This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json) Hash identifier: gOb2gCBXkIveZPxm+/tkeIddyeEmrNZgYCMzaIzlDoQ= Subject key identifier: 9B:63:46:17:A9:A7:AE:13:7B:D0:2E:B8:69:26:27:EE:70:BD:B2:96 Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18 Certificate serial: 019B3EA31CA8F580B3FA25C5E373751382F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft Manifest number: 1470 Signing time: Sun 21 Dec 2025 02:00:35 +0000 Manifest this update: Sun 21 Dec 2025 02:00:35 +0000 Manifest next update: Mon 22 Dec 2025 02:00:35 +0000 Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=) 2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: k0umJga00DPExAPQWYEP7Z22VJOUxTcKh/W1cbEtS+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:1c:a8:f5:80:b3:fa:25:c5:e3:73:75:13:82:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18 Validity Not Before: Dec 21 02:00:35 2025 GMT Not After : Dec 22 02:00:35 2025 GMT Subject: CN=9b634617a9a7ae137bd02eb8692627ee70bdb296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:a3:2a:58:0b:d9:5d:77:06:84:96:03:8f: 81:4b:cf:8d:9b:1d:a3:78:5c:8e:67:13:b7:79:17: a7:fe:81:db:a3:84:b0:13:b8:41:31:3b:9c:c5:56: 84:80:36:22:71:73:d2:fa:59:fa:99:bb:6f:41:9d: 7f:32:13:d2:85:65:0f:6b:ac:a4:52:85:36:5c:9d: df:b8:e3:d1:5d:a4:59:c4:c0:ef:45:81:cc:00:22: 00:d5:bc:9b:85:61:20:f7:d0:6f:70:11:08:03:8a: 07:e2:5d:26:f6:a6:fa:2a:8f:3b:23:f5:e2:fb:4f: 1f:3b:3e:8f:65:94:89:f1:56:9c:66:05:ba:0f:3a: 2c:77:17:d9:58:16:55:e4:ac:6e:5b:b5:ca:f7:79: 4d:1f:fe:2e:3f:6d:58:82:3b:76:ec:36:e2:d7:b3: 01:f9:bd:85:68:5c:08:70:ce:2b:a8:02:f8:95:c9: a8:41:4e:35:dc:56:95:1d:6c:36:27:dd:fb:68:bd: b9:7c:96:0b:e1:4e:14:36:b3:1e:b4:67:9f:98:f4: 53:0a:d1:10:75:5c:39:b9:ef:50:91:a5:a1:c3:9d: a3:e9:fd:b7:5d:31:07:78:20:7e:4d:52:50:f2:bc: 77:a1:e8:bc:42:67:af:8a:67:ca:9c:74:7f:a2:54: 91:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:46:17:A9:A7:AE:13:7B:D0:2E:B8:69:26:27:EE:70:BD:B2:96 X509v3 Authority Key Identifier: keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:38:e3:90:71:63:d3:7d:c9:dc:e1:30:1d:d8:70:a7:45:81: e5:e5:a1:97:8e:40:67:ee:82:15:85:36:06:31:9d:fc:1f:da: d3:0e:78:ae:52:96:b1:80:ba:a6:8c:d1:36:41:21:73:6f:22: 32:9a:a7:7b:f6:87:46:5c:7b:78:a4:65:a2:7f:7e:de:b9:e3: dc:03:3e:51:df:6b:e6:69:2a:0f:50:8a:be:e3:d3:68:2d:8a: 85:da:03:88:24:a5:47:63:cd:5b:54:64:c9:99:ce:5c:a5:7a: 47:fc:78:0e:33:25:1f:a0:51:59:6c:39:d9:e5:6a:6d:3a:54: 19:35:36:54:9a:61:4e:6d:52:07:82:73:98:ce:9f:ed:20:a9: 0f:a9:60:5b:35:8b:52:06:06:a7:03:16:f3:fc:ef:68:e3:45: be:ce:e7:9a:ba:63:e7:0a:aa:e8:82:35:fa:76:55:89:d8:e1: 97:4c:ff:cd:d0:8d:89:dd:54:6c:88:a0:57:85:21:42:ba:a8: 29:0f:c6:57:f3:4c:38:41:2f:ba:07:47:4a:59:3e:56:65:18: 51:8a:43:a7:3a:2d:b2:16:2f:5e:79:2a:32:39:43:e7:d2:53: f2:32:47:71:93:1c:a7:5f:dc:d4:d4:49:c6:81:47:1d:af:ce: 16:05:ef:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxyo9YCz+iXF43N1E4LzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzE0OTg1Y2I1NDRjNmQyM2QxOWJiNDNhYzkzNzExYWZl OTFmMTgwHhcNMjUxMjIxMDIwMDM1WhcNMjUxMjIyMDIwMDM1WjAzMTEwLwYDVQQD Eyg5YjYzNDYxN2E5YTdhZTEzN2JkMDJlYjg2OTI2MjdlZTcwYmRiMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneujKlgL2V13BoSWA4+BS8+Nmx2j eFyOZxO3eRen/oHbo4SwE7hBMTucxVaEgDYicXPS+ln6mbtvQZ1/MhPShWUPa6yk UoU2XJ3fuOPRXaRZxMDvRYHMACIA1bybhWEg99BvcBEIA4oH4l0m9qb6Ko87I/Xi +08fOz6PZZSJ8VacZgW6DzosdxfZWBZV5KxuW7XK93lNH/4uP21Ygjt27Dbi17MB +b2FaFwIcM4rqAL4lcmoQU413FaVHWw2J937aL25fJYL4U4UNrMetGefmPRTCtEQ dVw5ue9QkaWhw52j6f23XTEHeCB+TVJQ8rx3oei8QmevimfKnHR/olSR9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtjRhepp64Te9AuuGkmJ+5wvbKWMB8GA1UdIwQY MBaAFIrBSYXLVExtI9GbtDrJNxGv6R8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4Mzgt YTU4OTQ2OTNhZjEwLzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4MzgtYTU4OTQ2OTNhZjEw LzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDjjkHFj 033J3OEwHdhwp0WB5eWhl45AZ+6CFYU2BjGd/B/a0w54rlKWsYC6pozRNkEhc28i Mpqne/aHRlx7eKRlon9+3rnj3AM+Ud9r5mkqD1CKvuPTaC2KhdoDiCSlR2PNW1Rk yZnOXKV6R/x4DjMlH6BRWWw52eVqbTpUGTU2VJphTm1SB4JzmM6f7SCpD6lgWzWL UgYGpwMW8/zvaONFvs7nmrpj5wqq6II1+nZVidjhl0z/zdCNid1UbIigV4UhQrqo KQ/GV/NMOEEvugdHSlk+VmUYUYpDpzotshYvXnkqMjlD59JT8jJHcZMcp1/c1NRJ xoFHHa/OFgXvAg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:25 2025 by rpki-client