This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft File: IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json) Hash identifier: aj6p2krEJHa4NHu1ygbQXqwMoMYoYlwTy9l77ri/jXQ= Subject key identifier: B3:74:6F:F8:3A:AD:E7:2E:02:A5:B8:60:EA:A4:8C:60:3F:C6:03:75 Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95 Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695 Certificate serial: 019B4D3A7727A8866C6FD7CF5A21500DCCB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft Manifest number: 0E13 Signing time: Tue 23 Dec 2025 22:00:35 +0000 Manifest this update: Tue 23 Dec 2025 22:00:35 +0000 Manifest next update: Wed 24 Dec 2025 22:00:35 +0000 Files and hashes: 1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: NqiZGqLUqKGyuYrwA3kk/rbzxWIU2FYbTt4YVAHRA3s=) 2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:77:27:a8:86:6c:6f:d7:cf:5a:21:50:0d:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695 Validity Not Before: Dec 23 22:00:35 2025 GMT Not After : Dec 24 22:00:35 2025 GMT Subject: CN=b3746ff83aade72e02a5b860eaa48c603fc60375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:9a:a4:9a:57:34:05:a0:cf:d5:75:d7:c3: cb:aa:2f:ab:26:9e:41:37:ca:b8:bd:1f:4b:10:1e: b8:4f:c7:f1:41:f0:a4:b2:26:56:48:74:6e:00:bc: fb:2c:12:fa:78:cd:ae:18:51:37:95:ef:cb:ba:2f: 9d:27:1f:73:f8:f7:99:af:0e:c1:4a:7a:dc:32:97: 14:08:21:d3:60:b4:54:c5:a6:1e:31:1d:58:49:2f: 6d:1e:f3:04:44:dd:63:39:15:a7:e2:d0:00:a2:e5: 1a:ef:49:6f:62:0c:d0:a2:65:f8:98:0d:a7:76:16: 0c:f2:25:d3:45:d3:6f:bc:f8:93:b7:35:14:bf:35: e9:07:7c:7e:79:92:9e:33:64:99:6d:02:c6:df:a4: ef:d5:bf:6d:02:3c:c5:38:0b:12:64:28:f1:e2:d8: f4:e3:3e:21:59:44:a8:e3:a4:84:b9:17:e7:53:db: b4:5e:bc:2c:29:44:cf:a7:19:1d:1b:f6:db:c7:58: 45:d0:6d:a7:e9:dd:6f:40:e4:bb:1c:35:4b:7d:17: f3:81:ff:99:9c:f0:e7:43:c0:c9:ac:b3:16:8a:22: b7:50:eb:87:fd:ab:d7:80:07:e3:a7:f6:29:f2:b7: d0:21:41:ba:95:dc:45:f3:a3:42:69:14:3c:3d:7a: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:74:6F:F8:3A:AD:E7:2E:02:A5:B8:60:EA:A4:8C:60:3F:C6:03:75 X509v3 Authority Key Identifier: keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b6:bc:79:66:8d:f8:fe:5f:9d:ef:99:81:7a:e9:f8:b0:13: 01:93:b9:1e:34:4a:66:5c:d8:fb:f1:75:38:b0:b2:b5:a3:b2: 56:90:16:53:83:71:43:de:0c:e5:64:1b:be:65:f2:34:3c:57: 17:6f:98:4e:e8:f1:d1:ff:7f:be:36:69:7d:4c:b1:b8:b8:f7: 74:1a:52:ff:19:06:a9:8b:e3:0e:ab:a4:16:bb:05:cd:37:c2: 27:66:0a:0a:7d:e3:b3:2f:4d:bd:ad:f2:f3:f5:1e:e4:4b:31: dc:fe:78:9c:f2:4c:3e:9b:de:49:43:02:c0:c0:fc:9b:03:5a: f9:6c:2c:cc:cd:01:43:94:41:94:0a:c6:b1:3c:11:db:a5:10: 07:88:f0:e2:cb:78:5e:e2:84:4c:96:e2:2e:df:2a:07:63:c8: e9:54:66:6b:6c:c6:30:a5:37:a6:d4:fe:98:24:1d:b4:10:4b: a0:ad:73:08:85:09:c4:a4:c3:37:4d:1d:5d:7c:ab:22:1d:78: 9d:a6:43:45:34:47:f0:56:a4:20:25:79:dd:31:bf:4b:1f:d2: 78:f8:fc:bc:52:68:7d:06:77:c0:86:d4:1c:6c:37:ca:c0:16: 93:22:81:f8:4d:29:b7:a9:9d:c2:88:7d:32:2b:ff:da:30:b6: 79:a1:2e:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOncnqIZsb9fPWiFQDcy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzVjYzdjMzY0YzkwZWFmYWJhNjk3ZTBiZjU5ZjA1NTY5 YTk2OTUwHhcNMjUxMjIzMjIwMDM1WhcNMjUxMjI0MjIwMDM1WjAzMTEwLwYDVQQD EyhiMzc0NmZmODNhYWRlNzJlMDJhNWI4NjBlYWE0OGM2MDNmYzYwMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdOapJpXNAWgz9V118PLqi+rJp5B N8q4vR9LEB64T8fxQfCksiZWSHRuALz7LBL6eM2uGFE3le/Lui+dJx9z+PeZrw7B SnrcMpcUCCHTYLRUxaYeMR1YSS9tHvMERN1jORWn4tAAouUa70lvYgzQomX4mA2n dhYM8iXTRdNvvPiTtzUUvzXpB3x+eZKeM2SZbQLG36Tv1b9tAjzFOAsSZCjx4tj0 4z4hWUSo46SEuRfnU9u0XrwsKUTPpxkdG/bbx1hF0G2n6d1vQOS7HDVLfRfzgf+Z nPDnQ8DJrLMWiiK3UOuH/avXgAfjp/Yp8rfQIUG6ldxF86NCaRQ8PXq3HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLN0b/g6recuAqW4YOqkjGA/xgN1MB8GA1UdIwQY MBaAFCLFzHw2TJDq+rppfgv1nwVWmpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81Njk0NDItNGU2ZC00ZWJlLTliYjIt M2ZkYjc1M2E4NjE5LzEvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81Njk0NDItNGU2ZC00ZWJlLTliYjItM2ZkYjc1M2E4NjE5 LzEvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUra8eWaN +P5fne+ZgXrp+LATAZO5HjRKZlzY+/F1OLCytaOyVpAWU4NxQ94M5WQbvmXyNDxX F2+YTujx0f9/vjZpfUyxuLj3dBpS/xkGqYvjDqukFrsFzTfCJ2YKCn3jsy9Nva3y 8/Ue5Esx3P54nPJMPpveSUMCwMD8mwNa+WwszM0BQ5RBlArGsTwR26UQB4jw4st4 XuKETJbiLt8qB2PI6VRma2zGMKU3ptT+mCQdtBBLoK1zCIUJxKTDN00dXXyrIh14 naZDRTRH8FakICV53TG/Sx/SePj8vFJofQZ3wIbUHGw3ysAWkyKB+E0pt6mdwoh9 Miv/2jC2eaEukA== -----END CERTIFICATE-----Generated at Wed Dec 24 00:11:56 2025 by rpki-client