This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json) Hash identifier: XnL+5HoBPFyBAk2g1fx6kgtoHA5+J6oXRtTfW55QwuY= Subject key identifier: D6:E1:35:C9:E5:9C:E6:E3:99:8F:3B:D3:02:80:B4:71:E6:80:F9:DE Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Certificate serial: 019B5ABF7A7262CC4DA247544437AEF89F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft Manifest number: 09E9 Signing time: Fri 26 Dec 2025 13:00:56 +0000 Manifest this update: Fri 26 Dec 2025 13:00:56 +0000 Manifest next update: Sat 27 Dec 2025 13:00:56 +0000 Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: pUbaGssKP8glqa1O3yLM0KFcA0R+zxHlsrBOrhfodd8=) 2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:7a:72:62:cc:4d:a2:47:54:44:37:ae:f8:9f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Validity Not Before: Dec 26 13:00:56 2025 GMT Not After : Dec 27 13:00:56 2025 GMT Subject: CN=d6e135c9e59ce6e3998f3bd30280b471e680f9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:6b:07:52:08:a4:41:db:99:36:55:aa:96: 28:b2:ae:5d:14:66:01:63:1f:4a:58:20:c0:0f:dd: d4:10:62:0f:cc:ea:05:d5:f6:b1:cf:78:37:22:bd: 7c:c2:d4:7b:ab:18:92:cf:c9:8f:20:21:ec:ca:6c: 99:36:63:7f:80:63:46:c3:ff:74:86:76:53:05:7a: a1:ba:af:e7:8b:b9:02:0d:5e:01:35:7c:46:8d:65: 5a:26:6b:fe:04:8e:48:cd:d9:c5:c8:a0:9e:31:a3: d5:8b:fc:23:95:be:5f:c7:13:bc:2e:ba:a7:af:db: 24:5c:f1:c1:8d:b2:0e:f1:80:07:3e:35:a6:ab:9d: f7:9d:fb:ad:59:18:16:4b:ee:47:3b:bf:38:35:d2: 32:5f:be:bb:eb:fd:53:b0:40:95:c8:a3:c3:c9:47: 54:6b:cb:8a:15:6e:b0:99:c7:d8:59:07:79:64:39: db:02:7c:64:4a:e5:7b:12:15:6a:c5:3d:5a:9a:38: ff:ce:43:d3:d9:54:7c:6d:af:4c:15:ac:6c:dc:ee: 18:18:03:f8:a9:ca:f4:88:c5:90:61:1f:d4:94:53: 74:7c:c9:04:6d:8a:a5:1b:a0:04:ba:92:fa:0d:19: c5:a4:e3:62:c0:f5:e2:e1:3f:0b:2e:c5:61:c5:73: 76:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:35:C9:E5:9C:E6:E3:99:8F:3B:D3:02:80:B4:71:E6:80:F9:DE X509v3 Authority Key Identifier: keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e1:ff:84:cd:90:cf:a9:8d:c3:15:6e:48:6f:66:02:3c:f7: 19:50:d4:14:5b:6f:bf:05:dd:d3:00:13:5a:e5:7a:bf:3e:56: e4:f6:c1:15:19:1d:df:ff:85:f4:a0:ca:4a:45:10:11:f4:7e: 73:2e:60:f7:a0:f2:a8:79:c8:a0:4e:f4:df:91:57:ef:f3:b5: 37:7e:f4:ae:26:8e:33:e5:57:39:6c:a3:24:70:6c:60:6a:bf: b9:5d:9d:91:68:e8:a9:fb:d8:3b:ad:b1:4c:39:13:42:8a:ab: f2:63:f5:30:90:0d:a2:88:e3:c0:35:df:a8:6c:55:92:fa:1c: d6:2e:50:c2:c9:76:ef:35:85:93:b1:90:ae:ab:3e:50:48:8a: 6c:52:c2:8b:f0:b4:66:23:07:bb:c7:1f:96:cb:5e:b4:81:44: ec:86:3d:3d:22:3f:ee:0c:83:36:e5:28:88:20:5a:c0:eb:cc: f6:a7:ae:82:2b:63:cd:7a:16:8f:d1:83:dc:b0:07:f4:52:73: 40:e6:ac:b0:62:fc:7d:0a:8b:20:7f:60:ee:cb:58:c1:70:35: aa:19:23:25:69:6a:81:d5:bb:cb:f6:96:1d:de:a0:a6:84:ed: df:9f:cb:2c:d8:63:bc:04:d2:0f:a1:04:b9:7b:18:2c:f4:81: f9:02:7b:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3pyYsxNokdURDeu+J8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh YWViZjAwHhcNMjUxMjI2MTMwMDU2WhcNMjUxMjI3MTMwMDU2WjAzMTEwLwYDVQQD EyhkNmUxMzVjOWU1OWNlNmUzOTk4ZjNiZDMwMjgwYjQ3MWU2ODBmOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme9rB1IIpEHbmTZVqpYosq5dFGYB Yx9KWCDAD93UEGIPzOoF1faxz3g3Ir18wtR7qxiSz8mPICHsymyZNmN/gGNGw/90 hnZTBXqhuq/ni7kCDV4BNXxGjWVaJmv+BI5IzdnFyKCeMaPVi/wjlb5fxxO8Lrqn r9skXPHBjbIO8YAHPjWmq533nfutWRgWS+5HO784NdIyX7676/1TsECVyKPDyUdU a8uKFW6wmcfYWQd5ZDnbAnxkSuV7EhVqxT1amjj/zkPT2VR8ba9MFaxs3O4YGAP4 qcr0iMWQYR/UlFN0fMkEbYqlG6AEupL6DRnFpONiwPXi4T8LLsVhxXN2gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbhNcnlnObjmY870wKAtHHmgPneMB8GA1UdIwQY MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3 LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeH/hM2Q z6mNwxVuSG9mAjz3GVDUFFtvvwXd0wATWuV6vz5W5PbBFRkd3/+F9KDKSkUQEfR+ cy5g96DyqHnIoE7035FX7/O1N370riaOM+VXOWyjJHBsYGq/uV2dkWjoqfvYO62x TDkTQoqr8mP1MJANoojjwDXfqGxVkvoc1i5Qwsl27zWFk7GQrqs+UEiKbFLCi/C0 ZiMHu8cflstetIFE7IY9PSI/7gyDNuUoiCBawOvM9qeugitjzXoWj9GD3LAH9FJz QOassGL8fQqLIH9g7stYwXA1qhkjJWlqgdW7y/aWHd6gpoTt35/LLNhjvATSD6EE uXsYLPSB+QJ7gg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:44 2025 by rpki-client