This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json) Hash identifier: YpyTuXkgl99gMULTDci14kwq602Kljipj8TtQEMybT8= Subject key identifier: CE:65:49:7F:68:D8:7A:CA:C4:34:4C:3C:31:F6:13:C3:8B:42:5C:7A Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8 Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8 Certificate serial: 019B33B277B75338C4CE8A813AD05403CB0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft Manifest number: 0F9B Signing time: Thu 18 Dec 2025 23:01:32 +0000 Manifest this update: Thu 18 Dec 2025 23:01:32 +0000 Manifest next update: Fri 19 Dec 2025 23:01:32 +0000 Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: eNmzGcvrUQlK5EXqfGkCkva7F55A6TViCqM5efvcN/c=) 2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:77:b7:53:38:c4:ce:8a:81:3a:d0:54:03:cb:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8 Validity Not Before: Dec 18 23:01:32 2025 GMT Not After : Dec 19 23:01:32 2025 GMT Subject: CN=ce65497f68d87acac4344c3c31f613c38b425c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:1e:4e:48:53:3a:a1:d8:d9:4f:f7:ca:c8: c3:fb:bf:67:c8:89:af:d4:3a:f1:67:7c:77:b7:3c: 69:3a:e9:15:a3:5a:16:66:50:ad:dd:f0:f2:63:46: 57:bc:b7:f8:ab:1c:57:a8:f0:33:fe:60:eb:05:18: e5:49:62:f5:d9:4b:0d:b9:8c:cb:f0:e4:ea:c7:c6: 19:73:a8:3b:d0:2e:fc:27:d5:05:51:10:fd:61:52: 57:f3:34:5f:45:49:2c:a0:02:a0:59:02:85:51:56: 91:5c:7a:09:b6:4d:44:5d:c9:50:e8:88:ba:c5:4d: 74:24:a2:ac:94:db:7c:73:2c:08:c5:d4:16:ad:d5: ae:d3:58:7e:93:38:19:8c:f8:ae:e1:7f:3a:b8:70: 5d:9f:64:c8:3a:82:76:3c:2e:b1:21:7f:0e:09:ba: 56:79:79:cd:97:a8:61:8f:5b:6f:97:c6:58:8d:1c: 68:9d:01:5c:00:b1:4e:66:57:2c:bc:8e:ab:85:74: bb:95:49:47:85:34:4d:14:98:c9:4c:b3:89:cf:6d: a4:ee:30:73:61:1d:fd:56:7b:15:23:44:c9:f4:18: de:c2:e4:83:97:d7:24:ee:c5:15:c2:98:68:a5:0c: df:44:e5:63:bc:2a:67:b9:ba:19:83:09:94:f0:f6: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:65:49:7F:68:D8:7A:CA:C4:34:4C:3C:31:F6:13:C3:8B:42:5C:7A X509v3 Authority Key Identifier: keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:be:db:28:c5:6f:9f:e2:06:8b:61:cf:d8:ec:6d:01:35:07: e3:73:ae:17:4f:3f:9c:82:88:50:c9:bc:d1:c7:a1:27:73:d6: 60:10:4f:96:85:fe:f7:76:12:78:72:e5:cb:fc:6a:13:8a:04: 2e:e5:f9:03:4e:de:93:aa:53:6c:7b:02:de:a0:ea:f7:f7:81: 58:0d:67:31:72:f0:9c:ef:b6:c2:f7:92:f8:4c:45:01:ef:19: ed:32:ff:9c:fa:7b:18:6b:97:82:9c:4c:48:eb:c6:4c:dc:8e: 03:47:8f:fd:06:d8:ed:ed:50:c6:b4:0c:20:b9:15:e2:fa:82: eb:dd:7c:6e:76:1a:2a:08:17:cc:a4:44:fe:bc:81:07:69:da: 9c:f6:0b:41:a2:2e:01:d6:c1:da:cd:0a:cc:2f:9e:0f:3e:22: a4:76:7d:ca:98:bf:01:e4:24:93:79:17:f4:08:36:17:0c:d1: 81:83:0e:25:f1:53:94:8c:34:61:ea:63:bd:e1:25:97:3a:30: c4:6c:78:ca:5f:38:2c:8c:60:09:c6:6d:ed:f0:c5:76:b8:e4: f3:05:a9:70:2c:c2:24:a4:1f:68:47:9f:52:a3:6c:da:77:d0: 6c:7b:dc:b8:bd:c2:5b:38:cd:0b:21:3c:c1:08:3a:35:ef:55: a8:4e:cb:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsne3UzjEzoqBOtBUA8sPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmVkMTNiMWFiN2RhMDkwYWVlNDJmNmFlZGRkZmRiYjE1 NmE1ZjgwHhcNMjUxMjE4MjMwMTMyWhcNMjUxMjE5MjMwMTMyWjAzMTEwLwYDVQQD EyhjZTY1NDk3ZjY4ZDg3YWNhYzQzNDRjM2MzMWY2MTNjMzhiNDI1YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6YeTkhTOqHY2U/3ysjD+79nyImv 1DrxZ3x3tzxpOukVo1oWZlCt3fDyY0ZXvLf4qxxXqPAz/mDrBRjlSWL12UsNuYzL 8OTqx8YZc6g70C78J9UFURD9YVJX8zRfRUksoAKgWQKFUVaRXHoJtk1EXclQ6Ii6 xU10JKKslNt8cywIxdQWrdWu01h+kzgZjPiu4X86uHBdn2TIOoJ2PC6xIX8OCbpW eXnNl6hhj1tvl8ZYjRxonQFcALFOZlcsvI6rhXS7lUlHhTRNFJjJTLOJz22k7jBz YR39VnsVI0TJ9BjewuSDl9ck7sUVwphopQzfROVjvCpnuboZgwmU8PY++QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5lSX9o2HrKxDRMPDH2E8OLQlx6MB8GA1UdIwQY MBaAFCEu0Tsat9oJCu5C9q7d39uxVqX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVM3Uk94cTMyZ2tLN2tMMnJ0M2YyN0ZXcGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83MjY4NjktYmQ1My00ZDc1LWI3ZTIt MzQzNDkzMzFkMTA0LzEvSVM3Uk94cTMyZ2tLN2tMMnJ0M2YyN0ZXcGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83MjY4NjktYmQ1My00ZDc1LWI3ZTItMzQzNDkzMzFkMTA0 LzEvSVM3Uk94cTMyZ2tLN2tMMnJ0M2YyN0ZXcGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQr7bKMVv n+IGi2HP2OxtATUH43OuF08/nIKIUMm80cehJ3PWYBBPloX+93YSeHLly/xqE4oE LuX5A07ek6pTbHsC3qDq9/eBWA1nMXLwnO+2wveS+ExFAe8Z7TL/nPp7GGuXgpxM SOvGTNyOA0eP/QbY7e1QxrQMILkV4vqC6918bnYaKggXzKRE/ryBB2nanPYLQaIu AdbB2s0KzC+eDz4ipHZ9ypi/AeQkk3kX9Ag2FwzRgYMOJfFTlIw0YepjveEllzow xGx4yl84LIxgCcZt7fDFdrjk8wWpcCzCJKQfaEefUqNs2nfQbHvcuL3CWzjNCyE8 wQg6Ne9VqE7L+g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:09 2025 by rpki-client