This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json) Hash identifier: 5MjoYD8zA7kZ6rU4hWRGCxAtv5TUFH1hW8/oQ9V2qwY= Subject key identifier: 4D:ED:8B:65:85:DF:80:83:EA:67:C5:64:12:0B:5D:C8:20:23:D8:91 Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78 Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78 Certificate serial: 019B3C7E8A6D7A687F6C09458A4D74D7F1EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft Manifest number: 0832 Signing time: Sat 20 Dec 2025 16:01:24 +0000 Manifest this update: Sat 20 Dec 2025 16:01:24 +0000 Manifest next update: Sun 21 Dec 2025 16:01:24 +0000 Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=) 2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: N4nTyG7IgLjPKV70a8nHxdincrssvRwazIlnDnvEO8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:8a:6d:7a:68:7f:6c:09:45:8a:4d:74:d7:f1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78 Validity Not Before: Dec 20 16:01:24 2025 GMT Not After : Dec 21 16:01:24 2025 GMT Subject: CN=4ded8b6585df8083ea67c564120b5dc82023d891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:8c:57:b3:e6:70:bd:8d:e1:f7:07:e7:52: c3:7f:79:ea:9e:c0:07:46:86:99:eb:c9:e0:ff:fd: cf:46:8a:d3:90:75:f7:2c:9f:1f:cd:79:57:b7:41: fd:2d:d3:d6:38:8b:31:40:35:d2:d2:05:58:8a:08: 48:66:cb:a4:06:59:d2:a5:6b:74:6b:8f:0b:e7:da: 92:3c:39:82:6b:d0:3a:54:95:b8:63:5b:7c:86:07: 65:49:83:56:72:84:1d:26:42:53:0e:9a:32:81:6c: 99:7c:a9:7d:5a:44:84:ed:5d:4d:ee:1b:09:58:bd: e3:4d:72:1b:ab:76:4b:1b:25:c8:14:51:5d:62:38: 05:4c:ad:0b:c7:7d:7e:5c:42:35:ef:bb:f2:c4:a2: f3:ef:cb:ae:89:db:26:ac:95:c7:d1:06:ca:60:fe: a6:ee:d7:ac:84:61:db:9a:f8:c8:90:e5:ad:eb:90: cf:b5:33:97:a6:9d:c7:db:c3:ae:5b:a0:1f:6c:11: 82:ef:9e:df:f0:6f:5b:7d:9a:0c:f4:92:1b:a1:ca: f0:5d:60:8d:96:5d:35:48:14:2e:30:2b:b0:74:88: 80:1f:4b:36:37:df:af:39:52:c4:41:9a:77:f9:6d: 83:cb:80:b7:98:68:dd:ed:58:33:f8:5c:4c:2e:6f: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:ED:8B:65:85:DF:80:83:EA:67:C5:64:12:0B:5D:C8:20:23:D8:91 X509v3 Authority Key Identifier: keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:cc:e0:d4:92:80:34:a0:f7:78:ae:db:ee:13:9a:c6:17:98: 11:1e:9c:77:0b:cd:03:e7:54:ab:c7:37:47:35:7b:69:d2:7a: 8c:a6:68:ca:f9:55:13:37:1c:a3:39:52:25:b3:24:40:52:95: 12:f3:d3:d3:86:e5:a1:55:76:5d:95:a2:45:e4:d8:f1:4e:b5: d0:d9:e2:60:92:c4:0a:51:7a:53:84:e1:5f:e9:a5:52:83:a2: a4:13:54:06:fb:1f:9a:c0:8b:e7:f9:00:1d:cd:1e:21:90:9f: f0:56:10:b9:41:f2:c4:95:51:19:54:4c:dc:2a:7b:73:7e:c5: 4e:03:2f:8f:b0:e8:cd:70:7a:98:16:08:b1:11:ec:cc:fe:e9: 93:56:09:ec:7b:a2:bb:e1:fc:a7:03:e0:48:fe:ed:22:72:26: 47:27:6c:73:bc:d2:2f:f2:79:93:10:ce:64:5a:4d:bb:56:8a: 69:82:e6:c6:ae:04:f1:48:a5:c8:19:ee:26:ae:88:d5:22:ce: 10:84:30:91:54:02:8a:89:9c:fa:46:07:62:24:8d:87:3d:b6: 72:84:39:6f:a6:b2:b1:9e:8b:11:f2:b3:0b:c7:e9:9f:01:18: c2:c9:d8:ae:bc:3e:48:40:0d:16:8e:de:9d:94:bd:73:a6:96: e1:4b:dc:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8foptemh/bAlFik101/HqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzk0Y2ZkMzFhMWE4MDljYmY2YzAyYTc0YTU3YmRkYzdm ZjFmNzgwHhcNMjUxMjIwMTYwMTI0WhcNMjUxMjIxMTYwMTI0WjAzMTEwLwYDVQQD Eyg0ZGVkOGI2NTg1ZGY4MDgzZWE2N2M1NjQxMjBiNWRjODIwMjNkODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKKMV7PmcL2N4fcH51LDf3nqnsAH RoaZ68ng//3PRorTkHX3LJ8fzXlXt0H9LdPWOIsxQDXS0gVYighIZsukBlnSpWt0 a48L59qSPDmCa9A6VJW4Y1t8hgdlSYNWcoQdJkJTDpoygWyZfKl9WkSE7V1N7hsJ WL3jTXIbq3ZLGyXIFFFdYjgFTK0Lx31+XEI177vyxKLz78uuidsmrJXH0QbKYP6m 7teshGHbmvjIkOWt65DPtTOXpp3H28OuW6AfbBGC757f8G9bfZoM9JIbocrwXWCN ll01SBQuMCuwdIiAH0s2N9+vOVLEQZp3+W2Dy4C3mGjd7Vgz+FxMLm88TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3ti2WF34CD6mfFZBILXcggI9iRMB8GA1UdIwQY MBaAFCLJTP0xoagJy/bAKnSle93H/x94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNsTV9UR2hxQW5MOXNBcWRLVjczY2ZfSDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMDdkZDgtYjFlMi00YTg4LTkwMTgt ZmZkMGRmNmJiYTIyLzEvSXNsTV9UR2hxQW5MOXNBcWRLVjczY2ZfSDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wMDdkZDgtYjFlMi00YTg4LTkwMTgtZmZkMGRmNmJiYTIy LzEvSXNsTV9UR2hxQW5MOXNBcWRLVjczY2ZfSDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArczg1JKA NKD3eK7b7hOaxheYER6cdwvNA+dUq8c3RzV7adJ6jKZoyvlVEzccozlSJbMkQFKV EvPT04bloVV2XZWiReTY8U610NniYJLEClF6U4ThX+mlUoOipBNUBvsfmsCL5/kA Hc0eIZCf8FYQuUHyxJVRGVRM3Cp7c37FTgMvj7DozXB6mBYIsRHszP7pk1YJ7Hui u+H8pwPgSP7tInImRydsc7zSL/J5kxDOZFpNu1aKaYLmxq4E8UilyBnuJq6I1SLO EIQwkVQCiomc+kYHYiSNhz22coQ5b6aysZ6LEfKzC8fpnwEYwsnYrrw+SEANFo7e nZS9c6aW4UvcTg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:36 2025 by rpki-client