbRowOXUzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Dp5Mr9x+BhJu1/eLJSggx/9T9MB8GA1UdIwQY MBaAFIkj1wIkt708Knzn3HqHySrVr/JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUt Zjk4NjU1MWE3MDdkLzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lMjEyZDYtYjgxYi00ZThhLThlMDUtZjk4NjU1MWE3MDdk LzEvaVNQWEFpUzN2VHdxZk9mY2VvZkpLdFd2OG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY130XpkZ 4CUCU55YccQYmruit2UoqALjdGbwhgL+S/MFCIQuqtfMxBMBS8JCYiPm+De+z/Tg Rwlf790CwOUf9cGX2NmClNyrKQWjS69poCXs3UjhhZVywcNpgH+YSCoGQFNFtkNd L0eTFINSbRXLnPuaR3rtTNKvtd6QeH2EMhEFTrc7n/SGpkytTApRy/0IdowwxnSX qX9hfGj6EYxdzN1rT/U/eytyoHboHfb12Lkrj4Tvnaoi9+bUpeX7iCojq3q3pd0C gKPUHWE51X8bTTsU1C7aG2Qbhou62y2B/gAceFTGVe3kxs7ndeihK9jmOwC85qjO +P4DqDdPgjOIqw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:37 2025 by rpki-client